Martin Rylko

Experience

• 

  Game Shop s.r.o.

  Jan 2008 - Jan 2015

  Study, plan, present, and implement new technologies/tools to help improve business operations.Maintenance & management of the Windows-based Server Environment (Windows OS clients and Windows Server 2003 + 2008).Troubleshoot hardware, software, & network issues.The installation, configuration, operation, and maintenance of networking systems (Cisco, Tenda, Synology). Installed and configured hardware and software, providing comprehensive support to end-users and contributing to the company's reputation for exceptional customer service.

  • IT Administrator

    Jul 2012 - Jan 2015

  • IT Technical Support

    Jan 2008 - Jul 2012
• 

  BREMBO CZECH s.r.o.

  Feb 2016 - Sept 2018

  IT Infrastructure Administrator

  Orchestrated a complete overhaul of IT infrastructure, enhancing the performance and reliability of the factory's IT systems.Specialized in network and server management, applying cutting-edge solutions to advance the company's Smart Manufacturing initiatives.Network - work with CISCO & DELL Switches (50+) - configuration, management, migration and utilizationServers - work with the 2 Failover Cluster Servers (Hyper-V) and external NAS/SAN, DELL storageManaging and patching over 60+ Physical (DELL PowerEdge) and virtual servers (Windows server 2008, 2012 R2, 2016)Daily work with Active Directory, System Center Configuration Manager, System Center Operation Manager, Data Protection ManagerWork with tools for the infrastructure administration - Airwatch, Veritas Backup Exec, Cisco Call manager, ForeScout, Triton Forcepoint, Dell Tape Library TL2000Implementing solutions for the Smart Manufacturing - Industry 4.0 Show less

• 

  TietoEVRY

  Oct 2018 - May 2022

  Spearheaded enterprise-scale Azure projects, leveraging agile methodologies to meet customer needs.Implemented automated pipelines, which improved time-to-market for new services by 25%.Designed comprehensive Azure Landing Zones, providing detailed documentation for stakeholders​Expertize in the following:Design and deployment of the Azure Landing Zones (at enterprise scale) with documentation.Responsibility for decisions in technology solutions which are designed within the product areaUsing Azure DevOps pipelines with Terraform, ARM templates, Powershell and Bicep.Configuration and customization of the Azure services.Utilized Azure Sentinel for threat monitoring and incident response, enhancing security operations.Applied VM hardening across deployments, enforcing Azure Policy for automated compliance and utilizing Azure Key Vault for secure key management.Using tools like ServiceNow, JIRA, Confluence Show less In my role as an architect, I developed, enhanced, and managed the existing OneCloud solution to ensure that they offered adequate security and effectively met the needs of the organization and customers. Directly for customers, I created the designs and the documentation for new on-premise solutions, as well as High-level and Low-level technical designs for the integrations and implementations.The areas / technologies used in my company role:Software-Defined DatacenterHyper-V with Clustering (HA, DR, LB)Windows Server 2012 R2, 2016, 2019Virtual Machine Manager 2019, Configuration Manager 2019, Operations Manager 2019Dell Hardware + Microsoft Storage Spaces DirectWindows Azure Pack 2016Azure Stack HCIHybrid solutions with AzureHyper-V replication, Storage replicaScripting and automation with Powershell. Show less

  • Azure Service Architect

    Jan 2021 - May 2022

  • IT Infrastructure Architect

    Oct 2018 - Jan 2021
• 

  H&M

  Jun 2022 - Mar 2024

  Azure Cloud Architect

  Led enterprise-scale Azure Landing Zone implementations, ensuring security compliance with ISO 27001 and NIST2 standards.Applied VM hardening techniques, implementing disk encryption, Just-in-Time (JIT) access, and Azure Bastion for secure remote access.Proactively managed Azure Security Center and Defender for Cloud for real-time threat detection and remediation.Built and optimized CI/CD pipelines in Azure DevOps with Terraform, ARM templates, and Bicep while ensuring security best practices.Customized Azure services with AAD-based role management and Conditional Access for enhanced identity security.Implemented Kubernetes (AKS) and Docker containers for application deployment, enhancing scalability and flexibility in cloud services. Show less