Technical experience
Technologies and practices used to build, deliver and operate the environments described in my project stories.
Systems & virtualisation
- Operating systems
- Linux, Windows Server
- Virtualisation
- Hyper-V, KVM/QEMU
- Configuration management
- Ansible
- File services
- SMB
Networking & VPN
- Routing & firewalls
- MikroTik RouterOS, Cisco ASA
- Segmentation & filtering
- VLANs, ACLs
- Network services
- DNS, DHCP (MikroTik RouterOS)
- VPN protocols
- IPsec, WireGuard
- Remote access services
- Tailscale, Windows Server RRAS
Identity & access
- Directory services
- Active Directory Domain Services, LDAP
- Domain policy
- Group Policy (GPO)
- Certificate services
- Active Directory Certificate Services (AD CS)
- Service authentication
- Company Google accounts, directory-based access through Rancher
- TLS certificates
- Automated issuance and renewal
- RADIUS services
- Network Policy Server (NPS)
- Network access control
- 802.1X, WPA3-Enterprise
Containers & Kubernetes
- Containerisation
- Docker
- Cluster deployment & management
- RKE2, Rancher
- Cluster networking
- Cilium
- Workload boundaries
- Namespaces, network policies, resource requests and limits
- Application packaging
- Helm
- GitOps
- Argo CD
CI/CD & integration
- Pipeline automation
- Jenkins, Gitea Actions
- Build & test execution
- Jenkins nodes, self-hosted runners, Azure DevOps agents
- Code analysis
- SonarQube
- Pipeline traceability
- Eiffel
Data services & recovery
- Databases
- PostgreSQL
- Search services
- OpenSearch
- Persistent data
- Application storage and user-uploaded content
- Backup & recovery
- Encrypted off-site backups, cluster and service configuration, disaster recovery procedures
Monitoring & logging
- Metrics & dashboards
- Thanos, Grafana
- System & database monitoring
- Icinga, Percona PMM
- Log management & analysis
- ELK Stack (Elasticsearch, Logstash, Kibana), OpenSearch, Loki