Scaled and led team of 11 high-performing Site Reliability (SRE) engineers across US and Europe managing mission-critical operations for cloud-based voice trading platforms used by securities traders. Technical Achievements:Designed & Implemented: Highly available, scalable multi-regional, multi-cloud platform for trader voice comms (AWS, GCP).Optimized Deployments: Achieved bi-weekly zero-downtime deployments and minimized business disruption (99.99% SLA).Containerized Microservices: Successfully migrated microservices to containers (EKS, GKE) with dynamic scaling and 25% performance improvement.Cloud Dial Tone Project: designed and implemented networking schemas to connect client PSTN telephony to the cloud with custom compliance (AWS, DX, WebRTC).Voice Trading Transcription: Built a project on AWS & GCP utilizing Google Cloud AI and a custom ML model.Enhanced Monitoring & Security: Implemented a comprehensive monitoring, logging, and alerting system (Splunk, CloudWatch, Datadog, Pingdom, Catchpoint, etc.) with security solutions (CloudTrail, SSM, Guard Duty, Qualys, Splunk, Foxpass).Reduced Incidents: Achieved 90% reduction in high-severity incidents through through optimized incident management processes and collaboration tools, leading to a more efficient and responsive incident response system.Optimized Cloud Costs: Reduced production costs by 40% through cloud cost optimization and capacity scaling.BCDR Implementation: Led the design and implementation of cloud platform Business Continuity & Disaster Recovery (BCDR) tests.

Provided leadership for DevOps and SecOps teams responsible for the development, deployment, and ongoing support of scalable, multi-tenant, and compliance-driven voice platforms for the Cloud9 company.Led automation initiatives, including configuration management and robust monitoring/alerting systems (Puppet, Ansible, Consul, Terraform, AWS CodeDeploy, etc.) to streamline operations and improve efficiency.Collaborated closely with engineering teams (backend, media/voice, UI) to design, build, and manage a highly scalable, reliable, and secure multi-regional infrastructure on AWS. Prioritized performance, scalability, and compliance throughout the process.Successfully achieved and maintained industry certifications (SOC 2 Type 2, ISO 27001, ISO 27008, GDPR Compliance) and Tier 1 bank TPO (Third Party Oversight) audits for Cloud9's global infrastructure and voice trading platform. These certifications demonstrate adherence to rigorous security and compliance standards critical for Tier 1 bank systems.Played a pivotal role in architecting solutions, designing networks, implementing security measures, and driving cross-functional IT initiatives.Architected and implemented blue-green deployments across three regions, managing parallel infrastructure stacks in production. Key AWS services of BE stackDatastores: Aurora MySQL (regional replication), DynamoDB (global and regional), S3, ElastiCache Redis, OpenSearch, RedisMessaging: SQS, SNS, KinesisCompute: EC2, EKS, Lambd, ECSNetworking: VPN, DX with private and public VIF, TGW, VPC peering, and etc

Spearheaded automation, configuration management, and robust monitoring/alerting systems, ensuring operational efficiency.Collaborated closely with backend, media/voice, and UI engineering teams to create reliable and efficient infrastructure. A primary contributor of architecture design, networking, security hardening, and cross-functional initiatives.

Managed technical solutions, leading infrastructure projects and migrations from three (3) on-prem data centers to AWS Cloud.Led Operations and Network Engineers teams using Agile methodologies for two years.Led server management and automation projects, including implementing Ansible for server configuration and CloudFormation for AWS stacks.Managed servers, internal systems, and monitoring, ensuring reliability and performance.Implemented and configured project management tools (Jira, Confluence, Bitbucket) to facilitate collaboration and streamline workflows.

Monitoring & Observability Expertise:Designed, implemented, and managed comprehensive monitoring solutions including Splunk, Nagios, ELK Stack, and Grafana for log collection, metric analysis, and alerting.Designed a scalable Graphite cluster with data synchronization across three data centers for real-time infrastructure monitoring with 1.5 million metrics per minute.Implemented a robust log collection pipeline in AWS using AWS logs agent, Logstash, Filebeat, S3, Lambda functions, ElastiCache, Amazon ES, and Kibana.Alerting & On-Call Management:Configured and managed on-call rotation systems (PagerDuty, Statuspage) for timely incident notification and resolution.DNS & Content Delivery Management:Configured and managed multi-DNS providers (Dyn, NS1, Route53) for optimal domain name resolution.Implemented and managed Fastly CDN (Varnish) for improved website performance and scalability.Database Administration:Configured and managed various databases including Cloudera Hadoop ecosystem (HBase, Hive, Impala), MongoDB, and others.Scripting & Automation:Developed automation scripts (Bash, Python) for streamlining system administration tasks.Built a custom LAMP application for internal data center asset management.

• Installed, configured and managed servers based on CentOS, Fedora Core, RHEL OS.• Maintained Linux server operations, including but not limited to: providing user security; backup and restore (NetBackup 4.5) data, OS upgrades; monitoring server usage and handle performance tuning of both the hardware and network operating systems. • Designed and reconfigured the Intranet architecture to enhance network security including making decision about devices, installing and configuring servers, services and firewall. • Evaluated and corrected network problems as they occured. • Configured and maintained DNS (bind), DHCP, mail (qmail, Courier-IMAP), VPN (OpenVPN), proxy (Squid), LDAP (OpenLDAP), Web (Apache 2.x) services for the internal network. • Created and updated documentation using wiki services (twiki, trac). • Maintained and performed troubleshooting of shared network of MontaVista Software, LLC in Russia.• Performed configuration of Cisco Catalyst 2950 and 3350 for VLANs.

• Consulted Systems Administrators in expert problems.• Maintained and monitored UNIX operations for approximately 30 servers, including the Internet\Intranet architecture, for the Information Technology Department of an international commodities trading firm. • Installed and configured RHEL on Sun Fire X2100 and X2200 servers using Kickstart method for network installation.• Installed and configured GlassFish and Sun Java System Application Server clusters. • Created and updated documentation including Standard Operating Procedures, Project Plans, Network diagrams, etc…. • Performed other duties and projects as assigned by supervisor, including some Database administration.

• Trained IT specialists from Top-100 Ratings Corporations: “Railways”, Sun Microsystems Inc., Mobile TeleSystems OJSC («MTS»), The VimpelCom Group and etc. in Sun Microsystems, Novell and Linux Authorized Courses (Systems/Networks Administration, Shell Programming).• Consulted Systems and Network Administrators in expert problems.• Maintained ISP based applications: SMTP/POP/IMAP mail services, HTTP/HTTPS web services, SAMBA, NIS/DNS services in customers’ sites.• Set up hardware and software for SUN Classes based on Sun Ultra 5/10/20 workstations and Sun Solaris 8/9/10 OS. • Set up hardware and software for Novell SLES Classes and Fedora Classes based on PCs.• Planned, developed and wrote authorial Linux system administration and network administration training courses. • Designed and wrote e-learning Novell SuSE, Linux (Fedora, RHES), Sun Microsystems courses: student guides, labs and tests.• Implemented technical translations of Novell SuSE Certified courses.

• Set up, configured and managed servers based on FreeBSD, Slackware, SuSE and Red Hat OS for common network services (BIND, Sendmail, Apache+SSL, MySQL DB, SSH). Maintained 500 customers, 20 domains• Wrote shell scripts for billing system, administration users, creating reports, securing network.• Built wireless network including Cisco Routers, Switches for business office, exclusive villa community.• Increased mean lifetime of Linux-based routers by using VIA Epia motherboard without fan.• Planed, designed and implemented authoring hardware and software firewall solution, FRONTIER, based on Epia hardware, including packet filter, web-server (Apache+OpenSSL), MySQL DB, special system process, Samba as BDC and proxy-server Squid. It was administrated by web interface. • Set up authoring firewall FRONTIER to 7 businesses. It secured LAN, reduced Internet traffic by a 30%.• Programmed web-sites with SMC : levsha.ru, isp.levsha.ru, construct.ru, radioservice.ru (old version).

Special advertising projects for Philip Morris.Distributed Systems, LTD in co-operation with Union Linx, advertising company.• Planed, designed and implemented firewall for mobile internet-cafe by using Slackware – Linux OS with packet filter, web-server Apache, MySQL DB for securing network.• Designed and implemented administrative web interface for end-users internet access control. • Installed and configured Linux servers by using SuSE OS, Apache, OpenSSL, Samba, MySQL DB, J2EE applications and software RAID-1 for accounting users. • Set up, installed and configure PCs with optical scanner for smart-cards. Performed equipment evaluating and testing.• As a team leader of the programmer team managed software development for the promotion action. We finished the project 3 days before at an set date.• Built and tested wired and wireless network by using Cisco Routers/Switches and Linux OS for promotion action. • Managed engineering team in a promotion action start-up.