The following references describe selected projects and tasks from professional practice as well as personal infrastructure and development projects.
01 · Professional practice · Distributed IT infrastructure · Network & security engineering
Firewall automation & dedicated SonicWall NMS
Designed a dedicated network management system (NMS) concept for inventory, health checks, event assessment, and alerting. Automated recurring firewall verification, documentation, and policy workflows with Python and PowerShell. Structured rules by communication need, service, and system group under least privilege, with before-and-after checks, functional and negative tests, and rollback plans.
Technologies SonicWall · Python · PowerShell · APIs · TCP/IP · DNS · NAT/PAT · ACL · Monitoring
Relevant for Firewall administration, policy maintenance, monitoring tools, and operational automation.
02 · Professional practice · Decentralised IT environment · IT & security engineering
Secure remote access & network segmentation
Mapped required communication paths and access by user, device, and system group for distributed users. Troubleshot the full path from identity, certificates, and DNS through ZTNA and firewall policy to the target application. Used positive and negative tests to verify permitted access and blocked unauthorised connections; documented dependencies, maintenance windows, and rollback options.
Technologies ZTNA · Cloud Secure Edge · SonicWall · Entra ID · Active Directory · DNS · Certificates · VPN
Relevant for Secure remote access, access-policy reviews, and troubleshooting distributed environments.
03 · Professional practice · Clients, servers & network · Infrastructure engineering
Operations & monitoring of distributed IT systems
Supported client and server environments during incidents and assessed monitoring alerts by cause, scope, and service impact. Administered and troubleshot switches, Synology NAS, Dell iDRAC, Windows and Linux systems, and APC UPS components. Documented configurations, dependencies, and repeatable resolutions for maintenance and handover.
Technologies Switching/routing · Windows · Linux · Synology · Dell iDRAC · APC UPS · PowerShell · Monitoring
Relevant for System administration, infrastructure maintenance, monitoring, and recurring-incident analysis.
04 · Professional practice · Windows endpoints · IT & security engineering
Endpoint security & security-event handling
Investigated ThreatDown detections in the context of affected processes, users, and endpoints. Distinguished false positives and unwanted software from security-relevant incidents; performed or coordinated containment and cleanup, then checked whether measures worked. Recorded the investigation and necessary policy or configuration changes.
Technologies ThreatDown · Windows endpoint security · Incident handling · PowerShell · Documentation
Relevant for Endpoint-security operations, alert triage, incident support, and follow-up.
05 · Professional practice · International industrial environment · IT security officer · 2023 — 2025
Enterprise security & technical risk analysis
Assessed software versions, known vulnerabilities, usage context, prevalence, and operational impact across a large environment. Created structured work items with affected systems, risk assessment, and technical recommendations; tracked open measures and checked effectiveness after implementation. Reported causes, trends, progress, and residual risks.
Technologies CrowdStrike · Nexthink · Windows · Active Directory · SCCM · Ticketing · GRC · Incident processes
Relevant for Software risk analysis, technical compliance checks, remediation tracking, and reporting.
06 · Personal project · Homelab & self-hosting · Platform & infrastructure engineering
Proxmox, Headscale & self-hosted AI infrastructure
Operated Proxmox virtual environments and isolated Linux and Docker services. Administered a self-hosted Headscale server for controlled, encrypted remote connectivity, alongside DNS, segmentation, backups, service isolation, and controlled service publication. Worked on GitHub/GitLab CI/CD pipelines and GPU-supported local LLM workflows.
Technologies Proxmox · Linux · Docker · Headscale · VPN · DNS · Segmentation · Git · CI/CD · Local LLMs
Relevant for Virtualisation, Linux and container operations, secure remote connectivity, and self-hosted AI environments.
07 · Personal product project · Quran learning application · Software development
Tilawi.ai — web & app product
Designed and developed a Quran application with reading and learning features, integrating APIs and data storage. Worked on AI-supported learning features, testing, version control, maintainability, privacy, and clear user flows; connected development with deployment and service operations.
Technologies JavaScript · React · REST APIs · Databases · Git · CI/CD · AI workflows
Relevant for Web development, API integration, product engineering, and self-hosted application operations.