Sergey Sivil Email & Phone Number

St Petersburg City, Russia

St Petersburg City, Russia

DevSecOps - Tech leadProject InfoSec team, DevSecOps expert.Infrastructure Security Tech leadTeam of 4.Recruitment, hiring, adaptation, tasks distribution, assistance, consulting, deadlines control, team member skill developmentPersonal Tasks:◼ Ensuring the security of Kubernetes clusters: Platform settings aduit, application security, RBAC, and container images vulnerabilities., runtime container protection, network policies - NeuVector, Trivy-Operator◼ Automating tasks with scripts - PowerShell, Bash/Shell, Python◼ Testing and deploying applications in K8s, customizing SSDLC tool images - SonarQube, Dependency-Track, DefectDojo, and scanners - Bandit, Kics, Trivy, Semgrep, etc. ◼ Deploying and configuring a secret and CA store in K8s for infrastructure and CI/CD pipelines - Vault in HA mode◼ Participating in DevSecOps pipeline configurations, integrating security scanners into GitLab Ci/CD pipelnes◼ Integrating InfoSec tools with centralized authentication - KeyCloak◼ Verification of project images and other software artifacts (open source and vendor software)◼ Testing potential and planned software aimed at K8s clusters - Service Mesh, Ingress-nginx (ModSecurity WAF), Pod Security Standard Admission, Kyverno◼ Advising the platform team on InfoSec issuesTeam Tasks:◼ K8S cluster security◼ Wazuh SIEM - installation (K8s), configuration, correlation rule development◼ Shuffle, IRIS - configuring SOAR, IRP and integrations with the SIEM platform, incident alerting◼ Developing security profiles for platform components◼ Developing storage security solutions◼ Operation, support, upgrades and monitoring of InfoSec systems.Projects:◼ Project InfoSec - development of a digital platform (Paas) based on KubernetesProject Tech Stack:◼ Vendor platform based on Kubernetes, Astra Linux◼ KeyCloak, FreeIPA◼ Ceph, S3◼ GitLab, ArgoCD, Vault◼ PostgreSQL, Clickhouse, OpenSearch◼ Redis, Rabbit, Kafka◼ VictoriaMetrics, Grafana

St Petersburg City, Russia

St Petersburg City, Russia

St Petersburg City, Russia

Corporate InfoSec (Global).Collaborated with the InfoSec team for a year before joining as a full-time engineer.Tasks & Responsibilities:◼ Vulnerability detection (NMAP, Prowler, Tenable, BitSight, etc) and working with Corporate and Cloud teams on remediation◼ Security tool Configuration & Maintenance - Endpoint DLP, Cisco AMP/Secure Endpoint, Umbrella, Logrhythm (SIEM)◼ Security hardening of existing corporate IT services (Jamf, Intune, vCenter, etc)◼ Corporate IT AWS Organization setup, w/ dedicated Cloud Platform team:- Organizations, SSO, Control Tower- Security Hub and related services- Standards, Processes and Documentation◼ Terraform IaC for AWSProjects:◼ KPMG IT Audit - InfoSec◼ Tanium PoC & Implementation - InfoSec◼ Co-lead on Zscaler PoC (ZIA/ZPA) - InfoSec/Network joint project◼ Technical assistance - local virtualization infrastructure migration to AWS - InfoSec/IT Operations joint project◼ Infosec lead on AWS Organizations, Control Tower and SecurityHub setup and maintenance◼ InfoSec lead/tech on Thycotic Privileged Access Manager - IT Services/InfoSec joint project

St Petersburg City, Russia

IT Services, EMEA.IT Infrastructure & Services:◼ MS-based enterprise (AD, DNS, DHCP, Okta SSO, etc)◼ Premise and Cloud PC management services - Intune, ManageEngine, Jamf◼ IT projects, including joint IT projects - Implementing/replacing software and hardware, globally Tasks & Responsibilities:◼ End user support across the EMEA region, ~2000 users◼ ServiceNow Incident management in all regions, ~6500 users◼ EMEA employee onboarding, offboarding◼ Developing and enhancing IT-related processes, procedures and documentation◼ Administration of:- MS AD domain and services (DHCP, WSUS, Okta SSO)- End-user PC management systems - Intune, ManageEngine, Jamf- Corp. IT services - Axonius, Lansweeper, Druva InSync, Dell Data Protection & Encryption, Cisco AMP/SEP, MalwareBytes Cloud, Zoom, AnyConnect VPN◼ Configuration, maintenance and troubleshooting of:- User Endpoints - Windows, macOS and Linux - compliance policies, security enforcement, software management, ~8500 total- Networking/Wireless, Server and Storage hardware, including UPS/PDUs (local & colo) - Cisco, HP/HPE, Dell, Synology, APC- ESXi/vCenter-based virtualization infrastructure for Dev and QA - Cluster and NAS/SAN storage in data center, over 1000 concurrent active VMs- Environment (temperature/humidity) and UPS monitoring for server and comms racks in EMEA- Office equipment - Conferencing, A/V, Printers, Projectors, etc.◼ Extensive scripting (PowerShell, Bash) for vCenter management, PC management, APIs and Software deployment tasks & projects◼ Maintaining the global IT Asset Inventory◼ IT hardware procurement, local stock upkeep - working with local vendors to procure IT-related (PCs, Servers, A/V, etc)◼ IT-related planning of local office space expansion (networking, wireless, equipment, etc)Projects:◼ Tech lead on Global Endpoint Inventory Cleanup (Windows/macOS, ~1500)◼ Tech lead on implementing endpoint DLP and removing DDPE on all endpoints (~8500), under very tight deadlines.

St Petersburg City, Russia

Comprehensive System Administration role, including user support and maintaining the IT infrastructure of the company's St. Petersburg office, approx. 500 office employees.IT Infrastructure & Services: ◼ MS Active Directory-based corporate environment - AD structure, DNS, DHCP, RDS, WSUS, etc. ◼ End user workstations - Windows ◼ Servers and storage (HP, Dell) - Windows, Linux (CentOS, Ubuntu, FreeBSD), Hypervisors - over 50 persistent systems in total ◼ Wired & Wireless Networking - mostly Cisco-based (L2 & L3 switches), Mikrotik routers, Kerio Control Firewall, Ubiquiti (Access Points, PoE Switches) ◼ Corporate VPN (Windows Server) ◼ Virtualization environment (VMWare ESXi/vCenter) ◼ Monitoring/SRE - Zabbix ◼ MS SQL 2008-2012 Databases for 1C Enterprise 8+ ◼ VoIP/Telephony - Asterisk, Cisco & Gigaset IP PhonesTasks & Responsibilities: ◼ IT Helpdesk, Tier 1-3 User Support - End-user OS, software and hardware ◼ Configuration, maintenance and troubleshooting of: - Server and storage hardware - Networking - switching, routing, wireless access, firewall, VPN - Virtualization system - VoIP/Telephony - Office equipment - Printers, projectors, etc. ◼ Maintaining a software and hardware IT asset inventory