Projects

ČEPRO Network & Security

2011–2022

For over ten years I managed and developed the network and security infrastructure at ČEPRO, covering everything from the datacentre and storage depots to EuroOil filling stations.

As a subcontractor for ČEPRO, I designed, configured and operated the LAN/WAN network and security infrastructure across the datacentre, the Prague head office, dozens of storage depots and EuroOil filling stations.

managing Cisco ASA firewalls: access rules, NAT, DMZ, upgrades and vulnerability remediation,
site-to-site VPN to partners and suppliers, remote access via Cisco AnyConnect,
datacentre network: VMware server and blade centre connectivity, DMZ for Exchange and other services, replacement of core Catalyst 4500 switches at depots, documentation for a backup datacentre,
troubleshooting network, IP telephony, industrial network and payment terminal issues,
automation: scripts for bulk configuration changes, parsing firewall logs into PostgreSQL, exporting device inventory to Zabbix, processing QualysGuard reports,
security audits, security incident analysis, and consulting and training for in-house administrators.