Professional Summary
Trilingual (English, Japanese, Korean) and RHCSA-certified Linux Systems Administrator with a strong foundation in cybersecurity (CompTIA Security+ in progress). Hands-on experience designing, provisioning, and automating enterprise-grade virtualization infrastructure using Infrastructure as Code (IaC) tools like Terraform and Ansible on Red Hat Enterprise Linux (RHEL) 10 downstreams.
Proven ability to automate server configuration management, troubleshoot containerized workloads, establish directory service domains, and secure hybrid network access utilizing tunnels with zero open inbound ports.
Homelab v3 Infrastructure Topology
A fully automated private cloud environment deployed from a bare-metal baseline. Virtual resources are provisioned on the AlmaLinux host using Terraform (KVM/Libvirt provider) and configured using containerized Ansible playbooks.
freeipa.lab.local
172.30.1.85 [AlmaLinux 10]
Identity Provider, LDAP Authentication, BIND DNS Server, PKI CA Realm
portfolio.lab.local
172.30.1.93 [Debian 12]
Nginx Web Server, Prometheus Metrics, Grafana Analytics, Cloudflared Tunnel
minecraft.lab.local
172.30.1.91 [Debian 12]
Dedicated Minecraft Game Server, Playit.gg Secure Tunnel Agent
Systems Engineering Projects
Enterprise Hybrid IaC Virtualization Homelab
Jul 2025 - PresentAutomated Private Cloud & Infrastructure Deployment
- Bare-Metal Hypervisor & IaC Provisioning: Deployed a headless AlmaLinux 10 KVM hypervisor on physical hardware with LVM storage optimization. Automated UEFI-based VM provisioning using Terraform and Libvirt, resolving x86-64-v3 CPU microarchitecture requirements via host-passthrough and IDE deprecation using custom virtio-scsi disk mappings.
- Configuration Management & DevSecOps: Engineered Ansible playbooks to automate hypervisor setup, timezone sync, host preparation, user provisioning, and service lifecycles. Secured sensitive credentials using AES-256 encrypted Ansible Vault files and utilized SSH agent socket forwarding for keyless domain authentication.
- Centralized Identity & DNS Management: Configured FreeIPA (LDAP, Kerberos, BIND DNS, PKI CA) on a dedicated VM, automatically enrolling all VM clients. Automated nmcli client DNS redirection and configured PAM automatic user home directory creation (--mkhomedir).
- Secure Ingress, Tunnels & Observability: Deployed secure Cloudflare Tunnels to expose the portfolio web server and Grafana dashboard externally, and configured Playit.gg for secure Minecraft game tunneling. Orchestrated Node Exporter, Prometheus, and Grafana across all nodes for centralized cluster telemetry and monitoring.
Technical & Support Experience
Coach
Dec 2024 - Jun 2025Goeup Kendo Hall - Yangju, South Korea
Leadership and instruction for students and adults. Built team communication, safety standards, and structured drill sessions.
Academic Tutor
Apr 2016 - Oct 2025Pacific Core Academy & Independent - Honolulu, HI
Guided students through complex computer science and math concepts. Tracked learning sessions and compiled student growth profiles.
Bilingual Customer Service Representative
Feb 2021 - May 2021HCL Technologies - Honolulu, HI
- Provided bilingual technical support in Japanese and English to certification exam candidates, troubleshooting workstation configurations and local network connectivity issues during high-stakes testing.
- Verified client identities and managed profile compliance in accordance with NDA guidelines and privacy regulations.
- Utilized Microsoft Excel for post-examination session tracking, reporting, and logs.
Bilingual 2-1-1 Specialist & Customer Service Representative
Oct 2020 - Jan 2021Aloha United Way 211 - Honolulu, HI
- Delivered bilingual customer service support in English and Japanese for Hawaii's statewide 211 helpline, connecting callers with vital community health, housing, and social services.
- Triaged high-volume inbound calls, conducted intake assessments, and navigated resource databases to provide accurate, timely agency referrals.
- Maintained detailed call logs and client case data while strictly adhering to privacy and confidentiality standards.