Rostislav Opočenský
CS EN

Projects

Period Project Description
2025–present Linux distribution for a controller board I build and maintain a custom Linux distribution for a bicycle-stand controller board, with atomic A/B updates.
2025–present 420 IT operational infrastructure For 420 IT I built a monitoring, configuration and service infrastructure in the cloud, migrated client network management onto it, and deployed FortiGate firewalls.
2025–present Next-generation parking system I am involved in the research, design and bring-up of the hardware and software platform for a new parking system.
2024–present GCMP Protocol I designed the GCMP protocol for discovering and managing devices on a local network, and wrote its library and tools in Python and MicroPython.
2024–present ÚŽFG AV ČR Network For Ústav živočišné fyziologie a genetiky AV ČR I managed the firewall, documented the network, and designed a switch refresh.
2024–2025 Staff alert for self-service checkouts I developed a tool that listens for MQTT messages from self-service checkouts and alerts staff when assistance is needed.
2023–2025 AI analysis of survey comments I developed a REST API that uses OpenAI language models to assess sentiment, summarise, and tag respondents' comments.
2023–2025 Městský úřad Mělník Network For Městský úřad Mělník I surveyed and documented the network, reviewed a proposal to refresh the active infrastructure, introduced 802.1X device authentication, and set up monitoring for the diesel generator.
2023–present Lab The lab where I develop, bring up and test electronics
2022 PG Board IoT firmware For the PG Board I developed firmware providing Internet connectivity and ultra-low current consumption, and designed an expansion board.
2022–present Centrum zdraví network After Centrum zdraví separated from Next Clinics, I designed and built a standalone network with a cloud environment and migrated the branches to SD-WAN.
2022–present InsightSofa platform servers I manage the Linux servers for the InsightSofa survey platform.
2021–2025 Claroty SRA for Mondi I deployed and maintain a Claroty Secure Remote Access solution for secure remote access to the production networks of a paper mill.
2021–2025 Certificate management I developed a tool for managing an internal certificate authority, issuing certificates for OpenVPN and servers, and automatically distributing CRLs to routers.
2020–present Mondi Štětí Linux servers I manage the Linux servers at Mondi Štětí paper mill, including ABB production system servers and PostgreSQL and Oracle databases.
2020–present Bonus reports from the service desk I developed a web service that calculates technician bonus data from the Alvao service desk.
2020–2022 Voice Platform on Asterisk I designed and deployed an Asterisk PBX with WebRTC web clients, queues, and 2N intercom integration over VPN.
2019–2021 Medicentrum Mělník Network I designed and built a new network for a medical facility, including Wi-Fi, IP telephony, a camera system and VPN.
2019–2025 Network and firewall for Mepla I helped the manufacturing firm Mepla segment their network into VLANs, select and deploy a Sophos firewall, and set up a redundant VPN to their parent company in Germany.
2017–2025 ATTC – monitoring alerts to tickets I developed ATTC, a tool that automatically creates and updates tickets in the Alvao service desk from monitoring system alerts.
2016–present Next Clinics Group Network I designed and help manage the networks for Next Clinics group's polyclinics, laboratories and reproductive medicine clinics, along with their cloud connectivity.
2015–2020 ČEPRO Network Monitoring I built network monitoring for ČEPRO using Nagios with Graphite graphs and topological maps of all sites in NagVis.
2014–2018 Network of the HZS ČR General Directorate I contributed to the analysis and modernisation of the Hasičský záchranný sbor ČR General Directorate's network, including the migration from 3Com to Cisco and a new VPN gateway.
2014–present Check Point Firewalls Securing client networks with Check Point gateways
2014–2017 Network and Wi-Fi for Penny Market I analysed Penny Market's network and rebuilt the corporate Wi-Fi on a Cisco WLC with RADIUS authentication.
2013–2025 Inspirotec call centre network I managed the network, Cisco ASA firewall and VPN for Inspirotec call centre, and migrated its connectivity to SD-WAN in 2025.
2011–2021 AAA, Wi-Fi and VPN at ČEPRO I deployed centralised authentication at ČEPRO using Cisco ACS and later ISE, secured the Wi-Fi networks with 802.1X, and set up remote access via Cisco AnyConnect.
2011–2022 Perimeter, mail and monitoring for ČMZRB For Českomoravská záruční a rozvojová banka I spent eleven years managing firewalls, VPN, mail gateways and a monitoring system.
2011–2013 ČEPRO depot security I mapped ČEPRO's network and progressively rolled out firewalls, VLAN segmentation and DHCP snooping across all storage depots.
2011–2022 ČEPRO Network & Security For over ten years I managed and developed the network and security infrastructure at ČEPRO, covering everything from the datacentre and storage depots to EuroOil filling stations.
2010 ČEZ IP Telephony Data Centres I contributed to the design and implementation of IP telephony data centres for the ČEZ Group, including firewalling and redundant interconnection.
2009–2011 CiscoWorks LMS at ČEPS I deployed the CiscoWorks LMS 4.0 network management system for transmission system operator ČEPS.
2009–2022 Cleverlance monitoring system I built and maintained a Linux monitoring server for the Cleverlance infrastructure for over ten years.
2009–2012 Makro network migrations I carried out a bulk switch replacement across all Makro cash-and-carry stores and logistics platforms in the Czech Republic and Slovakia.
2008–2011 Cisco NAC at Nutricia Deva I implemented Cisco NAC Appliance network access control and LAN segmentation at the Nutricia Deva manufacturing plant.
2008–present CNS Monitoring System I built and continue to develop the monitoring system CNS uses to keep an eye on its own infrastructure as well as its clients' networks and servers.
2008–2009 New LAN for Glazura I planned and carried out a switch replacement across Glazura's network, installing HP equipment and documenting the new infrastructure.
2008–2022 synlab laboratory network For fourteen years I managed and developed the network, VPN and monitoring infrastructure for synlab czech across dozens of sites.
2008–present Networks and VPN for smaller businesses, municipalities and schools I configure and manage routers, VPN and Wi-Fi for smaller businesses, municipalities and schools, including monitoring and configuration archiving.
2008–present CNS Infrastructure I have been managing CNS's internet gateway, VPN, internal Linux servers, and tools for service desk and asset tracking on a long-term basis.
2008–2019 Cleverlance network and security I managed and developed the firewalls, VPN and network infrastructure for Cleverlance across their Prague, Brno and Bratislava offices over a number of years.
2007–2008 Cisco MARS at Hyundai I designed and deployed a Cisco MARS security event correlation system at Hyundai Motor Manufacturing Czech.
2007–2011 Kompletní kancelář Device Inventory I designed and developed a database system and toolset for device inventory and configuration management of the Kompletní kancelář service.
2007–2024 Training and Workshops I design and deliver training courses on networking, security and Linux for clients' administrators and engineers.
2007–2010 ICTNET Network I managed the backbone and customer routers of the ICTNET regional network and built a monitoring server for it.
2007 Makro Wholesale LAN Redesign I designed and progressively delivered a LAN redesign across all Makro wholesale stores in the Czech Republic and Slovakia.
2006–2009 Radio Free Europe/Radio Liberty New network for the new RFE/RL building – Hagibor
2006–2015 Burza cenných papírů Praha Network, VPN and WAN migration for members of Burza cenných papírů Praha.
2006–2011 O2 Kompletní kancelář Monitoring, audit and device inventory for Telefónica O2's Kompletní kancelář service.
2006–2009 Ministry of Defence CIRC Centre I installed and configured the security technologies for the Ministry of Defence CIRC centre and provided ongoing service support for several years.
2005–2006 LAN for the new MHMP building I designed the new LAN for Magistrát Hlavního města Prahy and, together with colleagues, installed and configured the network equipment.
2005–2015 T-Mobile T-Mobile firewalls and VPN gateways, configuration audit and synchronisation tools, and penetration testing.
2002–present VPN and DMZ Design and implementation of remote access and perimeter protection systems
2001 Makro Czech Republic and Metro Slovakia network I help manage and develop the network infrastructure for Makro wholesale stores in the Czech Republic and Slovakia.
1998–present Technical Consultancy One-off and ongoing consultancy, studies, technical solutions for bids, and security testing for integrators and end clients.
1997–2000 CESNET network node Building and operating a CESNET network node
1996–1997 Information System Development of a factory information system
1996–present Software tool development I write tools for clients and for my own use that automate network administration, monitoring and operations.
1995–present Unix Systems Administration I have worked with Unix operating systems daily since 1995