The person behind the infrastructure
About me
I enjoy systems that are not merely technically correct, but understandable, operable and secure when something goes wrong. My work spans architecture, automation and real operations — from the first design through migration to incident response and the improvement that follows.
I bring more than a decade of enterprise infrastructure experience across physical servers, Linux and Windows Server, virtualisation, private cloud and public cloud. Today I connect Azure, Kubernetes, Terraform and GitOps with on-prem operations, network security and solutions teams can maintain for the long term.
On-premises experience
From physical servers to private cloud
At Creative Dock I also contribute to running our own infrastructure: physical and virtual Linux servers, Puppet-managed configuration, an OpenNebula private cloud, Ceph distributed storage, Zabbix monitoring and the surrounding network services. The work spans capacity planning, hardware lifecycle, availability, patching and incident response — responsibility for the operating system as a whole, not just one layer.
This includes specialised AI machines with large memory configurations and multiple GPUs. Their operation connects hardware design, power and cooling with networking, storage, drivers, containers, model runtimes and observability. It is a less visible but essential part of dependable AI workloads.
Systems administration foundation
Windows, Linux and real data-centre operations
From 2015 to 2019 I worked as an IT System Administrator at Copy General. I managed physical and cloud servers across Windows and Linux, Active Directory, SQL and domain services, VMware, network equipment, application environments, endpoints and users. That background still makes me assess architecture by how it will actually be operated, repaired and handed over — whether it runs in a private server room or in the cloud.
Current focus
Modernising critical digital platforms
My recent work includes the modernisation of a retail and loyalty platform serving more than 3.5 million users: Azure and AKS infrastructure, Terraform modules, Helm and Argo CD delivery, secure routing through Envoy Gateway, Key Vault integration, databases and observability.
A new environment is only part of the job. Safe migration from the legacy platform, cross-team dependencies, operational readiness, rollback and executable documentation matter just as much.
In parallel, I am preparing the takeover of another multi-environment digital platform from supplier infrastructure into the client's environment. The scope includes target operations, containers and data, network and TLS cutover, and transferring ownership without creating a new dependency on the original supplier.
Architecture
Cloud, physical servers, virtualisation, networks, storage, Kubernetes and security as one operable system.
Automation
Terraform, Helm, GitOps and CI/CD that reduce manual work and change risk.
Security
Zero Trust, secrets management, segmentation and controls designed in from day one.
Operations
Diagnostics, observability, runbooks and migrations with a credible path back.
How I work
Technology is a means, not the outcome
I begin with what must work for users and the business, then choose the tools. I am comfortable moving between strategic architecture and very concrete investigation in a log, manifest, network rule or delivery pipeline.
I value small verifiable changes, automated checks and documentation useful to people who were not present for the original design. Knowledge transfer and the team's ability to evolve a solution are part of good infrastructure.
I use AI agents as another engineering tool. OpenAI Codex is currently my primary environment, with earlier experience using Claude and GitHub Copilot. They support research, implementation, testing and documentation, while architectural decisions, risk ownership and final verification remain my responsibility.
Personal lab
Home Assistant, local AI and self-hosting
A year ago I replaced Homebridge with Home Assistant and now test the same principles on a smaller scale at home and at my cottage. Home Assistant connects lighting, heating, media and garden automation; MikroTik networking, reverse proxying and local services provide a secure self-hosted foundation. This website is one of those services.
It is a practical laboratory for automation without losing manual control, reducing cloud dependency and keeping a smart home understandable to everyone who lives in it.
I also use my gaming PC to test smaller local AI models, including the Qwen family. I am interested in what they can achieve on readily available hardware, where their limits appear, and when local inference makes sense for speed, cost or privacy.
My gaming PC runs Bazzite, while an iMac and MacBook are my preferred everyday work machines. I value the speed and openness of Linux alongside the security, integration and refinement of macOS; in enterprise settings, I also recognise where Windows and the broader Microsoft ecosystem are the most practical choice.
Beyond the terminal
Music, complex games and life outside the city
I play bass and sing in the Czech folk-rock band O.K.mžik. I also spend a fair amount of time in Path of Exile 2, drawn to its interconnected systems, experimentation and build design. Film, the theatre of Jára Cimrman and hands-on work at my cottage in Lisovice help me keep perspective beyond technology.
Contact
Working through a difficult infrastructure problem?
I am most interested in work at the intersection of cloud and on-prem architecture, automation, security and operational modernisation.