SysAdmin · Infrastructure & Network Engineer · ProgrammerPT Nale System Integrator — MalangPortfolio · 2026

ReinaldoHardana.

I keep government and hospital networks running and secure — and build the AI tooling that helps run them.

Selected work ↓Download CV
Server rack with fibre-optic light trails forming a network graph
(01) AboutWho builds this

Based in Malang, East Java. At PT Nale System Integrator since 2022 — an IT integrator delivering since 2007.

I work where hardware meets software: virtualisation clusters, perimeter firewalls and security audits for public institutions — plus the web apps and AI automation around them. I migrate without downtime, audit against CIS benchmarks, and keep the evidence for every number I report.

250+systems audited with Wazuh SIEM & CIS Benchmarks
34/34acceptance tests passed on a government firewall migration
154security policies migrated programmatically, vendor to vendor
21klines of code in ShiroByte, my self-hosted AI platform
(02) Selected work2025 — 2026
Firewall and core switches in the Diskominfo Trenggalek server rack, August 2026Security · Migration
01 / Diskominfo Trenggalek

A firewall migration done as data engineering

Replacing a FortiGate 301E with a Cybrey RG-CF30XS for a regency government — years of accumulated rules serving dozens of agencies and around 130 public services, with no official cross-vendor converter.

ConstraintHundreds of rules, two vendors, no conversion tool, no room for outage.
ApproachExtract config to structured data, transform to the NTOS import format, validate, then re-verify from the running config.
Result132 DNAT · 134 SNAT · 154 policies · 319 objects. 34/34 acceptance tests.
# 10 days post-migration, 6–15 Aug 2026
security events logged 250,635
events blocked 135,107 (53.90%)
compromised internal hosts surfaced 13
Abstract AI orchestrator routing light to many nodesAI · Platform
02 / ShiroByte · Mar 2026 — now

A self-hosted AI assistant that does the ops work

My own AI platform (FastAPI + React 19): local LLMs via Ollama and Qwen Coder, Claude Code CLI, a 9Router proxy with multi-gateway failover, local RAG on ChromaDB and LuxTTS text-to-speech.

It runs real tools — Proxmox API, shell, Canva, Figma, image generation, a document engine — shows long jobs live in the sidebar, keeps a long-term memory, and refuses to report a status no tool produced. This site was built and deployed by it.

FastAPIReact 19OllamaChromaDB9RouterMCP
$ git rev-list --count HEAD
99 commits · 9.7k Python + 11.5k TypeScript lines
47 ops tools · 279 long-term memories
Glass hexagonal shield above a circuit landscapeAudit · Network
03 / Security audits & hardening

250+ hosts, measured against CIS

Host security audits across Linux and Windows estates using Wazuh SIEM and CIS Benchmarks — findings mapped to fixes, not just scores.

Diskominfo Kab. Kediri (Sep 2026) — analysed anomalous security logs on a Sophos XGS firewall and reconfigured a Ruckus ICX 7250 over serial console to optimise the data path.

WazuhCIS BenchmarksSophos XGSRuckus ICXSangfor EPP
Enterprise blade servers with glowing status LEDsVirtualisation · Ops
04 / Private cloud

From rented data centre to our own iron

Designed and executed the move of a Proxmox cluster from rented data-centre servers onto owned physical hardware (HPE ProLiant, Lenovo ThinkSystem) without disrupting client operations.

Day to day: Proxmox VE clustering with HA and Ceph, Proxmox Backup Server, VMware ESXi, services published through Cloudflare Zero Trust tunnels and Tailscale instead of open ports — and second-hand SAS drives burned in before they join a pool.

Proxmox VECephPBSESXiTrueNASTailscale
Screenshot of the PT Nale System Integrator websiteWeb · QA automation
05 / nale.co.id

A corporate site with machine-checked design

An 18-page company website where design compliance is measured, not eyeballed: typeface, border-radius and overflow gates run at four viewports on every change, and every deploy is proven fresh at the CDN edge by hash.

HTML/CSSPlaywrightPythonCloudflare
$ python3 .shirobyte/report.py
ALL PASS 12/12 · sanctioned-typefaces · radius-census · no-hoverflow
(03) More projectsIndex
06

Enterprise email migration

Analysed a legacy OpenText GroupWise estate and planned a structured transition to Microsoft Exchange Server Subscription Edition.

Planning
07

TGX Portal architecture

Integration design for regional public services — local-tax notifications, hospital reservations and a job portal.

Architecture
08

Perum Jasa Tirta I report generator

Python + Streamlit automation that produces administrative report documents, cutting manual reporting time.

Feb 2026
09

Overtime management system

Employee overtime logging and approval app on Laravel and MySQL.

Feb 2026
10

Public-sector infrastructure

RSI Aisyiyah Malang fibre & WiFi · Tulungagung cPanel migration to the national cloud (PDN) · Pemkot Batu network security — published case studies.

Delivery
11

Payment-rail & accessibility audits

Six marketplaces verified on Base mainnet (one advertised $450 of jobs on a 39-cent treasury); a field app audited at 6 screens × 2 viewports.

Audit
(04) ExperienceCareer
2022 — Present

PT Nale System Integrator

IT System Administrator
Infrastructure & Network Engineer
Programmer · Malang

  • Run enterprise virtualisation on Proxmox VE (clustering, HA, Ceph), Proxmox Backup Server and VMware ESXi across HPE ProLiant and Lenovo ThinkSystem hardware.
  • Deploy network-security architecture with MikroTik, Sophos XGS, Tailscale and Cloudflare Zero Trust tunnels.
  • Audit 250+ Linux and Windows systems with Wazuh SIEM against CIS Benchmarks.
  • Build full-stack apps and automation — including Telegram bots — in Laravel, Node.js/Express, FastAPI, Python and PHP.
  • Migrated a Proxmox cluster from rented data-centre servers to owned hardware with no client disruption.
  • Train government and hospital IT teams on Proxmox VE and cPanel server management.
1 year

PT Infonika Parasa

Data Analyst Intern

  • Built and maintained interactive Tableau dashboards over large datasets.
  • Processed and analysed data for national COVID-19 spread monitoring.
  • Produced data-driven insights supporting defence-asset management for Indonesia's Ministry of Defence (Kemenhan).
(05) In the fieldTraining & handover
Technical session in a government meeting room, August 2026Field documentation · Aug 2026

Systems only stay up if the people running them understand them.

  • Diskominfo Kota Malang
  • Diskominfo Kabupaten Malang
  • Diskominfo Kabupaten Trenggalek
  • Tulungagung
  • RS Muhammadiyah network
Proxmox VE virtualisation · cPanel server management
(06) SkillsToolbox
A

Infrastructure

  • Proxmox VE · HA · Ceph
  • Proxmox Backup Server
  • VMware ESXi
  • Docker · LXC/KVM
  • TrueNAS (SMB/NFS)
B

Network & security

  • MikroTik · Ruckus ICX
  • Sophos XGS · Sangfor EPP
  • Ruijie / Reyee Cloud
  • Wazuh SIEM · CIS
  • Tailscale · CF Zero Trust · AD DS
C

Software

  • PHP · Laravel
  • Node.js · Express
  • Python · FastAPI
  • MySQL · MariaDB · Cassandra
  • WooCommerce
D

AI & automation

  • Ollama · Qwen Coder
  • LangChain · LangGraph
  • ChromaDB RAG · MCP
  • Claude CLI · Gemini API
  • n8n · Streamlit · 9Router
E

Systems

  • Ubuntu · Debian
  • Rocky · Alma · CentOS
  • Parrot OS · Zorin OS
  • Windows Server
  • Nginx · Apache
F

Hosting

  • cPanel / WHM
  • aaPanel
  • Cloudflare Pages
  • Tableau
  • Telegram bots
(07) EducationBackground
D4 · S.Tr.Kom

Politeknik Negeri Malang

Applied Bachelor of Information Technology · GPA 3.61

Vocational

SMKN 2 Singosari

Computer & Network Engineering (TKJ)

(08) ContactOpen to opportunities

Let's build something
that stays up.

reinaldohardana@gmail.com → Download CV (PDF)