// Portfolio — 2026
Hi, I'm
Michael
I work as a Security Engineer in the PAM team within the IAM domain at Atos/Eviden. My daily work centers on CyberArk technology and tooling. For several years I've been managing international IT infrastructure, privileged accounts, and Windows / Linux system administration — with a strong focus on compliance, auditability, and the SLAs our clients require. Outside of work I build my own web projects — both websites and applications. Personally, I'm into cybersecurity, new technology, and sports — especially football and the gym.
- 5+
- years in IT & security
- 12
- certifications earned
- CDE
- CyberArk expert level
- 24/7
- SLA-driven operations
// 01 — About
Security Engineer in the IAM domain.
- Experience
- 5+ years in IT
- Specialization
- CyberArk PAM
- Domain
- IAM / Cybersecurity
- Location
- Kielce, PL
I currently work as a CyberArk Security Engineer on a PAM team within the Identity & Access Management area. I manage privileged accounts, diagnose incidents, coordinate response according to defined SLAs, and roll out changes to client infrastructure together with other teams.
My path to security ran through several years of infrastructure administration — networks, Windows and Linux servers, cloud environments (Azure, Entra, GCP), and identity management in Active Directory. That background means I understand not just the security layer, but also what production actually looks like on the other side of the console.
I value structured work: clear documentation, a knowledge base with ready-made solutions, and monitoring that catches anomalies early. I'm building deep specialization in PAM (CyberArk Defender → Sentry → CDE) without letting the infrastructure fundamentals slip.
Least privilege
Access only where it's needed — and only as much as required. Every permission has a justification and an owner.
Audit by default
Logs, sessions, configuration changes — a complete audit trail from day one, not bolted on after an incident.
SLA-driven
Diagnostics and ticket handling at the contracted cadence. Defined priorities and clear communication to teams and partners.
Documentation first
Every solution makes it into the knowledge base. The next person (or me in six months) needs to grasp the context without archaeology.
// 02 — Skills
The stack I work with.
Technologies and areas I work with day to day. The core is PAM (CyberArk) and infrastructure administration — around it I'm growing my capabilities in identity, networking, and cloud.
Privileged Access (PAM)
05- CyberArk Defender
- CyberArk Sentry
- CyberArk CDE
- Session management
- Secrets audit & rotation
Identity & Access (IAM)
05- Active Directory
- Microsoft Entra ID
- GPO
- MS 365
- User & role management
Systems & servers
06- Windows Server
- Windows 10/11
- Linux Server
- Linux
- PowerShell
- WDS / WSUS
Networking
06- LAN / WLAN
- TCP/IP
- DHCP
- DNS
- Cisco (CCNA mod. 1)
- Network diagnostics
Cloud
04- Microsoft Azure
- Microsoft Entra
- Google Cloud (badges)
- Network security in GCP
Web, data & AI
07- SQL
- WordPress
- HTML / CSS / SASS
- Bootstrap
- Google Analytics
- SEO
- Prompt Engineering / LLM
// 03 — Certifications
Formal proof of competence.
A development path in PAM (CyberArk: Defender → Sentry → CDE; Wallix: WCA-P → WCP-P) and foundations in systems, networking, and cloud administration. Listed chronologically — newest first.
Professional-level Wallix PAM — designing and deploying Bastion environments, integrations, maintenance, and advanced troubleshooting.
Wallix — 04.2026
// 04 — Work
Recent web projects.
A selection of recent personal work — from sites for local service businesses to a feature-rich web application. All in production, available at public URLs.
Web / Next.js · 202601 / 05Korona Detailing — detailing studio
Website for a car detailing studio in Kielce — paint correction, ceramic and elastomeric coatings, PPF film, wraps, and detailing washes. A service catalogue with pricing broken down by car size, a project gallery with before/after comparison, and a quote form that collects the full vehicle details.
- Scope
- Web design · Frontend · SEO · Performance
- Stack
- Next.js · TypeScript · Tailwind CSS · Vercel · Resend
- 6 service modules: paint correction (single-, dual- and multi-stage), ceramic coating, elastomeric coating, PPF film, wraps, and detailing wash
- Gallery of 20 projects with photos and video, filtered by service type
- Before/after result comparison on an interactive slider
- Pricing tables per car size, plus a 4-step breakdown of how the process works
- Validated quote form (name, phone, email, service, car make and year, preferred date) — delivered via a Server Action and Resend
- JSON-LD structured data: AutoDetailing, Service, Offer, OfferCatalog, FAQPage, ItemList, OpeningHoursSpecification
- Vercel hosting with a full set of security headers — CSP, HSTS, X-Frame-Options, Permissions-Policy
Web / Next.js · 202602 / 05Pixel — electronics repair shop
Website for an electronics repair shop in Kielce servicing laptops, consoles, phones, and tablets. Three service tracks with the scope of each repair, indicative pricing, shop details with opening hours, and an FAQ that answers the questions customers have before dropping off a device.
- Scope
- Web design · Frontend · SEO · Local SEO
- Stack
- Next.js · TypeScript · Tailwind CSS · Vercel · Resend
- Three service categories: laptops and computers (liquid damage, BGA chips, screens, drives), consoles and controllers (HDMI ports, analog sticks, pads), phones, tablets and smartwatches (screens, batteries, charging ports)
- Indicative pricing — from 60 PLN for screen protection to 350 PLN for a display replacement
- Shop section: address, opening hours (Mon–Fri 10–18, Sat 10–14), and a gallery of the workbench
- Google reviews (5.0 from 19 ratings) and an FAQ covering 7 questions on repair scope, pricing, and the drop-off procedure
- Device intake form handled by a Server Action and Resend — alongside phone and walk-in contact
- JSON-LD structured data: LocalBusiness, Service, Offer, PriceSpecification, GeoCoordinates, OpeningHoursSpecification, FAQPage
- Vercel hosting with CSP, HSTS with preload, and X-Frame-Options: DENY
Web / Astro · 202603 / 05Grotexplus — facade and exterior cleaning
Corporate website for a professional facade and large-surface commercial cleaning company based in Kielce. Astro architecture with selective hydration (islands), full SEO with Schema.org structured data, and Resend-powered contact form.
- Scope
- Web design · Frontend · SEO · Performance
- Stack
- Astro · TypeScript · Tailwind CSS · Vercel · Resend
- Astro Islands — interactive components (Gallery, Contact, Stats) hydrated selectively to minimize client-side JS
- Full SEO optimization: meta tags, Open Graph, Twitter Cards, canonical, hreflang, geo data (Kielce)
- JSON-LD structured data (Schema.org) — Organization, LocalBusiness, FAQPage and a dedicated Service per service
- 8 service sections: facade cleaning, shopping malls, airports, industrial halls, hard-to-reach spots
- Project gallery with category filtering and before/after comparison
- Contact form with validation, GDPR clause, and email sending via the Resend API
- Vercel hosting with CSP, HSTS, and a full set of security headers
Web App / Fitness · 202604 / 05Gymnazjos — training application
Production web app for planning and tracking strength training. Plan generator (FBW, Upper/Lower, PPL, Split), a library of 100 exercises with video, session history, progress and bodyweight tracking, and AI-assistant recommendations — all in a Polish UI with multiple modes to choose from.
- Scope
- Frontend · Auth · UX/UI · Product design · Deploy
- Stack
- Next.js · React · TypeScript · Google OAuth · YouTube API
- Training plan generator — pick the type (FBW / Upper-Lower / PPL / Split), 1–7 days per week, configure Push/Pull/Legs per day
- Library of ~100 exercises across 9 categories (Back, Chest, Shoulders, Biceps, Triceps, Legs, Glutes, Abs, Cardio) — each with a YouTube tutorial
- Dashboard with a summary (active plan, goal, weight, completed workouts) and AI-assistant recommendations
- User profile — training goal, experience level, preferred plan type, weight and height
- Workout history and a progress section for tracking results over time
- Email + password auth (≥12-character policy) and Google OAuth, with password reset
- Dark mode, Polish UI, production deploy on a dedicated domain
Web / WordPress · 202405 / 05Naturalne Bogactwo
Brochure site for a family beekeeping farm with a four-generation tradition. Presents the products (nectar-honeydew honey, pollen, beeswax candles) and the history of apiaries in the Świętokrzyskie region.
- Scope
- Web design · WordPress · Content · Gallery
- Stack
- WordPress · PHP · HTML · CSS
- Sections: About, Products, Honey, The Apiaries, Gallery, Contact
- Educational product presentation — nectar-honeydew honey, pollen, beeswax candles
- Showcased regional honors (Świętokrzyska Kuźnia Smaków, Nasze Kulinarne Dziedzictwo)
- Photo gallery of products and apiaries
- Contact form and farm details
// 05 — Experience
Career path.
Five stages that built my competence in security and infrastructure administration — from my first hardware internships to my current role as a Security Engineer on a CyberArk PAM team.
PAM / Cybersecurity · 11.2023 — present01 / 05Atos / Eviden — Security Engineer
Security Engineer on a PAM (CyberArk) team in the IAM domain. I manage servers and privileged accounts, coordinate SLA-bound incident response, and roll out standard changes across client infrastructure.
- Scope
- PAM (CyberArk) · IAM · 24/7 operations · SLA management
- Stack
- CyberArk · Active Directory · Windows Server · Linux · PowerShell · Monitoring
- Managing servers and user accounts in a PAM environment
- Incident diagnosis and SLA coordination, log review, and collaboration with other teams
- Rolling out standard infrastructure changes; consultations with internal and external partners
- Performance, capacity, and service-quality management
- Building and maintaining the knowledge base (KB) and documentation
- Developing monitoring and reporting mechanisms
IT Administration · 11.2020 — 10.202302 / 05Kielce University of Technology — IT Administrator
IT Administrator at a faculty of a technical university. Responsible end-to-end for the IT environment — computer labs, teaching network servers, networking infrastructure, and the faculty website.
- Scope
- Server administration · LAN networking · Tech support · Web
- Stack
- Windows Server · Linux · DHCP / DNS / GPO · LAN/WLAN networks · WordPress
- Managing the faculty's computer labs
- Administering the teaching network servers
- Technical oversight of cabling and hardware in the local network
- Managing the faculty website (CMS)
- Software installation and configuration
- Tech support (hardware + software) and hardware diagnostics
Information security · 08.2020 — 09.202003 / 05Information Security Center — Intern
Internship at the Information Security Center — first direct exposure to security audits and local-network administration in an environment where security was a daily priority.
- Scope
- Security audits · Network administration · Remote support
- Stack
- LAN networks · Audit · Security mechanisms · Remote support
- Conducting data security audits
- Administering the company's local network and verifying its security mechanisms
- Diagnosing and resolving software issues
- Providing remote user support
Data analysis · 09.2019 — 10.201904 / 05OptiBuy — Junior Analyst (internship)
Junior Analyst internship — first professional exposure to system testing, data analysis, and working with databases through SQL queries.
- Scope
- System testing · Data analysis · SQL · Configuration
- Stack
- SQL · Databases · System testing · Requirements analysis
- Running system tests per the company specification
- Analyzing data extracted from the system
- Database operations and writing SQL queries
- Configuring the system to client requirements
Hardware / IT support · 05.2016 — 06.201605 / 05Computer Aid International — Erasmus+ London
IT placement in London under the Erasmus+ programme at Computer Aid International — hardware diagnostics and repair, and Windows system configuration.
- Scope
- Hardware · Windows · Databases · Erasmus+
- Stack
- PC hardware · Windows 7/10 · Microsoft Windows · Databases
- PC hardware diagnostics and repair
- Replacing faulty computer components
- Managing and configuring Microsoft Windows 7 and 10
- Entering and editing database records
// 07 — Contact
Let's talk about cybersecurity, websites, and web apps.
I usually reply within 24 hours on business days. Open to conversations about PAM / IAM roles, CyberArk-based projects, and infrastructure administration — regardless of the engagement model. In parallel I build websites and web applications, and I'm happy to take on new commercial work.