Karel Zelinka

Prepared HLD deployment documentation for a confidential financial-services risk application on GCP, including GKE infrastructure sizing and resource estimates. Documented Docker container image requirements and integration dependencies for deployment to the Kubernetes environment.

Worked as a CodeNOW cloud engineer on a platform enabling Java developers to quickly create Kubernetes environments. Had direct daily contact with the CodeNOW creator and main architect, learning the product and participating in customer projects.

Scanned 200+ RHEL nodes with Trivy to identify critical vulnerabilities and developed advanced scripts for vulnerability checks and security automation. Automated Black Duck SRM integration and compliance reporting using Bash, and enforced CIS benchmarks across OpenShift clusters.

Deployed OKD 4 on Hyper-V, replicating OpenShift security for cost-sensitive teams, and integrated Kafka via Strimzi Operator with mTLS encryption and RBAC controls. Performed latency troubleshooting and memory issue mitigation across client environments.

Built Confluent Kafka clusters from scratch with TLS encryption and audit logging, and created HLD/LLD documentation for cross-departmental alignment. Integrated Prometheus/Grafana for real-time threat detection and sized systems to handle 50K+ events/sec while maintaining GDPR compliance.

Automated cloud provisioning via Terraform with embedded security policies and implemented Nomad for secure container orchestration in multi-cloud environments. Enforced image signing in CI/CD pipelines and hardened AWS EKS clusters with network policies and runtime tools.

Implemented a SIEM alternative to ArcSight and built connected on-premises and GCP Confluent Kafka platforms, migrating Kafka to GKE. Automated global ArcSight SmartConnector monitoring with Python and Stella scripts, and scripted VMAX HDD-to-SSD storage migration with zero downtime.

Diagnosed and resolved complex ArcSight connector failures for 50+ financial institutions within 2-hour SLA windows. Developed custom correlation rules to detect APT activities in military networks with 99.5% accuracy and led remote troubleshooting sessions for government clients.

Upgraded TELCO backend systems with security patches to prevent SIM cloning attacks and redesigned customer portal authentication protocols. Implemented HTTPS enforcement and migrated legacy systems to containerized environments with security baseline controls.

Designed network segmentation strategies isolating payment processing systems and implemented file integrity monitoring for critical SWIFT transaction servers. Automated audit trail generation for SOX compliance and deployed HSM devices for cryptographic key management.

Implemented dynamic data masking for PII fields in customer analytics dashboards and developed RBAC policies restricting data access. Automated anomaly detection scripts and encrypted data pipelines between operational databases and BI reporting systems.

Supported NEC-delivered enterprise IT infrastructure at the TPCA automotive plant, working with Solaris/Unix, Windows, networking, monitoring, and backup infrastructure. Provided third-level technical troubleshooting and production systems support.

Implemented row-level security in Teradata to restrict regional data visibility and automated vulnerability scanning for Cognos reporting servers. Hardened Unix servers running supply chain analytics to CIS benchmarks and designed encrypted data channels between European and Asian logistics hubs.

Developed Shell and KornShell (ksh) scripts for self-installation of server racks, automating installation of servers, Cisco switches, and routers. Created repeatable installation and configuration workflows for infrastructure.

Implemented mandatory access controls on SCO Unix systems for government clients and patched SVR4 kernel vulnerabilities. Coordinated international security updates for distributed Unisys A-series systems and developed tape encryption procedures for off-site data backups.

Master's degree in International Relations from Metropolitan University Prague, completed in 2015.

Bachelor's degree in Diplomacy from International Relationship University, completed in 2012.

Studied IT Technologies and Microprocessors at Microprocessor Technologies Institute, completed in 1990.