Networks & firewalls
pfSense/Netgate with multiple WAN and LAN links, VLAN segmentation, OpenVPN for sites and users, controlled NAT and UniFi Wi-Fi.
System Administrator · Pristina, Kosovo
Muhamed
Muhamed
Citaku.
$ IT infrastructure that runs 24/7: networks, servers, backup, automation and security for businesses in Kosovo and Albania.
I run IT infrastructure for AutoMita, from pfSense firewalls and UniFi Wi-Fi in showrooms and offices to Proxmox and VMware hosts, the SQL Server–based ERP, 3CX telephony and HubSpot CRM. I work with documentation, transparency and root-cause analysis, not just fixing the symptom.
Countries covered2
Security advisory cycle24h
Unanswered-call escalation40s
A single backup run450GiB
// topology · logical view
How it all connects
Branch sites in Kosovo and Albania reach the core over encrypted OpenVPN tunnels. Workloads run on Proxmox, VMware and Windows Server, backups follow a 3‑2‑1‑1‑0 chain to an offsite copy, and public services sit behind Cloudflare at OVH and Hetzner. Select any node to see what it does.
// illustrative diagram · real addresses, hostnames and site counts are not publishedtap or select a node for details
// what I do
Production IT, every day
From the cable to the management report: design, deployment, maintenance and documentation, on-site and remote.
Virtualization & servers
Proxmox VE and VMware ESXi/vSphere hosts on HPE ProLiant and Dell PowerEdge hardware, with Windows Server and Linux workloads.
Backup & recovery
3-2-1-1-0 backup design: scheduled vzdump jobs, Proxmox Backup Server, Synology replicas and encrypted offsite copies. Every backup gets a restore test.
Automation
PowerShell, Python and Bash scripts, scheduled tasks and API integrations that handle onboarding, patching, backup checks and reporting.
Identity & Microsoft
Active Directory, DNS, GPO, RADIUS/NPS, Windows Server, Microsoft 365, Entra ID and Intune for user and device management.
ERP & databases
Deployment and upkeep of Prodata Finance+ on MS SQL Server across Kosovo and Albania, plus Navision.
CRM, VoIP & reporting
HubSpot dashboards for executives, sales, marketing and service, data standards, Bitrix24, plus call queues and reporting on 3CX v20.
Security & IT governance
IT and security policy, daily monitoring of Critical/High advisories, AV/EDR, UPS, cameras and remediation plans for audit findings.
// backup · 3-2-1-1-0
Backups that actually restore
A backup is only worth something if it comes back. Every critical system follows the 3‑2‑1‑1‑0 rule and is checked with a real restore, not just a green tick in a job log.
3
Copies
Production data plus two independent backup copies.
2
Media types
Stored on different systems: Proxmox Backup Server and Synology NAS.
1
Offsite
One encrypted copy outside the building, at a hosting provider.
1
Immutable
One copy that ransomware or a mistaken delete cannot change.
0
Errors
Zero errors after verification jobs and scheduled restore tests.
VM snapshot→vzdump→PBS · verify→NAS replica→offsite · encrypted→restore test ✓
// automation
Scripts over clicks
Anything done twice gets scripted. Repeatable jobs run on a schedule, log what they did and alert only when something needs a person.
User lifecycle
Onboarding and offboarding across AD, Microsoft 365, groups and Intune in one run.
Patching
Scheduled updates for Windows and Linux servers, with reboots in maintenance windows.
Backup checks
Nightly jobs, verification and a report of anything that failed or ran long.
Advisory watch
Daily scan of vendor advisories, filtered to Critical/High, EOL and known-exploited issues.
CRM workflows
HubSpot automations and API scripts for follow-up reminders and data quality.
# illustration of a scheduled run PS> .\New-StaffAccount.ps1 -User "new.hire" -Dept Sales ✓ AD account · M365 licence · groups · Intune enrolment $ ansible-playbook patch-linux.yml --limit servers ✓ updates applied · reboot scheduled 02:00 $ vzdump --all --mode snapshot --storage pbs ✓ all VMs backed up · verify job queued $ python advisories.py --since 24h --severity critical,high ✓ 0 new critical items for the stack $ python hubspot_followup.py --stale 2d ✓ follow-up reminders added for open deals → done. every run logged.
// approach
When something breaks
Every incident follows the same path, so the same problem does not come back.
01 · detect
Monitoring
Alerts from the network, UPS, backups and security advisories arrive before the user calls.
02 · isolate
Contain
Segmentation and failover links keep work running while the problem is analysed.
03 · analyse
Root cause
Find why it happened, not only what happened, and explain it clearly to the client.
04 · document
Fix & record
The fix, the configuration and the lessons go into GLPI and the documentation.
CConfidentiality
IIntegrity
AAvailability
+Open source where it fits
// projects
Where I work
AutoMita
System AdministratorIT, networking and security for the showrooms, service centres and offices of a car dealer in Kosovo and Albania: Volvo, Renault, Nissan, Dacia and the Piaggio group.
pfSense · ProxmoxProdata · SQLHubSpot · 3CX
Reporting & dashboards
HubSpot · 3CXDashboards for management, sales, lead sources, call centre and customer satisfaction, plus operational reports for call queues and EV charger consumption.
data standardsdaily checks
// stack
What I work with
network & security
pfSense / NetgateUniFiOpenVPNRADIUS / NPSAV / EDR
servers & storage
Proxmox VEVMware ESXi / vSphereWindows ServerHPE ProLiantDell PowerEdgeSynology NASLinux
hosting & cloud
OVHHetznerDigitalOceanContaboCloudflarePlesk
backup
Proxmox Backup ServervzdumpVeeamSynology Hyper BackupActive Backup for Businessrsync
automation
PowerShellPythonBashAnsibleTask Scheduler / cronREST APIsHubSpot Workflows
identity & email
Active DirectoryDNS / GPOMicrosoft 365Entra IDIntuneKerio ConnectGoogle Workspace
business apps
HubSpotBitrix243CX v20Prodata Finance+MS SQL ServerNavisionSuccessFactorsGLPI
web
WordPressPHPHTML / CSS
// contact
Got a network that needs fixing?
For infrastructure, backup, automation, firewalls, CRM or a quick IT review, drop me a line.