Currently available for new projects

Your IT department. Without the department.

I build, secure and automate IT infrastructure for small and medium businesses around Augsburg — from network segmentation and hardened Linux servers to fully automated provisioning with Ansible.

  • Linux
  • Windows Server
  • IT Security
  • Ansible
  • UniFi
  • Python
  • Proxmox
  • Docker

Services

Eight areas — in practice, most projects touch several of them at once.

IT Security

The focus of my master's degree. I find weaknesses and close them before someone else does.

  • Vulnerability assessment & penetration testing
  • System hardening and firewall configuration
  • IDS/IPS and SIEM analysis
  • PKI, certificates and 2FA rollout
  • Incident response

Networking & Segmentation

Properly separated networks instead of something that just grew — planned, built and documented.

  • VLAN designs for office, production, guests and IoT
  • UniFi, MikroTik, OPNsense/pfSense
  • WireGuard, OpenVPN and IPsec for remote work
  • Wi-Fi surveys and structured cabling
  • Rack builds and fibre

Servers: Linux & Windows

Linux is where I specialise — I look after Windows environments just as well. Operations, migration and monitoring, happy to act as a second pair of eyes on existing systems.

  • Debian, Ubuntu, RHEL/Rocky, Arch
  • Windows Server, Active Directory, group policy
  • Proxmox, VMware ESXi, Hyper-V, Docker, LXC
  • nginx, Apache, Caddy, reverse proxies and TLS
  • Mail servers, Samba, file servers and backups

Automation

Anything done twice by hand belongs in code — reproducible and reviewable.

  • Ansible roles, playbooks and inventories
  • Terraform and infrastructure as code
  • Tooling in Bash and Python
  • Automated backups and patch management
  • GitLab CI and GitHub Actions

Smart Home & IoT

Automation that runs locally and needs no cloud account — vendor independent.

  • Home Assistant, Homebridge, KNX, Loxone
  • Zigbee, zigbee2mqtt, Z-Wave, MQTT, ESPHome
  • Shelly components and Raspberry Pi setups
  • Cameras, access control and alerting
  • Heating, lighting and solar energy monitoring

Web & Cloud

Fast, accessible sites without tracking bloat — properly built rather than clicked together.

  • Web design and hand-built implementation
  • WordPress, TYPO3 and online shops
  • Hosting, domains, TLS and email setup
  • Nextcloud, Microsoft 365, Google Workspace
  • Hetzner, Azure and AWS

Hardware & Embedded

From the electrical engineering half of my degree: from circuit board to finished server.

  • Microcontrollers: Arduino, ESP32, STM32, Raspberry Pi
  • VHDL, FPGA design and digital logic
  • Prototyping, soldering, PCB design, measurement
  • On-site PC and server builds
  • Data recovery and procurement advice

Support & Maintenance

Ongoing operation rather than one-off projects — with a maintenance agreement if you want one.

  • Maintenance contracts and regular updates
  • Remote support and on-site visits
  • Server migration and IT relocations
  • Workstations, printers and peripherals
  • IT documentation and training

Technologies

What I work with day to day. Missing something? Just ask — much of it transfers.

Operating systems & virtualisation

  • Debian
  • Ubuntu
  • RHEL / Rocky
  • Arch
  • systemd
  • Windows Server
  • Windows 10 / 11
  • Active Directory
  • Group Policy
  • WSUS
  • Proxmox
  • VMware ESXi
  • Hyper-V
  • Docker
  • LXC
  • Kubernetes

Networking

  • UniFi
  • MikroTik
  • OPNsense
  • pfSense
  • VLAN
  • WireGuard
  • OpenVPN
  • IPsec
  • DNS / DHCP
  • Pi-hole
  • AdGuard
  • Fibre

Security

  • System hardening
  • nftables / iptables
  • IDS / IPS
  • Wazuh
  • PKI & certificates
  • LUKS
  • VeraCrypt
  • 2FA / MFA
  • Penetration testing
  • Security audits

Automation & code

  • Ansible
  • Terraform
  • Bash
  • PowerShell
  • Python
  • PHP
  • JavaScript
  • TypeScript
  • Go
  • C / C++
  • SQL
  • Git
  • GitLab CI
  • GitHub Actions
  • REST APIs

Monitoring & backup

  • Prometheus
  • Grafana
  • Zabbix
  • Checkmk
  • Restic
  • Borg
  • Veeam

Smart home & IoT

  • Home Assistant
  • Homebridge
  • KNX
  • Loxone
  • Zigbee
  • zigbee2mqtt
  • Z-Wave
  • MQTT
  • ESPHome
  • Shelly
  • Raspberry Pi

Hardware & embedded

  • Arduino
  • ESP32
  • STM32
  • VHDL
  • FPGA
  • Digital logic
  • PCB design
  • Measurement
  • Server hardware

Web & cloud

  • nginx
  • Apache
  • Caddy
  • WordPress
  • TYPO3
  • Nextcloud
  • Microsoft 365
  • Google Workspace
  • Hetzner
  • Azure
  • AWS

Projects

A selection of completed work.

References coming soon

Something is taking shape here. There are plenty of projects to show — I am currently preparing the write-ups and client quotes. In the meantime, just ask and I will happily talk you through relevant work.

Ask about projects

About me

I'm Max Mazanec, a freelance IT consultant based in Augsburg, Germany. I started freelancing while still studying, and never stopped.

I studied computer science and electrical engineering at Augsburg Technical University of Applied Sciences, specialising in IT security for my master's. That combination is why I'm equally comfortable writing an Ansible playbook and wiring up a server rack.

University also left me with a network of specialists. Which means: if something falls outside my field, I say so and pass you on — and if you prefer, I handle the communication so you still only deal with one person.

Security isn't only needed in hardware — it's needed everywhere.

Education

  • 2019 – 2021 Master of Science — Computer Science and Electrical Engineering Augsburg Technical University of Applied Sciences Focus on IT security · software development, team collaboration
  • 2016 – 2019 Bachelor of Science — Computer Science and Electrical Engineering Augsburg Technical University of Applied Sciences Focus on computer engineering

Let's talk.

A short description is enough — I usually reply the same working day.

By submitting you consent to your details being processed to handle your enquiry. See the privacy policy for details.