>show role — network to cloud

Designing resilient hybrid cloud infrastructure for modern enterprises.

I'm Sid Laxamana, an Enterprise Network Engineer specializing in hybrid cloud infrastructure. My background spans enterprise routing, SD-WAN, security, and cloud connectivity, with hands-on experience designing production-inspired AWS environments. Every project is documented from architecture through implementation to demonstrate practical engineering rather than isolated lab exercises.

GitHub LinkedIn
traceroute — this page
YOU ROUTE 53 CLOUDFRONT + WAF · ACM TLS AMAZON S3 THIS PAGE
4 hops · edge cached · waf + acm tls active
CCNP
Enterprise
NSE4
Fortinet
24/7
Hybrid Homelab
AWS
Hands-on Labs
show interfaces

Featured Projects

A selection of projects inspired by real enterprise environments. Each focuses on solving operational challenges through sound architecture, security, automation, and thorough documentation.

eth0/1up

Hybrid Cloud Transit VPC

Designed a production-inspired hybrid cloud architecture connecting on-premises infrastructure to AWS using Transit Gateway, FortiGate NVAs, IPSec VPNs, and dynamic BGP routing while focusing on segmentation, resiliency, and secure traffic inspection.

Transit GatewayFortiGateBGPVPN
eth0/2up

Portfolio on AWS

Built on AWS-native services end to end using Amazon S3 for static hosting, Route 53 for DNS, CloudFront with Origin Access Control as the global CDN, AWS WAF for protection, ACM-managed TLS, and a secure GitHub Actions CI/CD pipeline using GitHub OIDC, AWS STS, and cross-account IAM roles. Future enhancements include Infrastructure as Code with Terraform.

S3Route 53CloudFrontWAFACM
eth0/3up

Enterprise Security Monitoring

Designed and implemented a hybrid AWS security monitoring pipeline that collects Amazon VPC Flow Logs in CloudWatch, processes the telemetry on an EC2 log collector, and forwards normalized security events to an on-premises Wazuh SIEM for threat detection, threat hunting, vulnerability management, and centralized visibility.

AWSCloudWatchVPC Flow LogsWazuhThreat Hunting
eth0/4up

Enterprise SD-WAN

Supported enterprise VMware SD-WAN deployments across multiple production sites, performing migrations, routing optimization, cloud integration, and troubleshooting to maintain business-critical connectivity.

VeloCloudBGPRouting
show running-config | section homelab

Enterprise Hybrid Cloud Homelab

My homelab is a continuously evolving enterprise test environment where I prototype networking, cloud, identity, security, monitoring, and automation solutions before documenting implementation details and design decisions.

12U08U04U01U
Hybrid Cloud Homelab topology diagram
fig. 1 — current homelab topology, rack-mounted for reference only

Infrastructure

  • Proxmox VE
  • Windows Server (AD, DNS, CA)
  • Ubuntu Linux
  • OPNsense Firewall
  • Enterprise VLAN Design

Security & Monitoring

  • Wazuh SIEM
  • Suricata IDS
  • Zenarmor
  • Grafana
  • NetBox IPAM

AWS Integration

  • VPC
  • Transit Gateway
  • FortiGate NVA
  • Application Load Balancer
  • Route 53
curl /api/proxmox

Proxmox Infrastructure

Live host telemetry and guest posture through CloudFront → API Gateway → Lambda → Tailscale → Proxmox.

Ready · Load live Proxmox metrics on demand
Proxmox dashboard ready.Click "Load Live Proxmox Metrics" to retrieve telemetry.
curl /api/infrastructure

Live AWS Infrastructure

A live inventory pulled from the LaxStack AWS accounts through API Gateway and Lambda. Infrastructure resources and current AWS cost data are displayed per account.

Connecting to AWS infrastructure API...
Infrastructure inventory is ready. Press the button above to invoke the API.
show inventory

Technology Stack

AWSEC2S3IAM ALBTransit GatewayCloudFormation LinuxProxmoxFortiGate CiscoMerakiAruba VMware SD-WANOPNsensePython GitHubBashPowerShell
cat certifications.md

Certifications

Verified credentials — each badge links out to its live Credly verification page.

CCNP Enterprise badge

CCNP Enterprise

Cisco
Verify on Credly → Cisco Certified Specialist Enterprise Core badge

Cisco Certified Specialist — Enterprise Core

Cisco
Verify on Credly → Cisco Certified Specialist Enterprise Cloud Connectivity badge

Cisco Certified Specialist — Enterprise Cloud Connectivity

Cisco
Verify on Credly → Fortinet FortiGate 7.2 Administrator badge

FortiGate 7.2 Administrator

Fortinet
Verify on Credly → CCNA badge

CCNA

Cisco
Verify on Credly →
show running-config

Professional Journey

! foundation
Built a strong foundation in enterprise routing, switching, security, VLAN design, and network architecture.
! enterprise-networking
Delivered enterprise infrastructure solutions using VMware SD-WAN, Fortinet, Cisco, Aruba, and cloud-connected production environments.
! hybrid-cloud
Designed production-inspired AWS hybrid architectures integrating Transit Gateway, FortiGate NVAs, IPSec VPNs, and dynamic routing.
! current-focus
Continuing to expand into cloud infrastructure, Infrastructure as Code, automation, and cloud security while building on an enterprise networking foundation.
show configuration candidate

Currently Learning

activeAWS Solutions Architect — Associate
activeInfrastructure as Code (Terraform)
activeCloud Security
activeCI/CD & Automation
show interface Management0

Let's Connect

Interested in enterprise networking, hybrid cloud, infrastructure engineering, or AWS architecture? I'm always happy to connect, exchange ideas, and discuss challenging technical projects.

! email
laxamanasr@gmail.com
! github
github.com/laxamanasr-blip
! linkedin
linkedin.com/in/sidney-leigh-laxamana