Contact information

The job seeker has entered a phone number and email.

You can get this candidate's contact information from https://www.work.ua/resumes/11000374/

Work experience

Site Reliability / DevOps Engineer

from 02.2025 to now (1 year 7 months)
US NDA Fintech startup, Дистанційно (Фінанси, банки, страхування)

• Operate and improve production and staging infrastructure for a US fintech startup under NDA, focusing on Kubernetes reliability, CI/CD automation, secrets management and observability.

• Designed and implemented centralized secret management for multi-cluster Kubernetes environments using HashiCorp Vault, KV v2 and Vault Secrets Operator.

• Migrated application secrets from native Kubernetes Secrets to Vault-backed synchronization while preserving existing secret names and avoiding application-side changes.

• Built automation scripts for auditing, exporting, classifying and migrating Kubernetes secrets across namespaces and environments.

• Improved GitLab CI workflows for infrastructure and application delivery, reducing manual deployment steps and making releases more predictable.

• Maintained Kubernetes workloads, ingress routing, services, persistent volumes, DNS, certificates and environment-specific configuration.

• Improved monitoring and troubleshooting workflows using Prometheus/Grafana-based observability and alerting.

• Supported infrastructure security hardening, access control improvements, secret rotation readiness and operational standardization for fintech workloads.

• Collaborated with developers to troubleshoot production and staging incidents, analyze deployment failures and improve service reliability.

DevOps engineer

from 12.2023 to 02.2025 (1 year 3 months)
FIN++, Дистанційно (Фінанси, банки, страхування)

• Designed and deployed a Kubernetes cluster and migrated bare-metal hosted services to it, improving reliability, scalability and observability.
• Implemented Rancher RKE with autoscaling to provide additional cluster capacity during peak load.
• Redesigned the Jenkins-based build system, reducing build times for selected projects by up to 70%.
• Refactored a frontend application build process with Docker, enabling consistent builds and a more flexible testing approach.
• Administered MikroTik-based network infrastructure.
• Maintained Infrastructure-as-Code repositories and automated configuration management with Ansible.

Site Reliability Engineer

from 02.2020 to 12.2023 (3 years 11 months)
The Kernel, Дистанційно (IT)

• Deployed a Kubernetes cluster with a Ceph storage backend and migrated website hosting infrastructure to it, increasing fault tolerance and uptime to 99.95%.
• Implemented automated testing and vulnerability pre-check infrastructure for user websites, including rollback to previous Ceph snapshots in case of exploitation or failure.
• Consolidated servers scattered across low-performance hardware onto a Proxmox-based platform, improving stability and performance while reducing hardware maintenance overhead.
• Established automated product build and delivery workflows using Jenkins and GitLab CI, introducing a testing-stage-production process.
• Containerized products that did not require strict hardware binding into Docker containers, standardizing deployment across Linux servers.
• Automated host-based product deployments using Ansible.
• Implemented secure access control workflows and supported infrastructure security hardening, including RKHunter and SELinux configuration.
• Monitored vulnerabilities, applied fixes and identified a MikroTik network vulnerability that allowed unauthorized access and developer-mode switching.
• Set up infrastructure monitoring with Prometheus and Grafana, integrating alerts with Slack and Telegram.
• Managed a team of two employees, including task planning, priority distribution and operational follow-up.

Адміністратор Linux

from 05.2016 to 02.2020 (3 years 10 months)
ООО КОДЕКС, Дніпро (IT)

• Administered Linux-based production and internal systems.
• Automated product deployment using Ansible and containerized core products with Docker.
• Built and administered industrial-grade servers in an in-house data center, using VMware ESXi or Proxmox depending on project requirements.
• Monitored and mitigated newly discovered vulnerabilities.
• Managed MikroTik-based network infrastructure.

Education

УГХТУ

Компьютерні науки та інженерія
Higher, from 2016 to 2021 (5 years)

Knowledge and skills

• Сумлінність
• DHCP
• IP (Internet Protocol)
• Налаштування Firewall
• MikroTik
• VMware
• TCP/IP
• Zabbix
• Hyper-V
• OpenVPN
• Налаштування VPN
• VLAN
• HTML
• Налаштування DNS

Language proficiencies

• English — above average
• Ukrainian — fluent