Personal information hidden

ANDRII KONOVAL
System engineer / DevOps engineer

CONTACT konoval-andrii qwqw-333
INFORMATION konoval_andrii [open contact info](look above in the "contact info" section)

Results-driven DevOps & Infrastructure Engineer with 5+ years of experience
in building secure, high-availability systems and leading deployments at
national scale. Proven leadership in cross-regional infrastructure rollouts,
SUMMARY OF CI/CD automation, and Linux-based environments. Expert in GitHub Actions,
QUALIFICATIONS Docker, PowerDNS, BGP/OSPF, and cloud-native design.
Strong communicator and trusted contributor to both classified systems and
open-source initiatives.

SKILLS

Core Competencies Containerization & Orchestration
System Architecture Design Docker, docker compose
High Availability & Fault Tolerance Kubernetes (EKS; on-prem)
Disaster Recovery Virtualization
Research & Development VMware vSphere (ESXi, vCenter)
Reverse Engineering & Legacy System Audit ProxMox
Technical Documentation VMware Workstation, VirtualBox
Development Methodologies Operating Systems
Agile, Scrum, Waterfall Linux: Debian / Ubuntu
DevOps Tools & Practices Microsoft Windows
VCS: Git, GitHub (GitFlow) macOS
CI/CD: GitHub Actions Monitoring & Observability
(custom workflows, matrix builds) Uptime Kuma
Dependency & Security Management: Dependabot, Zabbix
SonarCloud, Snyk, Trivy Graylog
Container Registry: Programming & Scripting
Docker Hub, GitHub Container Registry
Bash, PowerShell
Cloud Platform Python
AWS: EC2, S3, RDS, EKS, VPC Networking
Azure: Web App, Storage, Resource Groups, TCP/IP stack, DNS, DHCP, TFTP, FTP
Azure Container Registry Routing: BGP, OSPF, MPLS, VPLS
Databases VPN: WireGuard, ZeroTier, NetBird, Tailscale,
SQL: PostgreSQL, MariaDB OpenVPN, L2TP, SSTP, EolP, GRE
NoSQL: MongoDB Storage
Web Servers / Reverse Proxies NAS (QNAP; TrueNAS; XigmaNAS)
Nginx, Apache, Caddy, Traefik Ceph
 PROFESSIONAL EXPERIENCE

Principal VoIP Engineer June 2024 – Present
Area: High-Availability VoIP Systems & Secure Communication
Organization: National-scale Infrastructure Program (Private Details Restricted)
Team Size: 9 engineers
Tools & Technologies: Linux, PowerDNS, Bash, FreeSWITCH, SIP, Uptime Kuma
Key Contributions:
Architect and maintain mission-critical VoIP infrastructure with SIP-based routing and HA.
Contribute to the design of high-availability call routing with dynamic failover between datacenters.
Own Linux-based infrastructure and PowerDNS; automate recurring tasks and system workflows.
Build internal tools to simplify operational interaction with the VoIP stack.
Collaborate with networking and security teams to ensure platform stability and compliance.
Act as technical liaison between engineering and leadership in architecture-related decisions.
Drive peer-reviewed implementation process in close collaboration with the VoIP lead engineer.

Architect / Team Lead Sept 2022 – June 2024
Area: Infrastructure Architecture & Team Leadership
Organization: National-scale Infrastructure Program (Private Details Restricted)
Team Size: 3 core engineers (direct) + coordination with 23 regional teams (indirect)
Tools & Technologies: VMware vSphere, Debian, Docker, TCP/IP, BGP, OSPF, MPLS, VPLS, Firewall,
WireGuard, ZeroTier, Tailscale, Netbird, OpenVPN, L2TP, Zabbix, Uptime Kuma, iSCSI
Key Contributions:
Architect and maintain mission-critical VoIP infrastructure with SIP-based routing and HA.
Contribute to the design of high-availability call routing with dynamic failover between datacenters.
Own Linux-based infrastructure and PowerDNS; automate recurring tasks and system workflows.
Build internal tools to simplify operational interaction with the VoIP stack.
Collaborate with networking and security teams to ensure platform stability and compliance.
Act as technical liaison between engineering and leadership in architecture-related decisions.
Drive peer-reviewed implementation process in close collaboration with the VoIP lead engineer.

System Engineer July 2020 – Sept 2022
Area: Core Infrastructure Modernization & Automation
Organization: National-scale Infrastructure Program (Private Details Restricted)
Team Size: 3 engineers
Tools & Technologies: Windows Server, ProxMox, ESXI, VMware Workstation, Debian, Docker, DNS, DHCP,
FTP, TFTP, SSH, iRedMail, NetBox, PowerDNS, Zabbix, PostgreSQL, MariaDB, uWSGI, Gunicorn, PXE boot, GUI
(Gnome, KDE, Xfce, LXDE)
Key Contributions:
Migrated production infrastructure from Windows Server 2008 to Debian 8.
Automated virtualization provisioning using PXE boot, DHCP, and TFTP.
Designed, deployed, and maintained Proxmox environments for internal service isolation.
Implemented NetBox for equipment inventory and asset tracking.
Configured and supported core infrastructure services: DNS, DHCP, FTP, TFTP, and mail.
Deployed PowerDNS with PostgreSQL backend and PowerDNS-Admin WebGUI.
Developed Bash scripts for system provisioning, maintenance, and automation.
Proposed and designed internal network architecture for isolated data center environments
 ADDITIONAL EXPERIENCE

DevOps Engineer – Liatoshynsky Apr 2025 – Present
Area: Infrastructure Architecture for Educational & Budget-Constrained Deployment
Organization: SoftServe Open Tech / Liatoshynsky Foundation
Team Size: 5+ (cross-functional volunteer team)
Tools & Technologies: Docker, GitHub Actions, Cloud VM design, VPS hosting (Contabo, Hetzner, A2 Hosting),
domain registrars (Cloudflare, Namecheap, GoDaddy), object storage (Wasabi, Backblaze)
Key Contributions:
Designed infrastructure architecture balancing client constraints (low budget, usability) and internal
DevOps training needs.
Conducted detailed cost analysis for VPS, domain providers, and cloud storage solutions to inform
infrastructure decisions.
Proposed and validated architectural solution with both the client and internal stakeholders.
Participating in ongoing infrastructure planning and deployment activities.

DevOps Engineer – Space2Study Oct 2024 – Present
Area: CI/CD Optimization & Environment Segmentation
Organization: SoftServe Open Tech
Team Size: 15+ (Dev, QA, DevOps, PM, BA)
Tools & Technologies: Azure, GitHub Actions, MongoDB Atlas, Docker, SonarCloud, Snyk, GPG, GitFlow,
Node.js
Key Contributions:
Implemented database access segmentation in MongoDB Atlas across dev, staging, and production
environments.
Eliminated recurring accidental data wipes through access control and scheduled encrypted backups.
Reduced database recovery time from several days to under 15 minutes through automation.
Developed custom GitHub Actions workflows for:
PR reporting with lint, matrix testing, and container checks
MongoDB encrypted backups and test database validation
Integrated unit/integration tests, SonarCloud, Snyk, and PR comment reports
Enforced GitFlow and improved CI/CD pipeline visibility and reliability.

Network Consultant – Security Equipment Integration Jan 2024 - June 2024
Area: Embedded Network Architecture & VPN Strategy
Organization: Hardware Vendor (Private Details Restricted)
Team Size: Small R&D and testing group
Tools & Technologies: TCP/IP stack, WireGuard, ZeroTier, L2TP, EoIP, Embedded Networking
Key Contributions:
Built and validated physical lab network for evaluating custom network hardware.
Advised on VPN integration (WireGuard, ZeroTier, L2TP) and secure routing architecture.
Provided improvement proposals for hardware-to-network interoperability and test scenarios.
 EDUCATION LANGUAGES

Master’s Degree in International Management Ukrainian Native
State University of Trade and Economics 2022 – 2023

Master’s Degree in Software Engineering Russian Native
State University of Telecommunications 2020 – 2022

Bachelor’s Degree in Computer Science English B2

National Technical University of Ukraine 2016 – 2020
“Kyiv Polytechnic Institute” Deutsche A1
High School - Military
Kyiv Military lyceum, named by Ivan Bohun 2012 – 2016 Italian A1

CERTIFICATES

Cloud & DevOps Networking
SoftServe: DevOps Project-Based learning CCNP: Core Networking
SoftServe (Series OM № 21520/2024) Cisco
AWS Cloud Technical Essentials CCNA
AWS Cisco
GCP: Core Infrastructure MTCNA
Google Cloud MikroTik
DevNet Associate Fundamentals of network documentation
Cisco NetSkills (ID:VMJZLQ-CE000003)

Management & Analysis Language
Business Analyst English (Upper-intermediate)
Genius.Space SmallTalk2Me
Project Manager in IT English (Intermediate Level)
Genius.Space Englishdom
Al Specialist
Genius.Space More certificates – notion.so/a-konoval

Note: Some responsibilities are generalized due to project confidentiality agreements.