Валерій

VALERII STEPANETS
Senior Site Reliability / DevOps Engineer | Kubernetes | Platform Automation | Go / Python | AI Infrastructure
Khmelnytskyi, Ukraine | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | github.com/zsvs

PROFESSIONAL PROFILE
Senior Site Reliability / DevOps Engineer with 12+ years in infrastructure and operations, specializing in Kubernetes platforms,
AWS, GitOps, infrastructure automation, and production reliability. Hands-on Go and Python engineer building Kubernetes
operators, SRE automation, observability tooling, and AI/LLM infrastructure for distributed systems, with production on-call
experience and a track record of zero-/near-zero-downtime changes and toil reduction.
CORE TECHNOLOGIES
Cloud & Platforms: AWS (EKS, EC2, ECS, RDS, ECR, S3, SQS, VPC, Lambda, Secrets Manager), Kubernetes, Docker, Linux
Infrastructure & GitOps: Terraform, Terragrunt, Ansible, Helm, Kustomize, Argo CD
Software & Automation: Go, Python, Bash, PowerShell; Kubernetes Operator SDK, Kubebuilder, controller-runtime, client-go
CI/CD: GitHub Actions, Jenkins, GitLab CI
Reliability: SLI/SLO, production on-call, incident response, RCA, health probing
Observability: Prometheus, Grafana, Datadog, ELK
AI / LLM Infrastructure: FastAPI, LangChain/LangGraph, MCP, mcp-go, LiteLLM, LibreChat, AWS Bedrock, vLLM, Ollama
Networking & Security: HAProxy, NGINX, AWS VPC, Route 53, AWS Direct Connect, AWS Transit Gateway, AWS Site-to-Site VPN,
IAM/OIDC, Kubernetes RBAC, DNS, External Secrets

PROFESSIONAL EXPERIENCE
Senior Deployment (DevOps) Engineer | Ledger
Paris, France / Remote | Feb 2023 - Present
• Designed and built an OpenAI-compatible AI operations platform using FastAPI and LangGraph, delegating Kubernetes
troubleshooting to a Go MCP server exposing approximately 58 typed read-only cluster tools; integrated it with
LiteLLM/LibreChat, AWS Bedrock, External Secrets, and Argo CD.
• Built and deployed a Go Kubernetes Operator that automatically injects sync-lag-aware health sidecars into blockchain node
workloads, providing workload-level health signals used by external routing across a multi-cloud Kubernetes fleet.
• Integrated node health end-to-end from Kubernetes Ingress through DNS and HAProxy routing so unhealthy or out-of-sync
blockchain nodes can be removed from serving paths automatically.
• Delivered operator and sidecar software with table-driven unit tests, controller-runtime envtest, Kind end-to-end tests, and
reusable GitHub Actions pipelines for container images and Helm chart releases.
• Built an event-driven Python Kubernetes operator using a custom CRD and the Kubernetes exec API to run parallel product-
specific migration workflows across Vault workloads, reducing a measured migration from approximately 3 hours to 15
minutes.
• Automated AWS RDS PostgreSQL engine lifecycle management across 130+ instances spanning SBX, STG, PPR, and PRD
using a custom Renovate datasource, Terraform, and reusable GitHub Actions workflows that enable controlled blue-green
upgrades.
• Participate in production on-call and incident response for distributed infrastructure, troubleshooting Kubernetes, AWS,
database, and blockchain-node failures; perform root-cause analysis and feed corrective actions back into automation,
monitoring, and deployment workflows.
• Delivered zero-downtime product releases and near-zero-downtime RDS infrastructure migrations using GitOps, staged
change management, and reliability-focused rollout strategies.
PROFESSIONAL EXPERIENCE - CONTINUED
Security Systems Engineer | EPAM Systems
Kyiv, Ukraine | Sep 2021 - Feb 2023
• Delivered Terraform/Terragrunt infrastructure across multiple AWS accounts and regions, operating workloads across
EKS/ECS and supporting services through GitOps-based delivery.
• Built and operated ELK and Prometheus/Grafana observability environments for infrastructure and application visibility and
operational troubleshooting.
• Developed infrastructure automation in Python, Bash, PowerShell, Node.js, and TypeScript; built reusable GitHub
Actions/Jenkins workflows and supported development teams adopting the platform.
System Administrator | Kernel
Khmelnytskyi, Ukraine | May 2019 - Sep 2021
• Administered Windows Server, Active Directory, VMware ESXi/Hyper-V, and network infrastructure; automated MikroTik and
systems operations with Ansible, Python, and PowerShell, and implemented Grafana/Loki telemetry.
System Administrator | Inter Cars Ukraine
Kyiv, Ukraine | Apr 2013 - Sep 2018
• Operated enterprise Windows/AD, DNS/DHCP/GPO, VMware/Hyper-V, SCCM/PowerShell automation, OpenVPN, and
SIP/Asterisk infrastructure.
INDEPENDENT PLATFORM ENGINEERING
• Designed and operate a 6-node Talos Linux Kubernetes platform (3 control-plane + 3 workers) with Cilium eBPF kube-proxy
replacement, HAProxy load balancing, Longhorn CSI, and Argo CD GitOps.
• Federated Auth0 OIDC across the Kubernetes API, Argo CD, and Grafana with least-privilege RBAC; deployed External
Secrets and Prometheus/Alertmanager/Grafana, and automated cluster lifecycle with PowerShell and Talos machine
configuration.
EDUCATION
B.Sc. in Computer Engineering | Lviv Polytechnic National University, Lviv, Ukraine | 2014 - 2017
Maintenance of Computer Systems and Networks | Khmelnytskyi Polytechnic College, Ukraine | 2010 - 2014

CERTIFICATION
AWS Certified Solutions Architect - Associate (SAA-C03) | AWS | Active

LANGUAGES
Ukrainian (native) | Russian (native) | English (B2)