Rostislav Opočenský
CS EN

Projects

Period Project Description
2025–present Linux Distribution for a Control Board I build and maintain a custom Linux distribution for a bike parking station control board with atomic A/B updates.
2025–present Operational Infrastructure for 420 IT For 420 IT, I built a monitoring, configuration, and service infrastructure in the cloud, migrated customer network management to it, and deployed FortiGate firewalls.
2025–present New Generation Parking System I am involved in the research, design, and bring-up of the hardware and software platform of a new parking system.
2024–present GCMP Protocol I designed the secure GCMP protocol for device discovery and management on a local network, and wrote its library and tools in Python and MicroPython.
2024–present ÚŽFG AV ČR Network For the Institute of Animal Physiology and Genetics of the Czech Academy of Sciences, I managed firewall administration, documented the network, and proposed a switch refresh.
2024–2025 Calling Staff to Self-Checkout Registers I developed a tool that calls staff to self-checkout registers based on MQTT messages.
2023–2025 AI Analysis of Survey Comments I developed a REST API that uses OpenAI language models to evaluate sentiment, summarize, and tag respondents' comments.
2023–2025 Network of the Mělník Municipal Office For the Mělník Municipal Office, I mapped and documented the network, assessed a proposal for active element renewal, and implemented 802.1X device authentication. I set up diesel generator monitoring.
2023–present Laboratory A laboratory where I develop, bring to life, and test electronics
2022 Firmware for IoT Board PG Board For the PG Board I developed firmware ensuring Internet communication and ultra-low current consumption, and I designed an expansion board.
2022–present Centrum zdraví Network Following the separation of the Centrum zdraví group from Next Clinics, I designed and built an independent network with a cloud environment and migrated branches to SD-WAN.
2022–present InsightSofa Platform Servers I manage Linux servers for the InsightSofa survey platform.
2021–2025 Claroty SRA for Mondi I deployed and maintain the Claroty Secure Remote Access solution for secured remote access to the production networks of a paper mill.
2021–2025 Certificate Management I developed a tool for managing an internal certificate authority, issuing certificates for OpenVPN and servers, and automatically distributing CRL to routers.
2020–present Mondi Štětí Linux Servers I manage the Linux servers of the Mondi Štětí paper mill, including ABB production system servers and PostgreSQL and Oracle databases.
2020–present Rewards – service desk reports I developed a web service that calculates reward-related data for technicians based on Alvao service desk data.
2020–2022 Voice Platform on Asterisk I designed and set up an Asterisk PBX with WebRTC web clients, queues, and integration of 2N intercoms over VPN.
2019–2021 Medicentrum Mělník Network I designed and implemented a new network for a healthcare facility, including Wi-Fi, IP telephony, a camera system, and VPN.
2019–2025 Network and Firewall for Mepla I helped the manufacturing company Mepla segment their network into VLANs, select and deploy a Sophos firewall, and set up a redundant VPN to the parent company in Germany.
2017–2025 ATTC – Tickets from Monitoring I developed the ATTC tool, which automatically creates and updates tickets in the Alvao service desk based on reports from the monitoring system.
2016–present Next Clinics Group Network I designed and help manage the networks of Next Clinics group polyclinics, laboratories, and reproductive medicine clinics, along with their cloud connectivity.
2015–2020 ČEPRO Network Monitoring I built network monitoring for ČEPRO on Nagios with graphs in Graphite and topological maps of all sites in NagVis.
2014–2018 Network of the General Directorate of the Fire Rescue Service of the Czech Republic I participated in the analysis and modernization of the network of the General Directorate of the Fire Rescue Service of the Czech Republic, including the migration from 3Com to Cisco and a new VPN gateway.
2014–present Check Point Firewalls Security implementation using Check Point gateways
2014–2017 Network and Wi-Fi for Penny Market I analyzed the Penny Market network and rebuilt the corporate Wi-Fi on Cisco WLC with RADIUS authentication.
2013–2025 Inspirotec Call Centre Network For the Inspirotec call centre, I managed the network, Cisco ASA firewall and VPN, and in 2025 migrated its connectivity to SD-WAN.
2011–2021 AAA, Wi-Fi and VPN at ČEPRO I implemented centralised authentication at ČEPRO on Cisco ACS and later ISE, Wi-Fi security with 802.1X, and remote access via Cisco AnyConnect.
2011–2022 Perimeter, Mail and Monitoring at ČMZRB For Českomoravská záruční a rozvojová banka I managed firewalls, VPN, mail gateways and a monitoring system for eleven years.
2011–2013 Security of ČEPRO depots I mapped the ČEPRO network and gradually implemented firewalls, VLAN segmentation, and DHCP snooping across all storage depots.
2011–2022 ČEPRO Network and Security For over ten years I managed and developed the network and security infrastructure of ČEPRO – from the data centre through warehouse depots to petrol stations.
2010 ČEZ IP Telephony Data Centers I participated in the design and implementation of IP telephony data centers for the ČEZ Group, including firewalling and redundant interconnection.
2009–2011 CiscoWorks LMS at ČEPS For the transmission system operator ČEPS, I deployed the network management system CiscoWorks LMS 4.0.
2009–2022 Cleverlance Monitoring System I built and managed a Linux server for Cleverlance infrastructure monitoring for over ten years.
2009–2012 Makro Wholesale Network Migration I performed a bulk replacement of switches across all Makro wholesale stores and logistics platforms in the Czech Republic and Slovakia.
2008–2011 Cisco NAC at Nutricia Deva I implemented Cisco NAC Appliance network access control and LAN segmentation at the Nutricia Deva manufacturing plant.
2008–present CNS Monitoring System I built and continue to develop a monitoring system that CNS uses to watch over its own infrastructure as well as the networks and servers of its customers.
2008–2009 New LAN for Glazura I prepared and performed the replacement of switches in the Glazura network with HP elements and documented the new network.
2008–2022 synlab laboratory network For fourteen years I managed and developed the network, VPN, and monitoring of synlab czech laboratories across dozens of sites.
2008–present Networks and VPN for Small Businesses, Municipalities, and Schools For small businesses, municipalities, and schools, I configure and manage routers, VPN, and Wi-Fi, including monitoring and configuration archiving.
2008–present CNS Infrastructure For CNS, I have been providing long-term management of their internet gateway, VPN, internal Linux servers, and tools for service desk and asset tracking.
2008–2019 Cleverlance Network and Security I have long-term managed and developed firewalls, VPN, and network infrastructure for Cleverlance in Prague, Brno, and Bratislava.
2007–2008 Cisco MARS at Hyundai I designed and deployed the Cisco MARS system for security event correlation at the Hyundai Motor Manufacturing Czech plant.
2007–2011 Complete Office Equipment Registry I designed and developed a database system and a set of tools for equipment inventory and configuration management of the Complete Office service.
2007–2024 Training and Workshops I prepare and deliver training courses in computer networking, security, and Linux for customers' administrators and technicians.
2007–2010 ICTNET Network I managed the backbone and customer routers of the regional ICTNET network and built a monitoring server for it.
2007 LAN Redesign of Makro Wholesale Stores I designed and gradually implemented a redesign of the local area networks across all Makro wholesale stores in the Czech Republic and Slovakia.
2006–2009 Radio Free Europe New network in the new RFE/RL building – Hagibor
2006–2015 Prague Stock Exchange Network, VPN, and WAN migration for Prague Stock Exchange members.
2006–2011 O2 Complete Office Monitoring, audit and inventory of devices for the Complete Office service by Telefónica O2.
2006–2009 Ministry of Defence CIRC Centre I installed and configured the security technologies of the Ministry of Defence CIRC centre and provided several years of service support for the centre.
2005–2006 LAN in the New MHMP Building I designed the new LAN for the Prague City Hall and together with colleagues installed and configured the network active elements.
2005–2015 T-Mobile T-Mobile firewalls and VPN gateways, tools for auditing and synchronizing their configurations, and penetration testing.
2002–present VPN and DMZ Implementation of remote access systems and perimeter protection
2001 Makro CZ and Metro SK Network I help manage and develop the network infrastructure of Makro wholesale stores in the Czech Republic and Slovakia.
1998–present Technical Consulting One-time and long-term consulting, studies, technical solutions for proposals, and security testing for integrators and end customers.
1997–2000 CESNET Internet Node Building and operating a CESNET network node
1996–1997 Information System Development of a factory information system
1996–present Software Tool Development For customers and for myself, I write tools that automate network management, monitoring, and operations.
1995–present Unix Systems Administration Since 1995 I have been working with Unix operating systems on a daily basis