Роман

Roman Karpovets
Junior System Administrator
Ukraine · Remote · [open contact info](look above in the "contact info" section) · [open contact info](look above in the "contact info" section)
github.com/rkarpovets · [open contact info](look above in the "contact info" section)
SUMMARY
Junior System Administrator and 4th-year Information Systems student who independently built and
operates a public production Linux server. Hands-on with Linux (Ubuntu) administration, Bash and Python
scripting, Docker, and Infrastructure as Code (Ansible). Built end-to-end monitoring (Prometheus / Grafana /
Loki) with alerting, an Nginx reverse proxy with TLS, and a CI/CD pipeline (GitHub Actions). Self-directed,
automation-minded, and comfortable owning a system end to end.
TECHNICAL SKILLS
Operating systems: Linux (Ubuntu Server), Windows, WSL2
Administration: systemd, journald, SSH, user / permission management, cron & timers
Networking: TCP/IP, DNS, HTTP/HTTPS, NAT, CIDR / subnetting, firewall (UFW)
Security: fail2ban, SSH hardening, TLS / Let's Encrypt, secrets management (Ansible Vault)
IaC & automation: Ansible (roles, inventory, vault, idempotency), Bash, Python
Containers: Docker, Docker Compose
CI/CD & version control: Git, GitHub, GitHub Actions, ansible-lint, yamllint
Monitoring & observability: Prometheus, Grafana, Loki, node_exporter, Telegram alerting
Web & proxy: Nginx (reverse proxy, TLS, security headers)
Virtualization: VirtualBox
HANDS-ON EXPERIENCE & PROJECTS
Production Linux Server — System Administrator (self-managed) 2026 – present
• Independently administer a public-facing Linux game server (Insurgency: Sandstorm) on an Ubuntu
VPS, serving up to 11 concurrent users.
• Hardened the host: UFW firewall, fail2ban (multiple jails), SSH key-only authentication on a
non-standard port, and TLS via Let's Encrypt.
• Built full observability — Prometheus + Grafana dashboards, Loki log aggregation, and Telegram alerting
for service-down / CPU / RAM / disk events — enabling near real-time incident detection.
• Developed a Python service (RCON automation) that auto-recovers a recurring crash and tracks live
players; runs under systemd with automatic restart.
server-infrastructure — Infrastructure as Code (Ansible) GitHub
• Authored 8 idempotent Ansible roles that provision the entire server from a clean OS (hardening,
Docker, monitoring, logging, Nginx, VPN, game server); all secrets encrypted in Ansible Vault.
github.com/rkarpovets/server-infrastructure
• Set up a GitHub Actions CI pipeline (yamllint, ansible-lint, syntax-check) and a disaster-recovery
runbook for a full rebuild from scratch.
insurgency-sandstorm-server — Python tooling & server config GitHub
• Dependency-light Python RCON manager: crash recovery, live player tracking, and integration with
Telegram and a Prometheus metric consumed by Grafana.
github.com/rkarpovets/insurgency-sandstorm-server
EDUCATION
National Technical University of Ukraine «Igor Sikorsky Kyiv Polytechnic Institute» — Information
Systems and Technologies
2023 – 2027 (expected) · 4th year
LANGUAGES
Ukrainian — Native · English — Intermediate