Projects
ČEPRO Network and Security
2011–2022
For ČEPRO I worked as a subcontractor responsible for the design, configuration, and operation of the LAN/WAN network and security components in the data centre, at the Prague headquarters, across dozens of warehouse depots, and at EuroOil petrol stations.
- management of Cisco ASA firewalls, defining access rules, NAT, DMZ, upgrades and vulnerability remediation,
- site-to-site VPN to partners and suppliers, remote access via Cisco AnyConnect,
- data centre network: VMware server and blade centre connectivity, DMZ for Exchange and other services, replacement of central Catalyst 4500 switches at depots, documentation for the backup data centre,
- troubleshooting of network, IP telephony, industrial networks, and payment terminals,
- automation: scripts for bulk configuration changes, processing firewall logs into PostgreSQL, exporting device lists to Zabbix, processing reports from QualysGuard,
- security audits and analysis of security incidents, consultations and training for internal administrators.