Project: CryptoStack: AWS, DigitalOcean, Cloudflare, Terragrunt, Ansible, Vault, Keycloak, PostgreSQL, MongoDB, RabbitMQ, GitLab CI, Argo CD, Grafana, Grafana Loki, VictoriaMetrics, Tableau, NetBird

Project: Bank, Anti-FraudStack: AWS, Yandex.Cloud, Cloudflare, Terraform, Ansible, Vault, Keycloak, PostgreSQL, MongoDB, Kafka, RabbitMQ, GitLab CI, werf, Sonatype Nexus Repository OSS, Grafana, Prometheus, Opensearch, VictoriaMetrics, Metabase, Pritunl EnterpriseMy responsibilities• Design, implement, and manage secure, scalable, multi-cloud, multi-region architecture (AWS, Yandex.Cloud);• Managing a team of 4 engineers; Ensuring that the team adheres to the… Show more Project: Bank, Anti-FraudStack: AWS, Yandex.Cloud, Cloudflare, Terraform, Ansible, Vault, Keycloak, PostgreSQL, MongoDB, Kafka, RabbitMQ, GitLab CI, werf, Sonatype Nexus Repository OSS, Grafana, Prometheus, Opensearch, VictoriaMetrics, Metabase, Pritunl EnterpriseMy responsibilities• Design, implement, and manage secure, scalable, multi-cloud, multi-region architecture (AWS, Yandex.Cloud);• Managing a team of 4 engineers; Ensuring that the team adheres to the company's quality standards, and culture of collaboration;• Automating operational processes, deploying and scaling applications;• Implementing CI/CD Pipelines and automating software release processes;• Collaborating with development and security teams to create and maintain Infrastructure as Code strategy;• Monitor and ensure system performance, availability, and security;• Keeping system configuration and architecture documentation up to date;• Identifying potential problems and proposing solutions;• Maintaining compliance with security standards in the FinTech industry (PCI DSS, GDPR, SOC2). Show less

My Team Responsibilities• Maintenance and development of centralized IT instruments:— Atlassian Stack (Jira, Confluence, Bitbucket)— Elastic Stack (Elasticsearch, Logstash, Kibana)— JetBrains TeamCity— Sonatype Nexus Repository Manager (OSS)— SonarQube— Micro Focus Fortify Static Code Analyzer• Elaboration, implementation and optimization of IT processes (Change Management, Release Management, Incident management)• Support and development of process… Show more My Team Responsibilities• Maintenance and development of centralized IT instruments:— Atlassian Stack (Jira, Confluence, Bitbucket)— Elastic Stack (Elasticsearch, Logstash, Kibana)— JetBrains TeamCity— Sonatype Nexus Repository Manager (OSS)— SonarQube— Micro Focus Fortify Static Code Analyzer• Elaboration, implementation and optimization of IT processes (Change Management, Release Management, Incident management)• Support and development of process monitoring tools for product teams:- Software Development Life Cycle- Technical Maturity- Business Process• Development of engineering culture (organization and hosting of Meetups, Demo, trainings)Key achievements:• As a Delivery Manager:— together with Express42 (contractor) - creation of Business Process monitoring based on Elastic Stack;— was responsible for pilot testing of Yandex.Cloud, contract preparation on the part of the bank, migration of bank resources from VK (ex Mail.ru) Cloud Solutions to Yandex.Cloud;• Created and conducted internal training on Elastic Stack. The duration of the training is 8 hours (including practical tasks). The training was held 9 times. It was attended by about 100 people in total;• Leader of the Bank Observability guild.Team metrics in my responsibility:• Availability of tools supported by the team• Compliance with the SLA of handling requests for supported tools• Results of the quarterly ICSS (Internal Customer Satisfaction Survey)My responsibilities• Managing a team of 8 people;• End-to-end recruitment to the team, technical interviews of candidates in related departments;• Backlog grooming, decomposition, prioritization of tasks, execution control;• Conducting, facilitating team meetings (planning, stand-ups, demos, retrospectives);• Holding status meetings with contractors, vendors, and related departments. Fixing, monitoring the implementation of agreements;• Procurement of licenses and hardware. Show less

The direction of the projects is IT transformation, on-prem to cloud migration, implementation of Agile and DevOps practices.Example of a project:Software development release cycle audit for 1) a Russian betting company, 2) one of the largest Russian metallurgical companies• Audit of the release cycle (development, testing, commercial operation) in the project;• Process planning base on DevOps practices.From December 2019:Maintaining the release cycle of… Show more The direction of the projects is IT transformation, on-prem to cloud migration, implementation of Agile and DevOps practices.Example of a project:Software development release cycle audit for 1) a Russian betting company, 2) one of the largest Russian metallurgical companies• Audit of the release cycle (development, testing, commercial operation) in the project;• Process planning base on DevOps practices.From December 2019:Maintaining the release cycle of microservice software development for one of the largest (top 3 by capitalization) Russian banks• Deployment and support of developed applications in the full cycle (dev/test/stage) as DevOps engineer;• Interaction with distributed Scrum teams (Moscow, Tver, Rostov-on-don). In total-about 160 people;• Product & tech stack: Yandex.Cloud, Technoserv Cloud (VMware vCloud Director), OpenVPN, FreeIPA, CentOS, RHEL, Oracle Linux, Ubuntu Server, Docker, OpenShift (OKD 3), Java, Spring Boot, Gradle, Nexus Repository Manager OSS, GitLab CE, JetBrains TeamCity, Ansible, Terraform, PostgreSQL 11, Oracle Database 12с и 19c, SQL Server 2019, Apache Kafka, IBM MQ 9, Elastic Stack (Elasticsearch, Kibana, APM), Fluentd, SonarQube, Zabbix, Prometheus, Grafana, Jira, Confluence, Keycloak.My responsibilities• Analysis and solution of production problems within projects (analysis and assessment of technological environment, development of IT architecture and strategy, identification of opportunities and formation of approach for technological improvements);• Preparation of project documentation;• Participation in the construction and deployment of infrastructure solutions, transformation of existing infrastructure;• Participation in the preparation of business proposals, sales (preliminary assessment of the project cost, preparation and holding of presentations and demonstrations). Show less

Stack: VMware vSphere, Docker Enterprise Edition, GlusterFS, Jenkins, JFrog Artifactory, SonarQube, Grafana, Elastic Stack, Atlassian Stack (Jira, Confluence, Bitbucket)Key achievements:• Successfully implemented and ensured continuous operation of the following product stack:— Docker Enterprise Edition;— GlusterFS;— Jenkins;— JFrog Artifactory;— SonarQube.My responsibilities• Managing a team of 2 engineers;• Work with three distributed… Show more Stack: VMware vSphere, Docker Enterprise Edition, GlusterFS, Jenkins, JFrog Artifactory, SonarQube, Grafana, Elastic Stack, Atlassian Stack (Jira, Confluence, Bitbucket)Key achievements:• Successfully implemented and ensured continuous operation of the following product stack:— Docker Enterprise Edition;— GlusterFS;— Jenkins;— JFrog Artifactory;— SonarQube.My responsibilities• Managing a team of 2 engineers;• Work with three distributed development teams in the role of a DevOps engineer. Show less

Key achievements:• Brought the UNIX systems of the Bank's Processing Center into compliance with the requirements of the PCI DSS standard. For 5 years, he ensured the success of the PCI DSS certification audit;• Successfully implemented and ensured the continuous operation of the following systems:— Oracle Enterprise Manager 12c, 13c (Oracle product infrastructure management system (Database, WebLogic, etc.));— SUSE Manager (Linux host infrastructure management system);—… Show more Key achievements:• Brought the UNIX systems of the Bank's Processing Center into compliance with the requirements of the PCI DSS standard. For 5 years, he ensured the success of the PCI DSS certification audit;• Successfully implemented and ensured the continuous operation of the following systems:— Oracle Enterprise Manager 12c, 13c (Oracle product infrastructure management system (Database, WebLogic, etc.));— SUSE Manager (Linux host infrastructure management system);— Atlassian products: JIRA, Confluence, Bitbucket;— Elastic Stack: Elasticsearch, Logstash, Kibana, Beats;— Zabbix;— Grafana;• Actively participated in the implementation of HP ArcSight (Security information and event management system), Xceedium (privileged user access management and control system).My responsibilities• Maintenance (root-access) of HP-UX 11.31 (~70 hosts, of which ~30 production) and SUSE Linux Enterprise Server 11, 12 (about 350 hosts, of which ~120 production)Including:— Manage users and their privileges;— Update, OS upgrade;— Fixing vulnerabilities, strengthening OS;— Backup/Restore;— Troubleshooting performance issues;— Virtualization: HP vPars and Integrity VM, VMware vSphere.• Maintenance (SYS-access) of Oracle Database 11g, 12c on HP-UX and SUSE Linux Enterprise Server (20 production, ~50 test). Database size - up to 15TB.Including:— Manage users and their privileges;— Database installation;— Update (OPacth);— Upgrade the database (10g > 11g > 12c);— Database cloning (RMAN);— Creating A Physical Standby;— Identifying and troubleshooting performance issues.• Interaction with vendor technical support, engineers and managers of system integrator companies. Show less

Stack: IBM InfoSphere Guardium, RSA enVision, Samhain, Rootkit Hunter, Nessus, Nmap• Providing compliance with the regulations of Federal Law #152 "On personal data" by the implementation and further administration of the system of database security and integrity - IBM InfoSphere Guardium v8 (8 physical appliances Guardium, about 30 Oracle databases (9, 10, 11); Sybase ASE 12, 15; MSSQL Server 2005, 2008 on the servers under OS AIX 7.1, Solaris 10, 9, Red Hat Enterprise Linux 4, 5, 6;… Show more Stack: IBM InfoSphere Guardium, RSA enVision, Samhain, Rootkit Hunter, Nessus, Nmap• Providing compliance with the regulations of Federal Law #152 "On personal data" by the implementation and further administration of the system of database security and integrity - IBM InfoSphere Guardium v8 (8 physical appliances Guardium, about 30 Oracle databases (9, 10, 11); Sybase ASE 12, 15; MSSQL Server 2005, 2008 on the servers under OS AIX 7.1, Solaris 10, 9, Red Hat Enterprise Linux 4, 5, 6; Windows Server 2003, 2008).• Providing compliance with the security standard of the payment card industry (PCI DSS) by the implementation and further administration of the system of collection, analysis, correlation, and storage of the database events (SIEM) - RSA enVision v4;• Implementation and further administration of the integrity control system (Samhain) and host-based intrusion detection system (Rootkit Hunter);• Intrusion detection scanning of the Bank infrastructure (Nessus, Nmap).• Interaction with the managers and engineers of the integrator company JSC "Jet Infosystems" according to a.m. projects (implementation and support of IBM Guardium & RSA enVision) on the meetings, on the plan work, by telephone, e-mail, ticket-system BMC Remedy and remote access system TeamViewer.• Interaction with the engineers of the vendors (IBM, RSA) by telephone, e-mail, ticket-system IBM Service Requests, remote access systems: IBM Assist On-site & Cisco WebEx. Show less

• Within the project of billing systems support and traffic processing systems of LLC "VimpelCom" and the project of Amdocs Ensemble deployment in CIS for LLC "VimpelCom":— root-access to more than 370 physical hosts under Sun Solaris (about 200 of them are of 9.0 version and the others are of 10.0);— installation of Oracle 10g Database, Oracle WebLogic Server, Oracle Tuxedo, Sun Studio, Bercut ATOMS Server, Micro Focus Server Express, IBM Tivoli Workload Scheduler, etc.;—… Show more • Within the project of billing systems support and traffic processing systems of LLC "VimpelCom" and the project of Amdocs Ensemble deployment in CIS for LLC "VimpelCom":— root-access to more than 370 physical hosts under Sun Solaris (about 200 of them are of 9.0 version and the others are of 10.0);— installation of Oracle 10g Database, Oracle WebLogic Server, Oracle Tuxedo, Sun Studio, Bercut ATOMS Server, Micro Focus Server Express, IBM Tivoli Workload Scheduler, etc.;— information security of systems: Basic Audit & Reporting Tool (BART), Solaris Basic Security Module (BSM), Solaris Containers (Zones), snoop, Sun Explorer;— standard duties of system administrator: users administration, regular analyses of log-files, monitoring (Zabbix, MRTG);• Participation in projects of server virtualization introduction of VMware Inc.:— used products: VMware vSphere 4 (ESX + vCenter Server), vCenter Converter, vCenter Update Manager, vCenter CapacityIQ, vSphere Client, VMware Workstation, VMware Server;— creation virtual data center of AT Consulting from point zero (9 ESX-hosts, about 80 virtual machines); deployment of testing stands under Solaris 10 x86/x64, Red Hat Enterprise Linux 5, Oracle Enterprise Linux 5, Microsoft Windows Server 2003 R2 and 2008 R2;• Participation in projects of products introduction of Atlassian Ltd.:— installation of JIRA, Confluence, Crowd, FishEye, Crucible under OS Solaris, Linux, Windows;— customization these products;• Installation and further administration of Subversion repository of AT Consulting (37 repositories, about 200 active users);• Advising colleagues and Customer specialists within the projects indicated above (by means of ticket-system (JIRA), e-mail, telephone, Skype);• Compiling of technical documentation, instruction for colleagues and Customer specialists;• Holding the seminars (including webinars) and presentations for colleagues and Customer specialists. Show less

• root-access to production servers of company (15 servers under Red Hat Enterprise Linux (11 of them are RHEL of 4.6 version, the others - 5.1));• configuration of services owned by internal infrastructure of company: mail server (Exim), DNS-server (BIND), Subversion-server, proxy server (Squid), Samba, Apache, MySQL;• Adoption of virtualization technology on basis of Citrix XenServer 5.1 (+ XenCenter as console of centralized control). Realization of the migration in the virtual media… Show more • root-access to production servers of company (15 servers under Red Hat Enterprise Linux (11 of them are RHEL of 4.6 version, the others - 5.1));• configuration of services owned by internal infrastructure of company: mail server (Exim), DNS-server (BIND), Subversion-server, proxy server (Squid), Samba, Apache, MySQL;• Adoption of virtualization technology on basis of Citrix XenServer 5.1 (+ XenCenter as console of centralized control). Realization of the migration in the virtual media of 6 production servers;• installation and primary setting of Linux distribution disks: RHEL, Fedora to the PC of new staff and RHEL; Fedora, Mac OS X, Solaris to the designed machines;• troubleshooting and replacement in case of breakdown components of laptop, working stations and servers (almost all the x86 servers of company - Supermicro server platforms);• Configuration of Symantec Backup Exec 12: installation of client side to new hosts, editing back up policy;• Configuration Wi-Fi, NAS devices of SMB level (Promise, Linksys, TRENDnet production). Show less

Responsibilities:• Managing a team of 10 engineers;• Detection the breaches of functional duties;• Renewing software on hosting machines of company, installation of new hosting machines, load distribution on hosting machines;• Maintenance of technical documentation used by the team as knowledge base;• Configuration of internal services of company (mail server Exim, XMPP-server (Openfire), Subversion-server);• Configuration of monitoring software (Nagios, Cacti);•… Show more Responsibilities:• Managing a team of 10 engineers;• Detection the breaches of functional duties;• Renewing software on hosting machines of company, installation of new hosting machines, load distribution on hosting machines;• Maintenance of technical documentation used by the team as knowledge base;• Configuration of internal services of company (mail server Exim, XMPP-server (Openfire), Subversion-server);• Configuration of monitoring software (Nagios, Cacti);• Configuration of console servers (Dominion SX, Digi CM), IP KVM (Dominion KX II 101). Show less

• root-access to the servers of virtual hosting (about 30 hosts under FreeBSD), to the some of the servers handling the internal infrastructure of the company (FreeBSD, CentOS, 5 hosts), dedicated-servers administrated by the staff (about 30 hosts under FreeBSD);• troubleshooting and replacement in case of breakdown components of servers indicated above (all the machines are Kraftway server platforms);• monitoring (Nagios, Cacti);• accepting servers; installation OS FreeBSD, Red Hat… Show more • root-access to the servers of virtual hosting (about 30 hosts under FreeBSD), to the some of the servers handling the internal infrastructure of the company (FreeBSD, CentOS, 5 hosts), dedicated-servers administrated by the staff (about 30 hosts under FreeBSD);• troubleshooting and replacement in case of breakdown components of servers indicated above (all the machines are Kraftway server platforms);• monitoring (Nagios, Cacti);• accepting servers; installation OS FreeBSD, Red Hat Enterprise Linux, Fedora, Centos, Debian, Ubuntu Server; primary settings, placing into server rack;• resolving the situations connected with the prevention of spreading of SPAM, DDoS-attacks, unauthorized access;• remote solving problems of administrated servers (in the off time) Show less

• L2 Tech support by e-mail and phone:— Shared hosting on FreeBSD platform. (deployment of back-ups of home directories and data bases); analises of slow_log MySQL, index building; working with the logs of mail servers of company (CommuniGate Pro), with the logs of ftp-servers (ProFTPd), error_log, access_log; shell (telnet, grep, find, whois, dig, host, scp, vi, joe, etc);— Colocation (primary diagnostics, reboot of servers by the customer's request, connecting KVM).• Resolving… Show more • L2 Tech support by e-mail and phone:— Shared hosting on FreeBSD platform. (deployment of back-ups of home directories and data bases); analises of slow_log MySQL, index building; working with the logs of mail servers of company (CommuniGate Pro), with the logs of ftp-servers (ProFTPd), error_log, access_log; shell (telnet, grep, find, whois, dig, host, scp, vi, joe, etc);— Colocation (primary diagnostics, reboot of servers by the customer's request, connecting KVM).• Resolving conflict situations with DNSBL (spamcop.net, njabl.org, dul.ru etc), different internet and hosting providers because of SPAM spreading, phishing, attempts of unauthorized access, DDoS-attacks;• Proactive response to monitoring events of the company's services. Show less

Manual testing of in-house developed Billing system, client control panel of hosting & domains, company site.Tools used: Bugzilla, TWiki, Firebug.Implementation of web app automated testing using Selenium.

The L1 technical support for hosting on UNIX platform and domain registration.