Morgan Mathis • Work-study Systems, Networks & Security Technician
Designing, securing and operating systems with discipline.
I am completing a professional degree in Network and IT Infrastructure while working at IP INFOPRO, turning technologies into reliable, monitored, backed-up and documented services.
My Home Lab is my main case study: a complete platform I operate over time through audits, reversible changes, SLOs and disaster-recovery planning — without exposing sensitive implementation details.
Network & Systems work-study role • 2025–2026Professional degree in Network & IT Infrastructure
What I deliver
Skills connected to outcomes
Every area is demonstrated by something operated, measured or documented.
Infrastructure & virtualization
Design isolated roles, maintain systems and prepare their reconstruction.
12 Debian VMs, Proxmox VE, PBS and 26 versioned Compose definitions.
ProxmoxDebianDockersystemd
Networking & exposure
Segment usage, control flows and publish only what is required.
Server, DMZ, IoT and administration zones; redundant DNS and a central reverse proxy.
VLANDNSVPNReverse proxy
Operational cybersecurity
Reduce the attack surface while keeping actionable detection signals.
Host hardening, CrowdSec, local filtering, an isolated honeypot and independent re-audits.
HardeningCrowdSecLeast privilegeAudit
Observability & SRE
Measure health, capacity and failure without creating false-green states.
69 targets, 30-day SLOs, Grafana, Prometheus, Loki, Blackbox, Alloy and ntfy alerting.
GrafanaPrometheusLokiSLI/SLO
Backups & continuity
Define what must be restored, in what order and within which target time.
Daily PBS, monitored verification, logical restores, RTO/RPO and runbooks.
PBSDRRTO/RPORollback
Automation & documentation
Turn manual work into repeatable, auditable controls.
A local Git repository, standalone validation gate, idempotent scripts, evidence and a formal change log.
GitBashPythonRunbooks
Flagship project
An enterprise-minded platform at Home Lab scale
Its value comes from how the platform is designed, operated and recovered — not from the number of tools.
Design → Operate → Secure → Document
A complete infrastructure, with evidence and acknowledged limits
Virtualization, segmented networking, DMZ exposure, DNS, observability, backups, administration access, smart home and documentation are treated as one system.
- Complete audits and independent re-audits retained
- Docker reproducibility and a Git source of truth
- DR, RTO/RPO and residual debt documented
Methodology
Change without losing control
A change discipline applied to the platform and to professional work.
- 01
Observe
Real state, dependencies, metrics and risk before making a decision.
- 02
Back up
Configuration, data and last known-good state with verified integrity.
- 03
Prepare rollback
A written, executable return path before the first change.
- 04
Change minimally
Limited blast radius, one component at a time, without hiding alerts.
- 05
Validate
Syntax, service, user journey, logs and several monitoring intervals.
- 06
Prove & document
Change log, hashes, independent re-audit and explicit residual debt.
Concrete outcomes
Three examples of engineering work
Problem, decision, outcome: tools remain secondary.
Reproducible Docker
- Challenge
- 26 scattered projects and runtime parameters that were difficult to rebuild.
- Outcome
- 49 services aligned with canonical Compose, pinned images and a Git validation gate.
49/49 aligned • 47 digest-pinned images • 2 controlled builds
High-signal monitoring
- Challenge
- Remove duplication, structurally false probes and silent alert failures.
- Outcome
- Rationalized targets, visible Error/NoData states, local Proxy health and capacity reviews.
69/69 targets • 30-day SLO • bounded Loki metrics
Honest disaster recovery
- Challenge
- Move from existing backups to an ordered, measurable recovery process.
- Outcome
- Tiered RTO/RPO, dependencies, runbooks and isolated tests without pretending a single node is highly available.
100% expected PBS coverage • confirmed verify • documented limits
Experience
From the Home Lab to real operations
A consistent path across education, personal operations and professional assignments.
Sep. 2025 — Aug. 2026
Network & Systems work-study technician
IP INFOPROWindows Server, Active Directory, GPO, user rights, L1/L2 support, VLANs, VPNs, active equipment, backups and operational maintenance.
Jan. — Feb. 2025
Network & Systems intern
CircetNetwork diagnostics on security and switching equipment, troubleshooting and routine Windows Server operations.
2022 & 2024
Technical internships
Local government organizationsActive Directory, GPO, workstation deployment and switching-infrastructure work.
Professional degree in Network & IT Infrastructure — 2025–2026
Following a BTS SIO SISR diploma awarded with honours.
Let's talk
Looking for someone who structures before acting?
I can walk through my architecture decisions, validation evidence and approach to risk.
Infrastructure, networking, cybersecurity, monitoring or continuity: let's discuss the need and the method, not just the tools.