MatthewGrygar

Operation and management of IAM solutions for enterprise clients in regulated sectors (finance, energy).

• Installation and configuration of IBM IAM stack: ITIM, ISVG, DB2, LDAP, WebSphere (WAS) on Windows Server.
• Upgrade of existing IAM environments, configuration of instances and integration links.
• Access governance: configuration of roles, access permissions and notifications (password changes, role assignments).
• Technical analysis in ISVG (Java component integrator) — error analysis, use-case scenario simulation.
• Collaboration with development team on GUI modifications; support for IAM-related incidents.
• Creation of reports from LDAP, testing of access scenarios, co-authoring implementation specifications.

Primary technical link between operations and development — responsible for production stability, escalation management and incident coordination with impact on critical operations.

• Management of P1/Major incidents in an environment of 300+ devices in production; escalation coordination in cooperation with operations manager.
• Coordination of specialist team (DevOps, development, technicians) during critical outages in 24/7 on-call mode.
• Design of internal guidelines for L1/L2/L3 responsibility division, escalation paths and capacity planning to ensure service availability.
• Built JIRA project from scratch: severity model, SLA parameters, workflow automation and notifications — as the basis for measurable operations management.
• Monitoring and analysis of error patterns (Grafana, SQL, Linux/SSH) for early identification of operational risks.
• Support for critical infrastructure migrations; management reporting on incident progress and operational status.

Operation and availability management of the Identita občana system — critical state infrastructure enabling online authentication of millions of citizens in communication with public administration.

• Management of P1/Major incidents with high impact on end users; chairing crisis calls and coordinating service recovery in minute-level SLA mode.
• Coordination of several teams of technical specialists across organisations during critical outages — with emphasis on rapid recovery and minimising impact on service availability.
• Monitoring of application availability, incident recording and analysis, SLA parameter compliance control and identification of recurring operational risks.
• Management of planned shutdowns including preparation of materials for management reporting and communication of impacts to stakeholders.
• Analysis of application logs and data inconsistencies in cooperation with DB and infrastructure teams.
• Basic PowerShell scripting; work in Linux (Red Hat) and Windows Server environments.

Design and implementation of network solutions for commercial clients — from initial requirements analysis to physical realisation and environment security.

• Design and implementation of network infrastructure including VLAN segmentation, configuration of Ubiquiti (AP, switches) and Fortinet firewall — with emphasis on security and access separation.
• Management of RDP access and endpoint devices; incident management including on-site resolution of HW/SW incidents and ticketing.
• Complete implementation of structured cabling over 5 km — patch panels, keystone modules, rack installation.
• Preparation of internal security lab (Windows/Linux) for testing network configurations and security scenarios.

Operation of IT infrastructure of the National Vaccination Centre at O2 Universum.

• Ensuring continuous availability of IT infrastructure — daily preparation and operation of dozens of devices and workstations in an environment with zero tolerance for outages.
• Monitoring and operational resolution of incidents in real time; management of MS SQL database with high transactional load including analysis and correction of data inconsistencies.
• Leadership of a small IT team: shift planning, responsibility allocation, setting up escalation procedures and operational standards.
• Processing and protection of sensitive personal health data in accordance with operational requirements of a restricted access environment (cooperation with Czech Army).
• Cooperation with external development team; UAT testing of new versions before production deployment.
• Identification of weaknesses in operational processes and proposals for workflow optimisation.