Ivan Bogović
IT Engineering Leader · Infrastructure · Security · Automation
📍 Zürich, Switzerland · Available across EU + Switzerland
Profile
IT Engineering leader with 15+ years translating complex infrastructure and cybersecurity requirements into reliable, governed, and scalable internal services. Currently leading internal IT engineering — service ownership, people leadership, architecture direction and senior decision-making for business-critical platforms deployed across 180+ countries.
Expertise
Engineering Leadership
Team organisation, staffing, mentoring, delegation and delivery ownership across engineering and 24×7 operations.
Secure Connectivity
SASE, SD-WAN, SSE, ZTNA, FWaaS — Palo Alto, Fortinet, Cisco — design through production operation.
Infrastructure & Resilience
Linux, NetApp, Veeam, VMware, Azure, M365, Entra ID — datacentres, backup, storage and service lifecycle.
Operational Excellence
ITIL, ServiceNow, Incident & Change Management, 24×7 NOC/MC operations, documentation and runbooks.
Automation & Tooling
Python, Ansible, Terraform, SaltStack, Shell — repeatable delivery and infrastructure-as-code.
Governance & Risk
Access control, endpoint hardening, audit-driven initiatives, DR planning and compliance delivery.
Start here
Monitoring
Multiwindow burn-rate alerts instead of error-rate thresholds
Most teams start with an alert like “page if the 5xx rate is above 1% for five minutes”. It looks reasonable on the whiteboard. In produc...
Security
Replacing authorized_keys sprawl with SSH certificates
Somebody leaves the team. You revoke their VPN access, disable their directory account, and close the ticket. Six months later an audit f...
Automation
A read-only MCP server for network devices
The Cloud Security Alliance published a note this month on the state of MCP server security, and the number that stuck with me was the co...
Security
Detecting firewall rule drift before your auditor does
Someone opened a rule at 02:00 during an incident. It worked, the incident closed, and the rule stayed. Six months later it is still ther...
Latest
- 10 Nov 2026 Rolling changes with Ansible serial and max_fail_percentage
- 09 Nov 2026 Failing over a static default route when the ISP breaks upstream
- 06 Nov 2026 Weekly recap: a remote root in the TCP stack, Tailworm, and an ASA VPN DoS
- 06 Nov 2026 Multiwindow burn-rate alerts instead of error-rate thresholds
- 05 Nov 2026 Logrotate without losing lines or filling the disk
- 04 Nov 2026 Auditd rules that answer who changed what on a server
Topics
All 103 articles
Networking, security, Linux and automation. New posts on weekdays, a security recap on Fridays. RSS
Browse Articles →