Fahmi Kemal fahmikemal

Fahmi Kemal

DevOps & Systems Engineer · Cloud Infrastructure · Cybersecurity

┌──(fahmikemal@cloud-edge)-[~]
└─$ whoami --all
Name            : Fahmi Kemal
Specialization  : DevOps · Cloud & Virtualization · Cybersecurity · Systems Tooling
Core Focus      : Enterprise HCI Architecture · Zero-Trust Overlay Mesh · GitOps
Systems & Tools : Linux (RHEL/Debian) · Go · Kubernetes · Proxmox · Podman · Harvester
Status          : Building reliable, high-availability & secure infrastructure

💼 Engineering Architecture & Technical Competencies

☁️ Virtualization & Enterprise Cloud

OpenShift → Harvester HCI: Architectural migration planning, live workload transitions, hyperconverged storage/compute configuration, and post-migration validation.
Kubernetes → Proxmox VE & Docker Swarm: Migrated containerized workloads into high-availability VM topologies orchestrated via Docker Swarm and Kubernetes clusters.
Cluster Operations: Proxmox VE cluster tuning, compute virtualization, and automated container lifecycle monitoring.

🔄 GitOps & CI/CD Delivery

Declarative GitOps: Continuous deployment and synchronization powered by Argo CD and Jenkins pipelines.
Self-Hosted Code Repositories: Enterprise collaboration and repository governance via Gitea and Forgejo.
CI/CD Security Quality Gates: Automated test suites, policy enforcement, container image scanning, and release automation via GitHub Actions & GoReleaser.

🌐 Networking & Zero-Trust Mesh

Headscale Private Mesh Network: WireGuard-powered zero-trust overlay network providing seamless and encrypted remote access to isolated private infrastructure.
Nginx Reverse Proxy & Edge Routing: Multi-tenant Nginx Proxy Manager topologies routing internal microservices and domain suites safely through a single public IP.
Network Systems: IP phone/PBX integrations, routing tables, and perimeter firewall security.

🛡️ Cybersecurity & Threat Intelligence

Penetration Testing & Bug Bounty: Web application vulnerability identification, exploitation proofs-of-concept, structured executive reports, and remediation guidance.
Threat Detection & SIEM: Enterprise threat identification and telemetry analysis utilizing IBM QRadar.
Threat Intelligence Analysis: Systematic indicator collection, IOC mapping, proactive threat modeling, and adversary behavior analysis.

🚀 Featured Systems & Open-Source Engineering

📦 quadman

World-class Terminal UI for rootless Podman Quadlet units & systemd lifecycle management.

Direct integration with systemd's generator architecture — zero socket or daemon overhead required.
Embedded Wish v2 SSH daemon (quadman serve), fuzzy Command Palette (Ctrl+P), and real-time journalctl streaming.
Enterprise-grade quality: 100% automated PTY end-to-end tests (81/81 scenarios pass), race-free concurrency, and multi-arch releases.

🔍 subcollector

High-throughput passive and active subdomain intelligence & reconnaissance engine.

Concurrent worker-pool architecture designed for rapid attack surface discovery.
Built for penetration testers and threat intelligence analysts to aggregate multi-source OSINT.
High-speed deduplication, wildcard resolution handling, and structured JSON output.

💻 Technology & Platform Matrix

Domain	Technologies & Frameworks
Virtualization & HCI	`Harvester HCI` · `Proxmox VE` · `OpenShift` · `KVM/QEMU`
Containers & Orchestration	`Kubernetes` · `Docker Swarm` · `Podman (Quadlets)` · `Docker`
CI/CD & GitOps	`Argo CD` · `Jenkins` · `GitHub Actions` · `Forgejo` · `Gitea`
Networking & Security	`Headscale (WireGuard Mesh)` · `Nginx Proxy Manager` · `IBM QRadar SIEM` · `Kali Linux`
Programming & Scripting	`Go` · `Bash / Shell` · `Python` · `Rust` · `SQL`
Operating Systems	`Red Hat Enterprise Linux (RHEL)` · `Ubuntu Server` · `Debian`

📊 Telemetry & Activity

_{Engineered for reliability, resilience, and security. Focused on modern cloud infrastructure, automation, and systems tooling.}
_{🌐 kemal.id · 💼 linkedin.com/in/fahmikemal · 📧 fahmi@kemal.id}

Navigation Menu