Infrastructure Engineer

Bobby Abellana

Field Engineer & Infrastructure Lead — I run production Linux infrastructure and lead incident response for distributed, mission-critical environments.

Open to new roles · San Jose / Bay Area 8+ yrs infrastructure & security 3 sites US · Greece · India 6× CompTIA certified B.S. Cybersecurity
Bobby Abellana
01

Who I am

Infrastructure engineer with 8+ years operating production Linux systems, identity platforms, multi-site networks and security operations across managed service environments. I’m currently infrastructure lead for a semiconductor design client spanning three sites in the United States, Greece and India — 5 bare-metal EPYC hypervisors, 23 virtual machines, 8 network segments, 102 users. I led incident command on a 54-day intrusion there, from containment through fleet-wide forensic evidence collection to written executive reporting. Most of my work sits where identity meets infrastructure: making Entra ID authoritative across per-site FreeIPA realms, replacing per-user VPN certificates with a self-hosted zero-trust mesh, and standardising site builds on a hardened, Kickstart-defined golden image so a new site comes up from one definition instead of a manual install.

02

The stack I work in

◆ Linux & Systems

LinuxAlmaLinuxRHELCentOSWindows ServersystemdSSSDKickstartPXE BootCIS HardeningZFSNFSautofsIPMI / BMC

◆ Identity & Access Management

FreeIPAKerberosLDAPHBACKeycloak (OIDC)SAMLSCIMMicrosoft Entra IDOktaActive DirectorySingle Sign-OnConditional AccessMFA

◆ Monitoring & Incident Response

PrometheusGrafanaCaddyLog AnalysisIncident ResponseIncident CommandRunbook AuthoringDisaster Recovery24×7 On-CallTechnical Documentation

◆ Networking

TCP/IPUDPDNSDHCPHTTP/HTTPSICMPSubnettingVLANDMZRouting & SwitchingWireGuardNetBirdOpenVPNSite-to-Site VPNSonicWallCiscoMerakiUbiquiti

◆ Virtualization & Cloud

VMware vSphere / ESXiProxmoxKVM / libvirtHyper-VMicrosoft AzureMicrosoft 365Exchange Online

◆ Security

Digital ForensicsEvidence HandlingMicrosoft SentinelWazuhSentinelOneMicrosoft DefenderKQLVulnerability ManagementZero TrustPCI-DSS / HIPAA / SOX

◆ Automation & Tooling

BashPythonPowerShellGitREST APIsDockerOkta WorkflowsGoogle Apps ScriptPower Automate

◆ AI Infrastructure

Retrieval-Augmented GenerationVector DatabasesLarge Language Modelsllama.cppn8nLocal Inference
03

Where I’ve done it

Field Engineer, Infrastructure Lead · Jumpstart Technology Jun 2023 — Present
Managed Service Provider · San Jose, CA — dedicated architect for a Tier-1 Silicon Valley VC firm, and infrastructure lead for its semiconductor portfolio companies and multiple high-growth startups
  • Incident command: Led containment and forensic investigation of a 54-day intrusion at a semiconductor design client — air-gapped the site at the perimeter, collected 695 MB of independently verifiable evidence read-only across 5 bare-metal servers and 23 virtual machines with SHA-256 manifests, cleared the internal fleet, and reported scope and priorities to executive leadership in writing.
  • Distributed environment: Infrastructure lead for a chip-design environment across three sites in the United States, Greece and India — 5 EPYC hypervisors up to 192 threads / 2 TB RAM, an NVIDIA Tesla V100 node, ~100 TB NVMe and SSD, 23 VMs, 8 network segments, 102 users, ZFS and NFS storage, FlexLM licensing, and ThinLinc / Guacamole remote access.
  • Infrastructure as code: Authored a Kickstart-defined AlmaLinux 9 golden image — CIS Level 1 hardened with deviations enumerated on every host, shipping site-agnostic and unenrolled so identity and mesh join happen at first boot, making a new site build reproducible from one definition instead of a manual install.
  • Zero-trust networking: Replaced per-user OpenVPN certificates with a self-hosted NetBird / WireGuard mesh, operating the full control plane including management, signal, relay, TURN and dashboard, with Keycloak federated to FreeIPA so access follows identity and group policy rather than certificate distribution.
  • Observability: Operate an identity-integrated Prometheus and Grafana stack with per-group role-based access behind a Caddy TLS reverse proxy, with alerting on backup success, license service health and authentication availability.
  • Identity & automation: Hardened IAM across FreeIPA, Kerberos, Entra ID and Okta with SSO, Conditional Access and MFA; currently building Entra-to-FreeIPA federation with SCIM provisioning. Onboarding automation via Okta Workflows, Google Apps Script and Power Automate cut zero-touch provisioning from an hour to five minutes.
  • AI infrastructure: Architected a production private RAG pipeline (n8n orchestration, a vector database, and local llama.cpp models) correlating helpdesk tickets against known CVEs and remediation steps, cutting vulnerability triage time by 80%.
  • Virtualization: Leading a full-scale VMware-to-Proxmox migration to reduce vendor and licensing risk; modernized legacy Windows Server 2012 / 2016 environments to hardened Windows Server 2022.
  • Client scaling: Architected and managed core infrastructure for multiple startup clients scaling from 10 to 100+ employees, owning network, virtualization, identity and security stacks end to end.
  • Prior incidents: Lead local technical resource during two security incidents at the venture capital firm, working alongside external forensic teams to identify entry points and remediate threats.
Systems Administrator · Wired Solutions Jan 2022 — Jun 2023
MSP · Incline Village, NV — 15+ high-density business & ultra-high-net-worth client environments
  • Provided Tier 3 support across Azure, Microsoft 365, and Cisco Meraki for 15+ clients.
  • Led remediation of a breached casino/gaming environment; forensic log analysis to determine entry points and purge threat actors.
  • Deployed networking across Meraki, Ubiquiti & Cisco; site-to-site VPN; VoIP (RingCentral, 8x8, Cisco Unity); Verkada rollout across charter schools.
PC Support Specialist · Barton Memorial Hospital (via Blue Ribbon Staffing) 2021
Healthcare IT · South Lake Tahoe, CA
  • Help desk & break/fix in a healthcare environment — Active Directory, Windows 10, EPIC, and peripherals.
Application Security Analyst · TEKsystems (AEGON) 2018 & 2019
Enterprise security · Cedar Rapids, IA
  • Enforced PCI-DSS, HIPAA & SOX compliance via Active Directory and IBM AS/400 security administration; supported integration of acquired companies.
04

Field notes

Structured cabling and patch-panel buildout

Structured cabling & patch-panel buildout

Clean, fully labeled, and documented — every drop traceable. The part of the job that never shows up in a spec sheet, but keeps a network maintainable for years and makes the next person’s job easier.

Structured CablingPatch PanelsCat6 / 6eLabeling & Docs
05

Education & certifications

◆ Education

B.S., Cybersecurity & Information Assurance
Western Governors University · 2020 – 2023
Aligned to NIST, ISO 27001 & HIPAA frameworks.

◆ Certifications

CySA+PenTest+Security+ Network+A+Project+ ITIL v4
06

Beyond work

A decade-plus chasing winters and water in the Sierra — splitboarding the backcountry, sailing Lake Tahoe, and logging miles through the high country.

07

Let’s talk

Based in San Jose, CA — open to roles across the Bay Area. Always happy to talk infrastructure.