Independent engineer · Tbilisi, Georgia

Linux infrastructure
and security for
small companies

I set up and harden the servers, private networks and internal tools that small businesses run on. Remote work, fixed prices agreed before I start, and a written handover at the end of every job.

Get in touch See software I built

Services

What I take on

Server setup and hardening

A new server built properly, or an existing one brought up to standard. SSH on keys only, root login disabled, firewall closed by default, TLS certificates with automatic renewal, Fail2ban, and backups you have actually restored once.

Ubuntu · Debian · Nginx

Private networks

WireGuard and OpenVPN configured so traffic cannot leak around the tunnel. DNS handled correctly, a kill switch that fails closed, and a verification report showing the setup holds under test.

Remote access · Site to site · Road warrior

Custom tools and automation

The script that replaces three hours of manual work every week. The integration between two systems that do not talk to each other. The small internal tool that does not exist as a product because your situation is specific.

Python · Bash · APIs

How I work

Terms, before you ask

Fixed price: Agreed in writing before I start, with what counts as finished spelled out. No hourly meter running while you wait.
I never need your password: You add an SSH key for the duration of the job and remove it when we are done. Access ends when the work ends.
Written handover: Every change, every file path, every command. Another developer can verify the work or take it over without asking me anything. You are never locked to me.
Remote: All of it, from Tbilisi. I work with clients in Europe and North America across time zones.

Proof of work

Software I built and sell

STEALTH Scan

A desktop security auditor for Windows and Linux. It checks a machine for the threats that steal cryptocurrency: clipboard hijackers that swap a pasted address, hidden stealers, fraudulent browser extensions, DNS leaks, and the state of the VPN and firewall. Everything runs locally. Nothing leaves the machine.

The SHA-256 of the download is published so a buyer can verify the file before running it. That is how I think about software, and it is the fastest way to judge my work before hiring me.

Look at STEALTH Scan

Contact

Tell me what the problem is

Describe the situation in a few lines. If it is not something I should be doing, I will say so and point you somewhere better.

@Eric_Lemieux

Fastest. I answer the same day.

eric@eric-lemieux.com

For anything with documents attached.

Registered business

Eric Lemieux, Individual Entrepreneur, Georgia · Tax ID 155785842