Cristian Puello · IT Support · SysAdmin · Infrastructure
I keep businesssystems running.
I manage the infrastructure, support the users, and solve the hard problems that keep offices and shop floors moving. And when off-the-shelf software isn't enough, I build the tool that is.
- 6+ yrs
- Keeping systems online
- 99.98%
- Uptime maintained
- 4+
- Internal tools shipped
Most teams don't need another consultant. They need someone who keeps the lights on, builds the internal tools that make them faster, and ships the website their customers see.
Run the infrastructure
Microsoft 365, networking, remote access, servers, and shop-floor hardware. I keep the systems a business runs on reliable, secure, and supported.
Build internal software
When a process is too manual or no product fits, I build the internal tools that close the gap.
Design for the web
Modern, fast, responsive websites that represent a business well, built with the same care as everything else I ship.
Everything I keep running
Behind “the lights stay on” sits a lot of moving parts. This is the surface area I manage and support, day in and day out.
Microsoft 365 Administration
Exchange Online, Outlook, Teams, OneDrive, and SharePoint: provisioning, mailboxes, permissions, and day-to-day support.
Windows 10 / 11 Troubleshooting
Diagnosing and resolving OS, performance, driver, and update issues across the fleet.
User Support & Account Setup
Onboarding, account creation, access requests, and hands-on help that keeps people productive.
VPN & Remote Access
Secure remote connectivity with WireGuard, Tailscale mesh, Cloudflare Tunnel, and traditional VPN setups.
DNS & Networking Troubleshooting
Chasing down DNS, DHCP, TCP/IP, VLAN, and routing problems to their root cause.
Printers, Scanners & Shop Hardware
Label printers, scanners, and shop-floor devices kept online and correctly configured.
Engineering & Shop Software
Support for Bluebeam Revu, Tekla, SDS2, and other production and shop applications.
Workstations & Conference Rooms
Workstations, conference-room AV, and rugged tablets built, deployed, and maintained.
Switches, Cameras & Cabling
UniFi switches and access points, VLAN segmentation, firewalls, security cameras, and structured cabling.
Linux Server Administration
Ubuntu and Debian server administration: Bash automation, SSH access management, systemd services, packages, and permissions.
Identity, Licensing & Security
Entra ID user lifecycle, group and license assignment, MFA enforcement, and tenant security settings.
Documentation & Process Improvement
Clear runbooks and internal process improvements that make support repeatable and fast.
What that reliability is worth
Keeping systems up is the baseline. The real value is what it unlocks for the people and the production behind them.
Supported Production & Shop-Floor Systems
Kept the systems the business actually runs on, production and shop-floor, reliable and available.
Solved Business-Critical User Issues
Resolved the blockers that stop people from working, fast, with minimal disruption.
Improved Internal Workflows
Streamlined how teams get things done by fixing the friction in everyday processes.
Reduced Repetitive Manual Work
Built internal tools and automation that cut out repetitive, error-prone manual steps.
Bridged IT Support & Software Development
Connected frontline IT support with real software delivery. Support that also builds.
Platforms I design and operate
Infrastructure I architected, deployed, and operate end to end: the hypervisor, the network path, secret management, and a recovery procedure that has been exercised rather than assumed.
Virtualization & Compute Platform
A layered compute platform: a Type 1 hypervisor at the base, containerized workloads above it, and network-attached storage behind both.
- Proxmox hypervisor hosting virtual machines and LXC containers
- Containerized application workloads deployed and managed with Docker
- ARM-based Raspberry Pi nodes dedicated to lightweight always-on services
- Synology and UGREEN NAS providing network-attached storage and shares
- Proxmox
- Docker
- Raspberry Pi
- NAS
Secure Remote Access
Access to internal services with no inbound exposure, layered so that no single control is the only barrier standing in front of an application.
- Cloudflare Tunnel publishing services with no inbound firewall ports open
- Cloudflare Access enforcing identity-aware authorization at the edge
- WireGuard providing encrypted point-to-point connectivity
- Tailscale mesh networking across devices and sites
- Cloudflare Tunnel
- Cloudflare Access
- WireGuard
- Tailscale
Backup, Recovery & Disaster Response
A backup is only as good as its last verified restore. Recovery procedures here are exercised rather than assumed, including a full rebuild carried out after a storage failure.
- Veeam backup architecture and documented restore strategy
- Layered backup coverage across local disk and network storage
- Executed full disaster recovery of a node following storage failure
- Migrated that node from microSD to NVMe SSD to eliminate the failure mode
- Veeam
- Disaster Recovery
- NVMe Migration
- Backups
Services, Secrets & Monitoring
Application services operated with centralized secret management and monitoring, so credentials stay out of configuration files and failures surface before they become outages.
- Jellyfin media service deployed, tuned, and supported end to end
- OpenBao providing centralized secret management
- Monitoring across hosts and services for early failure detection
- Linux service management and maintenance across Ubuntu and Debian hosts
- Jellyfin
- OpenBao
- Monitoring
- Linux
So I build the tool
This is where IT support becomes a force multiplier. When no product fits the process, I ship the internal software that does, with real auth, data, and business logic.
Shadow Brain
Private knowledge platform built on an interactive knowledge graph. Content publishes publicly or stays private behind a granular authorization model, with a search engine across the corpus, OpenBao-backed secret management, automated infrastructure provisioning, and a documented security architecture.
- Knowledge Graph
- Search Engine
- OpenBao
- Authorization
Astro ITSM
Self-hosted IT service management and documentation platform covering asset management, an encrypted credential vault, knowledge base, and domain tracking. Role-based access control, MFA, audit logging, and search throughout, deployed via Docker with CI/CD, monitoring, and a backup strategy behind it.
- Docker
- RBAC & MFA
- Audit Logs
- CI/CD
IronFlow
Manufacturing operations platform built for Novel Iron Works, replacing a spreadsheet-driven process with a multi-user system of record. Work orders and small sales run through a governed business workflow, with role-based access, audit logging, and PDF document generation.
- Work Orders
- User Roles
- Audit Logs
- PDF Export
Shadow Tag
Custom embedded device on ESP32-S3 with firmware developed from scratch. A LovyanGFX touch interface drives weather, timer, and status subsystems, with RGB LED state indication and persistent storage that survives power cycles.
- ESP32-S3
- LovyanGFX
- Firmware
- Touch UI
Astro Clerk
Spanish ERP-lite telecom billing system with invoices, reports, audit logs, and multi-tenant structure.
- ERP
- Billing
- Multi-tenant
- Audit Logs
Smart Wardrobe App
AI outfit suggestion mobile app based on clothes, occasion, and personal style.
- React Native
- AI
- Mobile
- Recommendations
The site your customers see
The same build quality goes into public-facing sites: modern, fast, responsive, and easy to maintain.
Novel Iron Works
A marketing site for a steel-fabrication shop: services, a project gallery, and clear calls to action, built to load fast and look sharp on every device.
- Next.js
- Tailwind CSS
- Framer Motion
- Responsive
Rose Steel Inc.
A steel-erection company site: services, safety, and a project portfolio, with a mobile-first layout that keeps the focus on the work.
- Next.js
- TypeScript
- Tailwind CSS
- Responsive
cpuello.dev
This portfolio, designed and built from scratch: a custom motion system, semantic and accessible markup, a spam-protected contact pipeline, and a statically prerendered build tuned for performance.
- Next.js
- TypeScript
- Tailwind CSS
- Vercel
- Resend
- Turnstile
- Accessibility
The stack it all runs on
From Microsoft 365 and networking to the code I ship: the tools behind the work.
Three ways I show up
Troubleshoot, support, build. The same mission from three angles: keep it running, and make it faster.
Troubleshooting & Support
When something breaks and the business stops, I find the root cause and get people working again, calmly and quickly.
- Triaged and resolved OS, network, and hardware failures
- Restored access and connectivity under time pressure
- Documented fixes so the same issue never costs twice
Business Systems Support
I keep the platforms teams depend on (Microsoft 365, shop software, and production systems) reliable day after day.
- Administered Microsoft 365 and business applications
- Supported production and shop-floor hardware and software
- Managed accounts, permissions, and secure remote access
Internal App Development
Where a process is slow or manual, I build the internal tool that fixes it, instead of absorbing the work ticket by ticket.
- Built ERP-lite and ITSM-style internal platforms
- Automated repetitive workflows and manual data entry
- Shipped tools with auth, RBAC, and real database backing
Common questions
Let's build something reliable, useful, and fast.
Whether it's IT support, SysAdmin work, or an internal tool that saves your team hours, let's talk about it.
Trusted Technology Partner
Proud technology partner of CK Technology, delivering secure infrastructure, modern cloud solutions, cybersecurity, automation, and custom software development for businesses.
