Sho Ishida

Professional Summary

Trilingual (English, Japanese, Korean) and RHCSA-certified Linux Systems Administrator with a strong foundation in cybersecurity (CompTIA Security+ in progress). Hands-on experience designing, provisioning, and automating enterprise-grade virtualization infrastructure using Infrastructure as Code (IaC) tools like Terraform and Ansible on Red Hat Enterprise Linux (RHEL) 10 downstreams.

Proven ability to automate server configuration management, troubleshoot containerized workloads, establish directory service domains, and secure hybrid network access utilizing tunnels with zero open inbound ports.

Homelab v3 Infrastructure Topology

A fully automated private cloud environment deployed from a bare-metal baseline. Virtual resources are provisioned on the AlmaLinux host using Terraform (KVM/Libvirt provider) and configured using containerized Ansible playbooks.

freeipa.lab.local

172.30.1.85 [AlmaLinux 10]

Identity Provider, LDAP Authentication, BIND DNS Server, PKI CA Realm

portfolio.lab.local

172.30.1.93 [Debian 12]

Nginx Web Server, Prometheus Metrics, Grafana Analytics, Cloudflared Tunnel

minecraft.lab.local

172.30.1.91 [Debian 12]

Dedicated Minecraft Game Server, Playit.gg Secure Tunnel Agent

navidrome.lab.local

172.30.1.92 [Debian 12]

Navidrome Music Streamer, Rclone Google Drive FUSE Mount Integration

Systems Engineering Projects

Enterprise Hybrid IaC Virtualization Homelab

Jul 2025 - Present

Automated Private Cloud & Infrastructure Deployment

Bare-Metal Hypervisor & IaC Provisioning: Deployed a headless AlmaLinux 10 KVM hypervisor on physical hardware with LVM storage optimization. Automated UEFI-based VM provisioning using Terraform and Libvirt, resolving x86-64-v3 CPU microarchitecture requirements via host-passthrough and IDE deprecation using custom virtio-scsi disk mappings.
Configuration Management & DevSecOps: Engineered Ansible playbooks to automate hypervisor setup, timezone sync, host preparation, user provisioning, and service lifecycles. Secured sensitive credentials using AES-256 encrypted Ansible Vault files and utilized SSH agent socket forwarding for keyless domain authentication.
Centralized Identity & DNS Management: Configured FreeIPA (LDAP, Kerberos, BIND DNS, PKI CA) on a dedicated VM, automatically enrolling all VM clients. Automated nmcli client DNS redirection and configured PAM automatic user home directory creation (--mkhomedir).
Secure Ingress, Tunnels & Observability: Deployed secure Cloudflare Tunnels to expose the portfolio web server and Grafana dashboard externally, and configured Playit.gg for secure Minecraft game tunneling. Orchestrated Node Exporter, Prometheus, and Grafana across all nodes for centralized cluster telemetry and monitoring.

Source Repositories →

Technical & Support Experience

Bilingual Customer Service Representative

Feb 2021 - May 2021

HCL Technologies - Honolulu, HI

Provided bilingual technical support in Japanese and English to certification exam candidates, troubleshooting workstation configurations and local network connectivity issues during high-stakes testing.
Verified client identities and managed profile compliance in accordance with NDA guidelines and privacy regulations.
Utilized Microsoft Excel for post-examination session tracking, reporting, and logs.

Coach

Dec 2024 - Present

Goeup Kendo Hall - Yangju, South Korea

Leadership and instruction for students and adults. Built team communication, safety standards, and structured drill sessions.

Academic Tutor

Apr 2020 - Oct 2023

Pacific Core Academy & Independent - Honolulu, HI

Guided students through complex computer science and math concepts. Tracked learning sessions and compiled student growth profiles.