Apprentice wanted: security and SaaS setup, learned by doing it

Illustrated infographic summarizing: Apprentice wanted: security and SaaS setup, learned by doing it

By Greg Nowak. Last updated 2026-10-03.

I learned server operations by breaking my own servers and fixing them again. It is still the way I believe in most. So I am not looking for an intern to sit with PowerPoint. I am looking for someone who will stand next to me while I do it, then do it themselves the week after.

What you will get your hands on

I run a server fleet with around 50 domains behind Cloudflare, Drupal and Laravel sites, a password manager, mail routing, backups and a handful of AI agents working for customers. All of it is under attack around the clock. Most of it bounces off because someone set it up properly. That someone can be you.

Week one: you get access, and we check one of my own domains together. Headers, TLS, versions, logins, backups. Week two you do it alone on the next domain, and I read your report. Then come the customers' sites. Later you set up tools for a customer: a Trello board, Google Workspace or Microsoft 365, two-factor access, a password manager. And one day a real problem lands in the middle of it all, and you watch how it gets solved.

What I expect

That you can find your way around a terminal. That you know what DNS does, or will find out the same day. That you write down what you did, briefly enough that I will read it. And that you say it out loud when you have made a mistake. Mistakes are expected. Hidden mistakes are the only thing that is not okay.

You do not need certifications. I would rather see a server you set up or a script you wrote than a course certificate.

The terms

We start with one day a week and can go up to two. Remote, with a fixed weekly call. It can be a paid student job, or it can be an internship through your studies if your programme requires one. We decide that together once we have talked. Three months to begin with, then we see.

Write to me

Send a mail to [email protected] with the subject [grn-praktik]. Send me a link to the most broken thing you got working again, and two lines on what went wrong. I answer myself.

Latest articles

I learned server operations by breaking my own servers. I want someone who stands next to me while I do it, then does it themselves the week after.

I am good at building and bad at calling. Here is who I want next to me, what is easiest to sell, and how we split it.

An AI assistant can prepare a refund, but a person should approve the exact payment and amount. Here is how to make that approval hold up through execution and retries.

AI can pull together onboarding tasks before a new hire’s first day. See how the manager approves specific access and how outstanding tasks are followed through.

An internal AI assistant can cite an obsolete handbook with confidence. Here is how to manage document ownership, updates, deletions, access and answer review.

Cloudflare Free provides useful website protection, but its rate limiting and bot controls have limits. Here is how to assess them for a WordPress site.

An AI assistant can answer questions and guide customers to a booking. Here are practical boundaries for prices, delivery times, personal data, and contact with a staff member.

Google and Bing now offer first-party AI search visibility reports. Here’s how to build a useful baseline without inventing a misleading GEO score.

AI crawlers can copy a familiar name. Here’s how to verify signed agents at the edge while keeping legitimate automated traffic moving.

A critical Webform release is a reminder to audit every Drupal codebase, configuration and deployment—not just the main production website.