aitiko.ch
Aitiko

Linux infrastructure that
stays up under audit.

Independent senior consultancy. Twenty years building, hardening and operating production-critical Linux estates for Swiss enterprises — national transport, national telecoms, regulated environments.
Based in Switzreland, Canton Bern.

20+
years in production Linux
100+
servers under direct responsibility
15 yr
at CH critical infrastructure
CIS
benchmark hardening at scale
ISO
27001-aligned operations
01

services

/ what Aitiko do
SRV.01

Linux infrastructure

  • RHEL · Debian · Ubuntu — setup & ops
  • CIS Benchmark hardening, audit-ready
  • Physical → virtual, on-prem → cloud migrations
  • On-call & incident response
SRV.02

Automation & config

  • Ansible playbooks, roles, CI/CD integration
  • Bash · Python · Perl tooling
SRV.03

Hardware, virtualisation & on-prem

  • Bare-metal procurement, racking & server-room ops
  • VMware ESXi · ~20 hosts, 100+ VMs
  • Bare-metal → VM → container migrations
  • Storage, networking, backup integration
  • Veritas NetBackup operations
SRV.04

Kubernetes & CI/CD

  • Cluster setup & production operations
  • GitHub Actions · Jenkins · ArgoCD · GitLab CI
  • Helm charts & release management
SRV.05

Network · firewall · VPN

  • OpenBSD pf — patch accepted upstream
  • Firewall design & rule management
  • VPN & network segmentation
  • Datacentre & hybrid connectivity
SRV.06

Security & compliance

  • CIS hardening for Linux fleets
  • Vulnerability & patch lifecycle
  • ISO 27001-aligned documentation
  • HashiCorp Vault · secret & key management
SRV.07

Monitoring & observability

  • IBM Netcool/NOI full stack — Omnibus, Impact, ITNM, TNPM
  • Prometheus · Grafana · Alertmanager
  • Log aggregation & alert pipeline design
  • Large-scale NOC operations
SRV.08

Legacy UNIX systems

  • OpenBSD — hardening, pf, upstream contributor
  • IBM AIX on POWER hardware
  • Oracle Solaris (SPARC & x86)
  • Operating estates that outlive their vendor support
02

selected projects

/ anonymised by request
2024 — now
Platform Engineer · blockchain validator infrastructure
Bare-metal & cloud nodes for major proof-of-stake networks. Kubernetes in production, Ansible at scale, GitHub Actions, HashiCorp Vault. ISO 27001:2022 certified, zero-tolerance security.
ISO 27001 · Vault · K8s
2016 — 2024
External senior consultant · Swiss national transport infrastructure
8-year embedded engagement. Full operational responsibility for 100+ Linux servers across multiple datacentres. CIS Benchmark hardening programme for the entire fleet, including security-critical systems. VMware, Veritas NetBackup, IBM Netcool/NOI.
8 yr · 100+ srv · CIS
2010 — 2016
External monitoring engineer · Swiss national telecommunications
Build-out and NOC support of monitoring infrastructure for Switzerland's largest telecommunications operator. IBM Netcool/NOI stack — Omnibus, Impact, ITNM, TNPM, Dashboard.
NOC · Netcool/NOI
past
Open-source contribution · OpenBSD pf
Authored a patch to OpenBSD's pf packet filter accepted into the official upstream source. Demonstrates deep networking and open-source credibility.
upstream · pf
ongoing
Network & firewall · regulated medical practice
Firewall and network infrastructure for a local medical practice using OpenBSD pf. Security-first design for a regulated environment handling patient data.
OpenBSD · regulated
03

certifications

/ verifiable
RED HAT2020
Red Hat Certified System Administrator (RHCSA)
RED HAT2021
Certificate of Expertise · Ansible Automation
VMWARE2016
VMware Certified Professional (VCP)
OPEN SOURCE—
OpenBSD pf · upstream patch accepted
Entity
Aitiko — IT Consulting Ch. Pfaff
Based
Canton Bern · Switzerland
Permits
CH · EU · TW
Languages
EN · DE
Engagement
Hourly · daily · project · retainer