IT Infrastructure & Cloud – Liptov, Slovakia

Microsoft Azure, M365
& cybersecurity
for your business

Microsoft Azure, Microsoft 365, Defender, Sentinel management and IT process automation. AVD, Teams Direct Routing, Linux servers, Intune, Zabbix monitoring. IT expert for companies in Slovakia and Czech Republic – Liptovský Mikuláš.

View services → Free consultation
Microsoft
Azure & 365 management
Linux
Ubuntu, CentOS, Debian
VoIP
Teams Direct Routing
24/7
Monitoring & alerting
Services

What I solve for business clients

From cloud infrastructure management through process automation to security and monitoring – comprehensive custom IT solutions.

☁️
Microsoft Azure Management

Setting up and managing Azure tenants, optimizing and administering Azure environments. Virtual Machines, AKS, VNets, NSG, Entra ID, RBAC, policies and compliance. Multi-tenant solution architecture.

Entra ID VM / AKS VNet / NSG RBAC Cost management
📧
Microsoft 365 – complete management

Exchange Online (mail flow, transport rules, connectors, anti-spam, DKIM/DMARC), SharePoint Online (classic→modern migration, permissions), OneDrive, Teams (policies, Teams Room), Purview compliance and license management.

Exchange Online SharePoint / OneDrive Teams Purview Licensing
⚙️
Automation & Scripts

PowerShell, Bash, Python, JavaScript, C# and other languages for IT process automation. Ansible playbooks, scheduled tasks, CI/CD pipelines. Reduction of manual tasks and error rates.

PowerShell Python C# / .NET Bash Azure Functions
🖥️
Azure Virtual Desktop (AVD)

Design and implementation of AVD environments – host pools, scaling plans, FSLogix profiles, golden image management. Session monitoring via Function App with Managed Identity and Zabbix integration.

AVD Host Pools FSLogix Scaling Plans Function App
📞
VoIP & Teams Direct Routing

Teams Direct Routing implementation, SBC configuration, SIP trunk integration, call recording, dial plans and voice policies. TLS/SRTP, FQDN and certificates for production deployment.

Direct Routing SBC SIP / SRTP Teams Phone Dial Plans
🐧
Linux Server Administration

Ubuntu, Debian, CentOS, Rocky Linux, AlmaLinux, SUSE, openSUSE, RHEL, Oracle Linux – installation, hardening, service management (nginx, Apache, Postfix, Gunicorn). Docker, certificates, VPN, systemd, firewalld/iptables.

Ubuntu / Debian RHEL / Rocky / Alma SUSE / openSUSE nginx / Apache Docker
🔒
Security & Endpoint Management

Microsoft Defender stack (MDE, M365 Defender, Defender for Identity), Sentinel SIEM, Intune device compliance and config profiles for Windows and Android, Autopilot onboarding, 802.1X EAP-TLS with Cisco ISE. KQL threat hunting and incident response.

Defender for Endpoint Microsoft Sentinel Intune 802.1X EAP-TLS KQL
🏢
Windows Server & Hybrid Infra

Windows Server administration – Active Directory, DNS, DHCP, Remote Desktop Services (RDS), GPO design and troubleshooting. Hybrid infra: Azure AD Hybrid Join, Entra Connect Sync, on-prem AD ↔ cloud. Migrations and conflict resolution.

Active Directory RDS GPO Hybrid Join Entra Connect
📊
Monitoring & Alerting

Zabbix with custom templates and LLD discovery, LibreNMS for network devices, Smokeping for latency measurement, Grafana dashboards, Azure Monitor and Log Analytics. Proactive alerting, capacity planning and SLA reporting.

Zabbix Templates LibreNMS Grafana Smokeping Azure Monitor
🌐
Web Applications & Admin Portals

Development of Django/Flask/Node.js applications – admin dashboards, CRUD systems, REST API, OAuth2/SSO authentication, multi-tenant architecture. Inventory and device management portals, self-service tools, system integrations. Azure OpenAI, scraping, OCR.

Django / Flask REST API Admin portals OAuth2 / SSO Azure OpenAI
🗄️
SQL & Databases

SQL Server administration and migrations – RDS backend, backup and restore, query optimization, connection string management, auth configuration. Database integration into web applications and automation tools.

SQL Server DB migrations Backup / Restore Azure SQL
📜
Security Standards Implementation

Technical implementation of NIS2, CIS Controls v8, ISO 27001 and GDPR. Gap analysis, system hardening per CIS Benchmarks, SIEM setup, access control configuration and documentation for auditors. Zero Trust architecture per NIST SP 800-207.

NIS2 CIS Controls ISO 27001 GDPR Zero Trust
🐧
Open-Source solutions & customization

Deployment and configuration of open-source tools – Wazuh SIEM/XDR, Keycloak IAM, Proxmox virtualization, OPNsense firewall, Nextcloud, WireGuard VPN. Custom tailoring including custom rules, integrations and data migrations.

Wazuh Keycloak Proxmox OPNsense Nextcloud
🤝
IT Support, Management & Helpdesk

Long-term technical IT environment management based on SLA – monthly retainer, employee helpdesk, patch management, proactive monitoring. Incident response for security incidents and outages. Available remote and on-site.

SLA retainer Helpdesk L1/L2 Incident Response Remote / On-site Security review
Microsoft Azure

Complete Azure & M365 management

From setting up a new tenant and licensing through infrastructure, AVD virtualization and serverless applications to cost optimization and governance.

🏢 New Tenant Setup & Configuration

  • Microsoft 365 / Azure tenant registration from scratch
  • Adding and verifying custom domain (DNS TXT/MX/CNAME)
  • Global admin setup and break-glass emergency accounts
  • Hybrid identity – Entra Connect Sync, Password Hash Sync
  • Conditional Access policies from day one (MFA, compliant device)
  • Privileged Identity Management (PIM) for admin roles
  • Security defaults and security baseline initialization
  • Emergency access accounts and monitoring of their usage
  • DNS zones – MX, SPF, DKIM, DMARC, Autodiscover
  • Azure Subscriptions and Management Groups initialization
  • Tagging strategy and resource group hierarchy
  • Azure DevOps / GitHub connection and first pipeline setup

🪪 M365 & Azure Licensing

  • Selecting the right plan – Business Basic/Standard/Premium, E1/E3/E5
  • CSP (Cloud Solution Provider) purchase and subscription management
  • Bulk license assignment via groups (group-based licensing)
  • Audit of inactive users and unused licenses
  • License optimization – savings via downgrade / consolidation
  • Add-ons: Defender, Purview, EMS, Teams Phone, Audio Conferencing
  • Consumption monitoring, alerting when limits are reached

🖥️ AVD & Intune Endpoint Management

  • AVD host pool architecture – Pooled vs Personal, FSLogix profiles
  • Session Host VM sizing, scaling plans, golden image management
  • Intune – enrollment Windows, Android Enterprise, iOS/iPadOS
  • Autopilot – zero-touch deployment, retroactive onboarding
  • Compliance policies – conditions for Conditional Access
  • Config profiles – WiFi, VPN, restrictions, certificates
  • App deployment – required, available, Win32 apps
  • Dynamic device groups, hybrid vs cloud-only join
  • Troubleshooting – policy apply issues, device sync, enrollment errors

🏗️ Infrastructure & Compute

  • Virtual Machines – deploy, sizing, availability sets, scale sets
  • Azure Kubernetes Service (AKS) – deployment and management
  • Virtual Networks, Subnets, NSG, VNet peering, UDR
  • Azure Bastion, VPN Gateway, ExpressRoute
  • Load Balancer, Application Gateway, Azure Front Door
  • Azure Storage – Blob, Files, Table, Queue, lifecycle policies
  • Azure Backup & Site Recovery for DR scenarios

🔐 Entra ID & Identity

  • Entra ID – users, groups, roles, SSO, Conditional Access policies
  • Identity Protection – risky users, sign-in risk, automatic remediation
  • App registrations & Enterprise Apps – OAuth2, OIDC, SAML
  • Hybrid join / Azure AD Join, seamless SSO, PRT
  • RBAC – built-in roles, custom definitions, scope management
  • PIM – just-in-time privileged access, access reviews
  • External access – B2B guests, cross-tenant collaboration
  • Token lifetime, session policies, Continuous Access Evaluation
  • Azure Key Vault – secrets, keys, certificates, Managed Identity
  • Sign-in & audit logs – export, analysis, compliance

⚡ Function App & Logic App

  • Azure Functions – HTTP trigger, timer, Event Grid, Service Bus
  • Durable Functions for multi-step workflow orchestration
  • Logic Apps – low-code automation, 400+ connectors
  • M365, SharePoint, Teams notifications, Outlook integration
  • Managed Identity – passwordless access to Storage, Key Vault, Graph
  • Custom API connectors and webhook integrations
  • Monitoring via Application Insights and Log Analytics

📬 M365 & Communication Services

  • Exchange Online – mail flow, routing, connectors, transport rules
  • SharePoint Online – sites, permissions, classic→modern migration
  • OneDrive – sharing policies, sync, incidents
  • Teams Phone – Direct Routing, dial plans, voice policies, Teams Room
  • Compliance – DLP policies, eDiscovery, retention policies, Purview
  • Anti-spam, Safe Links, Safe Attachments (Defender for O365)
  • Service health monitoring, Message Center, Admin Center
  • Azure Email Communication Services – transactional API sending

🏛️ Management & Governance

  • Azure Policy – enforce tags, allowed regions, SKU restrictions
  • Management Groups and Subscription hierarchy
  • Azure Landing Zones – best-practice baseline architecture
  • Compliance standards – ISO 27001, GDPR, SOC 2 in Defender for Cloud
  • Resource locks for production environments
  • Regular Advisor review and implementation of recommendations
  • Azure DevOps Repos, Pipelines and access management

🤖 AI & Advanced Services

  • Azure OpenAI Service – GPT-4o, embeddings, fine-tuning
  • Cognitive Services – Computer Vision, Form Recognizer, OCR
  • Azure SQL / Cosmos DB – management and optimization
  • Azure Container Apps for microservices architectures
  • Event Hub and Service Bus for event-driven systems
  • API Management (APIM) – gateway, throttling, OAuth

💰 Cost Optimization & Resource Savings

  • Reserved Instances and Savings Plans for predictable workloads
  • Azure Hybrid Benefit – Windows Server and SQL Server licenses
  • Spot VMs for batch and dev/test workloads
  • Right-sizing VMs and storage tiers via Advisor
  • Auto-shutdown policies for dev/test environments
  • Storage lifecycle policies – Hot→Cool→Cold→Archive
  • Audit orphaned resources – unused disks, public IPs, NSGs
  • Autoscaling for compute and AVD host pools
  • Tagging strategy for cost allocation by project
  • Azure Cost Analysis dashboards and budget alerting
  • Spending limits and departmental subscription separation
  • Regular cost review and management reporting
Automation

IT process automation

I replace repetitive manual tasks with scripts and pipelines. Fewer errors, more time for real work.

01 / PowerShell
Microsoft 365 & Azure automation

Bulk operations on mailboxes, licenses, groups. Azure resource management via Az module. Reporting and data export to CSV/Excel. Purview compliance scripts.

Get-Mailbox -RecipientTypeDetails UserMailbox |
  Where-Object {$_.AccountDisabled -eq $true} |
  Set-Mailbox -HiddenFromAddressListsEnabled $true
02 / Python
Azure Functions, scraping & REST API

Azure Function Apps with HTTP and timer triggers. BeautifulSoup scraping, OCR document processing. REST API clients, Django/Flask web applications, Azure OpenAI integrations.

import azure.functions as func
from azure.identity import ManagedIdentityCredential

app = func.FunctionApp()
@app.function_name("MonitorAVD")
@app.timer_trigger(schedule="0 */5 * * * *")
03 / JavaScript
Node.js, Azure Functions & Teams webhooks

Node.js scripts for REST API call automation, Azure Functions in JS/TS runtime. Teams Incoming Webhook notifications, external system integrations, web scraping with Puppeteer.

const { app } = require('@azure/functions');
app.http('notifyTeams', {
  methods: ['POST'],
  handler: async (req) => {
    await sendTeamsCard(await req.json());
  }
});
04 / C#
Microsoft Graph SDK & .NET automation

.NET 8 enterprise tools – Microsoft Graph SDK, Azure SDK for .NET. Windows Service for local monitoring agents, Managed Identity authentication, report export to Excel/SharePoint.

var cred = new ManagedIdentityCredential();
var graph = new GraphServiceClient(cred,
  new[]{"https://graph.microsoft.com/.default"});
var users = await graph.Users.GetAsync(
  r => r.Filter = "accountEnabled eq false");
05 / Bash
Certificates & 802.1X deploy

Deploy script for 802.1X EAP-TLS on Ubuntu kiosk stations. Automatic certificate renewal with a 42-day threshold, wpa_supplicant config, systemd integration.

DAYS_LEFT=$(( (CERT_EXPIRY - NOW) / 86400 ))
if [ "$DAYS_LEFT" -lt 42 ]; then
  echo "Renewing certificate..."
  /usr/local/bin/request-cert.sh
fi
06 / C / C++
System tools & network utilities

Low-level system tools – custom SIP/UDP utilities, monitoring agents for embedded hardware, binary protocol parsing, performance-critical infrastructure components.

/* SIP OPTIONS keepalive probe */
struct sockaddr_in dst = {AF_INET};
dst.sin_port = htons(5060);
inet_pton(AF_INET, sbc_ip, &dst.sin_addr);
sendto(sock, opts, len, 0,
  (struct sockaddr*)&dst, sizeof(dst));
07 / Lua
OpenResty middleware & configuration scripting

Lua scripting for OpenResty/nginx middleware – JWT validation, rate limiting, dynamic routing. Embedded scripting engine in C/C++ projects, configuration logic for network devices.

-- OpenResty JWT middleware
local jwt = require("resty.jwt")
local tok = ngx.var.http_authorization
local obj = jwt:verify(secret, tok)
if not obj.verified then
  return ngx.exit(401)
end
08 / Ansible
Linux server provisioning

Playbooks for automated Ubuntu server deployment. Swapfile, firewall, nginx, certificates, systemd services – idempotently and repeatably. Ansible Vault for secrets management.

- name: Create swapfile
  command: fallocate -l 2G /swapfile
  when: ansible_swaptotal_mb < 1
- name: Enable swap
  command: swapon /swapfile
09 / Purview & Compliance
Automated data management

PowerShell scripts for Microsoft Purview Compliance – content search, HardDelete purge actions, FolderId Base64/Hex conversion for targeted mailbox cleanup.

New-ComplianceSearchAction -SearchName $srch `
  -Purge -PurgeType HardDelete
# FolderId: Base64 → Hex conversion
[BitConverter]::ToString([Convert]::
  FromBase64String($folderId))
10 / KQL
Advanced Hunting & log analysis

Kusto Query Language for Microsoft Sentinel and M365 Defender – custom detection rules, threat hunting, sign-in log analysis, device inventory queries, cross-table correlations and incident timeline reconstruction.

DeviceEvents
| where ActionType == "PowerShellCommand"
| where InitiatingProcessCommandLine
    contains "-EncodedCommand"
| project Timestamp, DeviceName,
    InitiatingProcessCommandLine
11 / Graph API & Integrations
Microsoft Graph, Snipe-IT & REST API

Microsoft Graph API for user/group/device sync and connection to external systems. Snipe-IT integration with Intune for asset management. REST API, OAuth2 auth flows, webhook connections, jq for JSON parsing.

# Graph API – devices not compliant
$uri = "https://graph.microsoft.com/v1.0/
  deviceManagement/managedDevices?
  $filter=complianceState eq 'noncompliant'"
Invoke-MgGraphRequest -Uri $uri
12 / CI/CD & Deploy
Production deployment pipeline

GitHub Actions / Azure DevOps pipelines for automatic web application deployment. Nginx + Gunicorn configuration, SSL certificates, zero-downtime deployment.

[Unit]
Description=Django Gunicorn service
After=network.target
[Service]
User=citymenu
ExecStart=/home/citymenu/venv/bin/
  gunicorn --workers 3 app.wsgi
Artificial Intelligence

AI implementation & LLM integrations

Practical AI implementation into business processes — from RAG chatbots and agentic systems through OCR and document intelligence to Azure OpenAI, Claude and open-source models. No buzzwords, only real results.

From prompt to production system

I'll help you design, build and deploy AI solutions that actually work in a business environment. I work with Azure OpenAI Service, Anthropic Claude API, open-source models (Ollama, LM Studio) and hybrid architectures. I focus on data security, scalability and integration into existing systems — not on isolated demo projects.

🧠
RAG – Retrieval-Augmented Generation

Company chatbot with access to internal documents, SharePoint, Confluence, PDF manuals. Vector databases (Azure AI Search, Qdrant, pgvector), chunking strategies, reranking, hybrid search. The model doesn't answer from training — it answers from your data.

Azure AI Search Embeddings Qdrant pgvector LangChain
🤖
AI Agents & Autonomous Systems

Agentic systems that plan, decide and execute steps without constant human input. Tool calling, function calling, ReAct patterns. Integration with Azure Functions, REST API, databases, email and Teams. Multi-agent orchestration with LangGraph and AutoGen.

LangGraph AutoGen Tool calling Azure Functions
📄
Document Intelligence & OCR

Automated processing of invoices, contracts, forms and scans. Azure Document Intelligence (Form Recognizer), Tesseract OCR, multimodal models for image and table analysis in PDFs. Structured data extraction, validation, storage in ERP/database.

Azure Doc. Intelligence OCR GPT-4o Vision PDF parsing
🔐
On-Premise & Private AI

For organizations that cannot send data to the cloud — local LLM deployment via Ollama or LM Studio on company servers. GPU and CPU inference, models Mistral, Llama, Phi, Gemma. Full data control, no cloud dependency.

Ollama LM Studio Mistral / Llama GPU inference
⚡
AI Process Automation

Replacing manual decision-making processes with AI logic — ticket classification, message and email summarization, report generation, anomaly detection in logs, predictive alerting. Integration into Power Automate, Logic Apps or custom Python pipelines.

Classification Summarization Logic Apps Power Automate
🛡️
AI for Cybersecurity

AI-assisted threat hunting in KQL over Sentinel logs, automatic alert triage, NLP analysis of phishing emails, anomaly detection in login behavior. Microsoft Security Copilot integration and custom AI tools over Defender datasets.

Security Copilot KQL + AI Threat hunting Anomaly detection

🔧 What I work with – Models & Platforms

Azure OpenAI GPT-4o, GPT-4o mini, o3, embeddings, DALL-E
Anthropic Claude Claude Opus / Sonnet / Haiku, Claude API
Ollama (local) Mistral, Llama 3, Phi-3, Gemma, CodeLlama
Azure AI Foundry Model catalog, Prompt Flow, AI Studio
LangChain / LangGraph Chains, agents, RAG pipelines, memory
Azure Cognitive Services Computer Vision, Speech, Translator, OCR
Hugging Face Transformers, fine-tuning, inference endpoints
Semantic Kernel Microsoft AI SDK for .NET and Python
Real Use Cases
Internal knowledge base
Company AI assistant on SharePoint

Chatbot that answers employee questions based on internal guidelines, IT documentation and HR manuals. RAG over SharePoint Online, authentication via Entra ID, audit logs of answers.

Helpdesk automation
Automatic IT ticket classification

AI classifies incoming helpdesk requests, assigns priority and category, generates a solution proposal and routes the ticket to the right technician. Integration via REST API into Jira, ServiceNow or custom system.

Document processing
Automatic invoice & contract extraction

Invoices from email or SharePoint are processed by an AI pipeline — OCR, structured extraction (vendor, amount, dates, items), validation and storage in ERP system. No manual re-entry.

Security monitoring
AI triage of security alerts

Sentinel alerts are automatically analyzed by AI — determining severity, context, false positive probability and proposing next steps. Reduced alert fatigue and faster incident response for the SOC team.

Content generation
Automated reporting & summarization

Weekly/monthly IT reports generated automatically from Azure Monitor, Zabbix and Sentinel data. AI summarizes infrastructure status, incidents and capacity trends into a readable PDF for management.

Customer communication
Multilingual support chatbot

Web chatbot with RAG over product documentation, automatic translation (SK/CZ/EN/DE), escalation to a live operator and conversation logging. Deployment on web and Teams/Slack.

Data analysis
Natural Language → SQL / KQL

Users ask about data in natural language — AI translates the question into SQL or KQL query, runs it and returns the result. Access to company data without needing to know the database language.

Developer productivity
AI code review & documentation

Automatic code review in CI/CD pipeline — AI checks security, quality and conventions. Generating API documentation, release notes and comments directly from code. Integration into Azure DevOps / GitHub Actions.

🗺️ How AI implementation works – from idea to production

01 / Discovery
Analysis & Use-case workshop

Identifying processes suitable for AI, defining success metrics, estimating ROI. Where AI saves time and where it would complicate things.

02 / PoC
Proof of Concept (1–2 weeks)

Quick prototype on real data. Verifying technical feasibility, model selection, testing answer quality before a larger investment.

03 / Build
Development & integrations

Production development — API integrations, vector database, authentication, error handling, token and cost monitoring, CI/CD pipeline.

04 / Evaluation
Quality & security testing

Automated answer quality tests (RAG evaluation), prompt injection tests, red-teaming, GDPR and data sovereignty check.

05 / Deploy
Deployment & monitoring

Production deployment on Azure, latency monitoring, token consumption and cost tracking. Application Insights, alerting on anomalies, prompt versioning.

06 / Iterate
Continuous improvement

Feedback loop from real usage, prompt engineering, fine-tuning, RAG knowledge base updates and model upgrades when new versions are released.

⚖️ Cloud AI vs. On-Premise – how to choose?

  • Azure OpenAI: most powerful models, Microsoft compliance (GDPR, EU data boundary), audit logs, RBAC
  • Anthropic Claude API: excellent for long contexts, document analysis and safe tasks
  • Ollama / local LLM: sensitive data stays on company server, no tokens, full control
  • Hybrid approach: sensitive data local, generic tasks in cloud – best price/performance ratio
  • Azure AI Foundry: unified place for model management, prompt flow, evaluations and deployment
  • Fine-tuning: for specialized domain tasks where generic models are insufficient

🔒 Security & Compliance in AI

  • Azure OpenAI EU Data Boundary – data doesn't leave the EU, GDPR compliance
  • Private Endpoints – OpenAI API accessible only via private network, no internet
  • Managed Identity for authentication – no API keys stored in code
  • Azure Key Vault for secure storage of API keys and secrets
  • Prompt injection protection – input validation, system prompt hardening
  • Content filtering – Azure OpenAI built-in content moderation and custom blocklists
  • Audit logging – every AI call logged to Log Analytics for compliance
  • Role-based access – who has access to which AI endpoint and with what limits

Do you have a specific AI use case for your business?

Free consultation — together we'll evaluate whether and how AI solves your problem, which model and architecture makes sense and what it will cost.

Schedule consultation →
Monitoring

Proactive infrastructure monitoring

We detect problems before customers notice them. Zabbix, Azure Monitor and custom solutions for a comprehensive overview of system health.

What we monitor
🖥️

Servers & VM – Zabbix

CPU, RAM, disk I/O, network throughput. Zabbix agents on Windows and Linux. Custom templates for specific applications, Low-Level Discovery (LLD) for automatic discovery of network interfaces, disks, services and processes. Alerting when thresholds are exceeded.

🌐

Network & Latency – LibreNMS, Smokeping

LibreNMS – autodiscovery of network devices, SNMP polling, inventory and performance graphing of switches, routers and servers. Smokeping – long-term latency and packet loss measurement on all key links. Grafana dashboards over LibreNMS and Zabbix data for a unified overview.

📊

Dashboards & Visualization – Grafana

Grafana dashboards for metric visualization from Zabbix, LibreNMS, Azure Monitor and Prometheus. Custom panels for capacity planning, SLA reporting and management overview. Alerting directly from Grafana to email, Teams or Slack.

☁️

Azure Virtual Desktop & Cloud

AVD session host monitoring via Azure Function App with Managed Identity. Number of active sessions, host availability, scaling state. Azure Monitor, Log Analytics workspace, Application Insights for Function Apps and web applications.

📞

VoIP & Direct Routing

Teams Direct Routing monitoring – SIP trunk availability, active calls, call quality metrics. Integration with Azure Monitor and alerting on SBC outage or call quality degradation.

🔒

Security & Compliance

Defender for Endpoint alerting, Intune compliance reports, 802.1X authentication, failed login monitoring, certificate expiration with automatic renewal. Microsoft Sentinel for SIEM and incident response.

Zabbix
Agents, templates, LLD discovery
Grafana
Dashboards & metric visualization
LibreNMS
Network devices, SNMP, autodiscovery
Smokeping
Latency, packet loss, SLA
$ zabbix_agent2 -t system.cpu.util
system.cpu.util[,,avg1] → 4.2
$ Get-AzVMUsage
CurrentValue: 12 / Limit: 250
# All systems nominal ✓
Security & SIEM

Defender stack, Sentinel & KQL

Complete Microsoft security stack – from endpoint protection through SIEM to proactive threat hunting. Incident response, detection engineering and identity hardening.

🛡️ Microsoft Defender Stack

  • Defender for Endpoint (MDE) – onboarding, alerting, investigations
  • M365 Defender – unified incident view, cross-workload correlation
  • Defender for Identity – user behavior, lateral movement detection
  • Defender for Office 365 – Safe Links, Safe Attachments, anti-phishing
  • Attack Surface Reduction (ASR) rules – audit, enforce, exceptions
  • Device onboarding – scripts, GPO, Intune policy, manual deploy
  • Live Response – remote investigation of compromised devices

🔭 Microsoft Sentinel (SIEM)

  • Log ingestion – Defender, Entra ID, M365, CEF/Syslog custom sources
  • Data connectors – Office 365, Azure AD, Defender suite, 3rd party
  • Analytics rules – scheduled queries, Fusion detection, NRT rules
  • Threat hunting – proactive KQL queries over historical data
  • Workbooks – custom security dashboards and SOC reporting
  • Playbooks (Logic Apps) – automated incident response
  • UEBA – user and entity behavior analytics, anomaly detection

🔍 KQL & Advanced Hunting

  • Advanced Hunting via M365 Defender and Sentinel
  • Device queries – why a device is not visible, hardware profile
  • User activity – logins, actions, behavioral anomalies
  • Alert investigation – root cause, incident timeline reconstruction
  • Sign-in log analysis – risky sign-ins, impossible travel, token theft
  • Custom detection rules – custom alerting rules over logs
  • Cross-table joins – correlation across Defender, Entra ID and M365 logs

🔐 Hardening & Identity Security

  • Conditional Access policies – MFA, compliant device, location, sign-in risk
  • Blocking legacy authentication (Basic Auth, NTLM, older clients)
  • Entra ID Protection – risky users and sign-ins, automatic remediation
  • Privileged Identity Management (PIM) – JIT admin access
  • Least privilege – RBAC design, custom roles, access reviews
  • Passwordless authentication (FIDO2, Windows Hello for Business)
  • Unified Audit Log – export, analysis, compliance and forensics reporting
Standards & Compliance

Security standards implementation

NIS2, CIS Controls, ISO 27001, GDPR and cybersecurity legislation – I help companies understand requirements, close gaps and achieve regulatory compliance.

NIS2 / Act No. 69/2018 Coll.
NIS2 Directive & Slovak Cybersecurity Act

Compliance analysis with NIS2 directive and Slovak cybersecurity act requirements. Gap analysis, asset classification, risk assessment, security measure configuration and documentation for auditors. Technical implementation of measures – SIEM, EDR, access control, backup, patch management.

  • Determining subject category (essential / important service)
  • Gap analysis against §20–§22 security measures
  • Inventory and classification of information assets
  • Risk assessment and risk treatment plan
  • Security policy, recovery plan, incident management
  • Technical implementation – SIEM, EDR, IAM, encryption, backups
  • Preparation for NBÚ audit and documentation package
CIS Controls v8 / CIS Benchmarks
CIS Controls & Hardening per CIS Benchmarks

Implementation of CIS Controls v8 (18 control groups) including prioritized implementation groups (IG1–IG3). System hardening per CIS Benchmarks for Windows Server, Linux, Microsoft 365 and Azure. Baseline configuration audit and remediation plan.

  • CIS Controls IG1–IG3 – prioritized implementation by company size
  • CIS Benchmark – Windows Server 2019/2022 hardening and audit
  • CIS Benchmark – Ubuntu/RHEL/Debian Linux hardening
  • CIS Benchmark – Microsoft 365 & Azure Foundations
  • CIS-CAT Pro scanning and gap report
  • Automated compliance checking via PowerShell / Ansible
  • Continuous monitoring of baseline deviations (Defender for Cloud)
ISO/IEC 27001:2022
ISO 27001 – preparation & technical implementation

Technical support for ISO 27001 certification preparation. ISMS scope definition, risk analysis (ISO 27005), selection and implementation of controls from Annex A (ISO 27002). Preparation of mandatory documentation and cooperation during internal audit.

  • ISMS scope definition and organizational context
  • Risk analysis per ISO 27005 – assets, threats, vulnerabilities
  • Statement of Applicability
  • Technical control implementation – IAM, encryption, logging, monitoring
  • Access management, network segmentation, patch management
  • Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP)
  • Documentation preparation and audit cooperation
GDPR / Regulation (EU) 2016/679
GDPR – technical personal data protection implementation

Technical measures for personal data protection per GDPR – encryption, pseudonymization, access control, logging, backup and data retention policy. DLP policy implementation in Microsoft Purview.

  • Encryption of personal data at rest and in transit
  • Access control – principle of least privilege, RBAC, audit trail
  • Microsoft Purview DLP – detection and protection of personal data in M365
  • Retention policies, automatic deletion, eDiscovery
  • Logging of personal data access and alerting
  • Privacy by Design – integration of protection during application development
  • Consent management, data subject rights in systems
Zero Trust Architecture
Zero Trust – implementation per NIST SP 800-207

Implementation of Zero Trust principles in a Microsoft environment – identity-centric access control, network microsegmentation, verification of every access without implicit trust. Practical implementation via Entra ID, Intune and Microsoft Defender.

  • Identity pillar – MFA, Conditional Access, PIM, Passwordless
  • Device pillar – Intune compliance, Autopilot, device health state
  • Network pillar – microsegmentation, NSG, Azure Firewall, Private Endpoints
  • Application pillar – MCAS/Defender for Cloud Apps, session policies
  • Data pillar – Purview, DLP, Information Protection, encryption
  • Visibility – Sentinel SIEM, Log Analytics, Defender XDR
  • Microsoft Zero Trust Rapid Modernization Plan (RaMP) implementation
SOC 2 / DORA / Other
Other standards & regulatory compliance

Technical support for compliance with other regulations and standards by industry – financial sector (DORA), healthcare, public administration. Implementation and configuration of tools in line with specific standard requirements.

  • DORA (Digital Operational Resilience Act) – ICT risk, resilience testing
  • SOC 2 Type II – security controls and monitoring
  • PCI DSS – segmentation, encryption, logging for payment card processing
  • HIPAA / HL7 FHIR – healthcare data protection (technical side)
  • Defender for Cloud – Regulatory Compliance dashboard and automated audit
  • Azure Policy – guardrails for continuous compliance
  • Report exports for auditors, CISO and supervisory bodies
VoIP & Telephony

Teams Direct Routing – business telephony

Teams Direct Routing implementation for full-featured business telephony via Microsoft Teams. SBC configuration, SIP trunk integration, dial plans and production deployment with TLS/SRTP.

📡 Direct Routing – setup & configuration

  • SBC (Session Border Controller) – certified HW or VM on Azure
  • FQDN configuration – sbc.domain.com with valid TLS certificate
  • TLS port 5061 for Teams, SIP trunk routing to PSTN carrier
  • SRTP – encrypted media transport for production environments
  • Online Voice Routing Policies and PSTN Usage records
  • Phone System license and number assignment to users
  • Testing and diagnostics via Teams Admin Center SBC logs

🎛️ Dial Plans, Voice Policies & Monitoring

  • Normalization rules and dial plan for local number formats
  • Call Queues and Auto Attendants for business lines
  • Emergency calling policies and E911 configuration
  • Call recording – compliance recording or custom solution
  • SBC availability and call quality metric monitoring (Azure Monitor)
  • SIP signaling troubleshooting – SIP traces, pcap analysis
  • Migration from legacy PBX systems to Teams Phone

🏗️ SBC & Infrastructure

  • Certified SBC (Audiocodes, Ribbon, Oracle, Cisco CUBE)
  • Azure VM deployment with public IP, NSG and FQDN
  • DigiCert / Sectigo certificate for production domain
  • HA (High Availability) – dual SBC failover configuration
  • SIP trunk provider integration – IP authentication, trunk groups
  • Firewall rules – Microsoft SIP ranges, media ports (3478, 50000-50019)

🔗 Integrations & Extensions

  • Teams Phone Mobile – dual SIM, simultaneous ringing
  • Teams Rooms – conference rooms with direct calling
  • Azure Communication Services for custom calling in applications
  • Power Automate / Logic Apps flow after call completion
  • CRM integrations – click-to-call, automatic call logging
  • Teams Admin Center – reporting and call quality analysis (CQD)
Open-Source solutions

Open-Source implementation & custom tailoring

I deploy, configure and customize proven open-source tools to the specific needs of each customer. A cheaper alternative to commercial solutions without compromising on quality.

🛡️
Security & SIEM

Open-source alternatives to expensive commercial SIEM and XDR systems. Wazuh as a full-featured SIEM/XDR with agents for Windows and Linux, integration with existing logs and real-time alerting. Suricata/Zeek as network IDS/IPS.

  • Wazuh – installation, agents, detection rules, dashboards
  • Suricata IDS/IPS – deployment, rule tuning (Emerging Threats)
  • OSSEC – host-based intrusion detection, log analysis
  • OpenVAS / Greenbone – vulnerability scanning and reporting
  • TheHive + Cortex – incident management and response automation
Wazuh Suricata OpenVAS TheHive
🔑
Identity & Access Control

Open-source IAM systems for identity management, SSO and MFA in environments without M365. Keycloak as a full-featured identity provider with OIDC, SAML 2.0 and LDAP support. Integration with existing Active Directory.

  • Keycloak – installation, realm configuration, clients, federation
  • OIDC / SAML 2.0 – SSO for internal applications and web portals
  • LDAP / AD integration – user sync and federation with existing directories
  • 2FA / TOTP – Google Authenticator, FIDO2 hardware tokens
  • OpenLDAP – lightweight directory for smaller environments
Keycloak OpenLDAP OIDC SAML 2.0
🌐
Network, Firewall & VPN

Open-source network solutions for SMB and enterprise environments. OPNsense / pfSense as a full-featured firewall with IDS/IPS, HAProxy load balancer and WireGuard/OpenVPN for secure remote access.

  • OPNsense / pfSense – installation, firewall rules, VLAN, NAT
  • Suricata IDS/IPS integration with OPNsense
  • WireGuard – fast and modern site-to-site and road-warrior VPN
  • OpenVPN – client certificates, PKI, multi-factor auth
  • HAProxy – load balancing, SSL termination, health checks
  • Unbound DNS Resolver – local DNS caching and DNSSEC
OPNsense pfSense WireGuard OpenVPN HAProxy
🖥️
Virtualization & Infrastructure

Proxmox VE as an open-source alternative to VMware/Hyper-V for VM and LXC container deployment. Docker and Docker Compose for application deployment, Portainer for visual container management.

  • Proxmox VE – installation, VM/LXC provisioning, clustering, migration
  • Ceph storage – distributed storage for Proxmox cluster
  • Docker / Docker Compose – containerization of applications and backends
  • Portainer – visual management of Docker environments
  • KVM / QEMU – low-level virtualization on Linux
  • Backup – Proxmox Backup Server, remote backups
Proxmox VE Docker Portainer KVM
📁
File Sharing & Collaboration

Open-source alternatives to SharePoint/OneDrive for companies without M365. Nextcloud as a comprehensive platform for file sharing, calendars, contacts and group collaboration with LDAP/AD integration.

  • Nextcloud – installation, configuration, LDAP sync, performance tuning
  • OnlyOffice / Collabora – online Office document editing in Nextcloud
  • Samba – Windows-compatible file sharing, AD integration
  • Mattermost – open-source Teams-like communication platform
  • Gitea / GitLab CE – git repositories, code review, CI/CD
  • Passbolt / Vaultwarden – team password manager
Nextcloud Samba Mattermost GitLab CE
⚙️
Custom tailoring & Integration

An open-source solution is never "out of the box" – every environment has specific requirements. I customize configuration, write plugins, custom modules and integrate open-source tools with existing customer systems.

  • Custom Wazuh detection rules for specific environmental threats
  • Nextcloud custom apps and integrations with internal systems
  • Keycloak custom identity providers, attribute mapping, custom themes
  • Custom Grafana dashboards – datasources, alerting, annotations
  • Zabbix templates for proprietary HW / specific applications
  • REST API integrations of open-source tools with cloud services
  • Data migration from commercial to open-source platforms
Custom Rules API Integration Migration Plugins
Public development · GitHub

Open-source Zabbix templates & PowerShell scripts on GitHub

I publish part of my work for free under an open-source license – ready-to-use Zabbix 7.4 templates for Windows Server, Linux, network hardware and service desk, plus PowerShell automation for Intune, Active Directory, Exchange Online and Snipe-IT. Everything is deployed and proven in real production environments.

github.com/DuprTECH
Zabbix templates · PowerShell · Bash · Ansible · Intune · Active Directory
All repositories on GitHub →

📡 Zabbix monitoring templates (Zabbix 7.4)

Zabbix 7.4PowerShellBashAnsible

Zabbix Patch Management for Windows and Linux – template, dashboard, check scripts & Ansible

One Zabbix template to see the update status of all your Windows and Linux servers in one place, with the same keys (patch.*) on every OS: how many updates are pending (security, critical, kernel…), which ones, what was installed recently, whether a reboot is needed and when the host was last patched.

Zabbix patch management – global dashboard of Windows and Linux server updates
Global dashboard – compliance, pending security updates, reboots
Zabbix patch management – host dashboard with pending updates and history (Rocky Linux)
Host dashboard – pending updates, history, patch day
  • Windows Update, apt (Debian, Ubuntu), dnf / yum (RHEL, Rocky, Alma, Oracle, Fedora)
  • Pending updates by category and severity + pending list and update history
  • Reboot required and why, last reboot, uptime, patch day (e.g. 2nd Tuesday)
  • Host dashboard included in the template, triggers for critical / security updates
  • Install updates with the included Ansible playbook or your own tool
Patch managementWindows UpdateWSUSLinuxAnsiblezabbix_sender
Zabbix-Patch-Management-Windows-Linux
Zabbix 7.4SNMP

Zabbix template – Cisco WLC (AireOS / Catalyst 9800)

SNMP monitoring of Cisco Wireless LAN Controllers with automatic access point discovery – each AP is created as its own Zabbix host with its own problems, graphs, inventory and maintenance.

  • CDP – which switch and switch port each AP is connected to
  • Clients per band 2.4 / 5 / 6 GHz, SSIDs, rogue APs, HA status
  • SNMP traps: AP disassociation, channel change, radar (DFS)
CiscoCatalyst 9800AireOSWi-Fi
View on GitHub
Zabbix 7.4PowerShell

Zabbix template – Microsoft DHCP Server (Windows Server 2012–2022)

Microsoft DHCP Server monitoring – automatic discovery of all IPv4 scopes and super scopes, free / used addresses, usage in % and DHCP failover partner statistics.

  • Every scope gets its own items, trigger and graph
  • DHCP failover – addresses on this server and the partner server
  • Scope running out of addresses trigger, DHCPServer service state
Windows ServerDHCPFailoverZabbix agent
View on GitHub
Zabbix 7.4REST API

Zabbix template – ALVAO Service Desk dashboard & history

Ticket statistics from ALVAO Service Desk via the REST API with history kept in Zabbix – team totals and personal statistics for every solver, ready for dashboards, graphs and triggers.

Zabbix ALVAO Service Desk dashboard – ticket and technician statistics (anonymized)
Dashboard built from the template data (anonymized)
  • Open, unassigned, new and closed tickets, tickets without activity for 7 days
  • Automatic solver discovery (OData filter) – each solver gets their own host
  • No agent needed – HTTP agent items on the Zabbix server / proxy
ALVAOService DeskHelpdesk KPIOData
View on GitHub
Zabbix 7.4Shell

Zabbix template – Advanced ICMP Ping (SmokePing-style)

Extended ICMP ping inspired by SmokePing – instead of a single ping it sends a batch of requests with fping and evaluates min / avg / max response time, packet loss and jitter. You see unstable links, not just links that are down.

Zabbix Advanced ICMP Ping – min/avg/max response time and packet loss graph
Min / avg / max and packet loss graph
  • 10 ICMP requests per check (configurable)
  • Min / avg / max and loss in one graph, jitter trigger
  • Module template – link it to any host
ICMPfpingSmokePingLatency
View on GitHub
Zabbix 7.4SNMP

Zabbix templates – UPS with Generex CS121 / CS141 card (Legrand and others)

Monitoring of UPS units with the Generex CS121 or CS141 network card using the standard UPS-MIB (RFC 1628). Tested on Legrand UPS units, works with other vendors too.

  • Automatic discovery of input, output and bypass phases (1-phase and 3-phase UPS)
  • Battery – status, charge, minutes remaining, voltage, temperature
  • Triggers: on battery, overload, voltage / frequency out of range
UPSGenerexLegrandRFC 1628
View on GitHub
Zabbix 7.4SNMP

Zabbix template – Zyxel WLC NXC5500

SNMP monitoring of Zyxel Wireless LAN Controllers (NXC series, tested on NXC5500) with automatic discovery of managed access points.

  • Per-AP status, client count, MAC, IP and ICMP checks
  • Interface traffic and errors, controller inventory
  • AP alerts suppressed after a WLC reboot
ZyxelNXC5500Wi-FiSNMP
View on GitHub
Zabbix 7.4SNMP

Zabbix template – Papouch Quido I/O module

Monitoring of Papouch Quido Ethernet I/O modules – digital inputs, relay outputs and the temperature sensor. Ideal for server rooms (doors, flooding, air conditioning).

  • Automatic discovery of named inputs and relays
  • High temperature and fast temperature change (A/C failure)
  • Power supply off / restart detection on NC relays
PapouchQuidoServer roomTemperature
View on GitHub

🪟 Windows, Intune, Active Directory & Exchange Online – PowerShell

PowerShellIntuneGPO

Snipe-IT – automated asset registration and update (Intune / GPO)

PowerShell script that keeps your Snipe-IT inventory up to date automatically. It runs on every Windows computer, collects hardware and software details, creates or updates the asset via the REST API and checks it out to the logged-on user.

  • Deploy with Microsoft Intune Remediations or a GPO logon script
  • Asset and model created automatically, matched by serial number
  • Check-out to the logged-on user, user history
  • Manually entered data is kept, 429 rate-limit aware
Snipe-ITIntuneAsset managementWindows
View on GitHub
PowerShellExchange OnlineAD

Exchange Online – email signature generator from on-premises Active Directory

PowerShell script that builds consistent email signatures from user attributes in on-premises Active Directory and sets them directly in Exchange Online (OWA).

Exchange Online email signature generated from Active Directory in Outlook on the web (OWA)
Generated signature in OWA
  • Language version from the AD attribute c (country)
  • Department from security groups, contact details from the AD account
  • Logos / images per distribution group, embedded as base64
Exchange OnlineActive DirectoryM365Email signature
View on GitHub

Need a template for other hardware, customization, a complete deployment or support? Get in touch – happy to help.

Custom applications & portals

Web tools, admin portals & integrations

Development of custom internal tools and portals – from simple admin dashboards through inventory systems to event-driven automation applications.

🌐 Web Applications & REST API

  • Full-stack web apps (Django, Flask, Node.js)
  • REST API design – endpoints, authentication, rate limiting
  • CRUD systems for users, devices, assets
  • OAuth2 / SSO integration (Entra ID, Graph API)
  • Multi-tenant architecture for multiple organizations
  • Session management, token authentication
  • Production deployment nginx + Gunicorn + SSL

🖥️ Admin Portals & Dashboards

  • Administration interfaces for user and device management
  • RBAC – roles, permissions, audit trail of who did what
  • Reporting and exports (CSV, JSON, PDF)
  • Real-time service and device status monitoring
  • Inventory systems (asset management, device tracking)
  • Integration with Intune, Graph API, Snipe-IT
  • Alerting and health-check dashboards

⚙️ Automation Apps & Self-service

  • Schedulers – cron jobs, job runner, task orchestration
  • Event-driven processing – webhook reception, data transformation
  • Self-service portals – user request → automatic action
  • Onboarding / provisioning tools
  • Scripting GUI – wrapper on PowerShell/Bash for non-technical admins
  • Kiosk management systems, agent-based telemetry
  • Unattended jobs with SAS token and API authentication

🔗 Integrations & Middleware

  • Microsoft Graph API – user, group, device sync
  • Sync between systems (identity, devices, assets)
  • API gateway / proxy – routing, throttling, auth
  • Webhook processing and event-driven architectures
  • Data transformations – JSON → other format, data pipelines
  • SIEM connectors (Sentinel data connectors)
  • Retry mechanisms, structured logging, request tracing
Support & SLA

Ongoing support, management & helpdesk

Not just a one-time implementation – I offer long-term technical management, proactive support and helpdesk for your IT environment. Availability and fast response when you need it most.

🔧
Ad-hoc support

One-time help with a specific problem or project. No long-term commitment – you pay for actual time worked. Ideal for smaller companies or a one-time solution to an occasional problem.

Remote support On-site Liptov Response within 4h No commitment
📋
Monthly IT management (retainer)

Regular monthly management of your IT environment – fixed number of hours for management, monitoring, patches, user support and proactive maintenance. Reserved capacity with priority SLA. Suitable for companies with 10–100 users.

Agreed hours/month Priority response Monthly report Patch management Proactive monitoring
🏢
Employee helpdesk

IT helpdesk for your IT team or directly for employees – resolving technical issues with workstations, access, email, M365 applications. Ticketing system, SLA tracking, escalation.

L1 / L2 support Ticketing system Teams / email / phone SLA reporting
🚨
Incident response & Emergency

Fast response to a security incident, production environment outage or disaster. Immediate analysis, isolation and system recovery. Forensic analysis after the incident and prevention recommendations.

Response within 1h Remote / On-site Forensic analysis Post-incident report
🔄
Regular security review

Quarterly or semi-annual review of your environment's security posture – checking Conditional Access policies, Defender alerts, device compliance status, licenses, backups and patch level. Output: written report with prioritized recommendations.

Quarterly / semi-annual Compliance check Written report Action plan
Remote
Support via Microsoft Teams, RDP, SSH – no on-site presence required
On-site
Physical visits – Liptov, Poprad, Ružomberok, Banská Bystrica and surroundings
SK & CZ
Remotely anywhere in the Slovak Republic and Czech Republic
# Support channels
→ Microsoft Teams – chat & call
→ Email info@duprtech.sk
→ Phone / WhatsApp
→ Ticketing (ALVAO / Freshdesk)
Mon–Fri 8:00–18:00 │ On-call by arrangement
Arrange support →
Technologies

Tech stack & tools

Proven technologies I work with daily in production environments.

Microsoft Cloud – Azure

Azure (VM, AKS, VNet, Functions, AVD)
Entra ID / Azure AD – identity, SSO, CA
Logic Apps & Function Apps
Azure SQL / Cosmos DB
Azure OpenAI Service
Azure Key Vault & Managed Identity
Azure Monitor & Log Analytics

Microsoft 365 & Endpoint

Exchange Online / SharePoint / OneDrive
Teams Phone & Direct Routing
Intune – Windows, Android, iOS
Autopilot & zero-touch enrollment
Purview – DLP, eDiscovery, compliance
Microsoft Graph API
Snipe-IT (asset management + Intune)

Security & SIEM

Defender for Endpoint (MDE)
M365 Defender (XDR)
Defender for Identity
Microsoft Sentinel
KQL – Advanced Hunting
Conditional Access & Identity Protection
PIM & Zero Trust architecture

Windows Server & Hybrid

Windows Server 2019 / 2022
Active Directory (AD DS)
Remote Desktop Services (RDS)
DNS, DHCP, WSUS, GPO
Azure AD Hybrid Join
Entra Connect Sync
Sysinternals & Event Viewer

Linux & Servers

Ubuntu LTS (20.04 / 22.04 / 24.04)
Debian (Bullseye / Bookworm)
CentOS / Rocky Linux / AlmaLinux
SUSE / openSUSE / RHEL / Oracle Linux
nginx + Apache + Gunicorn + Docker
systemd, firewalld, iptables, cron
OpenSSL, Let's Encrypt, NDES/PKI

Programming languages

PowerShell 7 / Az module
Python 3 / Django / Flask
JavaScript / Node.js
C# / .NET 8
C / C++
Lua / OpenResty
Bash / curl / jq

DevOps & Automation

Ansible – Linux + Windows automation
GitHub Actions / Azure DevOps
ARM / Bicep / Terraform
Task Scheduler / cron / unattended jobs
CI/CD pipelines
REST API integrations
JSON / YAML / CSV / KQL / XML

Monitoring & Observability

Zabbix – templates, LLD, trapping
Grafana – dashboards and alerting
LibreNMS – network devices, SNMP
Smokeping – latency and packet loss
Application Insights
ALVAO Service Desk

Network & Security

Cisco ISE (802.1X EAP-TLS)
SIP / SRTP / TLS
VPN & Azure Bastion
Azure Firewall & NSG
wpa_supplicant / network-manager
SQL Server / Azure SQL

AWS (basics)

IAM – identity & access management
EC2 – virtual servers
S3 – object storage
VPC – network isolation
CloudWatch – monitoring and logs
Security groups / NACL

Specialized systems

Microsoft Purview
Protel (hotel system)
Skidata (ski pass systems)
BlueGastro / EPOS
BeautifulSoup & OCR tools

Open-Source Security

Wazuh SIEM / XDR
Suricata IDS/IPS
OpenVAS / Greenbone
TheHive + Cortex
OPNsense / pfSense
WireGuard / OpenVPN

Open-Source Infrastructure

Proxmox VE / KVM
Keycloak (IAM / SSO)
Nextcloud
Mattermost
GitLab CE / Gitea
Vaultwarden / Passbolt

Standards & Compliance

NIS2 / Act No. 69/2018 Coll.
CIS Controls v8 (IG1–IG3)
CIS Benchmarks (OS / Cloud)
ISO/IEC 27001:2022
GDPR / Zero Trust (NIST)
DORA / SOC 2 (technical support)
About me

Cloud admin, security engineer & automation guy

A combination of cloud admin, security admin and automation engineer with a deep focus on Microsoft Azure, M365 and the Defender stack. I work in production environments – not in a test lab.

I don't click, I script. PowerShell, Python, KQL, Bash, C#, JavaScript – the right tool for the job. Hybrid infra troubleshooter: on-prem AD + Azure, Windows Server + Linux fleet, Intune + Cisco ISE.

I have experience with security incidents (Defender alerts, Sentinel SIEM), migrations (SharePoint, DB, device onboarding), bulk operation automation and development of internal admin tools. Based in Liptovský Mikuláš, also working remotely throughout Slovakia and Czech Republic.

Microsoft Azure – tenant setup, AVD, Entra ID, Conditional Access, cost optimization
M365 – Exchange Online, SharePoint, Intune (Windows/Android/iOS), Purview compliance
Defender stack + Microsoft Sentinel – incidents, KQL hunting, detection rules, hardening
Hybrid infra – Windows Server AD, RDS, GPO, Entra Connect, hybrid join troubleshooting
Automation – PowerShell, Python, C#, JavaScript, KQL, Bash, Ansible, Graph API
Teams Direct Routing, 802.1X EAP-TLS (Cisco ISE), Linux fleet, Zabbix/Grafana/LibreNMS
Security standards – NIS2, CIS Controls v8, ISO 27001, GDPR, Zero Trust (NIST)
Open-Source – Wazuh, Keycloak, Proxmox, OPNsense, WireGuard, Nextcloud, custom tailoring
IT support & helpdesk – SLA retainer, incident response, regular security review
Expertise & areas
Microsoft Azure
IaaS, PaaS, Entra ID, AVD, Cost Mgmt
Microsoft 365
Exchange, SharePoint, Teams, Intune, Purview
Security & SIEM
Defender stack, Sentinel, KQL, Zero Trust
Windows Server
AD, RDS, GPO, Hybrid Join, DNS/DHCP
Linux Admin
Ubuntu/Debian/RHEL/SUSE, Docker, PKI
Automation
PS, Python, JS, C#, C/C++, Lua, KQL, Bash
VoIP & Networking
Direct Routing, SBC, 802.1X, Cisco ISE
Monitoring
Zabbix, Grafana, LibreNMS, Smokeping
Web & Portals
Django, Flask, Node.js, REST API, Graph API
AWS (basics)
IAM, EC2, S3, VPC, CloudWatch
Standards & Compliance
NIS2, CIS Controls v8, ISO 27001, GDPR, Zero Trust
Open-Source solutions
Wazuh, Keycloak, Proxmox, OPNsense, Nextcloud
IT Support & SLA
Helpdesk, retainer management, incident response
Service area

📍 Liptovský Mikuláš, Liptov region, Slovakia
In person: Liptov, Poprad, Ružomberok, Banská Bystrica
Remotely: all of Slovakia & Czech Republic

Contact

Get in touch

Facing an IT challenge or looking for an Azure environment administrator? I'd be happy to take a look at your case.

Free consultation. Describe your situation and I'll respond within 24 hours.

E-mail info@duprtech.sk
Phone +421 904 305 240
WhatsApp +421 904 305 240
Microsoft Teams info@duprtech.sk
Location Liptovský Mikuláš, Slovakia
Availability Mon–Fri, 8:00–18:00