Budiak Security
/cv / man / credentials / contact

Sixteen years. One signature.

Who I am, what I’ve done, how to reach me. Short.

01   The man
Name Serhii Budiak. Pronounced Bood-yak. Будяк, Ukrainian — thistle.
Located Calgary, Alberta. Since 2022.
Background Sixteen years across critical infrastructure, energy, healthcare, government, and telecom in Canada, the United States, and Ukraine. Eight of those years were operating the network of Kyiv City Municipality through conditions that did not pause for change windows.
02   Selected work

Three that mattered.

Kyiv 2014 – 2022 Critical infrastructure · municipal

Server rooms with consequences in headlines, not tickets.

Eight years operating the network of a capital city through annexations, blackouts, and a war that did not pause for change windows. The systems that survived weren’t the ones with the largest budgets. They were the ones run by people who had practised failure on a quiet Tuesday so they knew what to do on a loud one.

United States 2023 – 2024 Healthcare SaaS · HIPAA / HITRUST

Two top-five hospital networks. Six months from zero.

Architecture rebuilt before the first audit. Tenant isolation, identity consolidated, HIPAA controls mapped against the actual data flow rather than a spreadsheet. Both networks signed. Both passed security review on the first pass.

Ontario 2023 Government · re-segmentation

Flat to micro-segmented. Zero additional licensing.

A provincial government org with a flat network and an auditor’s letter that began with the word “deficient.” Full segmentation delivered using only the tooling they already owned. The auditor’s next letter began with a different adjective.

03   Also building

Tools I run, not pitches.

04   Credentials

Listed because someone always asks.

The work is on the services page.

Plus: ISACA & (ISC)² member. NSE4 (Fortinet), Scality Architect, and a second HPE ASE — vendor-issued, no credly. Working frameworks: HIPAA, HITRUST, NIST 800-53/171, ISO 27001, SOC 2, PIPEDA, PIPA.

05   Contact
Email [email protected] — a real email gets a real reply.
PGP Available on request. Send an email and I’ll reply with the public key.
Mailing Calgary, AB. Specific address on request.
Signal After the first email.
06   Colophon
Typefaces Fraunces for headlines and body. Inter for chrome. JetBrains Mono only for the budiak· wordmark. Self-hosted.
Palette Bg #0B0908 · text #ECE6D8 · oxblood #B83434. One signal colour.
Hosting Static HTML. Nginx. No analytics. No JavaScript framework.
Source Hand-written. No AI illustrations, no stock photography, no generated copy.