Joaquín Cernik
Computer Science Engineering | Cybersecurity
Final year student. Passionate about cybersecurity, systems analysis, and technology solution development.
// about me
About me
I am a Software Engineering student in my final year, with a degree in Systems Analysis. My passion lies in cybersecurity and systems analysis.
Throughout my studies I have developed projects across various technologies, from embedded systems in C to modern web applications. I am especially interested in security in distributed architectures, vulnerability analysis, and development of protection tools.
I also worked with complex Linux system infrastructure, such as setting up DNS systems using bind, and internal corporate email ecosystems using protocols like SMTP and POP3 with tools like Postfix, Dovecot, and Roundcube.
{
"name": "Joaquín Cernik",
"title": "Software Engineering",
"specialty": "Cybersecurity",
"experience": [
"Full Stack Development",
"Server monitoring",
"Infrastructure"
"(...)"
]
// favourite projects
Favourite Projects
- Designed and deployed a secure, production-grade network architecture from scratch in a Linux environment
- Implemented stateful firewalling with iptables, NAT/MASQUERADE rules, and strict traffic isolation policies
- Configured multi-zone segmentation to safeguard enterprise infrastructure against unauthorized lateral movements
- Validated security rules and network performance using command-line diagnostic tools
- Deployed Postfix as MTA with MX record routing and configured Dovecot as MDA supporting IMAP4 and POP3 protocols
- Built a Roundcube webmail solution on a LAMP stack (Apache, MariaDB, PHP) with system user authentication
- Integrated standalone Mail User Agents (Thunderbird) and verified deliverability via dig and telnet diagnostics
- Established inter-domain mail routing and secondary DNS zone replication across multi-node virtual environments
- Configured automated Layer 2 dynamic IP allocation through ISC dhcpd with defined address pools and lease policies
- Built a high-performance BIND DNS infrastructure with caching/forwarding resolvers and authoritative primary/secondary zones
- Implemented NAT/MASQUERADE via iptables, IPv4 forwarding, and routed web services across internal network segments
- Validated recursive queries, iterative resolution, and zone transfers using dig, nslookup, and dhclient lease analyses
- Deployed and optimized a Graylog SIEM (Security Information and Event Management) infrastructure to centralize security event collection and enable proactive monitoring across a heterogeneous enterprise environment
- The project focused on platform hardening, log ingestion, and automated incident alerting to improve visibility and overall cybersecurity posture
- Developed a multi-tier Web3 solution for managing public calls for proposals with on-chain financial guarantees:
- Smart Contracts (Solidity & Hardhat): Architected the CFPFactory contract, an ERC-20 token contract with fixed-rate ETH exchange capabilities, and a full ENS suite (Registry, FIFS Registrars, and Resolvers) enabling on-chain identity verification and domain collision handling.
- Tokenomics & Escrow Logic: Implemented both standard proposal submissions and collateralized bids requiring ERC-20 token deposits, alongside pull-mechanism refund claims upon proposal finalization
- Off-Chain API & Frontend: Developed a REST API for off-chain metadata processing and a responsive web frontend integrated with MetaMask for domain registration, token swaps, and contract interactions
- DevOps & Testing: Implemented automated Hardhat deployment scripts (npm run deploy) with explicit environment variable outputs for API/Web integration, backed by thorough test suites
- Enterprise Computer Vision & Microservices Stack
- Orchestration & Infrastructure: Containerized multi-tier backend setup using Docker Compose, Nginx reverse proxying, and SSL encryption (Let's Encrypt)
- Identity & Security: Integrated Keycloak OIDC/OAuth2 authorization layer with custom realm configurations, proxy headers (X-Forwarded-*), and CORS preflight handling
- Computer Vision & Pipelines: Deployed Node-RED workflow nodes alongside dedicated Python/FastAPI microservices running object detection (YOLO) and facial embedding engines over private internal networks
- Data Management & Observability: Structured MySQL persistence alongside SeaweedFS object storage, complemented by an InfluxDB + Telegraf + Grafana observability pipeline tracking system metrics and inference response times
- Architecture: IoT Edge-to-Cloud telemetry and vision pipeline featuring embedded firmware and microservices. Repo infra: https://github.com/joaquincernik/str-final-infraestructura
- Edge Node (ESP32-CAM): Captures motion events, captures VGA JPEGs, samples electrical telemetry (RMS + EMA), and operates a relay output
- Ingress & Security (Nginx): Acts as the primary API gateway, handling reverse proxying, path-based routing (/foto), and SSL/TLS termination
- Orchestration & Logic (Node-RED): Ingests multi-part HTTP payloads, processes MQTT streams, handles DB persistence, and triggers downstream control commands
- Object Storage (SeaweedFS): High-throughput distributed blob storage optimized for small image persistence (JPEG payloads)
- Observability (Grafana): Presentation layer for real-time time-series telemetry, door event tracking, and alert dispatching
- Firmware repo: https://github.com/joaquincernik/str-final
// proyectos
Proyectos en GitHub
Loading projects...
// experience
Experience
Since the age of 19, I have successfully delivered a wide range of IT solutions for diverse clients.
Internal Sales Management Web Application
January 2025Agape
Developed an internal web application to track and record daily sales. Integrated data pipelines to automatically stream sales reports into a Grafana Cloud dashboard for real-time visualization.
Server Monitoring System
2025Personal Project
Designed and implemented a real-time monitoring system for a cluster of servers. Developed data collection scripts using Python to stream server metrics into Prometheus, with Grafana dashboards for visualization and alerting.
E-commerce Web Application
2022RGB Artes Gráficas
Developed and deployed a custom e-commerce web platform for a digital graphics company. Live project: rossogustavo.com.ar
Custom ERP
2023Cooperativa Electrónica UTN
Developed a custom ERP solution integrating an educational management module with a POS and inventory module for managing cooperative merchandise sales.
// education
Education
Software Engineering
Instituto Universitario Aeronautico (UNDEF)
2021 - 2026- Security Courses: Cryptography, Networking, OS
- Full Stack Development: Web, Mobile, Backend
- Embedded and Real-Time Systems
- Project Management and Agile Methodologies
- GPA: 8.19
Systems Analyst
Instituto Universitario Aeronautico (UNDEF)
2021 - 2025- Intermediate degree obtained
- Systems analysis and design projects
- Databases and information modeling
- GPA: 8.19
Full Stack Developer
Digital House
2020- Frontend: HTML, CSS, Javascript, React
- Backend: Node.js
- Databases: SQL
English Certifications
Available for opportunities
Looking for challenging projects and growth opportunities in cybersecurity and development.
Send message