Complete rebuild of a 4-star hotel's marketing and booking site from a static template into a real product: custom navy/gold design system, full BG/EN/TR translation layer, an interactive date-range picker, and a database-driven booking pipeline with email-verified guest submissions. Built a full internal admin panel from scratch — role-based access (Superadmin/Admin/Reception) with a content-approval workflow so front-desk staff can add photos and news posts without publishing unsupervised. Includes real SMTP email notifications, Cloudflare Turnstile bot protection, and per-IP/per-email rate limiting.
Complete rebuild of a 4-star hotel's marketing and booking site from a static template into a real product: custom navy/gold design system, full BG/EN/TR translation layer, an interactive date-range picker, and a database-driven booking pipeline with email-verified guest submissions. Built a full internal admin panel from scratch — role-based access (Superadmin/Admin/Reception) with a content-approval workflow so front-desk staff can add photos and news posts without publishing unsupervised. Includes real SMTP email notifications, Cloudflare Turnstile bot protection, and per-IP/per-email rate limiting.
Full enterprise network design and deployment for a 9-floor hotel. Built from scratch — planning, hardware selection, installation, and ongoing management.
Full enterprise network design and deployment for a 9-floor hotel. Built from scratch — planning, hardware selection, installation, and ongoing management.
A complete hospitality management platform. Multiple hotels, one login. Each property gets its own modules — Events, Counter POS, Workers, Reception.
A complete hospitality management platform. Multiple hotels, one login. Each property gets its own modules — Events, Counter POS, Workers, Reception.
Full self-hosted infrastructure running on a single Proxmox VE node. AMD Ryzen 5 5500GT, 16GB RAM, ~20TB across 4 ZFS pools. Also the proving ground for self-hosted AI infrastructure: a personal AI agent (OpenClaw), local LLM inference via Ollama on a dedicated GPU workstation with a RAG pipeline over a personal knowledge base, and an agentic dispatcher routing bash/coding tasks to local models. Recently audited the full local-model roster with real tool-calling tests (not just load-success checks) across three independent integration paths, pruned it down to a single verified-reliable model, and live-confirmed the entire chain end-to-end after reconfiguring every dependent tool.
Full self-hosted infrastructure running on a single Proxmox VE node. AMD Ryzen 5 5500GT, 16GB RAM, ~20TB across 4 ZFS pools. Also the proving ground for self-hosted AI infrastructure: a personal AI agent (OpenClaw), local LLM inference via Ollama on a dedicated GPU workstation with a RAG pipeline over a personal knowledge base, and an agentic dispatcher routing bash/coding tasks to local models. Recently audited the full local-model roster with real tool-calling tests (not just load-success checks) across three independent integration paths, pruned it down to a single verified-reliable model, and live-confirmed the entire chain end-to-end after reconfiguring every dependent tool.
Every public-facing service runs through Cloudflare Tunnel — no ports open on the firewall. DNS managed via Cloudflare, wildcard certificates, DDoS protection built in. Administrative/management access on the router side gets the same zero-trust treatment: no exposed management ports, and every edge router is actively hardened and audited, not just configured once.
Every public-facing service runs through Cloudflare Tunnel — no ports open on the firewall. DNS managed via Cloudflare, wildcard certificates, DDoS protection built in. Administrative/management access on the router side gets the same zero-trust treatment: no exposed management ports, and every edge router is actively hardened and audited, not just configured once.
A full-featured multi-user personal finance tracker — accounts, categorized transactions, recurring bills, and a dashboard that actually separates real cash from available credit. Manual entry by design, so it needs no bank API connections or PCI-level security surface.
A full-featured multi-user personal finance tracker — accounts, categorized transactions, recurring bills, and a dashboard that actually separates real cash from available credit. Manual entry by design, so it needs no bank API connections or PCI-level security surface.
A private, invite-only space for markdown notes, code snippets, and technical references — rewritten from a live Node.js/Express app to PHP 8.4 with zero data loss. Each note is public or private, taggable, and searchable, with an admin panel for issuing invite codes instead of open registration.
A private, invite-only space for markdown notes, code snippets, and technical references — rewritten from a live Node.js/Express app to PHP 8.4 with zero data loss. Each note is public or private, taggable, and searchable, with an admin panel for issuing invite codes instead of open registration.
Personal multi-app domain — a shared landing page plus a couple of small self-directed tools running side by side on their own dedicated container.
Personal multi-app domain — a shared landing page plus a couple of small self-directed tools running side by side on their own dedicated container.
A public, Arch-only (pacman, no AUR) one-command installer that sets up a full Hyprland + Quickshell/DMS desktop environment from scratch. Modeled on Proxmox's community helper-scripts: an interactive whiptail picker (terminal, file manager, mail client, cloud sync as single-choice radiolists, plus an independent checklist for extras) instead of a fixed opinionated bundle, with picks wired into a separate extras.conf so the base hyprland.conf stays clean. Built test-first with bats unit tests and shellcheck before any live run, then hardened through a second person live-installing it in a fresh VM, which surfaced real bugs invisible from local testing alone.
A public, Arch-only (pacman, no AUR) one-command installer that sets up a full Hyprland + Quickshell/DMS desktop environment from scratch. Modeled on Proxmox's community helper-scripts: an interactive whiptail picker (terminal, file manager, mail client, cloud sync as single-choice radiolists, plus an independent checklist for extras) instead of a fixed opinionated bundle, with picks wired into a separate extras.conf so the base hyprland.conf stays clean. Built test-first with bats unit tests and shellcheck before any live run, then hardened through a second person live-installing it in a fresh VM, which surfaced real bugs invisible from local testing alone.
Built and hardened a full self-hosted mail platform (HestiaCP: Exim, Dovecot, ClamAV, SpamAssassin, DKIM/SPF/DMARC, Roundcube webmail) on a dedicated VPS, replacing a forward-only Cloudflare Email Routing setup with real send and receive for all 3 domains and 9 live mailboxes.
Built and hardened a full self-hosted mail platform (HestiaCP: Exim, Dovecot, ClamAV, SpamAssassin, DKIM/SPF/DMARC, Roundcube webmail) on a dedicated VPS, replacing a forward-only Cloudflare Email Routing setup with real send and receive for all 3 domains and 9 live mailboxes.
Diagnosed a subtle, silent access-control misconfiguration that had disabled every automated download across three services (Sonarr, Radarr, Lidarr) for two full days with no visible error — a well-intentioned but mistaken tag-based routing scheme had tagged both the indexers and the download clients, which independently gate on the content's own tags rather than on each other, so nothing was ever tagged and every indexer/client silently went unusable.
Diagnosed a subtle, silent access-control misconfiguration that had disabled every automated download across three services (Sonarr, Radarr, Lidarr) for two full days with no visible error — a well-intentioned but mistaken tag-based routing scheme had tagged both the indexers and the download clients, which independently gate on the content's own tags rather than on each other, so nothing was ever tagged and every indexer/client silently went unusable.
Runs network operations for a full hotel property day to day, then mirrors the same patterns at home to keep the muscle memory sharp.
Runs network operations for a full hotel property day to day, then mirrors the same patterns at home to keep the muscle memory sharp.
Inbound-closed by default — every remote path goes through an explicit tunnel or mesh, never an open port.
Inbound-closed by default — every remote path goes through an explicit tunnel or mesh, never an open port.
Runs a real multi-tenant Proxmox host at home the same way you would run one in a datacenter — isolated per service, backed up, monitored.
Runs a real multi-tenant Proxmox host at home the same way you would run one in a datacenter — isolated per service, backed up, monitored.
ZFS end to end — tiered pools, scrubbed and verified, sized for headroom rather than filled to the edge.
ZFS end to end — tiered pools, scrubbed and verified, sized for headroom rather than filled to the edge.
Genuinely does not have a favorite distro — picks whichever one fits the job and stays current on the rest by actually running them.
Genuinely does not have a favorite distro — picks whichever one fits the job and stays current on the rest by actually running them.
Ships and maintains real production PHP/Python apps end to end — schema, backend, deploy, and the bug report that comes after.
Ships and maintains real production PHP/Python apps end to end — schema, backend, deploy, and the bug report that comes after.
Treats LLMs as another service to architect around, not a black box to prompt and hope.
Treats LLMs as another service to architect around, not a black box to prompt and hope.
Runs models the same way infra gets run — self-hosted where it makes sense, evaluated, and monitored.
Runs models the same way infra gets run — self-hosted where it makes sense, evaluated, and monitored.
Terra Europa Hotel — BRONTES BC — Targovishte, Bulgaria
Oct 2021 – Present
Terra Europa Hotel — BRONTES BC — Targovishte, Bulgaria
Oct 2021 – Present
Full hotel network design & deployment. Proxmox virtualisation. Full-stack hospitality platform (ARK/ks.vg). Mixed OS environment. Level 1–3 support across all departments.
Self-employed — United Kingdom
2007 – 2021
Self-employed — United Kingdom
2007 – 2021
Freelance PC repair and computer troubleshooting for private clients, alongside non-IT work (driving, delivery, taxi) in the UK.
Synovate Global Market Research — Istanbul, Turkey
2006 – 2007
Synovate Global Market Research — Istanbul, Turkey
2006 – 2007
Large-scale server infrastructure for global market research. Server hardware, OS administration, data integrity, internal network support.
TEN Underwear — Istanbul, Turkey
2005 – 2006
TEN Underwear — Istanbul, Turkey
2005 – 2006
Expert-level IT support across Windows and Linux in manufacturing & retail environments.
Locomotif IT Services — Istanbul, Turkey
2002 – 2004
Locomotif IT Services — Istanbul, Turkey
2002 – 2004
IT services, web design, and project delivery. Dreamweaver, Fireworks, Flash, Photoshop.
Kale / DMS / Anet Communication — Istanbul, Turkey
1997 – 2001
Kale / DMS / Anet Communication — Istanbul, Turkey
1997 – 2001
Hardware diagnosis, repair, assembly. ISP first-line support during the formative period of consumer internet in Turkey.
Hey, I'm an Infrastructure, Network, and Security engineer with 25+ years
of experience building and securing the systems other things run on.
I turn fragile, ad-hoc setups into resilient, documented, production-grade infrastructure —
combining hands-on technical depth (MikroTik networking, VLAN and failover design,
Proxmox/LXC virtualization, zero-trust access via Tailscale and Cloudflare Tunnel, DDoS
and perimeter hardening) with full ownership of the lifecycle: design, deployment,
incident response, and day-to-day operational support.
I've owned infrastructure end-to-end for a live hospitality property — a 9-floor,
32-access-point network with triple-ISP failover — while building and maintaining the
software it runs on and supporting every department directly. My background spans
hospitality operations, freelance IT support in the UK, and a self-directed homelab run
to production standards, extending more recently into self-hosted AI/LLM infrastructure:
RAG pipelines, agentic tool-use, local inference.
Outside the day job, that homelab is where I actually test ideas — a safe place to break
things, chase root causes, and confirm a fix before it ever touches something real. Away
from it, it's music, cars, a genuine love of tech, and a soft spot for animals.
Open to full-time roles in Network Engineering, Security, or DevOps/Infrastructure —
remote or EU relocation.
