CSE & Systems EngineerLinux Kernel · 802.1Q Networking · Cloud IaC
Systems engineer grounded in Computer Science fundamentals. Designing resilient, low-latency infrastructure spanning the Linux kernel (`sysctl`, `systemd`, `eBPF`), IPv4/VLSM subnet topologies, 802.1Q VLAN trunking, and cloud-native IaC with Terraform and PostgreSQL query optimization.
Interactive System Manifest: whoami.yaml
Inspect the engineer's credentials, kernel environment, network parameters, and academic coursework in YAML, JSON, or raw Linux CLI output.
# ========================================================
# SYSTEM MANIFEST: /etc/syseng/whoami.yaml
# Production Identity & Infrastructure Engineering Record
# ========================================================
apiVersion: syseng.portfolio/v1alpha1
kind: EngineerManifest
metadata:
node: kernel-node-01.syseng.internal
cluster: production-homelab-ap-south
generated_at: "2026-11-04T00:00:00Z"
spec:
identity:
name: "CSE & Systems Engineer"
handle: "fuad@kernel-node-01"
status: "Available for Hire // Infrastructure & SRE"
role: "Computer Science & Engineering Graduate"
specialization: "Linux Sysadmin · Networks · Cloud · DevOps"
location: "Dhaka, Bangladesh"
timezone: "Asia/Dhaka (UTC+6)"
education:
degree: "B.Sc. in Computer Science and Engineering"
curriculum:
- "Operating Systems (Processes, Semaphores, Memory Management)"
- "Computer Networks (TCP/IP, 802.1Q, BGP, Subnetting)"
- "Database Systems (ACID, B-Tree Indexes, EXPLAIN Plans)"
- "Distributed Systems (Consensus, Replication, RPC)"
infrastructure_environment:
os: "Ubuntu 24.04 LTS (Noble Numbat)"
kernel: "Linux 6.8.0-syseng x86_64"
shell: "/bin/zsh"
network_subnet: "10.240.0.0/24 (VLAN 10 MGMT)"
hardware_bastion: "Proxmox VE 8.2 Cluster"
specializations:
linux: ["systemd", "eBPF/XDP", "PAM", "sysctl", "LVM", "LUKS"]
networking: ["IPv4 VLSM", "CIDR", "802.1Q VLANs", "BGP", "Wireshark"]
cloud: ["Terraform", "AWS VPC", "GCP", "Transit Gateways"]
devops: ["Docker", "Kubernetes", "GitHub Actions", "Prometheus"]
databases: ["PostgreSQL", "Query Optimization", "WAL Archiving"]
reliability_metrics:
target_sla: "99.99%"
automated_runbooks: true
mttr_reduction: "-45%"
blameless_postmortems: true
4 Pillars of Specialization
Designed from first principles: combining academic CSE theory with hands-on systems, networking, cloud automation, and relational database engineering.
Linux System Administration & Kernel Mechanics
Ubuntu 24.04 Server · Systemd Orchestration · PAM · Kernel sysctl
Deep hands-on systems administration across Ubuntu and Debian environments with custom kernel parameter tuning and service isolation.
- >Systemd unit file authoring, socket activation, and timer orchestration
- >Kernel network tuning: TCP BBR congestion control, somaxconn, and file-max
- >PAM authentication hardening, secure sudoers delegation, and SSH public key infrastructure
- >eBPF / XDP packet filtering at network interface ingress
- >Storage layout: LVM volume expansion, ext4/ZFS tuning, and LUKS encryption
sysctl -w net.ipv4.tcp_congestion_control=bbr systemctl enable --now syseng-daemon.service
Network Engineering & Subnetting (IPv4 / VLSM / 802.1Q)
Bitwise CIDR Subnetting · 802.1Q VLAN Trunking · Routing Protocols
Deterministic computer networking grounded in OSI layers, bitwise VLSM allocation algorithms, and multi-VLAN segmentation.
- >Variable Length Subnet Masking (VLSM) optimizing address space with zero wastage
- >802.1Q VLAN trunking and inter-VLAN routing on Linux and managed L2/L3 switches
- >Dynamic routing fundamentals: BGP autonomous system peering and OSPF cost metrics
- >Deep packet inspection and protocol debugging using Wireshark and tcpdump
- >Stateful firewall rules: nftables, iptables NAT tables, and connection tracking
ip link add link eth0 name eth0.10 type vlan id 10 ip addr add 10.240.0.1/24 dev eth0.10
Cloud Infrastructure, IaC & DevOps Automation
HashiCorp Terraform · AWS Multi-AZ VPC · Docker CI/CD
Infrastructure as Code and continuous integration pipelines deploying immutable containerized workloads across cloud environments.
- >Modular Terraform code with S3 remote state storage and DynamoDB locking
- >AWS multi-tier VPC topologies: public/private subnets, NAT gateways, and Transit Gateways
- >Optimized multi-stage Dockerfiles producing minimal attack-surface images
- >Automated GitHub Actions CI/CD workflows with automated linting, test suites, and artifact registry pushing
- >Prometheus metrics scraping and Grafana dashboard alerting configuration
terraform init -backend-config=backend.tfvars terraform plan -out=tfplan.binary
Relational Databases & CSE Academic Theory
PostgreSQL Query Tuning · B-Tree Indexing · ACID Integrity
Relational database management systems with deep knowledge of query planner execution trees, index design, and ACID transactions.
- >EXPLAIN (ANALYZE, BUFFERS) query tree analysis eliminating sequential scans
- >Advanced index engineering: composite B-Tree indexes, partial indexes, and GIN/GIST
- >Write-Ahead Logging (WAL) internals, point-in-time recovery (PITR), and streaming replication
- >Connection pool tuning with PgBouncer to eliminate backend connection overhead
- >Strict database normalization (1NF to 3NF/BCNF) and foreign key constraint guarantees
EXPLAIN (ANALYZE, BUFFERS) SELECT * FROM system_metrics WHERE node_id = 'kernel-01';
Live Systems Labs, Observability & Case Studies
Every production blueprint, interactive calculator, and security proving ground is fully operational and interconnected.
10-Part Systems & Infrastructure Case Studies
Full-depth engineering breakdowns: Civic Grievance 3NF Relational DBMS, Enterprise Multi-VLAN VLSM Subnetting, and Hardened Ubuntu Backup & Docker CI/CD.
Live Bitwise VLSM & CIDR Subnet Calculator
Algorithmic subnetting tool that recursively partitions IPv4 blocks according to variable host requirements with binary bitwise mask visualizers.
Clickable Enterprise Network Topology Atlas
Multi-tier network topology model (Core, Distro, Access, DMZ, Homelab) with live interface drawers, 802.1Q subnets, and Cisco IOS / nftables config export.
Sanitised Homelab Control Room & Security Lab
3 bare-metal Proxmox nodes (Ryzen 5950X, Intel N100, RPi 4B), TDP power tracking, active LXC workloads, 3-2-1 backup strategy, and threat-defense showcase.
Production SOP & Runbook Library
Standard Operating Procedures for emergency incident remediation: BGP flap recovery, corrupted disk rebuilds, primary PostgreSQL failover, and TLS renewal.
SRE Incident Investigation Room
Blameless 5-Whys root-cause analyses, chronological outage timelines, diagnostic artifacts, and MTTR telemetry metrics across production incidents.
Platform Architecture Matrix (24 Vertical Slices)
24 modules online across Phases 1 & 2. Modules M07–M24 are queued for upcoming tasks.