EXPERT
Servere Linux (Debian-first)
Servere Linux care merg ani de zile fara sa le atingi. Debian Server ca standard, hardening complet, monitoring 24/7, backup automat. Tu te concentrezi pe business.
Debian (preferat), Ubuntu Server, RHEL, Rocky, Alma
iptables / nftables ruleset avansat
OpenVPN server + client, IPsec, WireGuard
GeoIP filtering, IP reputation lists, CrowdSec
Fail2ban, port knocking, hardening CIS, Lynis
Ansible playbooks, Bash/Python automation
HA cluster (Pacemaker, Corosync, DRBD)
Kernel tuning, performance optimization
LVM, RAID software, ZFS on Linux
systemd services, journald, log shipping
EXPERT
Firewall & Network Security
Securizam perimetrul retelei tale cu Fortinet enterprise sau solutii open-source. 20+ firewall-uri in productie, zero breach in 5 ani.
FortiGate (toate seriile), FortiAnalyzer, FortiManager
OpenVPN, IPsec, WireGuard, SSL VPN site-to-site
Linux iptables & nftables ruleset avansat
GeoIP filtering pe FortiGate + Linux + nginx
IP reputation lists (CrowdSec, AbuseIPDB, Spamhaus)
Fail2ban, port knocking, anti-DDoS basic
IDS/IPS Suricata/Snort, web filtering, DNS filtering
SD-WAN, multi-WAN failover, traffic shaping QoS
pfSense / OPNsense pe appliance custom
FortiSwitch, FortiAP integrare cu FortiGate
EXPERT
Virtualizare VMware vCenter
Clustere VMware vCenter cu HA real, vSAN hyperconverged, NSX-T microsegmentation. Migrari post-Broadcom catre Proxmox cu economii 60-90%.
vSphere 7/8, vCenter design + deploy multi-site
HA + DRS + vMotion + Storage vMotion
Migrari P2V, V2V, cross-version, cross-vendor
vSAN (hyperconverged), NFS, iSCSI, Fibre Channel
NSX-T microsegmentation, distributed firewall
Site Recovery Manager (SRM) DR orchestration
vSphere Lifecycle Manager (vLCM), Update Manager
Backup Veeam B&R + replicare cross-site
Horizon VDI basic, vRealize Operations
Capacity planning, performance tuning, upgrade zero-downtime
EXPERT
Virtualizare Hyper-V
Hyper-V Failover Cluster sau Storage Spaces Direct hyperconverged. Migrari P2V curate, replicare cross-site, Veeam integration nativa.
Hyper-V Server (standalone si Core)
Failover Cluster Manager pentru HA
Storage Spaces Direct (S2D) hyperconverged
Live Migration, Quick Migration, Shared Nothing
Hyper-V Replica cross-site DR
Veeam B&R pentru Hyper-V
Migrari ESXi ↔ Hyper-V bidirectional
PowerShell DSC automation pe Windows
SCVMM (System Center Virtual Machine Manager)
Nested virtualization, GPU passthrough
EXPERT
Virtualizare Proxmox VE
Proxmox VE 8.x cluster cu Ceph: aceeasi functionalitate ca VMware, fara licente scumpe. Migrare etapizata din VMware fara downtime extins.
Proxmox VE 8.x cluster multi-node
Ceph storage hyperconverged distribuit
ZFS local cu replicare async
HA Manager cu fencing, watchdog
LXC containere + KVM VMs in acelasi cluster
Live migration, snapshot, backup PBS
Proxmox Backup Server (PBS) cu deduplication
Migrare ESXi → Proxmox cu OVF Tool
API REST + Ansible/Terraform integration
Cost: zero licenta — Community Edition gratuit, Enterprise Subscription optional
EXPERT
Kubernetes & microservicii
Cluster K8s production-grade: self-hosted sau managed (EKS/AKS/GKE). GitOps cu ArgoCD, secrets in Vault, observability completa, RBAC strict.
Cluster K8s self-hosted (kubeadm, RKE2, k3s pentru edge)
Managed Kubernetes: EKS, AKS, GKE setup si migrare
Ingress controllers: Nginx, Traefik, HAProxy
Service mesh: Istio, Linkerd pentru observability mTLS
GitOps cu ArgoCD / Flux pentru CD automat
Helm charts custom pentru aplicatiile clientului
Cert-manager pentru SSL automat (Let's Encrypt)
External Secrets Operator (Vault, AWS SM)
Velero backup + restore cross-cluster
RBAC strict, NetworkPolicy, Pod Security Standards
EXPERT
Docker & container deployment
Container-izare aplicatii + deployment Docker Compose / Swarm pentru proiecte care nu cer K8s complet.
Dockerizare aplicatii legacy (PHP, .NET, Java, Python)
Multi-stage builds optimizate pentru dimensiune minima
Docker Compose stack-uri pentru dev/staging/prod
Docker Swarm pentru orchestrare simpla (3-10 noduri)
Private container registry (Harbor, Nexus, Gitea)
Image scanning vulnerabilitati (Trivy, Clair)
Logging centralizat (Fluentd, Loki driver)
Monitoring container metrics (cAdvisor, Prometheus)
CI/CD pipeline (GitLab CI, Jenkins, GitHub Actions)
Backup volumes Docker + restore strategy
EXPERT
Mikrotik
Mikrotik RouterOS de la SOHO la carrier-grade: BGP, OSPF, MPLS, hotspot RADIUS, scripting automatizat. CHR Cloud Hosted Router pe ESXi/Hyper-V.
Routere RB1100/CCR, switch-uri CRS
CHR (Cloud Hosted Router) pe ESXi/Hyper-V
BGP, OSPF, MPLS, VRF, VPLS
QoS, queue trees, traffic shaping per IP
Hotspot, captive portal, RADIUS, User Manager
Scripting RouterOS pentru automatizare
WireGuard, IPsec, OpenVPN tunnels
EoIP, GRE, L2TP/IPsec tunnels
Bonding, bridging cu STP/RSTP
Backup automat + restore disaster scenarios
EXPERT
Networking
Switching multi-vendor (Cisco, Dell, Ubiquiti, HPE Aruba) + WiFi enterprise 6/6E. Site survey predictiv, RADIUS 802.1X, monitoring SNMP/NetFlow.
Switch-uri Cisco Catalyst, Nexus (configurare CLI)
Switch-uri Dell PowerSwitch / OS10 + Force10 legacy
Switch-uri Ubiquiti UniFi PoE (controller self-hosted)
Switch-uri HPE Aruba, Juniper EX (basic)
VLAN 802.1Q, trunking, LAG/LACP, MSTP/RSTP
Routing layer 3, OSPF, static, policy-based routing
Wireless Ubiquiti UniFi AP WiFi 5/6/6E in/outdoor
Site survey + heatmap predictiv, RADIUS 802.1X
Network monitoring SNMP, NetFlow, sFlow
Documentatie retea, IPAM (NetBox, phpIPAM), diagrame
EXPERT
Web · Mail · Proxy
Web hosting + mail server + reverse proxy self-hosted: control complet, zero vendor lock-in, GDPR-compliant, cost predictibil. Fara surprize la facturare.
Nginx + Apache + PHP-FPM 7.4/8.x multi-version
MySQL / MariaDB / PostgreSQL backends
HAProxy L4/L7 load balancer cu keepalived HA
Nginx reverse proxy + WebSocket + WAF ModSecurity
Varnish cache + Traefik pentru containere
Let's Encrypt SSL automat (Certbot, acme.sh)
ACL IP + GeoIP filtering + rate limiting + fail2ban
Postfix MTA + Dovecot IMAP cu virtual mailboxes
Rspamd + ClamAV + DKIM / SPF / DMARC / MTA-STS
Migrari Exchange/Zimbra/cPanel + Roundcube/SOGo webmail
EXPERT
Backup & Disaster Recovery
Backup care functioneaza la restore. Strategie 3-2-1-1-0: immutable backups ransomware-proof, test restore lunar, RTO/RPO documentate per aplicatie.
Veeam B&R Enterprise (VMware + Hyper-V)
Proxmox Backup Server cu deduplication
Replicare cross-site via IPsec/WireGuard
Bacula / BorgBackup / Restic pe Linux nativ
Test restore lunar automatizat
RTO/RPO documentate per aplicatie
Runbook DR + exercitii de simulare trimestriale
Immutable backups cu hardened repository
Object storage S3/MinIO ca tier secundar
Backup baze de date (PostgreSQL, MySQL, MSSQL, MongoDB)
EXPERT
Monitorizare infrastructura & SOC
Stack complet de monitoring infrastructura: Nagios, Check_MK, Zabbix, Grafana, Prometheus, Loki. Alerting calibrat — zero spam, zero fals pozitive.
Nagios Core / XI pentru infrastructura clasica
Check_MK Raw + Tribe29 enterprise
Zabbix 7.x cu templates custom per platforma
Grafana dashboards + Prometheus exporters
Loki / Graylog / ELK pentru log aggregation
SNMP polling + traps pe device-uri retea
Synthetic checks (HTTP, TCP, DNS, latency)
Alerting Telegram, Slack, email, PagerDuty
Tura de garda cu matrice de escaladare
SOC 24/7, incident response < 15 min
EXPERT
IDS/IPS & NetFlow monitoring
Detectam atacurile inainte sa faca rau. Suricata + Snort inline IPS, Wazuh SIEM, CrowdSec auto-blocking, capture pcap pentru forensic.
Suricata IDS/IPS in mod inline sau IDS pasiv
Snort 3 cu reguli SO + Talos community
Emerging Threats + custom rules per client
NetFlow v9 / IPFIX / sFlow collection & analysis
nfdump / ntopng pentru top talkers, anomalii
Zeek (Bro) pentru protocol analysis avansat
Wazuh SIEM corelare alerte IDS cu host events
CrowdSec community blocklist automatic update
Dashboard Grafana cu alerte critice in timp real
Forensic capture pcap pentru investigatii incident
EXPERT
Software la comanda
Aplicatii integrate direct in infrastructura ta: dashboard BI, integrare ERP, chatbot AI, automatizari ETL. Cod clean, documentat, predat complet.
Conectare la baze de date
Integrari API REST / SOAP / GraphQL + webhook
Rapoarte Excel custom (xlsx, formule, pivot)
Export PDF cu layout custom (markdown → PDF)
Export CSV / JSON pentru data sync
Dashboards BI (Streamlit, Grafana, Metabase)
Chatbot AI cu LLM (Claude, OpenAI)
ETL pipelines (Python, Airflow, cron)
Web apps multi-page (Streamlit, Flask, FastAPI)
Automatizari Python / Bash / PowerShell
EXPERT
Consultanta & Audit
Auditul nostru se uita la facturi si SLA-uri, nu doar la diagrame. Roadmap concret cu ROI calculat, prioritizat pe impactul real in business.
Audit tehnic complet (servere, retea, securitate)
Penetration testing intern (Linux + AD)
Right-sizing, cost optimization licente
Roadmap modernizare cu prioritizare ROI
Documentatie completa: diagrame, runbook, wiki
Training echipe interne IT
Compliance GDPR, ISO 27001, NIS2
Vendor selection & PoC neutral
Capacity planning multi-an + bugetare CAPEX
Migrare cloud hybrid (AWS, Azure, GCP basics)
EXPERT
Baze de date enterprise
DBA pentru PostgreSQL, MySQL, MSSQL, Oracle, MongoDB. Backup, replicare, performance tuning, security audit — pentru baze critice care nu cad.
PostgreSQL 17 cu replicare streaming + logical
MySQL / MariaDB Galera Cluster sau MHA
Microsoft SQL Server Always On Availability Groups
Oracle Database admin (RAC basic, Data Guard)
MongoDB Replica Set + Sharding
Redis HA cu Sentinel sau Cluster mode
Backup logic + physical (pgBackRest, Veeam SQL Aware)
Performance tuning: query optimization, indexing
Security audit: encryption at-rest, TLS, row-level security
Migrari cross-platform (ex: MSSQL → PostgreSQL)