Private AI & LLM Infrastructure
Designed privacy-focused on-premises AI environments with Ollama, OpenWebUI and ComfyUI, including local LLM inference and autonomous agent workflows that retain data and infrastructure control.
Batuhan Alkoç
Senior Infrastructure & Security Engineer
Fortinet Microsoft Identity HPE SimpliVity VMware Veeam SecOps Automation
Open to Relocation · Ankara, Türkiye
About Me
Professional Summary
I am a Senior Infrastructure & SecOps Engineer currently leading technical assessments and improvements for a newly established IT environment at ARD Group, assigned to Emlak Yonetim Inc. I guide the Ankara team across Fortinet security, Active Directory, file services, Microsoft 365, Microsoft Entra ID, endpoint security and hardware operations. Previously at Petlas Tire Corporation, I specialized in network infrastructure, system administration and communication technologies while supporting large-scale enterprise operations.
Core Expertise
I have extensive experience designing, implementing and optimizing TCP/IP, LAN, VLAN, WAN and VPN architectures. My expertise includes five-site Fortinet environments with IPsec VPN, IPS, Application Control, Web Filtering, LDAP, FSSO, FortiSwitch and FortiAP, alongside VMware vSphere/ESXi, HPE SimpliVity HCI, backup management and FortiMail.
System Management
I manage critical services including Active Directory, OU and Group Policy design, DNS, DHCP, ADFS, IIS, FSRM, Microsoft Exchange Server, Microsoft 365, Microsoft Entra ID and HPE hyperconverged infrastructure. I maintain operational continuity through high-availability design and ransomware-resilient Veeam immutable and air-gapped backups, HPE Alletra storage and Zerto geographic replication.
Security & Optimization
With experience in firewall and IDS/IPS management, Wazuh SIEM, Greenbone/OpenVAS vulnerability management, Kaspersky, Trellix DLP, Avast Endpoint Security, n8n automation, Grafana and Zabbix, I strengthen security operations while optimizing server, storage and network platforms for performance and reliability.
0
+
Enterprise Users Supported
0
+
Endpoints Managed
24/7
System Uptime
0
+
Years Experience
0
+
Critical Virtual Machines
0
+
L2/L3 Switches
0
+
Access Points
0
Connected Sites
My Experience & Education
ARD Group Information Technologies Inc. — Assigned to Emlak Yonetim Inc.
Senior Systems & Network Engineer
June 2026 - Present · Ankara, TürkiyeLeading the assessment, security hardening and operational improvement of a newly established systems and network environment while serving as the senior technical point of contact for Ankara operations.
- Identify architectural, security and operational gaps; convert findings into prioritized remediation plans and technical assignments.
- Coordinate infrastructure improvements and provide implementation guidance, design reviews and Tier 3 troubleshooting support.
- Review and strengthen five FortiGate firewalls linked by IPsec VPN across Istanbul and Ankara, including IPS, Application Control, Web Filtering, LDAP, FSSO and firewall policies.
- Guide Active Directory architecture, OU and Group Policy governance, identity integrations, access permissions and FSRM quota and file-screening controls.
- Support Microsoft 365, Microsoft Entra ID, Kaspersky security solutions and Dell endpoint operations while improving standardization, documentation and continuity.
AKO Group — Petlas Tire Industry and Trade
System And Network Engineer
September 2024 - June 2026 · Ankara, TürkiyeAt Petlas Tire Corporation, I supervised maintenance, repair and backup operations across enterprise IT infrastructure and designed, implemented and optimized TCP/IP, LAN, VLAN, WAN and VPN services.
- Managed a four-node HPE SimpliVity HCI platform supporting 4,000+ users, 600+ endpoints and 90+ critical virtual machines across production and disaster recovery.
- Led critical VM migrations and Windows Server 2012 R2-to-2022 domain upgrades without downtime; administered on-premises Microsoft Exchange for 600+ mailboxes.
- Designed ransomware-resilient disaster recovery with Veeam immutable and air-gapped backups, HPE Alletra storage and Zerto geographic replication.
- Managed 200+ H3C L2/L3 switches, 300+ access points, FortiGate, FortiMail, VPN, RADIUS, guest wireless and Law No. 5651-compliant logging.
- Implemented Wazuh SIEM, Greenbone vulnerability management, n8n security automation, Grafana and Zabbix for detection, monitoring and incident response.
Turkish Armed Forces (55th Mechanized Infantry Brigade)
Communication Information Systems Officer (First Lieutenant)
October 2021 - August 2024 · Ankara, TürkiyeSupervised maintenance, repair and backup operations for computers and servers within the 55th Mechanized Infantry Brigade, supporting secure and uninterrupted operations for a critical military facility.
- Led IT infrastructure, secure communications and data center operations supporting 2,500+ personnel.
- Directed incident response, backup and disaster recovery, and performance optimization for critical systems and secure network services.
- Managed the technical team responsible for deployments, preventive maintenance and Tier 2/3 support in a highly restricted environment.
Communication, Electronic Information Systems School and Training Center
Trainee Officer
2021 - 2022Learned techniques to disrupt and deceive enemy communication and radar systems using advanced electronic warfare systems. Acquired comprehensive knowledge in the design, operation, and maintenance of satellite communication systems...
Turkish Armed Forces (Aegean Army)
Trainee Officer
2021 - 2021Planned and executed field communication systems for real operations and exercises at the unit level. Ensured the maintenance of communication systems and equipment...
National Defense University
BS, Computer Engineering
September 2017 - August 2021 · Ankara, TürkiyeI successfully completed all the requirements of the Computer Engineering Department undergraduate program and graduated on August 30th, 2021. Graduated grade is 2.88
Technical Projects & R&D
Containerized Services & Secure Networking
Built a Raspberry Pi 5 self-hosted platform with Docker and Docker Compose, protected remote access with Cloudflare Tunnels without exposed inbound ports, and deployed AdGuard Home for network-wide DNS filtering.
Enterprise Mail Infrastructure
Deployed and administer a containerized Mailcow platform with SPF, DKIM, DMARC, BIMI and Rspamd for stronger authentication, deliverability, spam filtering and anti-spoofing.