Богдан

BOHDAN SVYNAR
System / Network Administrator
Lviv, Ukraine | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section)

PROFESSIONAL SUMMARY
IT engineer with 20+ years of experience building, maintaining, and improving complex IT infrastructures across
manufacturing, banking, and global SaaS environments. Core expertise in network infrastructure (VLAN,
VPN/IPsec, FortiGate, DMZ, L3 routing), Windows/Linux server administration, Active Directory/GPO, web
servers, and databases. Proven track record of supporting high-SLA systems (24/7). Proactive approach:
monitoring (Prometheus + Grafana), automation, performance tuning, and security hardening.

KEY SKILLS
▸ Networking: DHCP, DNS, NAT, VPN/IPsec, SSL ▸ OS: Windows Server, Linux (RHEL/Oracle, Ubuntu,
VPN, VLAN, L3, Firewall (iptables, FortiGate) FreeBSD), macOS
▸ Active Directory / GPO / WSUS / Group Policy ▸ Web Servers: Nginx, Apache (reverse proxy,
troubleshooting SSL/TLS, load balancing)
▸ Databases: PostgreSQL (tuning, backups), MySQL, ▸ Virtualization: VMware, Docker, Docker Compose,
MSSQL Xen, OpenVZ
▸ Monitoring: Prometheus, Grafana, Nagios, Cacti, ▸ Automation: Ansible, Bash, Python, CI/CD (GitLab)
Icinga, Sensu
▸ Security: Microsoft Defender for Endpoint, FortiGate ▸ Cloud / SaaS: Microsoft 365, Exchange Online,
(DMZ, SSL VPN) SharePoint, Intune
▸ Network Hardware: Cisco, HP, D-Link, Fortinet ▸ AI/LLM: Ollama, local LLMs, workflow integration

WORK EXPERIENCE

System Administrator 2024 – Present
KarosIT
▸ Implemented Prometheus + Grafana monitoring stack: metrics collection, dashboards, alerting
▸ Configured and administered FortiGate: DMZ architecture, SSL VPN for remote access, security policies
▸ Deployed Microsoft Defender for Endpoint: rollout, policy configuration, threat monitoring
▸ Set up GitLab CI/CD pipelines for automated deployment and testing workflows
▸ Worked with LLMs via Ollama: deployed local models, integrated AI tools into business processes

System Engineer 2023 – 2024
Kormotech LLC
▸ Administered server and network infrastructure in a manufacturing environment
▸ Maintained and optimized IT systems ensuring continuous production operations
▸ Implemented solutions to improve infrastructure reliability and security

SRE Engineer 2018 – 2023
GoDaddy
▸ Site Reliability Engineering for a global SaaS platform serving millions of users
▸ Monitoring, incident response, infrastructure automation (Ansible, scripting)
▸ Worked with Docker, CI/CD pipelines, high-availability architectures
▸ Linux server administration, performance diagnostics, on-call rotation

System Administrator 2017 – 2018
VS Bank
▸ Managed IT infrastructure for a banking institution with elevated security requirements
▸ Active Directory, GPO, network equipment, support of critical banking systems
▸ Ensured compliance with National Bank of Ukraine IT infrastructure regulations
System Administrator 2015 – 2017
Levtel LLC
▸ Maintained network infrastructure and company servers
▸ Configured VPN, Firewall, monitored network equipment

System Administrator 2009 – 2015
PrimoCollect LLC
▸ Built and maintained Active Directory domain environment (primo.local)
▸ Deployed and administered Asterisk-based call center, integrated GSM gateways
▸ Configured and maintained HP servers, HP MSA and QNAP storage systems
▸ Administered databases, web servers, and mail systems
▸ Organized and managed a user support service (100+ workstations)

System Administrator 2007 – 2009
1-2-3 Credit LLC
▸ Maintained IT infrastructure for a financial services company, network administration

System Administrator 2004 – 2007
Iskra JSC
▸ Administered network and servers for a manufacturing enterprise

Head of Laboratory 2003 – 2004
Lviv Technical College
▸ Maintained computer laboratory, supported the educational process

KEY PROJECTS & ACHIEVEMENTS
▸ Implemented Prometheus + Grafana for comprehensive infrastructure monitoring from scratch
▸ Deployed Microsoft Defender for Endpoint across the organization — full lifecycle from planning to
operations
▸ Developed a full-stack web application (Next.js + Flask + PostgreSQL) with Docker containerization and
GitLab CI/CD
▸ Production PostgreSQL tuning: optimized shared_buffers, autovacuum, WAL, bgwriter
▸ Built a DDoS monitoring system with a Python script (SMTP alerting, deduplication) to protect web
resources
▸ Configured a Linux router (Oracle Linux, iptables, NAT/DNAT) for network segmentation and DMZ
architecture

EDUCATION
Lviv Technical College | 2000 – 2003
Faculty of Electromechanics, Specialization: Programmer

LANGUAGES
Ukrainian — Native | English — Working proficiency (B1-B2) | Polish — Conversational

ADDITIONAL
▸ Driving license: Category B
▸ Continuous self-learning: DevOps/IaC, cloud platforms, cybersecurity, AI/LLM tooling
▸ Responsible, punctual, comfortable working autonomously and in on-call rotation