IT Infrastructure & Security · SysAdmin · ProgrammerPT Nale System Integrator — MalangPortfolio · 2026

Reinaldo Hardana.

IT InfrastructureSecuritySysAdminProgrammerIT Infrastructure

I design, run and secure IT infrastructure — networks, servers and endpoints — and build the AI tooling that helps run them.

Selected work ↓
01 / 03 — Infrastructure

Hands-on infrastructure.

Racks · Proxmox · Sophos · MikroTik
02 / 03 — Networks

Networks, designed & handed over.

Enterprise, industry & public sector · since 2022
03 / 03 — AI tooling

Plus the AI tooling that runs them.

ShiroByte · self-hosted AI ops platform
Reinaldo Hardana — field reelSkip intro ↓
(01) AboutWho builds this

Based in Malang, East Java. At PT Nale System Integrator since 2022 — an IT integrator delivering since 2007.

Portrait of Reinaldo Hardana
Reinaldo Hardana

I work where hardware meets software: virtualisation clusters, perimeter firewalls, endpoint security and audits — plus the web apps and AI automation around them. I migrate without downtime, audit against CIS benchmarks, and keep the evidence for every number I report.

250+systems audited with Wazuh SIEM & CIS Benchmarks
34/34acceptance tests passed on a government firewall migration
154security policies migrated programmatically, vendor to vendor
21klines of code in ShiroByte, my self-hosted AI platform
(02) BlueprintsHow I build

The layers I design, run & automate.

Enterprise topology

  • WAN

    Everything outside is untrusted until the firewall says otherwise.

  • Perimeter NGFW

    Sophos XGS, FortiGate, Cybrey — the policy layer. Bad packets die here.

  • DMZ

    Public services live in their own zone, never on the LAN.

  • LAN · server farm

    Segmented by VLAN behind an L3 core; servers apart from users.

  • MGMT · out-of-band

    A separate admin plane — serial console, iLO, IPMI.

  • Wazuh SIEM

    Logs from every zone, checked against CIS benchmarks.

  • Zero Trust tunnel

    Services published outbound through Cloudflare — no open ports.

Reference design — illustrative, not a client config. Hover or tap a node.

(03) Selected work2025 — 2026
Reinaldo checking a labelled patch cable at a network switchSecurity · Migration
01 / Diskominfo Trenggalek

A firewall migration done as data engineering

Read case study →

Replacing a FortiGate 301E with a Cybrey RG-CF30XS for a regency government — years of accumulated rules serving dozens of agencies and around 130 public services, with no official cross-vendor converter.

ConstraintHundreds of rules, two vendors, no conversion tool, no room for outage.
ApproachExtract config to structured data, transform to the NTOS import format, validate, then re-verify from the running config.
Result132 DNAT · 134 SNAT · 154 policies · 319 objects. 34/34 acceptance tests.
# 10 days post-migration, 6–15 Aug 2026
security events logged 250,635
events blocked 135,107 (53.90%)
compromised internal hosts surfaced 13
Endpoint devices wrapped in protective shells around a central security coreEndpoint · Network security
02 / Sangfor · Diskominfo Kediri · BEHAESTEX

Sangfor security, deployed, supported & put to the test

Deployment and support of Sangfor security for Diskominfo Kab. Kediri and BEHAESTEX — plus hands-on proof-of-concepts of Sangfor Athena EDR for clients who want to see it work before they commit.

The POC runs in an isolated lab: Windows 10, Windows 11, Windows Server 2025 and Ubuntu endpoints enrolled to the console, tested with benign industry-standard samples and read back from the console. Protection is judged by what it actually catches, not by what the dashboard says is installed.

ConstraintA buying decision that has to rest on evidence, on the client's real mix of desktops and servers.
ApproachIsolated lab, rollback snapshots, before/after captures per endpoint, functional tests over checkbox status.
ResultPer-endpoint evidence and console screenshots, written up for the client's decision.
Sangfor Athena EPP/EDRWindows Server 2025UbuntuProxmox VEAMSI
A server rack scanned by a green laser plane, threats isolated in a glass capsuleEDR · Proof of concept
03 / Kaspersky Next EDR

An EDR evaluation with receipts

A proof-of-concept of Kaspersky Next EDR Optimum for a client choosing endpoint protection: Windows 11, Windows Server 2025 and Ubuntu machines in a Proxmox lab, with every point of the client's scope tested and marked proven, partial, not detected or licence-limited.

Also on Linux: Kaspersky Endpoint Security for Linux on Proxmox hosts and containers — including the cgroup fix that lets legacy CentOS 7 containers boot on Proxmox VE 7 and 8.

Kaspersky NextKESLProxmox VEWindows Server 2025CentOS · Ubuntu
Abstract AI orchestrator routing light to many nodesAI · Platform
04 / ShiroByte · Mar 2026 — now

A self-hosted AI assistant that does the ops work

Read case study →

My own AI platform (FastAPI + React 19): local LLMs via Ollama and Qwen Coder, Claude Code CLI, a 9Router proxy with multi-gateway failover, local RAG on ChromaDB and LuxTTS text-to-speech.

It runs real tools — Proxmox API, shell, Canva, Figma, image generation, a document engine — shows long jobs live in the sidebar, keeps a long-term memory, and refuses to report a status no tool produced. This site was built and deployed by it.

FastAPIReact 19OllamaChromaDB9RouterMCP
$ git rev-list --count HEAD
99 commits · 9.7k Python + 11.5k TypeScript lines
47 ops tools · 279 long-term memories
Glass hexagonal shield above a circuit landscapeAudit · Network
05 / Security audits & hardening

250+ hosts, measured against CIS

Read case study →

Host security audits across Linux and Windows estates using Wazuh SIEM and CIS Benchmarks — findings mapped to fixes, not just scores.

Diskominfo Kab. Kediri (Sep 2026) — analysed anomalous security logs on a Sophos XGS firewall and reconfigured a Ruckus ICX 7250 over serial console to optimise the data path.

WazuhCIS BenchmarksSophos XGSRuckus ICXSangfor EPP
Enterprise blade servers with glowing status LEDsVirtualisation · Ops
06 / Private cloud

From rented data centre to our own iron

Read case study →

Designed and executed the move of a Proxmox cluster from rented data-centre servers onto owned physical hardware (HPE ProLiant, Lenovo ThinkSystem) without disrupting client operations.

Day to day: Proxmox VE clustering with HA and Ceph, Proxmox Backup Server, VMware ESXi, services published through Cloudflare Zero Trust tunnels and Tailscale instead of open ports — and second-hand SAS drives burned in before they join a pool.

Proxmox VECephPBSESXiTrueNASTailscale
Browser windows at four viewport sizes, each passing automated checksWeb · QA automation
07 / nale.co.id

A corporate site with machine-checked design

Read case study →

An 18-page company website where design compliance is measured, not eyeballed: typeface, border-radius and overflow gates run at four viewports on every change, and every deploy is proven fresh at the CDN edge by hash.

HTML/CSSPlaywrightPythonCloudflare
$ python3 .shirobyte/report.py
ALL PASS 12/12 · sanctioned-typefaces · radius-census · no-hoverflow
(04) More projectsIndex
08

Enterprise email migration

Analysed a legacy OpenText GroupWise estate and planned a structured transition to Microsoft Exchange Server Subscription Edition.

Planning
09

TGX Portal architecture

Integration design for regional public services — local-tax notifications, hospital reservations and a job portal.

Architecture
10

Perum Jasa Tirta I report generator

Python + Streamlit automation that produces administrative report documents, cutting manual reporting time.

Feb 2026
11

Overtime management system

Employee overtime logging and approval app on Laravel and MySQL.

Feb 2026
12

Public-sector infrastructure

RSI Aisyiyah Malang fibre & WiFi · Tulungagung cPanel migration to the national cloud (PDN) · Pemkot Batu network security — published case studies.

Delivery
13

Payment-rail & accessibility audits

Six marketplaces verified on Base mainnet (one advertised $450 of jobs on a 39-cent treasury); a field app audited at 6 screens × 2 viewports.

Audit
(05) ExperienceCareer
2022 — Present

PT Nale System Integrator

IT System Administrator
Infrastructure & Network Engineer
Programmer · Malang

  • Run enterprise virtualisation on Proxmox VE (clustering, HA, Ceph), Proxmox Backup Server and VMware ESXi across HPE ProLiant and Lenovo ThinkSystem hardware.
  • Deploy network-security architecture with MikroTik, Sophos XGS, Tailscale and Cloudflare Zero Trust tunnels.
  • Audit 250+ Linux and Windows systems with Wazuh SIEM against CIS Benchmarks.
  • Build full-stack apps and automation — including Telegram bots — in Laravel, Node.js/Express, FastAPI, Python and PHP.
  • Migrated a Proxmox cluster from rented data-centre servers to owned hardware with no client disruption.
  • Train government and hospital IT teams on Proxmox VE and cPanel server management.
1 year

PT Infonika Parasa

Data Analyst Intern

  • Built and maintained interactive Tableau dashboards over large datasets.
  • Processed and analysed data for national COVID-19 spread monitoring.
  • Produced data-driven insights supporting defence-asset management for Indonesia's Ministry of Defence (Kemenhan).
(06) In the fieldTraining & handover
Reinaldo explaining a network topology to colleaguesTraining & handover sessions

Systems only stay up if the people running them understand them.

  • Diskominfo Kota Malang
  • Diskominfo Kabupaten Malang
  • Diskominfo Kabupaten Trenggalek
  • Tulungagung
  • RS Muhammadiyah network
Proxmox VE virtualisation · cPanel server management
(07) SkillsToolbox
A

Infrastructure

  • Proxmox VE · HA · Ceph
  • Proxmox Backup Server
  • VMware ESXi
  • Docker · LXC/KVM
  • TrueNAS (SMB/NFS)
B

Network & security

  • MikroTik · Ruckus ICX
  • Sophos XGS · Sangfor EPP
  • Ruijie / Reyee Cloud
  • Wazuh SIEM · CIS
  • Tailscale · CF Zero Trust · AD DS
C

Software

  • PHP · Laravel
  • Node.js · Express
  • Python · FastAPI
  • MySQL · MariaDB · Cassandra
  • WooCommerce
D

AI & automation

  • Ollama · Qwen Coder
  • LangChain · LangGraph
  • ChromaDB RAG · MCP
  • Claude CLI · Gemini API
  • n8n · Streamlit · 9Router
E

Systems

  • Ubuntu · Debian
  • Rocky · Alma · CentOS
  • Parrot OS · Zorin OS
  • Windows Server
  • Nginx · Apache
F

Hosting

  • cPanel / WHM
  • aaPanel
  • Cloudflare Pages
  • Tableau
  • Telegram bots
(08) EducationBackground
D4 · S.Tr.Kom

Politeknik Negeri Malang

Applied Bachelor of Information Technology · GPA 3.61

Vocational

SMKN 2 Singosari

Computer & Network Engineering (TKJ)

(09) ContactGet in touch

Let's build something
that stays up.

[email protected] →