Personal information hidden 

Vlad Samarets
DevOps Engineer · Cloud Infrastructure Engineer
📍 Reutte, Tyrol, Austria — originally from Dnipro, Ukraine ✉ [open contact info](look above in the "contact info" section) 🔗 github.com/samarets-vlad
🌎 Remote Only · Open to Relocation

PROFILE
DevOps Engineer with solid hands-on experience designing, automating, and maintaining cloud infrastructure on AWS. Proven track
record delivering end-to-end infrastructure as code with Terraform — from zero-to-production provisioning (VPC, EC2, ALB, RDS, S3,
CloudFront, Lambda, API Gateway, DynamoDB) to multi-environment workspaces with remote state and reusable modules. Builds fully
automated CI/CD pipelines via GitHub Actions and GitLab CI, containerised workloads with Docker and Kubernetes, and complete
observability stacks with Prometheus, Grafana, and Loki.
Strong Linux systems background with daily hands-on experience in production incident response, system monitoring, and automation
scripting in Bash and Python (boto3, requests, subprocess). Actively integrates AI tools into engineering workflows — comfortable
working with leading LLM APIs (OpenAI, Anthropic, Gemini), deploying local models (Ollama, LM Studio), and building RAG pipelines.
Holds a Master's in Cybersecurity with a thesis on AI in digital forensics. Portfolio of 6 production-grade infrastructure projects on
GitHub.
TECHNICAL SKILLS

Cloud (AWS) EC2 · S3 · RDS · Lambda · API Gateway · DynamoDB · Route53 · ECR · ALB · ASG · CloudFront · VPC · IAM ·
CloudWatch · SQS · ACM · EIP · Cost optimisation · High availability · Auto-scaling
Terraform (IaC) Modules · Remote state (S3 + DynamoDB locking) · Workspaces (dev/staging/prod) · Plan/apply in CI/CD ·
Reusable patterns: VPC, EC2+ALB, S3+CloudFront, Lambda+API GW · Drift detection · tfvars per environment
CI/CD GitHub Actions · GitLab CI · Automated build → test → push → deploy · Blue-green & rolling deployments ·
Rollback automation · Parallel jobs · Manual approval gates for production · Deployment notifications
Observability Prometheus · Grafana · Loki · Alertmanager · Node Exporter · AWS CloudWatch (dashboards, alarms, SNS, Log
Insights) · Log aggregation · Multi-channel alerting · RCA workflows
Containers & K8s Docker · Docker Compose · Kubernetes (k3s) · Helm (chart authoring) · Traefik ingress · cert-manager · AWS ECR ·
Multi-stage Dockerfile optimisation (40–60% image size reduction)
IaC & Automation Ansible (playbooks, roles, idempotent deployments) · Ansible Vault · Zero-downtime deployments · Infrastructure
lifecycle automation · Bash scripting · Python (boto3, requests, subprocess)
Linux & Networking Ubuntu / Debian · systemd · process diagnostics (htop, ss, lsof, journalctl) · Nginx (reverse proxy, SSL, load
balancing, rate limiting) · SSH hardening · UFW / iptables · DNS · TCP/IP · SSL/TLS
Databases & HA PostgreSQL 16 · Patroni (auto-failover) · etcd (DCS) · pgBouncer (connection pooling) · HAProxy (R/W split) · WAL-
G + MinIO (backups) · MySQL · AWS RDS · DynamoDB · Redis
AI & LLM OpenAI API · Anthropic Claude · Gemini · Local model deployment (Ollama, LM Studio) · RAG pipelines (LangChain,
vector stores) · AI-assisted infrastructure automation · Prompt engineering
Security & VCS IAM least-privilege · Secrets management · Ansible Vault · SSH key lifecycle · Firewall hardening · Git · GitHub ·
GitLab · Cybersecurity & digital forensics (Master's degree)
WORK EXPERIENCE

Independent Contractor Mar 2023 – Dec 2025 · Remote
DevOps Engineer Part-time → Full-time · Remote
AWS · Terraform · Ansible · Docker · Docker Compose · GitHub Actions · GitLab CI · Nginx · Linux · Bash · Python · Lambda · DynamoDB · CloudWatch ·
ECR · API Gateway · RDS
▸ Provisioned and managed full AWS infrastructure stacks (EC2, S3, RDS, ECR, ALB, VPC, Lambda, CloudFront, Route53) via Terraform
— cut environment provisioning from several hours to under 15 minutes using remote state (S3 + DynamoDB locking) and reusable
modules.
▸ Designed multi-environment Terraform workspaces (dev / staging / prod) with isolated state and reusable modules — VPC, EC2+ALB,
S3+CloudFront CDN, Lambda+API Gateway; consistent, reproducible infrastructure with per-environment tfvars.
▸ Built and maintained CI/CD pipelines with GitHub Actions and GitLab CI: lint → test → Docker build → ECR push → deploy; automated
rollback on failure, parallel jobs, manual approval gates for production, and Slack/email notifications.
▸ Deployed full observability stacks (Prometheus, Grafana, Loki, Alertmanager, Node Exporter) via Ansible — TLS-secured Nginx, multi-
channel alerting, CloudWatch dashboards and alarms covering EC2, RDS, Lambda, and API Gateway.
▸ Deployed and operated Kubernetes (k3s) clusters — authored Helm charts, Traefik ingress with automated Let's Encrypt TLS via cert-
manager, CronJob DB backups, PV management, and Prometheus/Loki monitoring.
▸ Provisioned fully serverless infra: Lambda (Python 3.12) + API Gateway + DynamoDB + S3/CloudFront + ACM + Route53 — Terraform-
managed with 8 CloudWatch alarms and a parallel GitHub Actions deployment pipeline.
▸ Managed AWS RDS (MySQL/PostgreSQL) — parameter groups, automated snapshots, PITR, read replicas; SQS queues for async
service decoupling.
▸ Wrote Bash and Python (boto3) scripts for S3 lifecycle management, EC2 snapshot rotation, disk/memory monitoring with threshold
alerts, and scheduled application backups.
 Trifle Co., Ltd Sep 2022 – Oct 2024 · On-site
Linux System Administrator / SysOps Engineer Mar 2023 – Oct 2024 · Internal growth from Tech Support
Linux · Docker · Docker Compose · Nginx · Bash · Python · SSH · UFW / iptables · systemd · Networking · Monitoring · Incident Response
▸ Administered and maintained 10 Linux servers (Ubuntu/Debian) — user account lifecycle, file permissions (chmod/chown/ACL),
systemd service management, package updates, kernel-level monitoring, and cron-based scheduled automation.
▸ Owned production incident response — diagnosed and resolved disk exhaustion from uncapped Docker logs, traced intermittent
network failures, fixed permission-denied service crashes; maintained incident runbooks and post-mortems.
▸ Configured and maintained Nginx as reverse proxy and web server — virtual hosts, SSL/TLS via Certbot/Let's Encrypt, upstream load
balancing, rate limiting, and access/error log-based troubleshooting for 5+ internal services.
▸ Deployed and operated Docker and Docker Compose workloads — rolling container updates, image version management, volume
handling, exec-based live debugging, and log inspection.
▸ Monitored server health with htop, journalctl, df, netstat, ss, lsof; implemented Bash-based disk usage monitors with threshold-
triggered email alerts and automated log rotation.
▸ Managed SSH access control (key-based auth, password-login disabled); enforced UFW/iptables firewall rules per least-privilege
service requirements.
▸ Wrote Python and Bash scripts for config backups, application data snapshots, system health reports, and routine maintenance —
reducing manual operations across the team.
Technical Support Engineer Sep 2022 – Feb 2023
Linux · Bash · SSH · Ticketing · Networking · Hardware · User Support
▸ Provided first- and second-line technical support — triaged incoming requests, diagnosed hardware/software issues, and escalated
complex cases with detailed context to engineering teams.
▸ Assisted in Linux server setup and basic administration — user creation, package installation, service restarts, and log-based issue
investigation.
▸ Documented recurring issues and contributed to internal knowledge base; monitored system and network health dashboards to detect
anomalies early.
PORTFOLIO PROJECTS

postgres-cluster github.com/samarets-vlad/ serverless-aws-pipeline github.com/samarets-vlad/
postgres-cluster ↗ serverless-aws-pipeline ↗
PostgreSQL 16 · Patroni · etcd · pgBouncer · HAProxy · WAL-G · MinIO · Terraform · Lambda (Python 3.12) · API Gateway · DynamoDB · S3 ·
Prometheus · Grafana · Ansible CloudFront · ACM · Route53 · CloudWatch · GitHub Actions
Production-grade PostgreSQL HA cluster via Ansible — auto-failover Fully serverless TODO API — Terraform infra + parallel GitHub
with Patroni + etcd quorum, R/W split via HAProxy (:5000/:5001), Actions deploy (Lambda update & frontend sync simultaneously). 8
pgBouncer connection pooling, WAL-G continuous archiving to MinIO CloudWatch alarms across errors, throttles, latency, DynamoDB.
(daily backups, 7-day retention), full Prometheus + Grafana
monitoring. Zero data loss with synchronous_mode_strict.

docker-ecr-ec2-pipeline github.com/samarets-vlad/ k8s-helm-app github.com/samarets-vlad/
docker-ecr-ec2-pipeline ↗ k8s-helm-app ↗
GitHub Actions · Docker · AWS ECR · EC2 · Multi-stage build · SSH deploy · k3s · Helm · Traefik · cert-manager · MySQL · Prometheus · Grafana · Loki ·
Rollback CronJob backups
Production CI/CD: multi-stage Docker build → ECR push → SSH Full-stack app on k3s: 6 Helm charts, Traefik + Let's Encrypt TLS,
deploy to EC2. Zero-downtime rollout with automated rollback MySQL persistent storage, daily CronJob DB backups, Prometheus +
triggered on deployment failure. Grafana + Loki observability. Deploys with single helm install.

monitoring-stack github.com/samarets-vlad/ ansible-server-setup github.com/samarets-vlad/
monitoring-stack ↗ ansible-server-setup ↗
Ansible · Docker Compose · Prometheus · Grafana · Alertmanager · Node Ansible · Nginx · Docker CE · Linux · TLS (Let's Encrypt / self-signed)
Exporter · Nginx · TLS Idempotent server baseline playbook — provisions Docker CE, Nginx
Full observability stack via single Ansible playbook — idempotent, reverse proxy, TLS. Repeatable foundation for any fresh Linux VM in
TLS-secured Nginx. Monitoring-as-code: fully re-deployable without minutes.
losing dashboard or alert configuration.

C E R T I F I C AT I O N S E D U C AT I O N
Master's — Cyber Security & Data Protection
DevOps & Cloud Infrastructure Kharkiv National University of Radio Electronics (NURE)
FoxMinded Mentorship Programme · 2026 View ↗ Thesis: Application of AI / Machine Learning in digital forensics and
AWS · Terraform · Ansible · Kubernetes · CI/CD · Docker · criminal investigation
Prometheus · Grafana · Loki 2024 – 2025
L A N G U AG E S Bachelor's — Cyber Security
Kharkiv National University of Radio Electronics (NURE)
Ukrainian — Native Russian — Native Information Security Management
2020 – 2024
English — B2 (written confident; spoken actively improving)