Infrastructure Projects

Challenge

Mission-critical applications required enterprise-grade availability without the licensing cost of a proprietary hypervisor platform.

Solution

Designed and deployed a 12-node Proxmox VE cluster with integrated Ceph storage, isolated L2 networking, live migration and automated node failover.

Result

• 12-node distributed cluster in production
• Ceph distributed storage with replication
• 99.99% uptime SLA sustained
• 60% cost reduction vs. the previous platform

Challenge

A single-site failure would have taken critical services offline with no tested recovery path.

Solution

Implemented a three-site replication architecture with real-time synchronization, automated failover and zero-downtime migration procedures, validated by scheduled DR testing.

Result

• 3-site replication architecture
• RTO of 15 minutes, RPO of 5 minutes
• Automated, regularly tested failover
• Documented business continuity compliance

Challenge

Rising virtualization licensing costs, with no tolerance for downtime during a platform change.

Solution

Led migration of 150+ VMs from VMware vSphere to Proxmox VE using purpose-built automation scripts, staged validation testing and hands-on team enablement.

Result

• 150+ VMs migrated with zero downtime
• 60% reduction in platform cost
• Improved workload performance post-migration
• Operations team fully enabled on the new platform

Challenge

Traditional VPN access gave broad network reach with limited visibility into who connected from where.

Solution

Designed and implemented a Zero Trust access model with NetBird, enforcing MFA, device posture checks and comprehensive audit logging in place of flat VPN access.

Result

• Legacy VPN infrastructure retired
• MFA and device compliance enforced
• Full connection audit trail
• Segmented access aligned to least privilege

Challenge

Fragmented monitoring meant incidents were discovered by users rather than by the operations team.

Solution

Deployed a unified Prometheus, Grafana, Graylog and Wazuh stack across distributed infrastructure, with intelligent alerting and security event detection.

Result

• 500+ metrics under continuous monitoring
• Centralized log aggregation and analysis
• Proactive detection ahead of user impact
• Security event detection integrated into operations

Challenge

Manual, inconsistent provisioning was driving configuration drift and avoidable operational risk.

Solution

Built a reusable Ansible playbook library covering provisioning, configuration management and application deployment across multiple environments.

Result

• 70% reduction in manual operational tasks
• Standardized multi-environment deployments
• Configuration drift eliminated
• Repeatable, auditable infrastructure delivery