Systems & Infrastructure

Derek
Garland

IT Systems & Infrastructure · Multi-Site Operations
// the curiosity doesn't clock out
LocationYoungstown, OH · Remote
Fleet1,700+ devices · 1,100+ sites
Support500+ users · 90+ sites
CertsA+ · Network+ · Security+
DegreeB.S. Information Technology
StatusOpen to new roles

I administer a 1,700+ device national POS program across 1,100+ seasonal locations. I'm also the internal IT support for 500+ users across corporate, warehouse, retail, and remote sites nationwide. Then I go home and maintain a 4-node Proxmox cluster with its own SIEM, single sign-on, and monitoring.

Resume & Skills Explore the Network

Experience

500+Users · 90+ sites

Multi-Site IT Support

Tier 1 and 2 support by phone, ticket, and deskside, including S2K ERP, plus hands-on field deployments: full network racks, firewalls, switching, POS, and cabling across 13 new store builds and 39 network upgrades nationwide.

Active DirectoryWindows ServerPhysical InfraSystem 2000Multi-site
1,700+Devices · 1,100+ loc

MDM Fleet Operations

Administrator of a national, seasonal mobile POS program: roughly 1,700 iPad minis and Square hardware across 1,100+ locations per main season. JAMF Pro, Apple Business Manager, Advantix cellular, and 19 Square for Retail accounts, administered start to finish.

JAMF ProApple ConfiguratorSquare POSAdvantix
4Node cluster

Homelab · Self-built

Four Proxmox VE 9.1 nodes on Ceph storage. Wazuh takes syslog from OPNsense and 9 agents, Authentik holds OIDC for every service including the nodes themselves, Prometheus and Grafana chart all four, and PBS backups are verified rather than assumed.

ProxmoxCephWazuhAuthentik

How it's all connected

From the ISP edge to every running service: each physical device, managed switch, VLAN boundary, and service path. Designed, deployed, and monitored without a team behind it.

WAN / internet: active flow inbound through firewall
Lab VLAN path: isolated homelab network segment
Cluster fabric: all 4 Proxmox nodes as equal peers
Persistent mount: NFSv3 backup path to Synology, always active
Standard ethernet: ordinary wired connections
Planned run: cabled but not yet active
Home network topology: ISP modem to OPNsense firewall, through Dell and Luxul managed switches, down to four Proxmox nodes, a Synology NAS, and personal devices on a separate VLAN. INTERNET EDGE FIREWALL CORE SWITCH DISTRIBUTION SERVICES VLAN · LAB SEGMENT ISP Modem Edge · WAN uplink internet OPNsense Baremetal firewall · VLAN · syslog firewall Dell PowerConnect 2824 Core managed switch · 24-port core switch Access Point Wireless · personal devices wireless Luxul XMS-2624P Lab switch · 26-port · PoE lab switch Nvidia Shield Pro Media · wall port endpoint Run 3 Not yet connected future PVE Node 1 Proxmox VE PVE Node 2 Proxmox VE PVE Node 3 Proxmox VE PVE Node 4 Proxmox VE Synology NAS PBS target · NFSv3 PC 1 Personal PC 2 Personal

Service inventory

ServiceCategoryStackStatus
Proxmox ClusterHypervisorPVE 9.1Ceph4 nodesonline
Wazuh SIEMSecurity4.11.29 agentsOPNsenseonline
Authentik SSOIdentityOIDCDocker5 providersonline
Grafana · PrometheusMonitoringNode exporterAll nodesonline
NPM · Cloudflare TunnelIngressLet's Encrypt7 routesonline
PBS · SynologyBackupDailyNFSv3All VMs+CTsonline
AdGuard HomeDNSLXCNetwork-wideonline
OPNsenseFirewallBaremetalVLANSyslog→Wazuhonline
ImmichMediaLXCPhoto synconline
Uptime KumaMonitoringDocker12 monitorsPublic statusonline

Status is read live from my own monitoring.

Let's talk

Everything above is running right now and I maintain all of it. The writeups go through how each piece is built and where it broke on the way there.

LinkedIn · Derek Garland GitHub · dadminlab Full contact page