Scope
Projects span DNS automation, certificate lifecycle management, secrets handling, self-hosted collaboration platforms, identity management, and HPC infrastructure support.
- Automated BlueCat DNS configuration across university infrastructure via Ansible.
- Deployed a certificate handler to automate Let’s Encrypt issuance and renewal (ACME protocol) across managed machines.
- Deployed FreeIPA for centralised identity management, including DNS integration and user/host lifecycle administration.
- Started implementing machine-to-machine encryption using OpenBao and Vaultwarden for secrets management.
- Provided support for Apptainer-based HPC workloads.
This role marks a deliberate transition from laboratory work into infrastructure and security engineering, building on the automation instincts developed during research.