diff --git a/website/index.html b/website/index.html index aaef52f..4fc4984 100644 --- a/website/index.html +++ b/website/index.html @@ -1,36 +1,41 @@ + - + Sho Ishida | Systems Architect & Infrastructure Engineer +
- +

Sho Ishida

Systems Architect & Infrastructure Engineer

- +
- English (Fluent) + English (Native) 日本語 (Native) 한국어 (Native) RHCSA Certified CompTIA Security+ Prep
- + @@ -38,19 +43,24 @@
- +
- +

Professional Summary

- Trilingual (English, Japanese, Korean) and RHCSA-certified Linux Systems Administrator with a strong foundation in cybersecurity (CompTIA Security+ in progress). Hands-on experience designing, provisioning, and automating enterprise-grade virtualization infrastructure using Infrastructure as Code (IaC) tools like Terraform and Ansible on Red Hat Enterprise Linux (RHEL) 10 downstreams. + Trilingual (English, Japanese, Korean) and RHCSA-certified Linux Systems Administrator with a strong + foundation in cybersecurity (CompTIA Security+ in progress). Hands-on experience designing, provisioning, + and automating enterprise-grade virtualization infrastructure using Infrastructure as Code (IaC) tools + like Terraform and Ansible on Red Hat Enterprise Linux (RHEL) 10 downstreams.

- Proven ability to automate server configuration management, troubleshoot containerized workloads, establish directory service domains, and secure hybrid network access utilizing tunnels with zero open inbound ports. + Proven ability to automate server configuration management, troubleshoot containerized workloads, + establish directory service domains, and secure hybrid network access utilizing tunnels with zero open + inbound ports.

@@ -60,11 +70,13 @@

Homelab v3 Infrastructure Topology

- A fully automated private cloud environment deployed from a bare-metal baseline. Virtual resources are provisioned on the AlmaLinux host using Terraform (KVM/Libvirt provider) and configured using containerized Ansible playbooks. + A fully automated private cloud environment deployed from a bare-metal baseline. Virtual resources are + provisioned on the AlmaLinux host using Terraform (KVM/Libvirt provider) and configured using + containerized Ansible playbooks.

- +
- +
@@ -121,13 +133,25 @@

Automated Private Cloud & Infrastructure Deployment

    -
  • Bare-Metal Hypervisor & IaC Provisioning: Deployed a headless AlmaLinux 10 KVM hypervisor on physical hardware with LVM storage optimization. Automated UEFI-based VM provisioning using Terraform and Libvirt, resolving x86-64-v3 CPU microarchitecture requirements via host-passthrough and IDE deprecation using custom virtio-scsi disk mappings.
  • -
  • Configuration Management & DevSecOps: Engineered Ansible playbooks to automate hypervisor setup, timezone sync, host preparation, user provisioning, and service lifecycles. Secured sensitive credentials using AES-256 encrypted Ansible Vault files and utilized SSH agent socket forwarding for keyless domain authentication.
  • -
  • Centralized Identity & DNS Management: Configured FreeIPA (LDAP, Kerberos, BIND DNS, PKI CA) on a dedicated VM, automatically enrolling all VM clients. Automated nmcli client DNS redirection and configured PAM automatic user home directory creation (--mkhomedir).
  • -
  • Secure Ingress, Tunnels & Observability: Deployed secure Cloudflare Tunnels to expose the portfolio web server and Grafana dashboard externally, and configured Playit.gg for secure Minecraft game tunneling. Orchestrated Node Exporter, Prometheus, and Grafana across all nodes for centralized cluster telemetry and monitoring.
  • +
  • Bare-Metal Hypervisor & IaC Provisioning: Deployed a headless AlmaLinux 10 + KVM hypervisor on physical hardware with LVM storage optimization. Automated UEFI-based VM + provisioning using Terraform and Libvirt, resolving x86-64-v3 CPU microarchitecture requirements via + host-passthrough and IDE deprecation using custom virtio-scsi disk mappings.
  • +
  • Configuration Management & DevSecOps: Engineered Ansible playbooks to + automate hypervisor setup, timezone sync, host preparation, user provisioning, and service + lifecycles. Secured sensitive credentials using AES-256 encrypted Ansible Vault files and utilized + SSH agent socket forwarding for keyless domain authentication.
  • +
  • Centralized Identity & DNS Management: Configured FreeIPA (LDAP, Kerberos, + BIND DNS, PKI CA) on a dedicated VM, automatically enrolling all VM clients. Automated nmcli client + DNS redirection and configured PAM automatic user home directory creation (--mkhomedir).
  • +
  • Secure Ingress, Tunnels & Observability: Deployed secure Cloudflare Tunnels + to expose the portfolio web server and Grafana dashboard externally, and configured Playit.gg for + secure Minecraft game tunneling. Orchestrated Node Exporter, Prometheus, and Grafana across all + nodes for centralized cluster telemetry and monitoring.
@@ -139,7 +163,7 @@

Technical & Support Experience

- +

Bilingual Customer Service Representative

@@ -147,8 +171,11 @@

HCL Technologies - Honolulu, HI

    -
  • Provided bilingual technical support in Japanese and English to certification exam candidates, troubleshooting workstation configurations and local network connectivity issues during high-stakes testing.
  • -
  • Verified client identities and managed profile compliance in accordance with NDA guidelines and privacy regulations.
  • +
  • Provided bilingual technical support in Japanese and English to certification exam candidates, + troubleshooting workstation configurations and local network connectivity issues during high-stakes + testing.
  • +
  • Verified client identities and managed profile compliance in accordance with NDA guidelines and + privacy regulations.
  • Utilized Microsoft Excel for post-examination session tracking, reporting, and logs.
@@ -159,7 +186,8 @@ Dec 2024 - Present

Goeup Kendo Hall - Yangju, South Korea

-

Leadership and instruction for students and adults. Built team communication, safety standards, and structured drill sessions.

+

Leadership and instruction for students and adults. Built team communication, safety + standards, and structured drill sessions.

@@ -168,7 +196,8 @@ Apr 2020 - Oct 2023

Pacific Core Academy & Independent - Honolulu, HI

-

Guided students through complex computer science and math concepts. Tracked learning sessions and compiled student growth profiles.

+

Guided students through complex computer science and math concepts. Tracked learning + sessions and compiled student growth profiles.

@@ -179,13 +208,13 @@

Red Hat Certified System Administrator

- +
-
+
- +

CompTIA Security+

In Progress

Target Exam: August 2026

-

Meets DoD 8570/8140 IAT Level II Baseline

+

Meets DoD 8570/8140 IAT Level II + Baseline

@@ -369,4 +401,5 @@ +