Senior Windows & Linux Server Administrator · Automation & DevOps Engineer
Windows (.EXE) & Android Application Developer · Cyber Security & PCI DSS Analyst
Prague, Czech Republic · github.com/GinCz · linkedin.com/in/gincz

Hi, I'm VladiMIR (aka GinCz) — a Senior Systems Architect, Infrastructure Engineer, and Software Developer with 20+ years of hands-on experience managing high-availability enterprise environments, designing secure network perimeters, and building native desktop and mobile applications.

🏛️ Tier-1 Enterprise Track Record: Proven infrastructure architecture and operational support for enterprise leaders: Škoda Auto, Tesco, Kaufland, Nestlé, Česká spořitelna, and National Theatre Prague.

• 🛡️ Cyber Security & Compliance: Certified PCI DSS Analyst, GDPR compliance auditor. Creator of IPGuard — an advanced multi-layer security framework (ipset + CrowdSec + Fail2Ban) with Cloudflare WAF integration.
• 🖥️ Enterprise Server Infrastructure: Deep expertise in Windows Server (2000–2025) and Linux (Ubuntu LTS, Debian, RHEL) across bare-metal, VMware ESXi, Hyper-V, AWS EC2, and Oracle Cloud (OCI).
• 🔑 Directory & Identity Services: Comprehensive administration of Active Directory (AD DS), Group Policy Objects (GPO for 2,000+ users), Microsoft 365, Entra ID (Azure AD), and Remote Desktop Services (RDS / Terminal Server).
• 🧠 Enterprise AI Knowledge Base & Central Data Platforms: Architecture and continuous deployment of centralized corporate knowledge bases (BASE ↗) and master routing rules (RULES ↗) with unified multi-model intelligence (Antigravity, Claude, ChatGPT, VS Code).
• 🪟 Native Windows Software Engineering (.EXE): Architecture and compilation of standalone, zero-dependency Windows desktop tools, network diagnostic suites, and background system services in Go (Golang), C# (.NET / WPF / WinForms), Python, and PowerShell GUI (Win32 API, Windows Socket API, Windows Filtering Platform).
• 📱 Mobile Application Development (Android): Native Android apps in Kotlin & Java using Android Jetpack and Clean Architecture. Automated remote headless build & signing pipelines powered by Gradle daemons producing production APK and AAB artifacts (Android APK Suite ↗).
• ⚡ Perimeter & CDN Protection: Enterprise Cloudflare infrastructure: WAF rules, DDoS mitigation, Bot Management, SSL/TLS, DNSSEC, and automated 10/10 email deliverability (SPF, DKIM, DMARC) across 22+ domains.
• 🔐 Encrypted Networking & VPNs: Advanced deployment of modern VPN architectures including Xray (VLESS / Reality), WireGuard, AmneziaWG, and OpenVPN.
• 🗄️ Distributed Storage & Databases: Multi-node Samba (SMB2+) networked storage systems, performance tuning and automated cloud backup/disaster recovery for Microsoft SQL Server, PostgreSQL, and MySQL (70% RTO reduction).
• 🤖 DevOps & AI Workflows: Automated CI/CD pipelines via PowerShell 7, Bash, Python, Docker, GitHub Actions, and integration of AI agentic workflows and indexed knowledge bases.

Comprehensive chronological career track record detailing enterprise systems administration, DevOps, cyber security, and infrastructure engineering:

2004 ─── BANK24.ru (Senior SysAdmin & Banking Security)
  │
2006 ─── EKATERINBURG s.r.o. (Senior Infrastructure Architect & Outsourcing: Škoda Auto, Tesco, Kaufland, Nestlé...)
  │
2018 ─── Novum Global, a.s. (Windows Server 300+ Estate, RDS & Network Administration)
  │
2020 ─── NOTIX s.r.o. (Senior Systems & Network Admin, M365, L2TP, SQL Backup Automation)
  │
2023 ─── Komerční banka (External Cyber Security Penetration Tester & Security Auditor)
  │
Present  EKATERINBURG s.r.o. / B2B Consulting (DevOps, Enterprise AI Platforms, Cloudflare, VPN, Software Dev)

Period: March 2006 – Present
Role: Senior Systems Architect | Enterprise IT Outsourcing & Infrastructure Services | DevOps & Automation
Location: Prague, Czech Republic

• Enterprise Outsourcing & Modernization: Full-cycle infrastructure management and consulting for tier-1 enterprises: Škoda Auto, Tesco, Kaufland, Nestlé, Česká spořitelna, and National Theatre Prague.
• Windows & Linux Server Fleet: Management of bare-metal, VMware ESXi, Hyper-V, and cloud instances (Oracle Cloud OCI, AWS EC2, Netcup) running Windows Server (2000–2025) and Ubuntu/Debian LTS.
• Enterprise Identity & Directories: Active Directory (AD DS), cross-forest trusts, Group Policy Objects (GPO for 2,000+ accounts), Microsoft 365 tenant administration, Entra ID (Azure AD), and Remote Desktop Services (RDS) farms.
• High-Security Networking & Perimeter: Enterprise Cloudflare WAF, DDoS mitigation, Bot Management, SSL/TLS automation, DNSSEC, Fortinet/UniFi firewalling, and high-performance VPN clusters (Xray VLESS/Reality, WireGuard, AmneziaWG, OpenVPN).
• Databases & Disaster Recovery: Microsoft SQL Server, PostgreSQL, and MySQL performance tuning, query optimization, and automated offsite encrypted backups cutting Recovery Time Objective (RTO) by 70%.
• Native Software Engineering & Tooling: Standalone Windows desktop utilities (.EXE in Go, C# .NET/WPF, Python) and native Android applications (Kotlin, Java) compiled via remote headless Gradle pipelines.
• Enterprise AI Knowledge Engineering: Architecture and production operations of centralized AI knowledge bases (BASE ↗) and master prompt/rule routing frameworks (RULES ↗).
• Key Skills & Keywords: Systems Architecture, DevOps, GitOps, CI/CD, Windows Server 2025, Active Directory, GPO, PowerShell 7, Bash, Python, Linux Hardening, VMware ESXi, Hyper-V, Cloudflare WAF, Xray Reality, WireGuard, Samba SMB3, SQL Server, Disaster Recovery, PCI DSS.

Period: April 2020 – February 2026
Role: Senior System Server and Network Administrator | Data Security
Location: Prague, Czech Republic

• Hybrid Infrastructure Operations: Complete administration and security of a distributed infrastructure supporting 200+ workstations (Windows, macOS, Linux, iOS, Android) and 50+ Windows & Linux servers.
• Access Control & Identity: Active Directory, Group Policy Objects (GPO), Microsoft 365 cloud tenant administration, Remote Desktop Services (RDS), and secure L2TP/IPsec VPN access for remote teams.
• Automation & Backup Operations: Automated PowerShell server maintenance routines, automated cloud SQL Server backups, and Let's Encrypt / ZeroSSL automated certificate renewals.
• Incident & Change Management: Adherence to enterprise ITIL standards, rapid L3 troubleshooting, and ticket resolution via corporate ticketing platforms for cross-functional engineering teams.
• Key Skills & Keywords: Hybrid Cloud, Windows Server, Linux Administration, Active Directory, GPO, Microsoft 365, RDS Terminal Server, L2TP VPN, PowerShell Scripting, SQL Backup Automation, ITIL, L3 Troubleshooting, Data Security.

Period: August 2023 – September 2023 & January 2024 – February 2024
Role: External Cyber Security Penetration Tester & Security Auditor
Location: Prague, Czech Republic

• Targeted Penetration Testing: Comprehensive end-to-end security audits and penetration tests on newly commissioned enterprise server environments and banking infrastructure.
• Threat Vector Simulation: Simulated real-world attacks including brute-force penetration, SQL injection, Cross-Site Scripting (XSS), privilege escalation, and lateral network movement.
• Executive Audit & Hardening Guidance: Delivered executive vulnerability audit reports with concrete remediation roadmaps for OS-level hardening, patch management, and firewall/WAF policy enforcement.
• Key Skills & Keywords: Cyber Security, Penetration Testing, Ethical Hacking, Vulnerability Assessment, Threat Simulation, Privilege Escalation, WAF, OS Hardening, PCI DSS Compliance, Banking Security.

Period: March 2018 – February 2019
Role: System Server Administrator | IT & Network Manager | Data Security
Location: Prague, Czech Republic

• Large-Scale Server Estate: Administration and hardening of a multi-site enterprise infrastructure comprising 300+ Windows Servers and 150+ workstations.
• Core Windows Infrastructure: Active Directory (AD DS), Group Policy Objects (GPO), DNS, DHCP, and Remote Desktop Services (RDS / Terminal Server).
• Remote Access & PKI Automation: Developed scripted certificate generation pipelines for multi-user OpenVPN tunnels supporting 150+ remote employees.
• Web & Database Services: IIS web server administration, automated Let's Encrypt SSL certificate issuance, and automated Microsoft SQL Server backup workflows.
• Key Skills & Keywords: Large-Scale Windows Server Estate (300+ servers), Active Directory, Group Policy, RDS, OpenVPN PKI, IIS Web Server, Microsoft SQL Server, Backup Automation, Network Security.

Period: September 2004 – February 2006
Role: Senior Systems Administrator | Server Administrator | Banking Data Security
Location: Yekaterinburg

• Banking Operations Infrastructure: 24/7 high-availability operational support for 450+ client workstations, Linux and Windows server farms, and corporate IP telephony.
• Perimeter & Host Defense: Administration of corporate network firewalls, anti-malware security suites, automated disaster recovery procedures, and specialized banking hardware maintenance.
• Terminal Virtualization: Deployment and day-to-day operation of Citrix terminal environments ensuring strict regulatory compliance, low-latency access, and data isolation.
• Key Skills & Keywords: Banking IT Operations, High Availability (24/7), Citrix Terminal Services, Linux & Windows Server, Perimeter Firewalls, Disaster Recovery, IP Telephony, Enterprise Anti-Malware, Zero Downtime.

• 🇨🇿 Czech: C1 (Full Professional Working Proficiency)
• 🇬🇧 English: B1–B2 (Professional Technical & Working Proficiency)
• 🇷🇺 Russian: Native / Bilingual

Universal Master AI Rules, Token Economy, and Sandboxing for All AI Models (Antigravity, Claude, ChatGPT, VS Code).

• Core Principles for Any AI Model: Strict execution order, two-step verification chain, context economy, anti-lag token management, 2-level caching, strict sandbox boundaries, zero data leaks, auto-bump versioning on changes, clean code architecture.

Production-ready scripts, hardening frameworks, and automation for Linux (Ubuntu 24 LTS & Debian 12) servers.

1. IPGuard Framework: Multi-layer defense combining ipset blacklists, CrowdSec IPS, Fail2Ban, and Cloudflare WAF API synchronization.
2. XRAY & VPN_Amnezia Suite: Production deployment scripts for Xray (VLESS / Reality) with anti-censorship camouflaging, WireGuard, and AmneziaWG.
3. Cloudflare Automation: Real-time edge sync, DDoS mitigation, Bot Management rules, automated DNSSEC, and SSL/TLS certificate lifecycle.
4. Ubuntu 24 LTS & Debian 12 Slim Profiles: Minimalist hardened OS bootstrap, kernel TCP BBR performance tuning, swap & systemd journal optimization.
5. Backup & Disaster Recovery: Encrypted remote backup pipelines (Rclone, Borg, SMB multi-mount), database dump routines, and instant failover automation.
6. System Security & Audit: Live vulnerability auditing, active intruder tracking, memory injection checks, and rootkit detection scripts.
7. Web Server & .htaccess Anti-Bot Shield: Hardened Nginx/FastPanel configs, .htaccess shield against scanner bots, hotlinking, and Layer 7 HTTP floods.

Windows utility scripts and automation for diagnostics, optimization, benchmarking, and network storage management.

1. SMB Multi-Server Automation: High-performance SMB2/SMB3 network share mounter, connection keepalive, speed benchmark, and colored diagnostic status.
2. System & Crypto-Miner Security Audit: Autonomous deep-scan script detecting hidden miners, unauthorized scheduled tasks, persistence registry hooks, and suspicious PowerShell spawns.
3. Windows OS Optimization & Debloat: Telemetry removal, background services debloater, DPC latency optimization, and memory footprint reduction for Windows 10/11 & Server.
4. Automated VPN Client Deployment: Zero-touch silent installation and config injection for Xray VLESS/Reality clients, WireGuard, and Hiddify.
5. Deep System Cleanup Engine: Rapid cleanup script clearing system temp, WinSxS leftovers, browser cache, dump files, and reclaiming tens of gigabytes of disk space.
6. Voice PTT & IDE Automation Suite: Low-latency Push-to-Talk background daemon, hotkey hooks, and Antigravity IDE workflow automations.
7. Remote Support & RustDesk Deployment: Silent unattended setup with automated client ID and private encryption key synchronization to encrypted local and MEGA storage.
8. Windows Update & Component Repair Engine: Automated Windows Update repair, DISM/SFC system component store restoration, and error resolution.

Official Android Applications & APK Suite by VladiMIR Bulantsev & Anti-Gravity AI (Mobile & Android TV).

1. GIN-Cinema: Native Android TV & Mobile streaming cinema engine with curated TOP-33 shelves, TMDB API integration, dual-path backend proxying, and family PIN / hardware device pairing.
2. GIN-TV: Android TV IPTV streaming application with hardware video decoding, automated M3U playlist processing, channel management, and smooth D-Pad remote navigation.
3. GIN-IP (GIN-NetScan): Mobile and Android TV network diagnostic suite, active subnet scanner, open port analyzer, and LAN infrastructure auditor.
4. GIN-VPN: Native Android client with embedded Xray (VLESS Reality) and WireGuard engines, persistent kill-switch, and per-app split-tunneling.
5. GIN-Launcher: Lightweight, ad-free Android TV launcher and remote control dashboard, tailored for high-accessibility smart screens and home automation.

High-performance WordPress infrastructure specifications and custom ultra-lightweight plugins suite (VladiMIR+AI).

• Custom Native Auto-Update Architecture: Built-in lightweight JSON updater (vladimir-ai-updater.php) hosted directly in GitHub, delivering seamless 1-click updates without bloated third-party updater plugins or database spam.
• Production Plugins Suite (13 Standalone Micro-Plugins):
  • 404-410-301 (SEO HTTP 404/410 status with automatic countdown redirect to homepage)
  • classic-editor-tinymce (restores classic editor, disables Gutenberg, unlocks full 2nd-row formatting toolbar)
  • clean-head-meta (strips <head> clutter, hides WP version, disables XML-RPC and emoji scripts, adds author metadata)
  • disable-update-emails (completely blocks automatic core, plugin, and theme update notification email spam)
  • image-resizer (automatically scales large uploads down to 1600×1600 px with crisp 95% JPEG/WebP quality)
  • translit-cyr-lat (high-speed SEO transliteration of Cyrillic and European accents into clean Latin URL slugs)
  • wp-allow-html-cats (enables safe HTML formatting in taxonomy and category descriptions with XSS protection)
  • wp-auto-sku (generates unique non-sequential 5-digit SKUs for WooCommerce with fast storewide SKU search)
  • wp-bulk-delete-clean (high-speed AJAX bulk deletion of posts, products, and categories by date without timeouts)
  • wp-online-counter (live real-time counter of visitors and administrators in the admin bar and user list)
  • wp-seo-micro (ultra-lightweight SEO engine: meta tags, OpenGraph, canonical URLs, and XML sitemaps without database bloat)
  • wp-simple-post-order (native HTML5 drag-and-drop manual reordering of posts, products, and categories)
  • wp-test-email-micro (instant admin-only on-demand SMTP email delivery tester with zero database logging)

The ultimate, maximum-security zero-knowledge encrypted communication platform designed for enterprise organizations and privacy-focused family use.

• Highest Encryption Standard Available Today: Complete End-to-End Encryption (E2EE) safeguarding all interactions — text messaging, group discussions, high-fidelity voice calls, and video streams.
• Peer-to-Peer WebRTC Media Encryption: Real-time voice and video calls encrypted at the packet level directly between peers, preventing man-in-the-middle interception or wiretapping.
• Zero Cloud Logging & Zero Telemetry: No centralized message logs, no analytics tracking, no server-side plaintext data retention, and complete decentralization of communication history.
• Cross-Platform & Multi-Device Sync: Progressive Web App (PWA), desktop browser support, and native Android mobile integration with zero-knowledge cryptographic device pairing.

• 🔗 GitHub: github.com/GinCz
• 💼 LinkedIn: linkedin.com/in/gincz
• 📧 Email: gin@volny.cz
• 📍 Location: Prague metropolitan area, Czech Republic
• 🤝 Engagement Model: B2B Contract (Czech s.r.o. / IČO), Part-Time, Remote / Hybrid, Senior Engineering & Consulting