Infrastructure / Homelab
Segmented Proxmox platform
A virtualisation environment designed around VLAN separation, controlled service exposure, firewall boundaries, Linux workloads and practical backup planning.
Infrastructure · Platform · Security
Building secure systems with operational clarity.
I am Gabriel Bongailas, a Computer Systems & Networks professional in Malta, working full time as a Junior Cybersecurity Officer. I design, build and document technical environments across networking, Linux, virtualisation and cybersecurity—supported by practical work in a regulated security environment.
Platforms & tools used
Proxmox
Linux
Docker
OPNsense
pfSense
Nmap
Darktrace
ImmuniWeb
Git
Kubernetes
ESP32-C3
MicrosoftSelected work
Systems built to be understood.
A selection of hands-on infrastructure, networking and applied-security projects. Each entry outlines the design constraints, my direct contribution, validation evidence and the decisions behind the implementation.
Platform / Linux
Open-source service environment
Linux-based self-hosted services deployed with a focus on service isolation, maintainability, documentation and a clear recovery path.
IoT / Dissertation
LoRa environmental monitoring system
A standalone monitoring concept investigating ESP32-C3, sensors, LoRa communication, field constraints and signal-analysis considerations for Malta.
Capabilities
Technical focus, not keyword stuffing.
These areas describe where I can contribute and where I am deliberately developing depth. They are supported by project work and technical context—not self-assigned proficiency bars.
Infrastructure & networking
Network segmentation, VLAN architecture, firewall boundaries, service connectivity and practical operational design.
Platforms & virtualisation
Linux systems, Proxmox, containers, self-hosted services, storage considerations and backup/recovery thinking.
Security engineering
Exposure review, vulnerability-testing context, secure design, network visibility and applied security validation.
Governance-informed design
Translating security controls, risk and documentation requirements into technical decisions that remain operable.
Experience
Technical work in a regulated setting.
A progression across regulated cybersecurity, enterprise IT support and systems administration. The current role builds risk and governance credibility; the technical portfolio demonstrates the engineering direction behind it.
2026 — Present
Financial regulator
PromotedImmuniWebNmapDarktraceLinux
Junior Cybersecurity Officer — Governance & Planning
Promoted from Pre-Graduate Officer into a Junior Cybersecurity Officer role within the Governance & Planning team. Conduct vendor and third-party security posture reviews using UpGuard and ImmuniWeb, support cyber-risk assessments, develop compliance-driven documentation, and contribute technical cybersecurity analysis supporting regulatory oversight of the financial sector.
ImmuniWebNmapDarktraceLinux2025 — 2026
Financial regulator
Pre-Graduate Officer — Cybersecurity Governance & Planning
Supported website vulnerability testing and exposure reviews using OpenVAS, Nmap and Burp Suite. Investigated phishing emails and URLs, validated indicators of compromise, and supported blocking of related domains, senders and links. Contributed to security assessments, audit activity, Darktrace monitoring visibility, policy/guideline drafting, and controlled Linux-based security lab work including rogue-access-point simulation through pfSense.
NmapDarktracepfSenseLinux2022 — 2025
PG plc.
Junior IT Support Officer
Managed Active Directory user lifecycle tasks, Microsoft 365 accounts and licensing, and Android provisioning through Microsoft Intune. Configured 4G routers on Sputnik24 and Teltonika platforms; deployed and supported Zebra and NCR cash-point systems; configured Extreme Networks access points and Aruba/Dell switching; administered 3CX telephony; developed PowerShell automation; performed Linux and Bash administration; and supported electronics repair, 3D printing and a custom Linux infotainment environment administered through Webmin.
Microsoft 365
Cisco
PowerShellLinux2022
National Archives of Malta
Junior IT Assistant
Reimaged laptops and workstations with government-standard software builds; configured access to printers, scanners and secure wireless networks; managed Active Directory provisioning and access updates; installed departmental software; provided day-to-day staff support; and introduced open-source tools to improve internal workflows within budget constraints.
WindowsMicrosoftLinuxEducation
Systems knowledge built in the lab.
Formal study in systems, networks and infrastructure, reinforced through work-based learning and independent technical projects.
2023 — 2026
MCAST
BSc (Hons) Computer Systems & Networks
MQF Level 6 honours degree covering Linux and server administration, advanced routing and switching, virtualisation, network security, digital forensics, software-defined networking, cloud infrastructure and DevOps. The final dissertation investigates a standalone LoRa-based low-cost environmental monitoring system for Malta.
MQF Level 6
Honours degree
2021 — 2023
MCAST
Advanced Diploma in IT — Computer Systems & Networks
MQF Level 4 technical programme with practical foundations in computer systems, networking, routing, LAN and WAN technologies, virtualisation, network administration, computer security, scripting and embedded systems. Included work-based learning in enterprise IT environments.
MQF Level 4
Advanced diploma
Technical approach
Make systems easier to operate.
The aim is not to add complexity for its own sake. It is to understand the operating context, make justified design choices, validate the result and leave behind usable documentation.
Understand
Map the requirements, current environment, constraints and risks before selecting technology.
Design
Create an architecture that balances security, maintainability, cost and future change.
Build
Implement deliberately, with clear boundaries, repeatable configuration and operational intent.
Validate
Test functionality, exposure, failure cases and recovery assumptions rather than relying on intent.
Document
Record architecture, decisions and runbook-level knowledge so the system can be maintained.
Contact