Selected projects demonstrating infrastructure design, security implementation, and automation skills.
Enterprise SIEM Deployment
Wazuh · Elasticsearch · Grafana
Deployed a full SIEM stack on Proxmox to monitor 15+ endpoints. Configured custom rules for brute-force detection, file integrity monitoring, and compliance reporting. Reduced simulated MTTD from 48h to 90 minutes.
Infrastructure as Code Pipeline
Ansible · Terraform · GitLab CI
Built end-to-end IaC pipeline to provision and configure lab VMs. Terraform handles Proxmox VM creation, Ansible manages OS hardening and service deployment. GitLab CI triggers on push to main.
Zero Trust Network Segmentation
pfSense · VLANs · WireGuard
Redesigned home network with VLAN segmentation across management, lab, IoT, and guest zones. Implemented firewall rules enforcing least-privilege access between segments. Added WireGuard VPN for secure remote management.
Dockerized Portfolio Platform
Docker · Traefik · WordPress · docker-mailserver
This website. Split-stack Docker architecture with Traefik reverse proxy, WordPress, self-hosted email, and Uptime Kuma monitoring. Designed for deployment on a 2GB Linode with Cloudflare DNS.