Three real freelance support requests: a 100 Mbps Ethernet link, a no-boot memory change, and a DNS resolution failure.
What this proves
- 3 real freelance requests
- 1 to 5 minute fixes
Work / six targeted case studies
Ordered for help desk, network support, NOC, systems, and SOC conversations.
Start with the problem. Show the check. Confirm the fix.
A home lab where I built a Windows Server 2025 Active Directory domain, added a certificate authority, and connected a self-hosted GLPI ticketing system to it over encrypted LDAPS.
What this proves
- New AD forest
- DC-hosted DNS
I moved a flat homelab into 10 role-based VLANs, migrated more than 20 virtual workloads, and restored three-node Proxmox quorum after a switching cutover broke two node paths.
What this proves
- 10 role-based VLANs
- 3/3 cluster quorum restored
My homelab grew from one server into a three-node Proxmox environment with managed switching, separate network zones, identity, monitoring, storage, and recovery notes.
What this proves
- 3-node cluster
- Role-based segmentation
I won SkillsUSA Florida Internetworking, then struggled at nationals. That experience showed me exactly where I needed more Cisco IOS practice.
What this proves
- Florida gold medal
- 5-node guided lab
A guest SSID connected but skipped the captive portal. I followed the path through VLAN tagging, DHCP, DNS, OPNsense sessions, and firewall policy until the wrong interface binding surfaced.
What this proves
- Wrong interface isolated
- Fresh mobile validation
I use Wazuh as a lab monitoring and SIEM environment, including cross-VLAN agent paths, service recovery, endpoint visibility, and a repeatable alert-review workflow.
What this proves
- 22 active lab agents at validation
- Cross-VLAN monitoring paths
Additional technical work
Useful supporting work, kept compact so the six strongest case studies stay easy to scan.
More depth without another wall of project cards.
OPNsense OIDC and service-name recovery
Diagnosed a disappearing OIDC login option after LDAP was added, corrected the identity-provider redirect path, installed a patched plugin package, and moved firewall integrations from hardcoded addresses to service DNS names.
Dynamic split-horizon DNS updater
Built a Python job that detects residential public-IP changes, updates Technitium Split Horizon address translation only when the value changes, restarts the DNS service, and records the result.
Private remote administration path
Used encrypted mesh networking and separated public application ingress from administration so firewall, hypervisor, switch, and storage management interfaces stay off the public internet.
Storage and backup network operations
Moved NAS and backup roles into dedicated network paths, restored Proxmox storage targets after addressing changes, and documented boot order, backup validation, dependencies, and rollback steps.