skills · qualifications

A broad foundation, clear focus areas.

Hands-on know-how from infrastructure, networking, automation and development.

skill areas

Four areas, one goal: operations that hold up.

[01]

Systems

  • Proxmox VE & LXC
  • VMware & vCenter
  • Linux administration
  • Windows Server
  • Active Directory
  • Backup & Recovery
[02]

Network

  • MikroTik RouterOS
  • Arista Switching
  • Ubiquiti UniFi
  • Routing & VPN
  • Firewalling
  • Network troubleshooting
[03]

Automation

  • Python
  • REST APIs
  • Checkmk
  • AWS as Code
  • CloudFormation & CDK
  • Operational workflows
[04]

Development

  • Java 21
  • Vulkan & LWJGL
  • Gradle
  • Git
  • Technical documentation
  • Debugging

aws · cloud · infrastructure as code

AWS: keeping changes under control.

To me, AWS is not a catalogue of individual services. What matters is the complete path from a well-founded architecture through verifiable infrastructure code to operations, diagnosis and recovery.

IaC
CDK · CloudFormation
Serverless
Lambda · Events · APIs
Delivery
Tests · change sets · gates
Operations
Monitoring · drift · recovery

Fields of application

[01]

Reproduce environments

Networking, permissions, storage and applications are described in versioned AWS CDK or CloudFormation code instead of being built by hand in the console.

CDK · CloudFormation · Stacks

[02]

Build APIs and event flows

Lambda, API Gateway, EventBridge and Step Functions connect small, clearly scoped components into scalable and traceable workflows.

Lambda · API Gateway · Events

[03]

Protect data deliberately

Encryption, blocked public access, versioning, retention and tightly scoped IAM permissions are carried along as verifiable standards.

S3 · KMS · IAM

[04]

Roll out changes in a controlled way

Synthesis, linting, tests, diffs and change sets provide a verifiable preview before deployment; approvals and rollback paths limit the risk.

Synth · Diff · Change Set

[05]

Explain state and failures

Metrics, logs, audit trails, drift and failed stack events are brought together so that causes are addressed, not just symptoms.

CloudWatch · CloudTrail · Drift

[06]

Extend hybrid setups sensibly

Cloud resources can complement local systems, for example as a controlled edge, offsite target or automation building block, without opening the internal network wholesale.

Edge · Backup · Automation

Guardrails

Security is a process, not a single switch.

  • Least Privilege. Permissions are bound to specific actions and resources. Long-lived static access keys are not a default path.
  • Secure defaults. Encryption, private access, logging and protection against accidental deletion belong in the resource definition.
  • Preview before impact. CDK diff or CloudFormation change sets show the planned change. Replacements of stateful resources are reviewed explicitly.
  • Plan for operations. Monitoring, cost, backups, runbooks and recovery are part of the architecture, not tasks for sometime after go-live.

knowledge project · aws

AWS IaC Field Guide

The AWS IaC Field Guide brings CloudFormation, AWS CDK v2 with Python, tests, change sets, drift, IAM, CI/CD and recovery together in one coherent working reference.

29
chapters
30/30
CLI checks
v1.2
current version

Open field guide

qualifications

Technology with responsibility.

  1. Qualified electrical specialist

  2. Safety officer

  3. Fire safety assistant

  4. First aid

  5. Information electronics technician (devices, IT and office systems)

Languages

Polish
Native
German
Fluent
English
Fluent

career

Practice, responsibility and continuous learning.

  1. Junior IT systems administrator

    Infrastructure, virtualization, networking, security, monitoring and technical automation.

  2. IT technician

    Virtual infrastructure, Arista networks and support in production, administration and AV environments.

  3. Information electronics technician

    Apprenticeship focused on device, IT and office systems technology, fault analysis and technical documentation.