~/home/jakub

JAKUB FOREJT

IT Specialist & Infrastructure Architect

Building resilient, scalable infrastructure | Security first | Open source enthusiast

About Me

🔧 Infrastructure Architect specializing in automation, security, and self-hosted solutions. With deep expertise in virtualization, network security, and Linux administration, I design and deploy resilient systems that scale.

Currently managing a sophisticated homelab infrastructure featuring Proxmox virtualization, MikroTik routing, comprehensive monitoring with Grafana, and containerized workloads. I'm passionate about infrastructure-as-code, automated workflows, and emerging AI/ML technologies.

Philosophy: Security first, automation everywhere, monitor everything. Always learning, always testing, always optimizing.

Core Expertise

Infrastructure & Virtualization

🪟

Microsoft Windows

Server 2019/2022, Active Directory, Group Policy, system administration, hardening

☁️

Microsoft 365

Exchange Online, SharePoint, Teams, Entra ID, licensing management, migration planning

🖥️

Proxmox

Enterprise-grade virtualization, cluster management, VM orchestration, backup automation

🔗

MikroTik RouterOS

Advanced routing, firewall rules, VLAN segmentation, network monitoring and optimization

🐧

Linux Administration

Debian/Ubuntu/Kali, system hardening, service management, scripting and automation

Containerization & Orchestration

🐳

Docker & Containers

Container design, multi-container deployments, registry management, optimization

⚙️

Automation & IaC

n8n workflows, Ansible playbooks, YAML configurations, infrastructure-as-code patterns

📊

Monitoring Stack

Grafana dashboards, Prometheus metrics, log aggregation, alerting systems

Security & Analysis

🔐

Network Security

Firewalling, penetration testing, vulnerability assessment, threat analysis

🛡️

System Hardening

Access control, encryption, compliance frameworks, incident response

🎯

AI/ML Deployment

Model optimization, local inference, GPU acceleration, automated pipelines

Key Skills

Windows Server Microsoft 365 Active Directory Exchange Online Entra ID Proxmox MikroTik Docker Linux Python PowerShell Bash n8n Grafana Network Security Kubernetes API Integration Nextcloud SIEM AI/ML

Available for New Engagements

How I Can Help You

Infrastructure Architecture & Design
Enterprise Infrastructure Assessment
Security Architecture & Hardening
Infrastructure Automation & IaC
Cloud-to-On-Premises Migration
Team Augmentation & Technical Mentoring

Featured Work

Microsoft 365 & Active Directory Implementation

Deployed enterprise-grade Microsoft 365 infrastructure with Entra ID synchronization, Exchange Online configuration, SharePoint deployment, and Teams governance. Managed user provisioning, licensing optimization, and security compliance. Handled complex migration scenarios and multi-tenant scenarios.

Impact: Reduced admin overhead by 60%, improved security posture with conditional access policies
Microsoft 365 Entra ID Exchange Online Active Directory PowerShell

Windows Server & Hybrid Infrastructure

Architected and managed Windows Server 2019/2022 environments with hybrid cloud integration. Implemented Group Policy Objects, system hardening, backup strategies, and disaster recovery. Integrated on-premises servers with Microsoft cloud services for optimal scalability.

Impact: 99.9% uptime SLA achieved, automated backup recovery time reduced from 4h to 30min
Windows Server Active Directory Hyper-V Group Policy PowerShell

Enterprise Homelab Infrastructure

Designed and deployed multi-server homelab featuring Proxmox clustering, advanced networking with MikroTik, comprehensive monitoring stack, and automated backup systems. Infrastructure handles 50+ VMs with high availability and disaster recovery capabilities.

Impact: Full HA setup with automated failover, sub-second monitoring alerts, zero manual intervention
Proxmox MikroTik Grafana Prometheus Docker

Automated Workflow Engine

Built comprehensive automation platform using n8n for orchestrating complex workflows. Integrates multiple APIs, handles data transformation, and provides real-time monitoring. Reduced manual operations significantly.

Impact: Reduced manual operations by 80%, automated 200+ daily tasks, saved 120+ hours/month
n8n APIs Python PostgreSQL Docker

Network Security Implementation

Implemented advanced security architecture with VLAN segmentation, sophisticated firewall rules, intrusion detection, and threat monitoring. Conducts regular penetration testing and vulnerability assessments.

Impact: Zero security incidents post-implementation, detection rate 99.7%, compliance certified
MikroTik Suricata IDS Kali Linux SIEM Compliance

AI Model Deployment Pipeline

Created optimized inference pipeline for local AI model deployment. Features GPU acceleration, model quantization, and automated retraining workflows. Integrated with monitoring and alerting systems.

Impact: Inference latency reduced to 200ms per request, 10x memory optimization via quantization
Python TensorFlow CUDA Docker n8n

Cloud-Free Media Library

Self-hosted Nextcloud instance managing 800+ films with comprehensive metadata, automated organization, backup redundancy, and secure access control. Full infrastructure-as-code implementation.

Impact: 4x redundancy setup, encrypted backups across geographic locations, zero data loss
Nextcloud Docker PostgreSQL S3 Storage Proxmox

Let's Work Together