Gavin White

Designing segmented networks with real monitoring and fault isolation.

A production-style homelab with segmented VLANs, per-VLAN firewall policies, and a full monitoring and log aggregation stack. Designed, deployed, broken, and fixed hands-on.

View projects GitHub LinkedIn
Projects

What's been built

01

HomeLab Server

Active

Production-style network infrastructure on Proxmox VE

Internet Cox Router OPNsense Firewall per-VLAN policy · DHCP · DNS 802.1Q trunk Managed Switch 16-port · 802.1Q tagging VLAN 10 Trusted 10.0.10.0/24 VLAN 20 Lab 10.0.20.0/24 VLAN 30 IoT 10.0.30.0/24 VLAN 40 Guest 10.0.40.0/24 Isolated security zones · restrictive cross-VLAN policies Monitored end-to-end via Prometheus, Grafana, Loki, and SNMP
  • Designed a segmented network with 4 VLANs — Trusted, Lab, IoT, Guest — each with its own subnet, DHCP scope, and per-VLAN firewall policy on OPNsense
  • Deployed a full monitoring stack tracking 15+ containerized services across multiple subnets: Prometheus for metrics, Grafana for dashboards, SNMP Exporter for OPNsense interface data, Uptime Kuma for service health
  • Built centralized log aggregation with Loki and Grafana Alloy, ingesting Docker container logs + OPNsense firewall syslog with 7-day retention and LogQL queries
  • Diagnosed and resolved VLAN trunk misconfigurations, subnet routing conflicts, SNMP OID mapping failures, and rfc3164 vs rfc5424 syslog format mismatches
  • Self-hosted Pi-hole for network-wide DNS sinkholing, Nginx Proxy Manager for reverse proxy routing, and published this portfolio publicly via Cloudflare Tunnel
Proxmox OPNsense Docker Prometheus Grafana Loki Alloy Pi-hole SNMP
View on GitHub
02

Active Directory Lab

Complete

Enterprise identity management environment

  • Deployed Active Directory Domain Services with integrated DNS and Group Policy on Windows Server 2022, joined a Windows 10 client to the domain
  • Configured GPOs for endpoint security controls including removable storage restrictions and logon policies
  • Troubleshot DNS resolution failures, domain join errors, and Kerberos time synchronization issues affecting authentication
Windows Server Active Directory DNS Group Policy Kerberos
View on GitHub
03

Infrastructure Analytics

Complete

SQL-based analysis of homelab infrastructure data

  • Designed a relational database modeling 15 services, 5 VLANs, 7 days of hourly metrics, incidents, and storage trends across the live homelab
  • Built 5 analytical query sets covering KPI dashboards, trend analysis, incident reporting, capacity planning, and network anomaly detection
  • Used joins, aggregations, CTEs, and window functions (LAG, AVG over time) to produce business-style insights: MTTR, week-over-week growth, days-until-full storage forecasts
SQL SQLite Data Analysis CTEs Window Functions
View on GitHub
04

Homelab Automation

Active

Bash and Python scripts for infrastructure management

  • Built 12 automation scripts to reduce manual health checks and enable automatic service recovery across system monitoring, Docker, networking, and log analysis
  • Automated server health checks covering CPU, RAM, disk usage, Docker container state, network connectivity, and security posture
  • Created a service watchdog that monitors critical containers and automatically restarts failed services
Bash Python Docker Linux Automation
View on GitHub
05

Infrastructure Documentation

Active

Professional runbook site for homelab infrastructure

  • Designed a single-page documentation site covering network architecture, VLAN design, firewall policies, and operational procedures
  • Documented the full monitoring stack, service catalog, storage layout, and common troubleshooting runbooks for on-call reference
HTML CSS Technical Writing
View on GitHub
06

Network Dashboard

Active

Interactive network topology and service status visualization

  • Built a tabbed dashboard displaying service health, VLAN topology, hardware specs, and storage architecture
  • Visualized 15 Docker containers across monitoring, services, and infrastructure categories with live status indicators
HTML CSS JavaScript
View on GitHub
07

Home Lab Network

Complete

Virtual network fundamentals in VirtualBox

  • Built a virtual network with Windows and Ubuntu VMs communicating over a static internal subnet
  • Troubleshot connectivity, firewall, and routing issues across multiple virtual adapters
VirtualBox Ubuntu Windows TCP/IP
View on GitHub
Skills & Certifications

Technical capabilities

Networking

VLANs (802.1Q), inter-VLAN routing, firewall policy design, DHCP, DNS, SNMP, syslog, TCP/IP, subnetting, NAT

Infrastructure

Proxmox VE, OPNsense, Docker, Docker Compose, Portainer, Ubuntu Server, Windows Server

Monitoring & Logging

Prometheus, Grafana, Loki, Grafana Alloy, Node Exporter, SNMP Exporter, Uptime Kuma, PromQL, LogQL

Security

Firewall rule design, per-VLAN security policies, DNS sinkholing (Pi-hole), access control, risk management

Systems Administration

Linux server management, SSH, bash, netplan, Docker CLI, Active Directory, Group Policy, DNS administration

Documentation

Technical writing, network architecture diagrams, troubleshooting documentation, GitHub portfolio management

Certifications
CompTIA Security+ (CE)
SY0-701 · DoD 8570 IAT Level II compliant
Earned
Cisco CCNA
200-301 · Expected 2026
In Progress
Availability

What I'm looking for

Open to entry-level network and NOC roles

Hands-on experience designing, breaking, and troubleshooting real network infrastructure — not just configuring it. CompTIA Security+ certified and DoD 8570 IAT Level II compliant. Available now, based in the DMV, and open to on-site, shift-based, and relocation roles.

NOC Technician Data Center Technician Network Engineer (Jr.) Network Operations
Get in touch Connect on LinkedIn