"If it isn't monitored, it isn't in production."

• Keeping enterprise infrastructure observable: servers, services, logs and security events
• Digging into incidents down to the root cause, not just the symptoms
• Turning manual support routine into scripts, bots and alerts
• Moving deeper into Linux administration, SIEM and observability

• Zabbix 7.4 (Oracle Linux + PostgreSQL)
• Graylog 7.1 (OpenSearch)
• Winlogbeat
• Grafana
• Prometheus & Alertmanager
• SNMP

• Windows Server
• Active Directory
• AD Certificate Services
• Microsoft Exchange 2016
• Oracle Linux
• Debian
• FreePBX / Asterisk

• PowerShell
• Bash
• Python
• JavaScript (Node.js)

• MikroTik (RouterOS 6 / 7)
• Cisco
• LTE routers
• TCP/IP fundamentals

Experienced in security monitoring and access management:

• Active Directory security event detection (Event ID 4625, 4740)
• Account lockout and password expiry alerting
• Kaspersky Security Center
• SSL/TLS and internal PKI (AD CS)
• SSH key-based authentication (ed25519)
• SELinux
• Remote access rollout (UltraVNC via KSC)

I'm interested in blue team work and SIEM, and practice pentesting in my own home lab on Kali Linux.

• Docker & Docker Compose
• Linux Server Administration
• Nginx Configuration
• Configuration as Code (provisioning)
• VPS Deployment
• Git
• Telegram-based alerting

• Performed sequential Zabbix (7.4.11 → 7.4.13) and Graylog (7.0.3 → 7.1.6) upgrades in production
• Built an automated patch updater for Graylog (service stop, update, datanode readiness wait, certificate reimport, cleanup)
• Investigated recurring nightly server hangs and traced the root cause to the hypervisor level
• Wrote CPU / memory watchdog scripts on CIM when standard perfmon counters were broken
• Ran a hardware audit of ~380 workstations with PowerShell data collection and Excel reporting
• Deployed remote access software to user workstations via Kaspersky Security Center
• Built Telegram alert routing for Zabbix and Graylog with topic-based threads
• Migrated MikroTik configurations from RouterOS 6 to 7

• zabbix-telegram-router - Zabbix webhook that routes alerts to Telegram topics based on tags, with a default fallback topic
• graylog-windows-security-detections - catalog of Windows Security detections in Graylog with Telegram notifications
• monitoring-stand - Prometheus + Grafana + Alertmanager stand in Docker (Windows + Linux VPS) with Telegram alerts
• support-toolkit - PowerShell/WinForms GUI with 12 remote workstation admin operations (WinRM) and an audit log
• master-hr-predictive-analytics - HR-Agent: burnout risk prediction from ITSM data (Next.js, TypeScript, LLM, PDF reports). Master's thesis project

• Master's degree, Esil University - thesis on intelligent predictive HR management agents using ITSM data
• Bachelor's degree in IT and Data Protection
• Cisco CCNA: Introduction to Networks

• Infrastructure Monitoring
• SIEM & Log Management
• Blue Team / Security Detections
• System Administration
• Automation
• Networking

• Linux Administration
• Docker & Containerized Deployments
• Prometheus Stack
• SIEM & Observability
• Networking Fundamentals

💬 Telegram https://t.me/mrklv_vn

💻 GitHub https://github.com/mrklv01

Always open to interesting infrastructure challenges, monitoring and SIEM projects, and opportunities to grow as an engineer.