IT Specialist with 9+ years of hands-on experience keeping businesses running across healthcare, manufacturing, real estate and corporate environments in the Philippines, the UAE and Italy. Today I look after the IT of three organizations in Milan, and in my spare time I design and run my own self-hosted infrastructure.
// What I can do · click a card for examples
🖧 Networks & firewalls
Plan, deploy and secure wired and wireless networks with Cisco Meraki, Ruijie, Netgear, TP-Link, FortiGate and OPNsense.
Today: Cisco Meraki network security and wireless infrastructure across three organizations in Milan
Firewalls: FortiGate management at Alaska Milk; firewall rules and network access control in Dubai; OPNsense
Hardware: Ruijie, Netgear and TP-Link routers, access points and switches; switch and router upgrades
Wi-Fi: Site surveys and access point deployments
Homelab: Edge VM with host firewall, reverse proxy and Pi-hole DNS
🛡️ Security
Endpoint protection with Bitdefender, firewall policy, single sign-on with 2FA, and intrusion monitoring, backed by ISC2 CC.
Certified: ISC2 Certified in Cybersecurity (CC)
Endpoints: Bitdefender Endpoint Protection across the organizations I support
Policy & people: Wrote end-user Acceptable Use Policies and trained users on anti-malware practices
Homelab: Authelia single sign-on with 2FA, and Fail2Ban banning attackers with Whois-enriched email alerts
☁️ Identity & cloud
Administer Google Workspace, Microsoft 365, and Active Directory with Group Policy, from onboarding to access control.
Today: Google Workspace administration for three organizations
Directory: Active Directory and Group Policy management in Dubai
Accounts: Email and cloud account configuration, user provisioning and shared-drive permissions
Homelab: LLDAP user directory behind Authelia SSO
💾 Storage, backup & recovery
NAS storage, encrypted 3-2-1 backups and disaster recovery planning.
Today: Centralized NAS backup and disaster recovery systems
NAS: Synology NAS installation, user management and permissions
Classic backup: Weekly Symantec tape backups; VM snapshot backup and restore
Homelab: 14TB RAID 6, nightly encrypted off-site sync to Google Drive, plus local and remote mirrors
🧰 Support & operations
End-user support, 3CX telephony, CCTV, IT asset management, vendor coordination and clear documentation.
Support: Single point of contact for end users, including 24/7 remote support
Telephony: 3CX enterprise phone systems
Facilities IT: CCTV/NVR, UPS, biometric systems and structured LAN/WAN cabling
Lifecycle: SAP client deployments and IT asset management, from procurement to disposal
Documentation: Troubleshooting guides and knowledge-base articles
🐳 Self-hosting & automation
Docker containers, reverse proxies, virtualization and n8n workflow automation.
Containers: Docker Compose stack on a Ugreen NAS running Immich, Jellyfin, n8n and MAME
Edge: Caddy reverse proxy with automatic HTTPS
Automation: n8n workflow engine driving Immich through webhooks
Virtualization: VMware ESXi, Hyper-V and VirtualBox
This website: Static site on Vercel with a serverless status API and strict security headers
📈 Monitoring & alerting
Watch services and hardware with Uptime Kuma, Prometheus and Grafana, with email alerts when something goes wrong.
Uptime: Uptime Kuma on an external Oracle Cloud VM, so alerts still fire when the home network is down
Public proof: Its status page feeds the live badge at the top of this site
Metrics: Node Exporter and Prometheus collect NAS hardware metrics, visualised in Grafana dashboards
Alerting: Email alerts for disk capacity and BTRFS errors, Fail2Ban bans with Whois details, and backup summary reports
At work: Installed and managed a server room monitoring system in Dubai
🔧 Hardware & custom PC builds
Assemble, upgrade and repair PCs, from parts selection and cable management to cooling and power protection.
Custom builds: Plan and hand-assemble gaming and high-performance PCs, from parts selection to first boot
Showcase: "Dark Quiet": Ryzen 7 9800X3D, RTX 4080 SUPER, 64GB DDR5 and 360 mm AIO liquid cooling, on a Green Cell UPS (see PC Build below)
Repairs & upgrades: Hardware troubleshooting, repairs and parts-replacement recommendations
Maintenance: Preventive maintenance of workstations and IT equipment
Cabling & racks: Clean cable management, structured network cabling, and physical deployment of rack servers, switches and routers
Administered Level 2 server configurations, FortiGate firewall management, switch/router upgrades, and Wi-Fi site surveys.
Handled SAP client deployments, full IT asset lifecycle management, and weekly plant IT status reports.
I.T. Technician · SSMC Group of Hospitals and Clinics
Apr 2014 – Mar 2015 | Laguna, Philippines
Maintained the hospital's patient/outpatient database system, deployed workstations, and executed preventive hardware maintenance.
🖧 Featured Case Study: Veldad Infrastructure
My homelab is a hobby I design, build and run in my spare time: a self-hosted private cloud for my photos, media and automations, guarded by single sign-on, active intrusion defense and automated 3-2-1 backups. Click a card to open it.
🗄️ The Core Host
Hardware: Ugreen UGOS 6800plus NAS
Compute: 48GB RAM for high-density virtualization & containers
Storage: 14TB redundant RAID 6 pool
Connectivity: 2.5 Gbps Down / 1 Gbps Up
🛡️ The Walled Garden (Ubuntu VM)
Edge Isolation: Dedicated Ubuntu VM separating the internet-facing edge from the storage host
Routing & DNS: Caddy reverse proxy with automatic TLS + Pi-hole DNS sinkhole
SSO & 2FA: Authelia + LLDAP single sign-on with per-application access policies
Active Defense: Fail2Ban watching proxy logs, banning at the host firewall, and emailing Whois-enriched threat alerts
🐳 Production Stack (Bare-Metal)
Hardware Access: Containers run directly on the NAS host for native Intel iGPU acceleration
Immich: OpenVINO AI photo server safeguarding a 1.18+ TiB library and its Postgres database
Jellyfin: Media server utilizing Intel QuickSync & an 8GB RAM disk (tmpfs) to eliminate RAID drive wear
Off-site Cloud Vault: Nightly encrypted Rclone sync to Google Drive with automated SMTP summary reports
Local & Remote Mirror: Nightly sync to a 5TB external HDD & a remote UGOS PLUS 6800 node
Observability: Prometheus, Node Exporter & Grafana with SMTP alerting on capacity and BTRFS errors, plus external Uptime Kuma on an Oracle Cloud VM (public status page ↗)
🗺️ Infrastructure Topology
Blue packets follow traffic, orange ones follow alerts and control signals. Hover a component to trace its connections; click it for details.
Outside work I plan and hand-assemble custom gaming PCs, from parts selection and cable management to cooling and power protection. Click the card to open it.
