Barcelona, Spain · Network / Cloud Engineer · open to internships & junior roles
Codes: C Connected, S Static, B BGP, Z Zero Trust, I IaC
Destination Next-Hop / Stack Proto Metric
──────────────────────────────────────────────────────────────────────
Hybrid Enterprise Network Terraform · AVNM · Azure I+Z 1
On-prem ↔ Cloud Perimeter Check Point · Az FW Premium B 10
App Publishing Front Door · App Gateway S 20
Enterprise DNS Win Server · Private DNS S 5
Offensive Security HTB · THM · Linux hardening CTF 42
AI / Backend Automation Python · FastAPI · Docker S 30
I'm Sergio Shmyhelskyy, a Computer Engineering student at UPC-FIB (Barcelona) working where networking, cloud and security intersect. I design infrastructure that is reproducible, governed and defensible — not just configured once and forgotten.
My strongest hands-on work is a secure hybrid network architecture (on-prem datacenters + Azure) built for a regulated enterprise: Terraform for Infrastructure as Code, Azure Virtual Network Manager for centralized SDN governance, GitOps change workflows, and a Zero Trust access model across dev / pre / prod. That includes operating the hybrid perimeter (Check Point + Azure Firewall Premium), enterprise DNS, BGP over ExpressRoute/VPN, and publishing apps through Front Door and Application Gateway.
Outside production-shaped problems, I break things on purpose on HackTheBox and TryHackMe, experiment with AI backends in Python, and run homelab / IoT side projects. Currently levelling up Rust, Go, and Kubernetes.
Reach me: sergioshmyh@gmail.com · sergio.shmyhelskyy@estudiantat.upc.edu · LinkedIn
| Status | Project | What it proves |
|---|---|---|
UP |
Secure Hybrid Network with IaC (Bachelor's Thesis) | Governed hybrid architecture for a regulated insurer: reproducible networking, AVNM SDN, GitOps & Zero Trust across environments |
UP |
Portfolio — smyha.github.io | Trilingual network-engineer site: live GitHub pins, CV (EN/ES/CA), certs roadmap, command palette |
LAB |
CTF Write-ups & Security Labs | Offensive/defensive practice on HTB/THM — enumeration, privesc, networking & Linux hardening |
LAB |
AI Backend Experiments | Python services around automation and ML/LLM workflows |
Thesis stack:
| Credential | Issuer | Status |
|---|---|---|
| AZ-700 | Microsoft — Azure Networking | IN PROGRESS |
| AZ-104 | Microsoft — Azure Administrator | ROADMAP |
| CCNA | Cisco — Enterprise Networking | ROADMAP |
| HTB / THM | Hands-on security labs | ACTIVE |
- Deepening Azure networking (AZ-700) and hybrid connectivity patterns
- Expanding Kubernetes, GitOps and observability in lab environments
- Open to open-source contributions in networking, security, or backend-heavy projects
- Always up for a conversation about breaking boxes or building networks
$ traceroute opportunity
1 smyha.github.io 12 ms ████████████████████ portfolio
2 linkedin.com/in/... 18 ms ████████████████░░░░ experience
3 sergioshmyh@gmail.com 24 ms ████████████░░░░░░░░ contact
whoami → engineer who routes packets by day and exploits misconfigs by night