[ 01_Profile ]

Szénássy Ákos

Cloud & Infrastructure Engineering

I’m a Budapest-based Computer Science Engineering student at BME and a software developer intern at Bosch, with a strong passion for cloud-native technologies and infrastructure. I love getting my hands dirty with complex systems. My current passion project is a documented two-node hybrid Kubernetes cluster bridging cloud and edge environments. I am deeply interested in DevOps and scalable system design, currently focusing on automating infrastructure with Terraform and implementing secure access via TLS ingress and Keycloak. Tailscale mesh, with no inbound port on the edge, autoscaled under measured load.

LOC: Budapest GITHUB

[ Status ]

Available
for Internship

Budapest · available now

[ CONTACT_ME ] [ ROLE_FIT ]

Scroll

PROJECTS

[ 02_Projects_Hub ]

Hybrid Zero-Trust K3s Cluster

A cloud node and a physical edge node joined over a Tailscale mesh, with no inbound port on the edge at all. Autoscaled 4 → 10 replicas under 100,000 ApacheBench requests at 1718 req/s and zero failures — plus a chaos engineering log of what broke.

K3s Tailscale mesh HPA ApacheBench Read Case Study ->

SmartChainControl

Real-time digital twin warehouse simulator built with .NET 9, Blazor WebAssembly and SignalR — autonomous fleet pathfinding and live telemetry over WebSockets. Contenarized with Docker and deployed on my server. LIVE NOW on smartchaincontrol.szenassy-akos.com

GITHUB ->

NAT Traversal for a Low-Latency Remote Desktop

Getting a self-hosted service out of an enterprise CGNAT firewall that blocks all inbound traffic — an outbound-only FRP reverse tunnel through a Budapest BIX VPS, cutting 60 ms+ to 15–22 ms.

15–22ms latency 0.00% jitter Read Case Study ->

Keycloak Identity Provider on K3s

Keycloak by Helm behind TLS ingress, an OpenID Connect authorization code flow in front of a real application, a passkey in place of the password step, and a SAML client alongside it to compare both federation protocols end to end.

OIDC + PKCE SAML 2.0 Read Write-Up ->

SpendSmart

Expense pipeline extracting structured data from receipt images via OCR/LLMs into PostgreSQL, with a Streamlit front end over the top.

GITHUB ->

PremiereFlow

Spring Boot REST API with a React client, using WebSockets for live seat updates and optimistic locking to survive concurrent bookings without double-selling a seat.

GITHUB ->

Scroll

[ 03_Tech_Stack ]

Cloud & Containers

Azure Kubernetes / K3s Docker Helm Proxmox VE Hetzner Cloud

CI/CD & IaC

GitHub Actions Terraform Automated testing kubeconform GHCR Git / GitHub

Identity & Security

Keycloak OAuth 2.0 / OIDC SAML 2.0 TLS / cert-manager Tailscale zero-trust

Observability

Prometheus Grafana metrics-server / HPA ApacheBench

Networking & Linux

Ubuntu / Debian Bash scripting Nginx ingress systemd FRP tunneling DNS / NAT traversal

Programming

Go Python Java / Spring Boot C# / .NET TypeScript REST APIs PostgreSQL / SQL

[ 04_Role_Fit ]

What the role asks for, and what I am building against it.

Rows marked with an arrow open the full write-up.

Major cloud platform

Azure — I will redeploy the cluster workload onto Azure VMs provisioned with the azurerm Terraform provider, to prove nothing quietly grew roots in one provider's assumptions.

Docker & Kubernetes

Services containerised with multi-stage Dockerfiles and orchestrated on a two-node hybrid K3s cluster across cloud and edge — deployed with kubectl, reached over a NodePort on the tailnet, HPA autoscaling measured under ApacheBench load, and a documented chaos incident.

CI/CD automation

This site builds and deploys itself on every push to main through a GitHub Actions workflow — the pipeline that publishes the page you are reading.

Software quality & security

At Bosch I work inside a pull-request and code-review workflow, where nothing is released without a second pair of eyes. On my own infrastructure that means no inbound port on the edge node, node-to-node traffic encrypted over WireGuard, and secrets kept out of the repositories.

Linux & networking

Ubuntu and Proxmox VE administration, systemd units, Nginx ingress and proxying, DNS and TLS — including a reverse tunnel that gets traffic out of an enterprise CGNAT firewall at 15–22 ms.

OAuth 2.0 / OIDC / SAML

A Keycloak realm on my own cluster: I will put the authorization code flow with PKCE in front of a real application, and register a SAML 2.0 client beside it so I end up with a first-hand opinion on both federation protocols rather than a memorised one.

Passwordless / WebAuthn

I will register a WebAuthn Passwordless Authenticator against the realm as an alternative to the password step, so a passkey signs the login instead. The credential is cryptographically bound to the Relying Party ID, which makes it phishing-resistant in a way SMS codes and TOTP are not.

Infrastructure as Code

I will declare the VMs, networks and firewall rules in HCL against the hcloud and azurerm providers, so the environment rebuilds from nothing with an apply rather than an afternoon.

Monitoring & observability

kube-prometheus-stack will replace the hand-read kubectl top I used during the March load test, so the next run will be captured on a Grafana dashboard rather than described in a sentence.

Scripting & programming

Go and Java / Spring Boot are what I reach for first — Go daily at Bosch, Spring Boot across my own REST APIs. Alongside them TypeScript at Bosch, plus Python, C# / .NET and Bash for cluster and server automation.

Agile & teamwork

At Bosch I work in an agile, sprint-based team spread across sites and countries, taking tickets through design, review and release. Alongside that I manage my own projects end to end, so I am used to both working modes.

English

English is the working language of my team at Bosch — spoken daily in stand-ups and reviews. Every case study, repository and README on this site is written in English.

Location

Based in Budapest and available to work on-site.

[ 05_Journey ]

Jan 2026 – Present

Bosch

Software Developer Intern

Working as a software developer in an enterprise environment. In my daily work, I use Go, TypeScript, and Svelte on live, corporate projects.

The team is agile and international, spread across sites and working in English. Features go through specification, design, implementation, tests and peer code review before they are released — my first experience of the full development cycle rather than just the coding part.

Sep 2024 - Present

BME

Computer Science Engineering BSc Student

Alongside my internship, I am continuing my studies as an active student, deepening my theoretical foundations, software development methodologies, and architecture design knowledge.

Ongoing

Projects

Self-Directed Infrastructure Work

I run my own environment: a hybrid K3s cluster across cloud and edge, joined over a Tailscale mesh and autoscaled under measured load, plus this site, which deploys itself on every push to main. Each piece of it is written up rather than just listed.

[ 06_Education ]

BME
CS Engineering BSc

Sep 2024 – expected late 2027

Budapest University of Technology and Economics — active student alongside my internship.

In progress — EPAM Fundamentals: Cloud & DevOps certification, running alongside the infrastructure work on this page.

[ 07_Languages ]

English
Hungarian

Confident · Native

Every case study, repository and README on this site is written in English.

[ 08_Contact ]

Ready to start.

I am looking for a cloud and infrastructure role. Everything on this page is mine, and every case study opens into the detail behind it — ask me to walk through any of it.

Phone

GitHub

Availability

Available now

Base

Budapest

[ CONTACT_ME -> ]