- Built scalable infrastructures for startups: multi-environment, with infrastructure as code, self-healing, scalable and predictable environments on AWS (Terraform, EKS/ECS, Serverless).- Took care of the legacy code with respect: Dockerized Node.js, Python and Ruby On Rails, JVM, PHP apps.- Produced performance analysis & audit: dozens of full-cycle reports based on key factors of infrastructure performance and action items based on it were proposed.- Architected data and ETL infrastructures with Kafka, Airflow, and Celery.- Assisted Software Engineers to implement DevOps: close communication, strategy and processes improvement.- Implemented CI/CD: Dozens of different projects got a streamlined deployment pipeline (Gitlab, Jenkins, CircleCI, Github Actions). Utilizing Docker, Docker Registry, ECR and multi-stage builds.- Leveraged orchestration systems to build scalable service-oriented infra (ECS, EKS/Kubernetes, Docker Swarm, Elastic Beanstalk).- Implemented OPS procedures in customers' environments: service-based alerting, on-call rotation, escalations.

- Designed & implemented multi-environment AWS architecture (AWS Well-Architected / Terraform)- Designed & implemented multi-environment CI/CD system to deploy/roll back the application with 0 downtime- Designed and impmented multi-service monorepo for better operations

- Designed & implemented multi-environment AWS architecture for AI code scanning tool (AWS Well-Architected / Terraform)- Designed & implemented CI/CD system to deploy/roll back the application with 0 downtime- Designed and deployed SQS-based worker processing system

- Decomposed a complex transient bug into a series of hypotheses.- Analyzed the current EKS/Django configuration on AWS with minimal documentation.- Tracked down the source of odd errors in Django/EKS using troubleshooting methods with Datadog and CloudWatch.- Proposed an optimal solution to the issue and supported the team in implementing it.

- Improved reliability of the current EKS cluster- Designed & Implemented CI/CD system to deploy/roll back the application with 0 downtime- Performed troubleshooting & Maintenance support for legacy systems- Designed & implemented security improvements for the infrastructure overall- Designed and implemented branching & staging improvements to facilitate faster QA

- Designed & implemented multi-environment AWS architecture (AWS Well-Architected / Terraform)- Designed & implemented CI/CD system to deploy/roll back the application with 0 downtime- Designed and deployed immutable infrastructure for private Stellar Nodes- Containerized & migrated .Net Application to the ECS- Optimized & migrated TypeScript/Serverless Application to the new environmentStack: AWS, Terraform, .Net, Serverless / Typescript, ECS, Stellar Blockchain, Docker Compose

- Designed & implement Multi-environment AWS architecture (AWS Well-Architected / Terraform)- Designed & implemented CI/CD system to deploy/roll back the application with 0 downtime- Dockerized & migrated a Ruby on Rails application to a fully containerized environment on ECS- Designed & deployed TypeScript/Serverless Application to the new environment- Performed troubleshooting, Maintenance & Dev support- Onboarded products as a part of acquisition- Performed pre-IPO infrastructure cleanup

- Designed & implement Multi-environment AWS architecture (AWS Well-Architected / Terraform)- Designed & implemented CI/CD system to deploy/roll back the application with 0 downtime- Dockerized & migrated a legacy Rails application to a fully containerized environment on ECS- Designed & deployed TypeScript/Serverless Application to the new environment alongside with the Dev team.- Performed troubleshooting, Maintenance & Dev support

- Designed & implemented multi-environment / multi-account AWS architecture (Amazon Well Architected / Terraform)- Designed & implemented CI/CD system to deploy/roll back the application with 0 downtime- Dockerized & migrated Python & CUDA-based Application to the Container Orchestrator ECS- Performed troubleshooting & maintenance support for legacy systems- Designed and implemented monitoring of all crucial systems (Datadog)

- Designed and implemented scalable AWS-based infrastructure with Terraform.- Worked as a part of a core-team to iterate on the infrastructure-side of product ideas.- Designed and implemented scalable CI/CD system on ECS.

As most of my work is covered by a solid NDA, I can only share some high-level information. All systems were designed and implemented from scratch, both as a part of a team and solo.* Designed and implemented IoT Infrastructure from scratch on AWS - Multi-tier, multi-subnet scalable cloud AWS infrastructure (Ansible, Cloudformation) - Multi-application stateless stack with Elastic Beanstalk / ECS & Docker - Platform-agnostic local environments with Docker & docker-compose * Designed and implemented Ansible infrastructure - Developed idempotent plays/roles to support infrastructure needs - Wrote community-available roles for multiple platforms from Apache Foundation* Designed and implemented CI/CD - Complete application lifecycle with green deployments of high-traffic services - Platform agnostic framework to support SaaS or hosted CI servers - Hassle-free pipeline for Developers* Designed and implemented monitoring solutions - Log and data aggregation from multiple sources (ELK) - On-prem monitring via TICK stack - Saas monitoring with Datadog when needed* Designed and implemented operational procedures - Implemented service-oriented OLA - Integrated Pagerduty with monitoring solutions - Implemented Pagerduty "Service Owner First" policy* Managed a high-scale AWS infrastructure and multiple distributed systems from Apache stack

- Designed and Implemented multi-tier hybrid cloud AWS infrastructure for new project for a high-scale testing framework- Designed and Implemented Log and data aggregation from multiple sources (ELK)- Designed and Implemented Virtual and Bare Metal host provisioning system (Foreman)- Designed and implemented nmap-based inventory software- Contributed to company-wide IT processes & improvements- Contributed major portions to On-call rotation, monitoring, SOA and OLA designs & implementations- Utilized infrastructure automation and configuration management (Ansible & Python)

- Managed a Hybrid Cloud with ~300 nodes: AWS, VmWare, Bare Metal- Designed and implemented automation, config management and provisioning: 90% of environment is in Puppet & Git- Maintained legacy systems lifecycle: get to know your old code, make the team love it again (or kill it :) )- Designed and implemented CI in Configuration management, IaaC: git-flow, reusable code, open-source contribution- Managed & Mentored junior IT staff: separation of concerns, easy-onboarding- Implemented OpenSource technology for a Windows shop (Chocolatey, Foreman, Wimaging)- Led post-acquisition infrastructure integration project

Sming is an open source framework for building high-efficient software for ESP8266 in C++. Licensed under LGPL and developed solely by community.Community influencer, cross-platform ambassador and user experience advocate. If a user has a problem - that's a bug- Improved overall cross-platform functionality of the project, which opened up new user channels on Linux and MacOS- Built a virtual DC based on Proxmox open-source virtualization platform and commodity hardware in Hetzner datacenter- Built configuration management system using Puppet- Built cross-platform Jenkins cluster with agents on Windows, Linux and MacOS- Produced binary packages for easier distribution of release versions

- Supported colocation with 180+ Windows & Linux dedicated servers, new servers deployment- Scripting: Python, Bash, Powershell, PHP, Perl, C#- Orchestration & configuration management in heterogeneous environment (Puppet, theforeman) - Planned redundancy and implemented in different environments (Networking, MySQL, MongoDB, ElasticSearch)- Network security and performance (Juniper SSG, SRX Firewalls, A10 networks Load Balancer, Radius, IPsec, NAT, Amazon EC2 VPC)- Proactive monitoring (nagios, syslog, logstash (opensource Splunk) , Dell hardware monitoring), dependency tree, custom service checks (perl, php), alert rules.- Optimized Linux and Windows servers performance (file system optimization, provisioning specs for best performance, performance capacity audit, per cluster performance monitoring (odw, cluster checks)- Performed MySQL deployment & maintenance, performance tweaks, clustering (master-slave replication), Hot-Backup.- Managed SSL certificates subscriptions and updates on all instances- Collaborated with vendors in order to troubleshoot issues (hardware, software, network, etc.)- 24/7 on-call availability (nagios+pagerduty), issues escalation to certain departmentsPersonal and Business Achievements:- Spearheaded Puppet from scratch in a heterogeneous environment. Able to spin up infrastructure (baremetal+cloud) from 0 using templates. All developers don't need to learn puppet dsl - using theforeman.- Implemented Server provisioning system. Able to spin up custom Windows/Linux on bare metal as fast as in the cloud.- Implemented Logstash from scratch (SIGNIFICANTLY increased visibility for developers, saved $$$$$).- Implemented one-click deployment system in a load-balanced environment. No downtime, deployment of the whole farm in less than 5 minutes. Minimum human interaction, Max visibility.- Implemented High-Overview status dashboard in opsview (ODW, clusterchecks)

- Supported a LAMP server (backups, routine maintenance)- Performed network planning (infrastructure migration to a new location)- Supported networking at the location- Managed CISO router & DELL Switches- Monitored and Analyzed network problems, provisioned network improvements, worked with ISP to triage and resolve network issues

- Performed Windows Server 2008 deployment- Created architecture & network diagrams

- Performed hands-on onsite work around all the Schwarzwald-Baar Branches network- Performed Windows NT to Windows XP upgrades and setup (RIS).- Performed Software installation.- Performed Windows profile management.- Performed remote user support (Dameware).- Performed hardware installation / uninstallation (HDD, DVD-ROM, RAM, CPU, etc…).- Utilized data encryption.- Performed classified/sensitive/PII Data destruction.- Participated in a corporate security course.