Unstoppable execution: delivering exactly what the business infrastructure demands.
- Infrastructure as Code (IaC): Architecting hybrid-cloud K3s clusters with GitOps (ArgoCD) for automated, state-driven infrastructure management.
- Security Operations (SOC): Implementing threat detection and monitoring using Wazuh (SIEM/XDR). Deploying agents for real-time integrity monitoring and vulnerability assessment.
- Secure Networking: Implementing Zero Trust connectivity using Tailscale (Mesh VPN) and Tailscale SSH for hardened infrastructure access.
- Security Standards: Exploring OWASP ASVS (L1-L3) to ensure application-level security, utilizing FFI to integrate memory-safe Rust modules into cross-platform Flutter applications.
- Cloud-Native Networking: Advanced troubleshooting of CNI (Flannel) and Tailscale Mesh VPN integration, resolving Netfilter/Firewalld isolation and complex routing conflicts.
- Languages: Go, Rust, Express, TypeScript, Bash.
- Systems: Linux (AlmaLinux, Debian, Ubuntu).
- Security & SOC: Wazuh (SIEM/XDR), Lynis (Hardening index: 80%), Kali Linux, Tails.
- Infrastructure: Kubernetes (K3s), Containerization (Docker/Podman), GitHub Actions (CI/CD), ArgoCD, Tailscale.
- Data Stores: Redis, MySQL, PostgreSQL, MongoDB.
- Frontend: Next.js, React, Tailwind CSS, Flutter.
I maintain a private K3s cluster with a fully automated GitOps pipeline. All services are deployed via ArgoCD with strict environment separation (Staging/Production) and professional secret management.
Currently working on CSOD (Centralny System Operacyjno-Decyzyjny).
