drwxr-xr-x owen network
multi-site-vpn-mesh/
Site-to-site VPN mesh across 6 offices with automated failover routing.
WireGuardBGP
shams@portfolio:~$ whoami
Kasra Shams
Linux Systems Engineer & Network Architect
shams@portfolio:~$ cat role.txt
I design, harden, and automate infrastructure — from BGP routing tables to Kubernetes clusters — so systems stay online, secure, and boring in the best way.
about
cat about.md
a short bio
I'm a systems and network engineer who's spent the last seven years keeping production infrastructure alive — Linux servers, firewalls, routers, and the automation glue that holds it all together.
I believe in infrastructure-as-code, boring reliable networks, and writing documentation people actually read at 3am during an incident.
experience
7+ years
based_in
Remote / Worldwide
certified
RHCE, CCNP
status
open_to_work: true
system info
osPortfolioOS 24.04 LTS
hostKasra Shams
kernel6.8.0-network
uptime7 years
shellbash 5.2
languagesEN (native), KO (fluent)
packages38 (skills)
interestshomelab, BGP, coffee, synths
skills
pacman -Q | grep skills
systems
linux (rhel/debian)9.x
bash / python5.2 / 3.12
docker / kubernetesstable
ansible / terraformlatest
networking
bgp / ospf routingcore
cisco ios / nx-os17.x
iptables / nftablesfirewall
vpn / vlan designstable
monitoring & cloud
prometheus / grafanalatest
zabbix / nagiosstable
aws / azure networkingcore
git / ci-cddaily
0
servers_managed
0
uptime_percent
0
years_in_prod
0
cron_coffees
experience
journalctl -u career.service
network-lead.service: Senior Network & Systems Engineer @ Meridian Cloud
Redesigned core routing for a multi-region cloud network, cut incident MTTR by 40% with automated runbooks.
sysadmin.service: Linux Systems Administrator @ Ferrowatt Data
Migrated 200+ bare-metal servers to a containerized platform; built Ansible playbooks for zero-touch provisioning.
noc-tech.service: NOC Technician @ Uplink ISP
Monitored regional network health, resolved routing incidents, and maintained core switch/router configs.
projects
ls -la ~/projects
-rwxr-xr-x owen automation
zero-touch-provision.sh
Ansible + PXE pipeline that provisions a bare-metal server in under 8 minutes.
AnsiblePXE
drwxr-xr-x owen monitoring
fleet-observability/
Prometheus + Grafana stack monitoring 150+ nodes with alert routing to Slack/PagerDuty.
PrometheusGrafana
-rw-r--r-- owen network
nftables-hardening.conf
Baseline firewall ruleset hardening edge routers against common scanning/abuse patterns.
nftablesLinux
drwxr-xr-x owen automation
terraform-network-modules/
Reusable Terraform modules for standing up VPCs, subnets, and peering across cloud regions.
TerraformAWS
-rwxr-xr-x owen monitoring
incident-autoresponder/
Script that triages common alert types automatically before paging an on-call human.
PythonZabbix API
services
man services
Network Design
Topology design, routing, and VPN architecture built for reliability and growth.
Linux Administration
Server hardening, performance tuning, and patch management done right.
Infrastructure Automation
Ansible, Terraform, and CI/CD pipelines that turn manual ops into repeatable code.
Security Hardening
Firewall policy, access control, and network segmentation audits.
Monitoring & Alerting
Observability stacks that catch problems before your customers do.
On-call Support
Retainer-based incident response and infrastructure maintenance.
testimonials
cat reviews.log
"Kasra redesigned our entire routing setup and we haven't had a network-related outage since. Rock solid."
Dana Whitfield
CTO, Meridian Cloud
"The Ansible playbooks Kasra wrote cut our server provisioning time from days to minutes. Genuinely transformative."
Marcus Ibe
VP Engineering, Ferrowatt Data
"Calm under pressure during incidents, and the documentation he leaves behind is the best I've seen from any contractor."
Sofia Bianchi
Head of IT, Uplink ISP
contact
./contact.sh --new-message
shams@portfolio.dev
location
Remote / Worldwide
response_time
< 24 hours