I am a cybersecurity architect, UNIX/Linux system administrator, software engineer working in industry IT, and currently a master's student of cybernetic security at FEE CTU in Prague, a big fan of open source projects and The OpenBSD Project.
📁 My public projects
- A Complete OpenSSL Certificate Authority - a toolkit to create your own two-layer CA with OCSP, private keys on HSM (PKCS#11) and encrypted key backup
- 🎓 Enhancing security and privacy of computer networks with OpenBSD as a network operating system of a router (bachelor's thesis, FEE CTU Prague, 2023)
- rtsp-timelapse - Shell script-based routine that takes full-resolution snapshots from IP cam RTSP stream and periodically creates a HEVC timelapse video using FFmpeg.
- webcam-snapshot - Shell script-based routine that takes unique snapshots from live images published on the Web.
- [CZ] Školní Burza / Online Book Swap - projekt z gymnázia / a grammar school project
- [CZ] Společenská hra Aktivity pro počítač / Aktivity board game for a computer
💡 Work skills & experience
- Skills
- Programming: C, C++, Rust, Go, Python, C# (.NET)
- Software testing: design of test scenarios (pairwise, unit tests, path-based, integration), Playwright, Selenium
- Operating systems and virtualization: OpenBSD, FreeBSD, Debian-like, RHEL, Alpine, Proxmox, VMware ESXi
- Databases: SQL, InfluxDB, Redis
- Networking: pf, nftables, iptables, FreeRADIUS, NSD, Unbound, tcpdump, Wireshark, nmap, Cowrie, OpenSSL toolkit, MikroTik, Cisco
- System monitoring: Prometheus, Grafana
- Discrete optimization: GUROBI, HiGHS
- Miscellaneous: OpenSMTP, Dovecot, Rspamd, Authelia, Asterisk
- Work experience
- 2024: Responsible for complete ISO 27001 implementation and certification process from both technical and administrative scope
- 2023-24: Implemented custom .NET Core high-level language & compiler for automated label graphics generation
- 2023-current: Designed & maintaining multifunctional, multi-WAN OpenBSD gateway, firewall & proxy
- 2023-current: Designed, established, and maintaining complex private Certification authority in IT company
- 2023: Cybersecurity manager course (provided by Seminaria.cz)
- 2022: Implemented custom async IP printer driver in .NET Core
- 2022: Developed a .NET TCP/IP dynamic library improving integration with AVEVA System Platform.
- 2019-current: IT administrator (BSD, Linux, MSAD), security architect + software engineer of critical factory applications in industry IT company
- 2019-20: Introduced UNIX-like & open source technologies to industry IT company
- 2016: Developed PHP online book swap for my grammar school
- 2016-18: guided programming course at a grammar school
📌 Miscellaneous
- [CZ] Záznamy zasedání Zastupitelstva obce Adršpach / Adršpach local government meeting recordings
- [CZ] Záznamy zasedání Zastupitelstva města Holic / Holice local government meeting recordings
- [CZ] Nahrávky akademií Gymnázia Dr. Emila Holuba, Holice
- Questions and answers that can help someone (for search engines)
🌐 Languages
- Czech (native speaker)
- English (B2)
- French (B1)