Максим

MAKSYM SUKHAREV
System Administrator/ OPS Engineer / Security
Engineer
[open contact info](look above in the "contact info" section) [open contact info](look above in the "contact info" section)

Chernihiv, Ukraine [open contact info](look above in the "contact info" section)

Profile
As a technology enthusiast and experienced specialist in system administration with over 15 years of experience
and an emerging interest in the world of DevOps, I possess profound knowledge and practical experience in
infrastructure management, configuration of client and distributed applications, and their environments. Currently,
I am expanding my expertise into cloud technologies. I am dedicated to attaining a deeper understanding of
DevOps practices to facilitate my professional development further.InterestsIn my free time, I enjoy outdoor
activities with my family and reading books. I am particularly interested in the development of artificial
intelligence, the gaming industry and cybersecurity and their application in professional activities and their impact
on life.

Skills
Working in mission-critical prod environments Willingness to learn and adapt to new technologies
Attention to detail and responsibility

Education

2000 – 2002 Technologist, Organization management
Chernihiv, Ukraine Central Institute of post diploma pedagogical education.

1996 – 1997 Engineer, IT
Chernihiv, Ukraine Chernihiv Technological University

1992 – 1996 Technologist, Radio electronics
Chernihiv, Ukraine Chernihiv Radio-Mechanical technical secondary school.

Professional Experience
08/2024 – present Security Engineer
Ukraine Lemtrans
Development and implementation of comprehensive cybersecurity audit procedures:
automation of vulnerability scanning and analysis in corporate services, public and
internal domains using containerization and tools (Nmap, Nikto, Wapiti, WhatWeb,
etc.).
Organization and conduct of internal/external penetration tests, including bypassing
corporate IDS/IPS (development of stealth configurations), perimeter analysis, attack
resistance testing, and verification of improvements after strengthening protection.
Adaptation and integration of modern infrastructure automation tools, building
workflows with a focus on security: Bash/Python scripts, Docker environments for
automatic auditing and incident response.
Working with regulatory requirements and standards (ISO 27001, NIST, GDPR):
compliance analysis, documentation preparation, implementation of best practices.
Identifying anomalies, conducting investigations, training colleagues on security issues
and best practices for operation.
Continuous monitoring of new vulnerabilities and timely implementation of
updates/measures to quickly eliminate them in the software used.
 Regular checks of current software and server configurations to strengthen them
(hardening) and minimize potential risks.
Development and implementation of advanced filtering rules for anti-spam (Amavis,
SpamAssassin, custom rulesets) and anti-phishing, tailored to current threat landscape
and company specifics.
Deep analysis and classification of incoming email traffic, systematic identification and
reduction of false positives and negatives through rule tuning and header analysis.
Investigation of incidents, forensic analysis of suspicious emails (header, content, and
attachment analysis), refinement of detection and quarantine policies.
Continuous monitoring of new attack techniques rapid adjustment of policies and
update of rulesets.

08/2021 – 04/2024 Production Engineering Specialist Ops Department
Ukraine FORM
Installation, configuration, and maintenance of customer Java applications on Solaris and
Linux operating systems, ensuring operational stability and high availability of services.
Predominantly used Solaris for mission-critical applications, with additional instances
on Linux.
Maintenance, configuration, and updating of a distributed application, guaranteeing its
continuous operation.
Provided technical support to clients using this application, including solving clients'
technical issues and consultations on optimal system use.
Installation and configuration of a distributed Java application with a modular
architecture in a data center.
Used nginx on Solaris and Linux.
Installation and regular updates of client SSL certificates configured in nginx.
Also experienced in using IIS.
Experience in using MySQL and MSSQL.
Possess basic knowledge of Oracle DB.
Worked with email systems like sendmail, addressing issues with email blacklists and
subsequent removal from these lists.
Configuration and management of DNS, ensuring correct domain name resolution,
creation, and maintenance of client domains.
Creation and use of bash scripts for simplifying routine tasks and processes.
Participation in recovery processes after serious failures, minimizing data loss and
restoring application functionality within critically short timelines.
Worked with GitLab/GitHub and TeamCity for continuous integration and delivery of
projects.
Used Ansible for automation of configuration and management.
Used Docker to enhance development flexibility and efficiency.
Completed courses on Google Cloud to expand competencies in cloud technologies.
Experienced in servicing QlikView servers.
Technologies: Solaris, Linux, Windows, nginx, MySQL, MSSQL, DNS, bash,
virtualization technologies, basics of working with AWS, Google Cloud.
Skills: MySQL - Shell scripting - Tomcat - Solaris - Customer Support - QlikView -
Troubleshooting - Software Deployment - Server Administration - SQL - sendmail -
Oracle DB - Bash - nginx - F5 BigIP - Linux System Administration - Technical Support
- IT Hardware Support - System Deployment - Linux - rundeck - Microsoft SQL Server
- IIS - DNS - Infrastructure - Active Directory - mssql

11/2019 – 08/2021 Production Engineering Specialist
Ukraine FORM
Installation, configuration, and maintenance of customer Java applications
on Solaris and Linux operating systems, ensuring operational stability and
high availability of services. Predominantly used Solaris for mission-critical
applications, with additional instances on Linux.
Maintenance, configuration, and updating of a distributed application,
 guaranteeing its continuous operation.

04/2007 – 11/2019 Production System Administrator
Ukraine WORLDAPP, Inc.
Providing security for company and monitoring security of production system.
Updating and deploying web applications on production system (ant scripts,
CruiseControl).
Making custom (to meet specific demands) installation of application for
customer (creating installation CD, writing instructions) and performing
application installation in different configurations (DBMS - MySQL, MS
SQL, ORACLE, DB2; Web – apache, IIS; jsp container/app server – tomcat,
WebSphere, F5 Big-IP).
Remote (30 servers) and local server hosting administration (10 servers).
Updating technical documentation on the production system. Participation in
preparing answers on RFI for customers (security related questions).
Analyzing demands and choosing solutions for providing collaboration and
documentation (SharePoint, JIRA, Confluence).

06/2004 – 03/2007 System Administrator
Chernihiv, Ukrane State administration of the Treasury of Ukraine in Chernihiv region
Installation and supporting antivirus system.
Setting up and supporting router for organization (routing, firewall).
Performing tasks due to providing informational and network security.
Supporting mail servers with MailSweeper and MS Exchange.
Working with DBMS MS SQL (doing reports and back-up).
Solving problems with servers and workstations software.

08/1999 – 08/2003 System Administrator
Chernihiv, Ukraine ITEC
Maintaining local servers (Mail+antivir+antispam,Web, CVS, FTP, samba,
proxy).
Local network and remote workplaces administration and support, office and
system software installation and control of efficiency.
Protecting network and server from the unauthorized access and virus
attacks.
Consulting and teaching staff how to work with different software products.
Analyzing demands and choosing software for company and branch
establishments.
Taking part in joint actions (with Ukrtelecom company) to connect people to
Internet using xDSL (Sirius-128) equipment.

05/1998 – 08/1999 System Administrator
Chernihiv, Ukraine Advertising agency 'Gold Future'
Installing, tuning and supporting software for company.
Solving problems with software and network (network equipment's, OS and
services network settings).
• Consulting and teaching staff how to work with different software products.