██
██
░░░
░░░
░░░
▒▒
▒▒
█
██
█
░░
░░
▒▒▒
▒▒▒
███
█
░
░░
░
▒▒
██
██
██
-- GitHub Stars
4 Years Experience
7 Certifications
Warsaw Based In
01

// About

I like learning about distributed systems, and making sure they stay healthy.

Four years in infrastructure and platform engineering, most of it in the *nix ecosystem. I hold CKA, CKAD, CKS, and KCNA, plus Cisco and Juniper networking certs. When I'm not on call I build small tools, like redarmor, a TLS expiry tracker in pure Go.

stack.go 
// the daily stack
package main

type stack struct {
	runtime  string
	language string
	observe  string
}

var daily = stack{
	runtime:  "kubernetes",
	language: "go",
	observe:  "prometheus + grafana + langfuse",
}
02

// Skills

┌─────┐
│ ◉ ◉ │
│ ═══ │
│ ◉ ◉ │
└─────┘

Kubernetes

Cluster lifecycle, operators, and hardening. Production workloads since day one.

┌─────┐
│ >>_ │
│ go  │
│ ▄▄▄ │
└─────┘

Go

Services, CLIs, and small tools. redarmor is Go with zero dependencies.

┌─────┐
│ ▁▃▅ │
│ ▃▅▇ │
│ ▅▇█ │
└─────┘

Observability

Prometheus, Grafana, and Langfuse. Metrics and traces with the dashboards to read them.

┌─────┐
│ ●─● │
│ ─┼─ │
│ ●─● │
└─────┘

Networking

CCNA, JNCIS-ENT, and JNCIA-DC. Comfortable from the port to the routing table.

┌─────┐
│ █ █ │
│ ▄▀▄ │
│ █ █ │
└─────┘

Security

CKS certified. Hardening clusters and watching certificates before they expire.

03

// Projects

architecture 
REDARMOR · certificate expiry tracker
═══════════════════════════════════════════════════════════════════════════

CORE PIPELINE (identical in v1, v2, v3 · v1 is stdlib only)
───────────────────────────────────────────────────────────────────────────

                      ┌─────────────────────────────────┐
                      │            host list            │
                      │  file · ConfigMap · CRD spec    │
                      └────────────────┬────────────────┘
                                       │
                                       ▼
                      ┌─────────────────────────────────┐
                      │      check  (internal/check)    │
                      │                                 │
                      │  crypto/tls dial                │
                      │  InsecureSkipVerify (inspect,   │
                      │    never trust)                 │
                      │  ServerName = SNI               │
                      │  bounded worker pool            │
                      │  per-host ctx timeout           │
                      └────────────────┬────────────────┘
                                       │
                                       ▼
                      ┌─────────────────────────────────┐
                      │           Result set            │
                      │                                 │
                      │  []Result                       │
                      │  host · NotAfter · DaysLeft     │
                      │  issuer · serial · Err          │
                      │  (a failed dial is a Result)    │
                      └────────────────┬────────────────┘
                                       │
                                       ▼
                      ┌─────────────────────────────────┐
                      │    classify  (internal/classify)│
                      │                                 │
                      │  pure logic · injected now      │
                      │  table-tested, no network       │
                      │                                 │
                      │  OK · Warning · Critical        │
                      │  · Expired · NotYetValid        │
                      └────────────────┬────────────────┘
                                       │
                                       ▼
                      ┌─────────────────────────────────┐
                      │      report  (internal/report)  │
                      │                                 │
                      │  table (tabwriter)              │
                      │  JSON  (--output json)          │
                      │  v2: Prometheus metrics         │
                      │  v3: CRD status + Events        │
                      └─────────────────────────────────┘
topology 
┌────────────────────────────────────────────────────────┐
│                  libvirt NAT network                   │
│                    192.168.122.0/24                    │
│                                                        │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐  │
│  │    k8s-cp    │  │ k8s-worker1  │  │ k8s-worker2  │  │
│  │    4 vCPU    │  │    2 vCPU    │  │    2 vCPU    │  │
│  │  4 GiB RAM   │  │  4 GiB RAM   │  │  4 GiB RAM   │  │
│  │ 20 GiB disk  │  │ 20 GiB disk  │  │ 20 GiB disk  │  │
│  │control-plane │  │    worker    │  │    worker    │  │
│  │              │  │              │  │              │  │
│  └──────────────┘  └──────────────┘  └──────────────┘  │
│                                                        │
│  Cilium CNI (kube-proxy replacement)                   │
│  containerd runtime                                    │
│  kubeadm bootstrapped                                  │
└────────────────────────────────────────────────────────┘
architecture 
XDSPARK · protocol traffic sparklines
═══════════════════════════════════════════════════════════════════════════

observability only · every packet passes through the host stack untouched

                      ┌─────────────────────────────────┐
                      │   coral · XDP program (kernel)  │
                      │  0x0800 → IPv4 proto @ byte 9   │
                      │  0x86DD → IPv6 next @ byte 6    │
                      │  stats[proto].packets += 1      │
                      │  stats[proto].bytes += len      │
                      │  return XDP_PASS (untouched)    │
                      └────────────────┬────────────────┘
                                      │  kernel writes
                                      ▼
                      ┌─────────────────────────────────┐
                      │    stats · PERCPU_ARRAY (256)   │
                      │  key: u32 protocol · 0..255     │
                      │  value: {u64 packets, u64 bytes}│
                      │  one private slot per cpu       │
                      └────────────────┬────────────────┘
                                      │  pull · every 250ms
                                      ▼
                      ┌─────────────────────────────────┐
                      │   teal · Go daemon (userspace)  │
                      │  load + attach (cilium/ebpf)    │
                      │  sum per-cpu slots              │
                      │  ring buffer → windowed rate    │
                      │  ANSI sparklines · live redraw  │
                      └─────────────────────────────────┘
04

// Certifications

Certification Issuer Focus
CKA CNCF Kubernetes Administration
CKAD CNCF Application Development
CKS CNCF Cluster Security
KCNA CNCF Cloud Native Foundations
CCNA Cisco Routing & Switching
JNCIS-ENT Juniper Enterprise Routing
JNCIA-DC Juniper Data Center

Kubernetes, cloud native, and network engineering. Full certificates on request. 

    ┌────────────────────────────────────────────┐
    │                                            │
    │  $ whoami                                  │
    │  zen66ten · infra / platform · warsaw      │
    │  $ git clone https://github.com/           │
    │  zen66ten/redarmor                         │
    │                                            │
    └────────────────────────────────────────────┘

Get In Touch

Open to infrastructure and platform roles.

github →