Cybersecurity & systems done right

Ahmed Taha Bouallegui

M.Eng. student at Polytech Lille. I work on Linux systems, declarative infrastructure, and the security around both. Looking for an internship in systems administration or cybersecurity, 10 weeks to 4 months, available anywhere between 19 April and 31 August 2027.

View my work Read the blog Résumé (PDF)
Scroll

Who I am

Systems that hold up the world, and the ones that break it.

I spend my days thinking about how infrastructure fails. A misconfigured firewall, an unpatched dependency, a race condition nobody asked for. The small things that cost a lot. I enjoy the moment an attack stops making sense and you can finally see the system clearly.

What I work with

Systems & administration

NixOSDebiansystemdDockerKVM/QEMUself-hosted services

Local AI infrastructure

llama.cppvLLM

Networking & security

TailscaleZeroTierper-user isolationAWS: EC2, IAM, security groupsCTF: RE

Embedded & wireless

Cnl80211 / rtnetlink802.11ATmega32U4KiCad

Programming

PythonC/C++JavaNixBashRustPostgreSQL

The longer list, with the work behind each line, is on the résumé.

Looking for

An internship in systems administration or cybersecurity, 10 weeks to 4 months, available anywhere between 19 April and 31 August 2027. Most of what is below is my own work on my own machines. The split keyboard was coursework, and the wifi work was a research internship; both are labelled where they appear.

Download résumé (PDF) Get in touch

The same content as a web page: résumé.

Selected work

Projects

Diagram: a Nix flake drawn as six lambdas feeding three machines: a ThinkPad, a retired laptop and a headless server called aleph

One flake for every machine I run

A NixOS monorepo: shared feature modules, per-machine hardware, encrypted secrets, services reachable only through a VPS.

NixOS flake-parts sops-nix
Diagram: three devices on a tailnet reaching a headless server called aleph that runs immich, jellyfin, grocy, searxng, samba and a local llm; the arrow from the internet is crossed out because no port is open

Self-hosted server infrastructure

A headless NixOS server: photo, media, grocery and search services plus a local LLM, reachable only through a VPS.

NixOS Tailscale Immich
Diagram: on the left the wifi module forks and execs iw and ip before reaching the kernel; on the right it sends nl80211 and rtnetlink messages over one socket

Wireless detection over nl80211

A monitor-mode probe that hops 31 channels and publishes what it hears to MQTT. My part: interface handling over netlink instead of subprocesses.

C netlink 802.11

From the blog

Recent notes

Series · 8 parts to

NixOS, in pieces

One flake builds every machine I run. Eight parts, one piece each: the layout, the secrets, the services, the desktop, the editor.

See the series →