Global navigationCommand index
ESC TO CLOSE

Jump directly to the evidence you need, or close this index and explore the infrastructure world freely.

AVAILABLE / REMOTE / GMT+7
DevOps skills matrix

Production skills, operating outcomes

A practical map of the systems I can design, deploy, monitor, secure, automate, and hand over with clear operating notes.

08capability domains CI/CDrelease paths IaCrepeatable systems OPSrunbook mindset
Capability map Built for production operations

Each capability below connects tools to actual deliverables: infrastructure that runs, alerts that help, backups that can restore, and automations that reduce manual work.

01
Infrastructure foundation

Cloud & AWS

AWSEC2VPCIAMS3RDSRoute 53CloudFrontCloudWatchWAF
  • Design secure cloud foundations for small and growing systems.
  • Set up DNS, SSL, storage, access, and deployment paths with clear ownership.
  • Document operating steps so teams can maintain the system after handover.
02
Runtime operations

Linux & Containers

LinuxDockerDocker ComposeLXC/LXDNginxReverse proxysystemd
  • Deploy and maintain production Linux workloads with predictable service behavior.
  • Containerize apps and internal tools without overcomplicating the runtime.
  • Investigate resource, process, network, SSL, and service-level issues.
03
Deployment reliability

CI/CD & Release

GitHub ActionsGitLab CIJenkinsArtifact registryEnvironment gatesRollback runbook
  • Build release flows that are repeatable, inspectable, and easier to roll back.
  • Connect source, build, test, immutable artifact, deployment, and post-deploy validation into practical pipelines.
  • Keep release notes and handover instructions clear for operations teams.
04
Operational visibility

Observability & Incident Response

ZabbixUptime KumaCloudWatchMetricsStructured logsTracing conceptsAlert routing
  • Collect useful metrics and logs, add traces where the workload supports them, and route actionable alerts.
  • Create incident notes that explain symptoms, impact, cause, and next action.
  • Reduce blind spots around DNS, SSL, mail, website, and infrastructure state.
05
Restore confidence

Backup & Disaster Recovery

KopiaS3 / WasabiLXD snapshotsIndependent backupsRestore testingRTO / RPO
  • Use snapshots as short-lived restore points, with independent backups, retention, cleanup, and status reporting.
  • Align backup workflows with practical RTO/RPO expectations.
  • Test restores and document recovery runbooks so a successful backup job is not mistaken for recoverability.
06
Access and exposure control

Security & Edge

CloudflareWAFIAMVPNpfSenseSSH hardeningSPFDKIMDMARC
  • Harden common entry points across DNS, edge, server access, and identity.
  • Apply least-privilege thinking to infrastructure and operations workflows.
  • Configure SPF, DKIM, and DMARC for sender authentication and policy visibility without presenting them as a guarantee of inbox delivery.
07
Controlled agent operations

Automation & AI Ops

n8nOpenClawHermes AgentMCPWebhooksAI agentsRAGQdrantDocument parsing
  • Connect apps, alerts, documents, and business events into reliable workflows.
  • Design self-hosted agent runtimes with scoped tools, memory, schedules, and human review where risk is higher.
  • Turn repeated support and admin tasks into maintainable, observable automation.
08
Operational integration

Business Systems

OdooWordPressGoogle WorkspaceSharePointMonday.comPDF/OCRReports
  • Support business systems where infrastructure, documents, and workflows meet.
  • Integrate files, APIs, notifications, and approval steps across daily operations.
  • Keep client-facing systems stable, documented, and easier to troubleshoot.