Joseph Miller @socket23

Experience

I learned by following problems across the stack.

My experience comes from migrations, recoveries, troubleshooting, lab research, and operating the systems myself. I am comfortable moving between the architectural view and the low-level evidence.

Infrastructure and virtualization

I understand the full migration path

I have moved, restored, and tested workloads across VMware, Hyper-V, and Proxmox while accounting for boot mode, virtual hardware, storage ownership, networking, identity, applications, and rollback.

Enterprise migration case study →

  • VMware ESXi and vCenter
  • Windows Server 2025 Hyper-V
  • Proxmox VE and Proxmox Backup Server
  • Dell PowerEdge and PowerVault SAN environments
  • Veeam Direct SAN recovery

Storage, backup, and recovery

I treat source protection as part of the job

I have worked with SAS, iSCSI, LUN mappings, MPIO, VMFS, ReFS, ZFS, VHDX, backups, and isolated restores. I want proof that data stayed protected and the restored system performs its real function.

SAN safety case study →

  • OfflineAll and disabled automount
  • Read-only source LUN handling
  • 64 KB ReFS target volumes
  • Restore-point and disk-count validation
  • Application and network recovery checks

Microsoft cloud and identity

I follow identity beyond the sign-in screen

I have worked through Azure Virtual Desktop, Active Directory, Microsoft 365, Exchange Online, Conditional Access, Teams integrations, OneDrive, Outlook, profiles, tokens, and application registration.

AVD automation case study →

  • Session-host deployment and registration
  • DNS, SYSVOL, NETLOGON, FSMO, and replication
  • Mail flow and archive troubleshooting
  • OneAuth and AAD Broker Plugin repair
  • PowerShell-based validation

Networking and firewalls

I trace the complete path

I have mapped and diagnosed VLANs, switch ports, routes, NAT, DNS, TLS, VPN paths, private management access, Cloudflare proxying, and the service behind the firewall rule.

Network segmentation case study →

  • Sophos XGS
  • Juniper and Meraki switching
  • DNAT, SNAT, routing, and DNS forwarding
  • Tailscale and SSH tunnels
  • dig, curl, OpenSSL, logs, and port tests

Cybersecurity and monitoring

I correlate evidence before deciding what an alert means

I use packets, Zeek logs, flows, IDS alerts, endpoint context, honeypot activity, and threat intelligence to separate noise from activity that deserves investigation.

Threat-monitoring lab case study →

  • Security Onion and Elastic
  • Zeek and Wireshark
  • DShield honeypot data
  • SiLK network flows
  • CVE and exploit research

Automation and administration

I use code and evidence to make repeated work safer

I build diagnostics and staged scripts with PowerShell, Linux shell tools, APIs, logs, registry data, structured output, and explicit validation checkpoints.

  • AD, Hyper-V, Exchange Online, and Azure diagnostics
  • Resource discovery and deployment tracking
  • CSV exports and validation logs
  • Linux, Docker, systemd, packages, and storage
  • Certificate and DNS automation

Private AI systems

I approach AI as infrastructure

I have built GPU-backed inference, APIs, interfaces, local model routing, and agent platforms while treating authentication, remote access, capacity, logs, storage, upgrades, and recovery as part of the design.

Local AI platform case study →

  • High-memory professional NVIDIA GPU
  • vLLM, llama.cpp, LM Studio, and Ollama
  • OpenClaw and Hermes
  • OpenAI-compatible APIs
  • Tailscale-controlled access

Where this experience is strongest

I do my best work when several systems are involved, the documentation is incomplete, the risk is real, and the next step needs to be based on evidence instead of guesswork.

See the work behind it