Nadeeja NirmalaIT Manager
Nadeeja Nirmala

Nadeeja NirmalaIT Manager, FIBC Lanka

Open to IT and infrastructure roles

Infrastructure that stays up. Recovery that’s tested.

I’m the IT Manager at FIBC Lanka, a factory in Polonnaruwa, Sri Lanka, that makes bulk bags for export and runs around the clock. I plan the network, the servers and the backups, build them myself, and test them before anyone has to rely on them.

Credentials: CCNPCCNABSc (Hons) Computer Networks and Security

Hire me Download CV PDF See the work

NetworksRecoverySystemsAndroidWeb

LinkedIn ↗GitHub ↗Read the record

01

How I work

The factory runs day and night, so the systems behind it don’t get a day off either.

Plan and build

I plan the work and I do the work, so nothing gets lost in a handover between the two.

Targets first

We agree the targets before anything is bought: back in service within four hours, and no more than a day of data lost.

Then tested

Restores run on a schedule, and after any network change I check that the blocked paths are still blocked.

Summary

I look after the infrastructure FIBC Lanka runs on: the network, the servers, the backups, the cameras and the business software people use every day. Before that I worked in CAD at Brandix, and my first job in IT was network administration at Dialog Axiata.

In my own time I build Android apps that work below the usual interface: telephony, VPNs, and now search that runs on the phone. The approach is the same in both places. Find out what the system is really doing before touching it, change as little as I can, then try to break the result.

Current role
IT Manager, FIBC Lanka (Pvt) Ltd, since December 2024
Environment
Manufacturing. Production runs around the clock on an ERP that can’t go down
Certifications
CCNP and CCNA, from Cisco
Education
BSc (Hons) Computer Networks and Security
Platforms
Windows, Linux, hybrid cloud and Android
Located
Polonnaruwa, Sri Lanka
02

The record

The targets came first. The design had to meet them.

< 4 hRecovery time objective
24 hRecovery point objective
3-2-1Backup architecture
3Isolated network zones
11–17Android versions supported
PRODUCTIONOFFICECCTVGATEWAY
  1. Before

    One flat network. Any machine on the factory floor could reach every other one, so a fault anywhere could travel everywhere.

  2. Split

    I split it into three zones: production, office and CCTV. Each one keeps its own traffic.

  3. Gateway

    Anything crossing between zones goes through one gateway, where the firewall and intrusion detection sit. ERP traffic, in amber, gets priority.

Fig. 1  The factory network, before and after segmentation. Scroll to watch it split.
03

Experience

IT Manager, FIBC Lanka (Pvt) Ltd

Dec 2024 – present · Polonnaruwa

FIBC Lanka makes bulk bags for export, and the factory runs around the clock. I’m responsible for all of its IT, and I do the hands-on work myself.

  • Network. Split the flat factory network into production, office and CCTV zones, with a firewall, intrusion detection, encrypted DNS and priority for ERP traffic. Network case study
  • Backups and recovery. A 3-2-1 design built to a four-hour recovery target and a 24-hour limit on lost data, with restores tested on a schedule. Recovery case study
  • Servers. Windows and Linux, on site and in the cloud: builds, hardening, remote administration and monitoring. Servers case study
  • Business systems. Tally Prime ERP and SignHR: user accounts, access levels, data migrations and updates, planned around the production shifts.
  • CCTV. Designed and installed the IP camera system, on its own isolated network.
  • Hardware. Buying, supplier quotes, warranties, maintenance and secure disposal for the computers and equipment on site.
  • Design. I also produce the print artwork for the bags and the company’s social media graphics, in Photoshop and CorelDRAW.
VLANFirewallIDS3-2-1Windows ServerLinuxTally PrimeIP CCTV

Computer Aided Design Engineer, Brandix Athleisure

Jul 2021 – Oct 2023 · Polonnaruwa

Drew and graded garment patterns for mass production in Lectra Modaris and AutoCAD, to international buyers’ specifications, across several seasons of product lines.

Lectra ModarisAutoCADManufacturing

Network Administrator, Dialog Axiata PLC

2017 – 2018 · Sri Lanka

Network administration and live performance monitoring at Sri Lanka’s largest mobile operator, diagnosing and fixing server-side incidents within SLA.

Network operationsMonitoringIncident response

Android apps, my own projects

Alongside work

Things I build in my own time. Most of them work below the part of Android you normally see.

  • Pixel IMS 5G reaches the IMS and radio settings on Tensor Pixels through root or Shizuku.
  • Lumen builds full-device IKEv2/IPsec tunnels on Android's own VPN stack.
  • Both are open source, Pixel IMS 5G under GPL-3.0 and Lumen under MIT. They ship as signed releases you can download and install, and work from Android 11 through 17. Pixel IMS 5G is at version 1.0.5.
  • NIRALYTH, a local music player with lossless playback, is in public beta at version 0.11.0.
  • Next is Recall, a private search engine that runs on the phone: describe something you saw and it finds the screenshot, PDF or link. It’s built and tested, and testing on real phones comes next.
KotlinJavaIMSShizukuIKEv2
04

Selected work

All case studies

Eight projects, each with the detail behind it.

Selected engineering work with discipline and stack
No.ProjectDisciplineStack
01 Manufacturing network redesign

Three zones, encrypted DNS, intrusion detection, and priority for ERP traffic.

 Network engineering VLAN · IDS · QoS · DoH
02 Enterprise backup and recovery

Four-hour restore target, three copies of the data, and restores that get tested.

 Continuity RAID · Cloud · Off-site
03 Hybrid server infrastructure

Windows and Linux, on site and in the cloud, hardened and monitored.

 Systems engineering Windows · Linux · Cloud
04 Pixel IMS 5G

Reaches the IMS and radio settings on Pixel devices. Shows VoLTE and VoWiFi state as it changes.

 Android telephony Kotlin · IMS · Shizuku
05 NIRALYTH

Lossless playback, analogue VU meters, a precision equaliser. Nothing leaves the phone.

 Android product Kotlin · Compose · Audio
06 Lumen

Full-device IKEv2/IPsec tunnels through Android's platform VPN stack.

 Android privacy Java · IKEv2 · IPsec
07 This portfolio

The site you’re reading. Plain HTML and CSS, with three.js for the 3D scenes.

 Web engineering HTML · CSS · A11y
08 Recall

A private search engine for what you have seen on your phone, indexed and searched on the device. Coming soon.

 Android product Kotlin · Compose · On-device ML
05

Capabilities

All capabilities

Infrastructure

The network and the servers everything else sits on.

  • Network architecture
  • Windows and Linux servers
  • Hybrid cloud
  • Capacity planning

Resilience

Backups, recovery targets, and proof that a restore works.

  • Disaster recovery
  • 3-2-1 backup
  • Business continuity
  • Integrity verification

Security

Keeping the attack surface smaller than it comes by default.

  • VLAN segmentation
  • DNS security
  • System hardening
  • IP surveillance

Business systems

The applications the office needs to get through the day.

  • Tally Prime
  • SignHR
  • RBAC and provisioning
  • Asset lifecycle

Android and mobile

Telephony and connectivity internals, and the limits newer Android releases impose.

  • Kotlin and Android platform
  • Telephony, IMS and radio APIs
  • Root and Shizuku
  • Android 16 and 17 compatibility

Web development

Sites that load fast and stay usable.

  • Semantic HTML and modern CSS
  • Responsive interaction
  • Accessibility
  • Performance
06

Education and credentials

2017 – 2026
BSc (Hons) Computer Networks and Security
American College of Higher Education
Degree
2016
Diploma in Computer Software Engineering
ICT Institute Polonnaruwa
Diploma
Credentials
CCNA Certified · CCNP Certified · Cisco Networking Academy · IEEE Member
Copies on request
07

Contact

Looking for

A role where I keep my hands on the infrastructure and still have a say in what gets built. One address, read by me.

Start a conversation Send a brief
Emailnirmala.itdev@gmail.com Professional profileLinkedIn CodeGitHub Message formSend a brief
This site, checked by its own test suite
237/237Automated checks passing
0.000Cumulative layout shift
AAContrast, both themes
0 KBJavaScript needed to read it