DevOps

Текущий статус/должность: DevOps.

Мои компетенции и опыт

Experience:

March 2023 – Present
Luxoft | DevOps Engineer

Member of the platform engineering team responsible for the architecture and maintenance of an internal PaaS solution on AWS EKS, utilized by numerous product teams.

Key Contributions:

• Self-Service Platform Engineering: Engineered core modules for the AWS EKS-based PaaS platform utilizing Terraform. This initiative transitioned infrastructure provisioning from a manual, ticket-based workflow to a fully automated self-service model, unifying the process for dozens of teams.
• GitOps Workflow Adoption: Established comprehensive application lifecycle management via ArgoCD and Helm. Curated and maintained a repository of standardized Helm charts, which ensured environment consistency through Git-based versioning and simplified deployment procedures for developers.
• Secret Management Integration: Integrated a High-Availability (HA) HashiCorp Vault cluster with Kubernetes and GitLab CI. This implementation removed hardcoded credentials from CI/CD pipelines and source code repositories, significantly enhancing security.
• Observability Enhancements: Transitioned the monitoring infrastructure from Prometheus to VictoriaMetrics to resolve performance bottlenecks and allow for long-term metric retention. Constructed a centralized logging pipeline to facilitate rapid application debugging and diagnostics.

Tech Stack:AWS (EKS, VPC, IAM), Terraform, Kubernetes, Helm, ArgoCD, GitLab CI, HashiCorp Vault, VictoriaMetrics, Grafana, OpenSearch, Kafka, Fluent Bit, Python, Bash.

November 2020 – February нужен доступ к резюме years 4 months)
Ciklum | DevOps Engineer

Tasked with modernizing legacy on-premise infrastructure and driving the adoption of DevOps methodologies to boost team velocity and system stability.

Key Contributions:

• CI/CD Transformation: Refactored build processes into Jenkins Pipeline as Code, enabling dynamic agent provisioning within Kubernetes. This facilitated parallel job execution, which maximized CI throughput and minimized build queue wait times.
• Automated Configuration Management: Standardized VM management by developing a comprehensive suite of Ansible roles for routine tasks. This guaranteed configuration uniformity across development, staging, and production environments while reducing server provisioning time.
• Stateful Service Resilience: Automated backup and disaster recovery protocols for Kafka and PostgreSQL clusters, ensuring high availability and achieving measurable, testable RTO/RPO targets.
• Monitoring Stack Deployment: Rolled out a Prometheus and Grafana stack to supersede the legacy monitoring system. Designed unified dashboards and alerting rules, empowering the engineering team to take a proactive stance on incident resolution.

Tech Stack: OpenStack, VMware, Kubernetes, Jenkins, Ansible, Prometheus, Grafana, ELK Stack (OpenSearch, Logstash, Kibana), PostgreSQL, Kafka, Zookeeper, Python, Bash.
Competencies:

• Containerization & Orchestration: Kubernetes (EKS, Self-Hosted), Docker, Helm, ArgoCD, GitOps.
• Cloud Platforms: AWS (EKS, VPC, IAM, RDS, S3, ElastiCache), OpenStack, VMware.
• Infrastructure as Code (IaC): Terraform, Ansible (Advanced).
• CI/CD: GitLab CI, Jenkins (Pipeline as Code), GitHub Actions.
• Observability: Prometheus, VictoriaMetrics, Grafana, ELK Stack (OpenSearch, Logstash, Kibana), Fluent Bit.
• Security: HashiCorp Vault, IAM, OIDC, Network Policies (Calico), Trivy.
• Programming & Scripting: Python (automation, tooling), Bash (Advanced).
• Databases: PostgreSQL, ClickHouse, Redis, MongoDB.
• Message Brokers: Kafka, RabbitMQ, Zookeeper.
• Networking: TCP/IP, DNS, BGP, Nginx, HAProxy.
• Operating Systems & Tools: Linux (Debian, CentOS), Git, Nexus/Artifactory .
  Languages: English: B2 | Polish: B2 | Russian: Native | Ukrainian: Native