About
Sigurður Friðriksson
Platform and infrastructure engineer in Iceland. I like understanding systems from the application down to the operating system, network and hardware — and making them easier to run.
I work with infrastructure, Kubernetes, Linux, networking and security. Most of what I do is on-premises, which means dealing with the whole stack: from a workload that won't schedule to the routing, storage and certificates underneath it.
I started out writing software, moved into cloud-native infrastructure, spent a couple of years in security and penetration testing, and now work on telecommunications platforms. That path shows up in how I approach problems: I care about the application's needs, the security posture, and whether the system can actually be operated and understood by the people who own it.
I'm generally more interested in the reasoning behind a design than the list of tools it uses — why something was built a certain way, what it trades away, and what breaks at 03:00. That's mostly what I write about on the blog.
Experience
Telecommunications infrastructure: Linux, a multi-datacenter Kubernetes platform, Proxmox VMs, networking, DNS and ingress, certificate lifecycle management and CI/CD. Kubernetes architecture is collaborative — I contribute to the design and help shape it, alongside owning the day-to-day engineering.
Penetration testing and security consulting, building vulnerability management tooling, and security infrastructure. The offensive perspective still shapes how I design systems.
Independently architected and implemented Kubernetes infrastructure for medical-grade environments — designing the clusters, building the supporting infrastructure and delivering working platforms.
Backend services, APIs and application architecture. The foundation I still build on — I tend to understand infrastructure through the software that runs on it.
What I work with
Kubernetes and cloud-native tooling, Linux systems, on-premises virtualisation, networking and DNS, and security engineering. On the software side: Go, Python, Bash and SQL, with PostgreSQL, ClickHouse and Kafka in the mix. I've written more detail about how I think about these things in the writing, which is a better read than a skills list.
Selected projects
- sed.is — This website — a static site built with Astro, served by Caddy with automatic TLS.
- Multi-datacenter Kubernetes platform — On-premises Kubernetes spread across independent datacenters, with workload and security domains separated by design.
- Distributed vulnerability management platform — A scanner platform built from independent services, Kafka-based messaging and an evidence-based asset model.
- Healthcare Kubernetes (independent) — Kubernetes infrastructure for medical-grade environments, independently architected and implemented as a contractor.
About the name
The name sed.is comes from the initials of myself and my two daughters.
The fact that sed is also a Unix utility is a fitting coincidence.