Hire the Best NetBeans Specialists
in Nepal

Welcome to my Upwork profile! With over five years in the IT industry, I've transitioned from system and network engineering to becoming a seasoned DevOps engineer, driven by a relentless pursuit of operational excellence and a passion for leveraging technology to drive business success. In my initial role as a system and network engineer, spanning two years, I honed my skills in designing, implementing, and maintaining robust network infrastructures. This foundational period was pivotal in shaping my understanding of critical systems and their seamless integration within dynamic environments. I thrived on the challenges of ensuring continuous connectivity and high availability, utilizing my troubleshooting expertise to swiftly resolve complex issues and minimize downtime. My dedication to optimizing technical operations laid a solid groundwork for my subsequent transition into the realm of DevOps. Over the past three years as a DevOps engineer, I've embraced a holistic approach to software development and IT operations. Central to my role has been fostering collaboration across teams and automating processes to achieve seamless integration and deployment (CI/CD). Leveraging cutting-edge tools and methodologies, I've accelerated development cycles, significantly improving time-to-market for products and enhancing overall operational efficiency. My passion for innovation has led me to continuously identify opportunities for improvement, whether through optimizing network performance or streamlining deployment pipelines. Effective communication and collaboration are fundamental to my professional ethos. I excel in integrating within cross-functional teams, collaborating seamlessly with developers, operations teams, and stakeholders. By prioritizing clear communication and aligning on shared goals, I consistently deliver results that exceed expectations. The ever-evolving tech landscape is a constant source of excitement for me. I am committed to staying ahead of the curve by actively seeking out the latest trends and advancements. This dedication allows me to contribute fresh perspectives and innovative solutions to projects. I am enthusiastic about connecting with fellow professionals, thought leaders, and innovators in the IT field. Together, we can explore potential collaborations, share insights, and collectively shape the future of technology. In summary, my career journey reflects a trajectory of growth, innovation, and a steadfast commitment to excellence in IT operations and DevOps. I invite you to connect with me to explore how we can collaborate, share insights, and drive transformative change in the dynamic world of technology. Let's shape the future together!

Experienced Platform and DevOps Engineer with over 15 years of progressive expertise in Linux system administration, infrastructure automation, and cloud-native technologies. Proven track record working with startups and enterprise clients across Europe and Asia, with hands-on experience in Kubernetes, Terraform, Ansible, Python scripting, CI/CD pipelines, and security hardening. I’ve led platform engineering efforts in fast-paced environments, delivering scalable, secure, and reliable infrastructure for production systems. My roles have spanned from System/Network Administrator to Senior Platform Engineer, giving me a full-stack view of system reliability, performance, and automation at scale. I specialize in: Infrastructure as Code (Terraform, Ansible) Kubernetes (GKE, EKS, on-prem clusters) and Hold a active certification KCNA, KCSA, CKA, CKAD and CKS. CI/CD setup (Jenkins, GitLab CI, GitHub Actions) Monitoring/Logging (Prometheus, Grafana, ELK) Cloud Platforms (AWS, GCP, Azure) Security best practices and DevSecOps Bash & Python scripting Let’s work together if you need a reliable, security-minded engineer who can deliver production-grade infrastructure and help scale your DevOps maturity.

Hello! 👋 I am a seasoned Linux System Administrator and Engineer with over three years of experience, specializing in virtualization, containerization, and server optimization. As a Red Hat Certified Professional with certifications like RHCSA, RHCE, and various Red Hat specializations, I have a proven track record of managing data centers and executing automation solutions effectively. My core expertise extends to optimizing server performance and ensuring high availability in complex environments. Technical Proficiencies: • Virtualization and Cloud Technologies: VMware, KVM, Proxmox, OpenStack, Nutanix • Containerization: Docker, Podman • Server Management: Zimbra, Bind DNS, Apache, Nginx, OpenVPN, VSFTPD, HAProxy, Mattermost, Rocket Chat • Automation and CI/CD: Ansible, Jenkins • Monitoring and Logging: Zabbix, PRTG, Nagios, Grafana, Prometheus • Storage Solutions: NFS, iSCSI, OpenMediaVault • Version Control Systems: Git, GitHub, GitLab • Database Management: MySQL, PostgreSQL, MariaDB • Scripting and Programming: Bash, Python Professional Certifications: • Red Hat Certified Engineer (RHCE) • Red Hat Certified System Administrator (RHCSA) • Red Hat Certified Specialist in Containers • Red Hat Certified Specialist in Linux Diagnostics and Troubleshooting • Red Hat Certified Specialist in Services Management, and Automation I am passionate about technology and continually strive to enhance my skills and knowledge. Thank you for considering my profile. I look forward to contributing to your projects with my expertise. Have a great day!

23+ years in Linux/Windows administration, DevOps, and cloud infrastructure. I build, secure, and scale production systems 24/7 — for MSP clients and direct engagements across industries. If your server is down, your deployment is failing, or you need infrastructure built right the first time — I'm the engineer you call. ━━ SERVER & SYSTEMS ━━ Linux (CentOS, Debian, Ubuntu, Amazon Linux, Rocky Linux) and Windows Server (2012–2025). Active Directory, Group Policy, Intune, hybrid identity. Nginx, Apache, Sendmail, Qmail, Postfix, Exim — MTA setup, Dovecot, SpamAssassin, OpenDKIM, SPF/DKIM/DMARC. Veeam, Acronis, cloud-native DR. Hypervisors: KVM, VMware ESXi, Hyper-V, Proxmox VE — HA clusters, live migration, Ceph/ZFS, Proxmox Backup Server. Redis, Varnish. QNAP NAS — storage management, Plex Media Server deployment, VPN tunnel integration. WHM/cPanel, Plesk, Virtualmin, CloudPanel, CyberPanel. ━━ CLOUD INFRASTRUCTURE ━━ AWS: EC2, ECS, EKS, RDS, S3, Route 53, IAM, VPC, CloudWatch, Lambda, API Gateway, Elastic Disaster Recovery. GCP: Cloud Run, Cloud Build, Firestore, GKE, IAM, VPC, Pub/Sub, Cloud Storage, Secret Manager, Cloud Monitoring. Cloudflare (WAF, Workers, Zero Trust, CDN). DigitalOcean, Hetzner, Vultr. MinIO: S3-compatible object storage on bare metal, VMs, Kubernetes — distributed mode, SSE-S3/KMS, lifecycle policies, drop-in S3 for backups and MLOps. Railway: Full-stack PaaS — GitHub/Docker auto-build, managed DBs (PostgreSQL, MySQL, Redis), private networking, env variables, cron workers, auto-scaling. ━━ SECRETS MANAGEMENT ━━ HashiCorp Vault: Dynamic secrets for AWS IAM, databases, cloud providers — TTL-bound credentials, auto-revoke. PKI for internal CA and on-demand TLS. Vault Secrets Operator for Kubernetes (etcd-free pod injection). Raft HA, RBAC, audit logging, Shamir unseal. Transit engine for encryption-as-a-service. CI/CD integration to eliminate hardcoded credentials. ━━ DEVOPS & CI/CD ━━ Docker, Kubernetes (EKS + self-managed: kubeadm, k3s, RKE2), Helm, Kamal. GitHub Actions, GitLab CI, Bitbucket Pipelines. Terraform, Ansible. ArgoCD, Flux (GitOps). Prometheus, Grafana, Datadog. Traefik: Cloud-native ingress — auto TLS, Docker/K8s service discovery, ForwardAuth, rate limiting, canary routing. Caddy: Zero-config-TLS reverse proxy — automatic HTTPS, on-demand certs. Preferred for self-hosted stacks. ━━ NETWORKING & SECURITY ━━ WireGuard, OpenVPN (MFA/ZTNA), IPSec/Libreswan, Xray/REALITY. Tailscale/Headscale — self-hosted mesh VPN, VPS tunnel setup, ACL policies, subnet routing. MikroTik, Juniper, SonicWall, Fortinet (FortiGate, FortiManager, FortiAnalyzer). pfSense, OPNsense. BGP, OSPF. Auth0, OAuth2, OIDC, Duo Security. LDAP/RADIUS, 802.1x, NPS/AD CS/Intune. ━━ DEVELOPMENT & AUTOMATION ━━ Python: FastAPI, Flask, Django, RESTful APIs, OpenAI API, ETL pipelines (Airbyte), orchestration (Airflow, n8n), data processing (pandas), Retool internal tools. Clean, documented, production-ready code. ━━ CONTAINERIZATION & DEPLOYMENT ━━ Docker Compose, Kubernetes manifests, Helm. Portainer, Coolify, Elestio, Traefik, Caddy. MinIO (K8s Operator/Tenant). Nextcloud, n8n, self-hosted app deployment. Vercel, Railway, Netlify, Replit. ━━ MSP & VOIP ━━ Duo Security, SpamTitan, ScreenConnect, ESET, Acronis. M365 multi-tenant administration. Asterisk and Vicidial (AWS + on-prem) — SIP trunks, IVR, call center setup, NetSIP integration. ━━ LEGACY & EARLY CAREER ━━ Foundational background in Windows desktop application development (VB, C#, Access) and web development (Core PHP, Laravel). ━━ WHAT CLIENTS HIRE ME FOR ━━ ► Emergency triage: servers down, services failing, breaches in progress ► Greenfield AWS/cloud environments built to security and compliance best practices ► CI/CD pipelines rebuilt to work reliably — no more failed deployments at 2am ► Self-hosted stacks that cut cloud bills without cutting uptime ► Kubernetes from scratch: EKS, k3s, RKE2 — setup, Helm, GitOps, day-2 operations ► HashiCorp Vault rollouts — eliminate hardcoded credentials across all pipelines ► Proxmox VE clusters: HA, live migration, Ceph storage, Proxmox Backup Server ► Network redesigns: Zero Trust, WireGuard mesh, BGP multi-homed, FortiGate, pfSense ► Ongoing managed infrastructure support and 24/7 incident response ► GCP solution design & delivery — Cloud Run, microservices, IAM, developer onboarding/offboarding ► Infrastructure, Security & Application Audits — server, network, database, cloud, and web stack ━━ INDUSTRIES SERVED ━━ SaaS · Fintech · Healthcare · E-commerce · Legal · Real Estate · Media · Education · Government · Telecoms · Startups · Enterprise. Single-server MVPs to multi-region, multi-account production environments. ━━ COMMUNICATION & PROCESS ━━ I don't disappear after the kickoff call. Clear updates at every stage, thorough documentation, and a proper handover on every engagement. Timezone-flexible. Slack, Teams, WhatsApp, Zoom, or Webex. If the work matters, it gets done right.

With over a decade immersed in System Engineering and DevOps, my professional journey has been marked by constant dynamism. I've dedicated myself to mastering new tools and technologies, refining my debugging and troubleshooting prowess to an expert level. Kubernetes, Docker, Packer, and Jenkins aren't just entries on my resume; I've truly mastered them. Furthermore, I've adeptly deployed these tools across diverse cloud platforms like AWS, Azure, and Digital Ocean. What propels me forward is an insatiable hunger for knowledge, a drive to explore fresh tools, and delve deeper into emerging technical stacks. While I may not perfectly align with the role on paper, rest assured, if given the opportunity, I'll pursue perfection in every facet of my work. Additionally, I've contributed to significant projects such as SIEM with the MERN stack and ML endeavors utilizing React, Python, PostgreSQL, and Keycloak. My expertise extends to infrastructure as code tools like Terraform and Ansible, rounding out my skill set for comprehensive project management.

Fortinet Certified Solution Specialist (FCSS) with hands-on troubleshooting skills in a broad range of Fortinet products such as FortiGate, FortiSASE, FortiClient EMS, FortiSwitch, FortiAP, FortiAnalyzer and FortiManager, etc. I've worked at Fortinet Master Distributor. Currently, working as Network Security Engineer. My day-to-day role is to provide technical ticket TAC break & fix support to the Fortinet customers. Provide administrative support to security concern customers like banks by aligning with the industry best practices and compliance requirements, such as - Zero Trust Network Access (ZTNA) Orchestration, - Center for Internet Security (CIS) Benchmarks, - Secure LAN and SD-WAN Orchestration, - Network Micro-segmentation, - Vulnerability & Patch Management, - Centralized quarantine management, - Rogue Wireless AP suppression, - Host and Application-based segmentation, - ZTA (Zero Trust Access) and Endpoint protection etc.