Linux administration & automation

Red Hat Enterprise Linux and Rocky Linux servers that are secure, patched and identical by design. From a handful of virtual machines to estates of thousands, built with automation so nothing depends on memory or luck.

Why it matters

Servers you can rebuild in minutes, not days

Linux runs most of the world’s critical infrastructure, but hand-built servers drift apart over time. Patches are applied unevenly, configuration lives in someone’s head, and rebuilding a failed machine becomes guesswork.

I build and manage Linux environments the way large, regulated organisations do, scaled to your size. Every server is defined in code with Ansible, patched on a schedule, hardened to CIS Benchmarks and tied into central identity, so you know exactly what is running and who can access it.

This is the same approach used to run an international gaming platform of around 7,000 Red Hat servers, applied with equal care to a business running five.

What’s included

How I can help

01

Server builds and migrations

New RHEL, Rocky Linux and AlmaLinux servers, and migrations from end-of-life versions such as CentOS 7 and RHEL 7, planned to avoid downtime.

02

Patch and lifecycle management

Red Hat Satellite or Foreman for controlled, staged patching with content views and reporting, so updates are tested before they reach production.

03

Security hardening

CIS Benchmark hardening with SELinux enforcing, secure SSH, audit logging and documented, justified exceptions, ready for auditors.

04

Central identity and access

Red Hat Identity Management or FreeIPA for single sign-on, sudo policy, SSH key and host-based access control across every server.

05

Automation with Ansible and Terraform

Infrastructure and configuration defined as code, stored in Git and applied consistently, from a single role to full environment builds.

06

Monitoring and troubleshooting

Performance tuning, capacity planning and monitoring with tools such as Zabbix, plus hands-on investigation when something goes wrong.

Technologies and standards

  • Red Hat Enterprise Linux
  • Rocky Linux
  • AlmaLinux
  • Red Hat Satellite
  • Foreman
  • Red Hat IdM
  • FreeIPA
  • Ansible
  • Terraform
  • SELinux
  • Podman
  • Docker
  • KVM
  • VMware vSphere
  • OpenShift Virtualization
  • Zabbix
  • MariaDB
  • Git
How it works

From first call to handover

  1. Assess

    An inventory of your current servers, versions, patch levels and access, with risks and quick wins identified.

  2. Design

    A standard build, patching cycle and access model agreed with you and written down.

  3. Automate

    Ansible roles and pipelines that build and maintain servers to that standard, tested before use.

  4. Operate

    Hand over to your team with documentation and training, or ongoing support from Proton IT Services.

What you receive

Deliverables

  • Hardened, documented server builds
  • Ansible roles and playbooks in your Git repository
  • Patching schedule and runbooks
  • Central identity and access policy
  • Compliance report against CIS Benchmarks
  • Handover documentation and training
FAQ

Common questions

Do you only work with Red Hat Enterprise Linux?

Red Hat Enterprise Linux and its compatible distributions, Rocky Linux and AlmaLinux, are the main focus, but Debian and Ubuntu systems can also be supported.

Can you work with our existing team?

Yes. Most engagements involve working alongside an in-house team, building the automation together and handing over the knowledge so you are not dependent on outside help.

Do you offer ongoing support?

Ongoing support and maintenance can be arranged after a project, with the scope and response times agreed in writing.

Will hardening break our applications?

Hardening is applied in stages and tested on non-production systems first. Where an application genuinely needs an exception, it is documented with the reason, rather than switching security off.

Let’s talk about your infrastructure

Tell me what you are working on. The initial consultation and quote are free, and if I am not the right fit I will say so and point you to someone who is.