Infrastructure and DevOps Engineer. Eight years keeping production systems fast, secure and online — 100+ physical and virtual servers, 200+ hosted environments, 99.9% uptime.

I work the full depth of the stack: the hypervisor underneath, the Linux fleet on top of it, the web and mail services users actually touch, and the automation and monitoring that stop all of it needing me at 3am.

🇬🇧 Relocating to the United Kingdom in September 2026 — full right to work, no visa sponsorship required. Open to Infrastructure, DevOps, Cloud and Site Reliability roles.

flowchart LR
    U([Users]) --> DNS["BIND9<br/>DNS"]
    DNS --> FW["Firewall<br/>firewalld / UFW"]
    FW --> RP["nginx<br/>reverse proxy + TLS"]

    RP --> WEB["Apache / nginx<br/>vhosts + cPanel/WHM"]
    RP --> K8S["Docker / Kubernetes"]
    RP --> MAIL["Postfix / Exim<br/>SPF, DKIM, DMARC"]

    WEB --> SQL[("MySQL / PostgreSQL<br/>primary + replica")]
    K8S --> OBJ[("MinIO<br/>S3-compatible")]

    SQL --> ESXI["VMware vSphere<br/>ESXi + vCenter<br/>LVM / XFS"]
    OBJ --> ESXI
    MAIL --> ESXI

    OPS["Terraform / Ansible<br/>GitHub Actions<br/>Zabbix / Grafana<br/>Backup + DR"] -.-> ESXI

Virtualisation VMware vSphere — ESXi host and cluster administration, vCenter, resource pools, snapshot lifecycle and consolidation. PowerCLI automation for provisioning, capacity reporting, IOPS analysis and bulk operations across large estates.

Linux RHEL, CentOS, Rocky, Ubuntu and Debian at scale. LVM and filesystem management, systemd unit authoring, SELinux, kernel tuning via sysctl, and performance diagnosis with vmstat, iostat, sar and lsof — including the disk-full and I/O-wait faults that present as something else entirely.

Automation and infrastructure as code Ansible playbooks and roles, Terraform for AWS provisioning, GitHub Actions pipelines, and a good deal of Bash and PowerShell where a script is simply the right answer.

Containers and orchestration Docker and Compose, Kubernetes manifests — deployments, services, ingress, ConfigMaps and persistent volumes.

Web and mail nginx and Apache — virtual hosts, reverse proxying, TLS termination, header and module hardening. Mail transport on Postfix and Exim with SPF, DKIM and DMARC configured properly, because deliverability problems are rarely where people look first. cPanel and WHM administration.

Data MySQL primary/replica replication, PostgreSQL streaming replication, and MinIO for S3-compatible object storage behind an nginx proxy.

Networking and security BIND9 authoritative DNS and delegation, firewall design across firewalld, UFW and iptables, OpenVPN, SSH key lifecycle and hardening, and TLS end to end — CSR generation, commercial certificate installation and Let's Encrypt automation.

Observability and recovery Zabbix, Grafana and CheckMK for metrics and alerting. Log analysis with journalctl and rsyslog. Backup and disaster recovery designed around tested restores rather than successful backup jobs — the two are not the same thing.

Deepening Kubernetes and AWS ahead of the move, and writing operational runbooks — the kind of documentation that lets someone else resolve an incident at 2am without phoning you.

• Portfolio and DevOps Lab — anupkhanal.info.np
• LinkedIn — anup-khanal-devops