Andrey Sidorov Email & Phone Number

Россия

Requirements analysisSecurity automation solution architectureImplementation of security systemsImplementation of security systems in infrastructure/developmentExamples of implemented and deployed services:- Collection of information about the entire company infrastructure, scanning external and internal perimeter and entering bugs into Jira (Python)- Signature server for signing firmware/artifacts (Python)- Kubernetes operator, for setting up/auditing security environments (golang)- Service for analyzing dependencies of all workloads and uploading data to ElasticSearch (Python)Technology:OpenVAS/reNgine/Qualys, perimeter-monitoring, Python/Golang,Jenkins, Open Policy Agent, IstioContributing to DefectDojo: https://github.com/DefectDojo/django-DefectDojo/pulls?q=is%3Apr+author%3AansidorovPython: aiohttp, fastAPI, celery, minio, gitlab, github, Kubernetes, vulners.com, jira, mongo, elasticsearch

Санкт-Петербург, Россия

Generic Security CI/CD (source code check, docker container check) with Jenkins/Gitlab/Github: owasp dependency check, whitesource, snyk, veracode, gitleaks, dockle, hadolint, trivy, OWASP ZAP, Burp Suite, KICS, Checkmarx ... etc.Central identity platform (Keycloak);Security standard and checks for Kubernetes (GKE, EKS, AKS, self management) with Docker/Kubernetes CIS benchmark;Write plugins for DefectDojo (parsers for kube-bench, dockle, snyk) on python;MobSF;Write small REST application on golang for check password on pwnd databases;Write small utility to import security scan results to DefectDojo (integration with JIRA, DefectDojo, CI system);Write simple prometheus exporter with checking success login in Keycloak system and export metrics;Terraform;HashiCorp Vault;ELK stack;CloudFlare;Cloud: AWS/GCP/Azure/Yandex

- Automate the deployment and testing of infrastructure.- Construction and maintenance of HighLoad architecture projects (more than 70) of any size (from 1 to 300 nodes).- Full cycle of CI / CD: Werf, Docker, LXC, KVM, Vagrant, Chef/Ansible, Gitlab, Helm, Kubernetes, ...;- Work with cloud providers: AWS, GCE, Azure, ...;- Work with databases: MySQL, PostgreSQL, Cassandra, Redis, Memcached, MongoDB, ...;- Network file systems: Ceph, NFS, Gluster;- Backups: Borg, Bacula, BareOS, rsync;- Application profiling: NewRelic, DataDog;- Web servers: nginx, Apache, Varnish, unicorn, puma, ...;- Queue managers: Kafka, rabbitmq;- Application support (CI/debug) for: PHP, nodejs, Java, Erlang, ruby, go, c++, Scala, Python, .NET;- Kubernetes: kubeadm/kops/acs-engine, VPA/HPA/Autoscaler/Descheduler, PriorityClass/PodDisruptionBudget, ELK/Loghouse/Loki, Cert-manager/kube-lego, nginx-ingress, prometheus-operator/heapster/prometheus-adaper, ...;- And much more: Elasticsearch, Kibana, clickhouse, prometheus, grafana, fluentd, iptables, rethinkdb, flannel, haproxy, fluentd, minio, sphinx, dokku, ...;- Tracing: Jaeger;- One of the developers of the logging system in Kubernetes is LogHouse.- There is an experience with the team lead team devops of 7 engineers.Was in the role of:- DevOps Engineer;- TechLead of the DevOps engineering team;- Solution Engineer on the R&D team.Participated in the development of Deckhouse Platform: https://github.com/deckhouse/deckhouse/commits?author=qw1mb0

Remote

- Construction of infrastructure, optimization, tuning;- Google Compute Engine, Google Cloud Storage, Google Dataproc;- Ansible;- Docker, docker registry;- SLURM;- uwsgi, nginx;- haproxy;- celery, sentry, raven;- supervisor;- Zabbix, custom scripts;- Setup RStudio (on docker), Jupyter, JupyterHub, Hadoop, Spark;- Setup ftom source bioinformatic tools.

Remote

- Optimization of infrastructure costs;- Management of CentOS servers with the DirectAdmin / CentOS Web Panel Web Panel / ISPmanager;- Installation and support of GitLab;- Organization of storage of backup copies of data;- Optimization of servers and sites.

Remote

- Administration of Debian / CentOS / CloudLinux;- Web server (nginx / apache); database server (MySQL); mail servers (exim, postfix, sendmail);- Monitoring of servers and services (Nagios);- Various DNS / FTP / SSH / VPN services;- Management of virtualization servers ProxMox (OpenVZ, KVM), VMManager (OpenVZ, KVM);- Work with control panels ISPManager 4/5, BillManager, cPanel, DirectAdmin, IPManager;- Solving customer requests and problems.

Remote

- The third level of technical support for users;- Monitoring of servers and services (Nagios, Cacti, Munin);- Control panels for servers (Plesk, ISPmanager, cPanel);- Virtualization (Xen, OpenVZ);- Protection from DOS / DDOS;- Web server (nginx / apache); database server (MySQL); mail servers (exim, postfix, sendmail); DNS servers (bind / pdns);- Solution of client requests in the ticket system;- Operating systems CentOS, Debian, Ubuntu;- Virtual hosting, virtual / dedicated servers.

Remote

- Administration of Debian / CentOS systems from ISPmanager control panels;- Web server (nginx / apache); database server (MySQL); mail servers (exim, postfix, sendmail);- Monitoring servers and services (Zabbix, rrdtool);- Various DNS / FTP / SSH / VPN services;- Version control system (git);- Setting up, support for OpenVPN.

Crimea, Sevastopol

- Laying, support and modification of network infrastructure;- User support (Windows, Ubuntu, Mac OS X).- Inventory of computers (OCS Inventory, GLPI).- Virtualization (KVM, OpenVZ).- MS Windows Server / Debian Administration.- Video surveillance system (ZoneMinder).- Backup (LVM, RAID1, NFS).- Computer / server management system (SaltStack).- System of joint activities of working groups (Zimbra).