SEBASTIAN PALENCSAR.
Senior Infrastructure Architect & Linux Specialist

Senior Infrastructure Architect
& Linux Specialist

As a Senior Infrastructure Architect, I reduce technical complexity through low-maintenance, highly available Linux infrastructure with clear operations, governance, and automation standards.

Linux Architecture RHEL / Ubuntu Proxmox VE Infrastructure as Code Docker
View Experience Get in touch
infrastructure.yml
1 const syed = {
2   role: 'Senior Infrastructure Architect',
3   basedIn: 'Malchow, Germany',
4   builds: [
5     'Resilient Linux platforms',
6     'Governance and operating models',
7     'Automation with minimal maintenance overhead',
8   ],
9   stack: [
10     'Linux: RHEL / Ubuntu',
11     'Virtualization: Proxmox VE',
12     'IaC: Bash / Ansible',
13     'Edge/Web: OpenResty / Nginx',
14   ],
15   principles: [
16     'Low-maintenance architecture over tool sprawl',
17     'Traceable data and system structures',
18     'Stability through documentation and standards',
19   ],
20   openTo: 'architecture, audits, IaC transformation'
21 }

Profile

Linux has been with me for more than 20 years.

I come from classic system administration, but I always think about infrastructure as a whole: data flows, maintainability, and as little unnecessary complexity as possible are my core priorities.

Instead of building large framework stacks before they are needed, I prefer lean and traceable solutions that run reliably and stay maintainable over the long term. For me, automation is not an end in itself, but a way to make systems simpler and more robust.

Alongside operating Linux infrastructures, I build my own platform solutions and tools when existing approaches do not fit the problem. My goal is always the same: build systems that work, are understood, and do not constantly demand attention.

Skills

Infrastructure & Platforms

Linux Architecture RHEL / Ubuntu Proxmox VE Virtualization OpenResty / Nginx High Availability

Engineering & Automation

Infrastructure as Code Bash Ansible Docker Monitoring Incident Governance

Governance & Documentation

Security & Compliance Risk Management BCP / Resilience Technical Writing Architecture Audits JSON / Markdown Models

Official Certifications with Exams

Focus on official certifications with final exams from recognized providers such as Canonical, Docker, and Microsoft (delivered via LinkedIn Learning). These credentials provide verifiable proof of acquired competencies through successfully passed exams.

Certified

Ubuntu Linux Professional

Canonical & LinkedIn Learning

June 2025 - Exam successfully completed

Ubuntu system administration Storage management & LVM Shell scripting & CLI
Proof available on request
Certified

Docker Foundations Professional

Docker Inc. & LinkedIn Learning

May 2025 - Exam successfully completed

Container management Docker Compose Best practices
Proof available on request
Certified

Penetration Testing Professional

Cybrary

December 2025 - Exam successfully completed

Penetration testing Vulnerability assessment Ethical hacking
Proof available on request
Certified

Network Automation Professional

Arista Networks

December 2025 - Exam successfully completed

Network automation Arista CloudVision Infrastructure as Code
Proof available on request

Projects

DNS64 / Admin Docs Logo

Senior Infrastructure Architect & Linux Specialist

DNS64 / Admin Docs Platform
September 2024 - Ongoing
Linux Proxmox VE RHEL / Ubuntu OpenResty / Nginx Ansible JSON / Markdown

Architected and operated low-maintenance Linux platforms focused on reliability and long-term maintainability. Built traceable operations and documentation structures for resilient infrastructure delivery.

Ferchau GmbH Logo

Systems Engineer (Security & Compliance)

Ferchau GmbH Freelance
April 2024 - August 2024
Security Governance Compliance BCP Resilience Engineering

Defined and established security and compliance standards for infrastructure environments. Designed architecture approaches for business continuity (BCP) and resilience strategies.

Slovak Telekom Logo

Linux Systems Engineer

Slovak Telekom Freelance
June 2023 - April 2024
Linux RHEL Incident Governance Operations Management

Ensured high availability and operations management for critical RHEL platforms. Established incident governance and lifecycle management to improve global system stability.

Independent Logo

Infrastructure Systems Auditor

Independent Audit
January 2011 - January 2017 / February 2017 - May 2023
Technical Writing Infrastructure Audits Open Source Cloud Infrastructure

Analyzed and documented complex infrastructure architectures for industry mandates. Produced deep-dive technical publications across infrastructure engineering, open source, and cloud infrastructure.

pixMedia UG Logo

IT Entrepreneur & Managing Director

pixMedia UG Leadership
September 2003 - December 2010
IT Operations Telecommunications Systems Integration Team Leadership

Built and led an IT systems company (Telekom/Vodafone partner) with up to 10 employees. Owned operations and rollout responsibilities for telecommunications infrastructure.

Infrastructure Stack

Architecture and operations profile of my hosting, monitoring, and DNS/TLS stacks with a clear focus on stable operations, controlled change, and reduced complexity.

Hosting

SSOT

Edge hosting without container overhead, fully managed via Ansible roles and templates.

Focus

  • OpenResty + PHP 8.4
  • Git Push Deploy

Outcomes

  • Drift-free configuration via a strict single-source-of-truth model.

Admin:Core

In-house

Custom, extremely lightweight Application Core with its own routing, server-side rendering and flat-file content model. Serves as the technical foundation for multiple production websites.

Focus

  • Custom PHP routing with Front-Controller and Controller classes
  • Flat-File architecture (Markdown + JSON frontmatter)

Outcomes

  • Very high performance and stability through deliberate complexity reduction

Monitoring

Observability

Dedicated monitoring stack with metrics, logs, and alerting separated from the edge runtime.

Focus

  • Prometheus + Alertmanager
  • Grafana Provisioning

Outcomes

  • Lower alert fatigue through differentiated probe models.

DNS & TLS

Control Plane

Hidden-primary DNS model with separated authoritative public secondaries and centralized ACME DNS-01 certificate automation.

Focus

  • Remote ACME-Push Deployment
  • Hidden Primary Model

Outcomes

  • Reduced public attack surface with read-only external DNS nodes.

Tradeoff

  • Central SSOT changes can affect multiple rollouts at once and therefore require strict review gates.
  • Separated domains (edge, monitoring, DNS/TLS) improve resilience but require clear runbooks and ownership.
  • Security-by-design reduces attack surface while increasing operational discipline for changes and diagnostics.
  • Admin:Core as a custom development increases dependency on one person and makes onboarding more difficult for other developers.

Deeper technical detail (runbooks, incident patterns, rollout contracts) available on request.

Open Source Projects & Tools

A selection of projects and tools I currently work on publicly. In addition to infrastructure automation and platform engineering, I also build practical Linux desktop applications.

Infrastructure & Automation

Active

NAS Automation

Automated setup and hardening of NAS systems across multiple Linux distributions (Ubuntu, Debian, Fedora, Arch, openSUSE). Emphasis on security, monitoring, Docker, and low-maintenance configuration.

#bash #ansible #automation #linux #security
Repository
Maintenance

Ansible LEMP WordPress

Complete Ansible automation for reproducible LEMP stacks including WordPress, Redis, SSL, multi-distro support, and enterprise-grade features.

#ansible #iac #wordpress #lemp #automation
Repository

Linux Tools & Desktop

Maintainer

Deskify

Lightweight native alternative to Nativefier built with Rust and Tauri. Turns web apps into standalone Linux desktop applications. Official maintainer in the Arch User Repository (AUR).

#rust #tauri #linux #aur #desktop
AUR Package Repository
Maintainer

BearWave

KDE-native internet radio application for Linux, built with Qt 6, QML and KDE Frameworks. Emphasis on clean Plasma integration, MPRIS, system tray support, and lightweight operation.

#c++ #qt #kde #plasma #linux #aur
AUR Package Repository

Contact & Legal Notice

Provider Information (Section 5 DDG)

Sebastian Palencsar

Senior Infrastructure Architect

Bahnhofstrasse 8

17213 Malchow

Contact

Email: hello@palencsar.pro. Contact form is available on this website.

Social Media

GitHub LinkedIn

Email Security

For email communication, I use Zoho Mail , hosted on EU servers in Amsterdam. The service provides high standards of data security and privacy with end-to-end transport encryption:

TLS transport encryption SPF sender protection DKIM signature DMARC policy

Trust & Transparency

This information is provided to meet legal provider identification requirements. For legal matters, please contact directly.

Get in Touch

If you need support with Linux platforms, infrastructure architecture, or governance topics, feel free to get in touch.

Required, 2-120 characters

Required, valid email address

Required, 3-180 characters

Required, 10-5000 characters

End-to-End Encryption (OpenPGP)

For confidential communication, you can encrypt emails using my public OpenPGP key.

Fingerprint

337E 2CCC E231 74EF 96B7 B8A5 AA1D 2F01 7080 0855

Download key Check on keyserver

Legal Notices

Copyright & Design

© 2026 Sebastian Palencsár. All rights reserved. This website is an online portfolio for my job search as a Linux administrator.

All content, works, website design, and graphical elements created by me are protected by German copyright law.

Reproduction or use of these elements without explicit permission of the author is not permitted.

Data Protection

This website is a pure online portfolio and does not collect personal data for analytics. No tracking tools are used.

No external CDN services are embedded and no behavioral profiling is performed.

For the contact form, a temporary PHP session may be used. PHPSESSID This is used solely for abuse prevention and is not stored permanently. The web server does not process user data. access_log off Error logs are created only in case of critical system errors, without permanently storing IP addresses.

Protecting your personal data is a top priority. Career-related inquiries are handled confidentially.

Disclaimer

The content of these pages has been created with great care. However, no guarantee can be given for correctness, completeness, and timeliness.

Operators of external websites are solely responsible for their content.

Used Frameworks & Tools

This website uses the following frameworks and libraries among others:

TailwindCSS FontAwesome JavaScript Webfonts

These tools are used according to their respective license terms.

External Links

This website contains links to external third-party websites. Such links are marked accordingly.

I have no influence over the content of linked pages. Responsibility for linked content always lies with the respective provider or operator.