Assignments

Run Nginx, BIND9, and PostgreSQL on one hardened host behind a default-deny nftables firewall.

Virtualization with LVM storage, systemd services, restic backups, and Prometheus monitoring.

Deploy and manage DNS and DHCP from code with Ansible, generating zone and scope files from templates.

Design a VLAN topology with an addressing plan, 802.1Q trunking, and inter-VLAN routing, then build and validate it.

End-to-end network build with routing, ACLs, DHCP, DNS, and inter-VLAN routing.

Software-defined network with custom OpenFlow rules and Mininet topology.

Assess a host against CIS Controls and NIST SP 800-53 with Lynis or OpenSCAP, then remediate and re-verify.

Incident response playbook built on NIST SP 800-61: severity tiers, runbooks mapped to MITRE ATT&CK, validated with a tabletop.

Python CLI that computes date differences and future dates with timezone awareness, covered by pytest.

Python CLI that profiles process memory with psutil and ranks in-process allocations with tracemalloc.

Idempotent Ansible playbooks driven by a Python wrapper: one command configures 15+ nodes consistently.

Deploy Azure SQL with a private endpoint, encryption, automated backups, and least-privilege logins.

Multi-tier Azure environment with segmented networking, hardened VMs, NSGs, and Azure Monitor, built from the CLI.

Network and compute foundation, VNet with subnets, VMs, and basic connectivity verification.

Complete environment with NSGs, route tables, monitoring, and cost management.

Complete on-premises datacenter: Proxmox virtualization, VLAN networking, core services, monitoring, and backups.

End-to-end Azure application: Terraform IaC, AKS, CI/CD pipeline, monitoring, and security controls.