hardly/working

Available — taking subcontract work

00 — Premise

Subcontract infrastructure for MSPs

Your client's infrastructure should be boring.

Specialist virtualization, firewall and Linux capacity for managed service providers — working under your name, never in front of your client. When the work is done properly, nobody notices anything happened. Hence the name.

  • Remote-first
  • US Eastern
  • Subcontract only
  • White-label by default

01 — Capability

What I take off your plate.

Project work and overflow in the areas most shops don't keep on the bench full-time. Scoped, delivered, documented, handed back.

Virtualization

Host and cluster builds, vCenter deployment, P2V and V2V migrations, storage presentation, capacity and consolidation work.

vSphere · ESXi · vCenter

Firewall & network

Policy design and cleanup, VLAN segmentation that actually segments, site-to-site and remote-access VPN, switching and wireless.

FortiGate · UniFi · WireGuard

Linux & containers

Server builds and hardening, Docker and Compose workloads, reverse proxy and TLS termination, certificate automation, service migrations.

Debian · Ubuntu · Docker · nginx

Monitoring & alerting

Uptime and service monitoring that reaches a human, log aggregation and search, alert routing that doesn't train people to ignore it.

Uptime Kuma · Elastic · ntfy

Storage & backup

NAS and SMB architecture, per-service credential separation, share and permission design, backup verification and restore testing.

SMB/CIFS · NFS · snapshots

Automation & tooling

Python tooling against vendor APIs, scripted remediation, dynamic DNS and certificate plumbing, glue between systems that don't talk.

Python · REST APIs · systemd

02 — Terms

How working together actually goes.

You keep the client

I work under your brand, in your PSA, through your RMM. Your client never learns my name and I never solicit them. That's contractual, not a courtesy.

Scoped before started

Fixed scope and a written estimate before anything begins. If the job turns out larger than described, you hear about it while there's still time to decide — not on the invoice.

Documented on the way out

Every engagement ends with written handover in your documentation system: what changed, why, and what your team needs to know at 2am. No knowledge left in my head.

Async by default

Tickets, written updates, and scheduled maintenance windows. I'm not a phone-first operation, which is usually a feature when you need deep work done without interruption.

03 — Stack

Kit I work in daily.

Not a certification list — the platforms I run, break, and repair in a production home lab built to enterprise shape. If your stack is on here, there's no ramp-up time.

Hypervisor
VMware ESXi, vCenter Server
Firewall
FortiGate — multi-VLAN policy, NAT, VPN
Network
UniFi, 802.1Q segmentation, WireGuard, RouterOS
Servers
Debian, Ubuntu, systemd, SSH hardening
Containers
Docker, Compose, Portainer, registries
Proxy / TLS
nginx, Let's Encrypt, WebSocket routing
Storage
SMB/CIFS at scale, share and ACL design
Observability
Uptime monitoring, Elastic, fail2ban, alerting
Applications
Nextcloud, Collabora, GitLab, media services
Scripting
Python, Bash, vendor REST APIs
SYSTEM STATE HYPERVISOR NOMINAL SEGMENTATION ENFORCED TUNNELS HANDSHAKE OK CONTAINERS HEALTHY BACKUP VERIFIED

04 — Scope

What I'm not.

Worth stating plainly, because a subcontractor who overpromises costs you more than one who says no early.

  • Not a 24/7 help desk. No phone queue, no first-line support, no after-hours pager rotation. Scheduled maintenance windows are fine; being on call is not.
  • Not full-time capacity. This is deliberate side capacity — a defined number of hours a week. Better suited to project work than a permanent seat on your bench.
  • Not enterprise-scale change control. Hundred-host estates with CAB processes and formal change windows need a different kind of shop. SMB and mid-market is where I'm useful.
  • Not on-site outside my region. Remote work, remote hands coordination, and documentation — yes. Flying to a data centre — no.

05 — Contact

Send it straight to my phone.

No inbox, no ticket queue, no autoresponder. This form publishes to a private topic on my own notification server and buzzes the device in my pocket. Tell me what you need and roughly when.

Delivered over TLS to a write-only topic. Nothing is stored in a database.