Роман

Roman Karpovets
Junior DevOps Engineer
Ukraine | Remote | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section)
github.com/rkarpovets | [open contact info](look above in the "contact info" section)

SUMMARY
Fourth-year Information Systems student who builds and operates a public production Linux game
server on a cloud VPS, managed entirely as code. Nothing on the host is configured by hand:
provisioning, deployment, monitoring, and recovery are automated, deployments are repeatable and
gated, and backups are restore-tested. Focused on reliability, automation, and reproducibility.

HARD SKILLS
Linux & Systems: Ubuntu Server, systemd, journald, Nginx
Containers & Orchestration: Kubernetes (k3s), containerd, Docker
IaC, CI/CD & Backup: Ansible, Terraform, GitHub Actions, Git, restic, Cloudflare R2
Monitoring & Observability: Prometheus, Grafana, Loki
Security & Networking: UFW/iptables, fail2ban, SSH hardening, TLS/Let's Encrypt, Xray-core VPN
Scripting: Python, Bash

HANDS-ON EXPERIENCE
Production Linux Infrastructure (Self-hosted) May 2026 – Present
GitHub: server-infrastructure, insurgency-sandstorm-server
• Maintained 99% uptime over rolling 30-day windows (independently verified by BattleMetrics) on a
public-facing Ubuntu VPS serving a live player community.
• Migrated the stack from Docker Compose to k3s service by service and retired the Docker engine;
10 workloads now run as Kubernetes Deployments and Services on containerd.
• Dedicated an isolated CPU core to the single-threaded game process and pinned all device IRQs to
the remaining cores, removing scheduler and timer-tick contention from the latency-critical thread.
• Provisioned the host from a bare OS with 10 idempotent Ansible roles, with every secret encrypted
in Ansible Vault.
• Built a 3-stage GitHub Actions pipeline: lint, a daily drift-check against production, and a
manually-gated deploy with SSH host-key verification.
• Automated daily off-site backups with restic to Cloudflare R2, with the bucket managed as code in
Terraform and validated in CI.
• Deployed Prometheus, Grafana, and Loki, alerting to Telegram on service-down, CPU, RAM, disk,
and backup-staleness events.
• Hardened host access with UFW, fail2ban, SSH key-only authentication on a non-standard port,
and automated TLS renewals.
• Wrote a Python RCON manager that detects and recovers a recurring server crash without operator
action, resolves player names through the Steam Web API, and exports metrics to Prometheus;
runs as a Kubernetes sidecar.

EDUCATION
Igor Sikorsky Kyiv Polytechnic Institute - Information Systems and Technologies
2023 - 2027

LANGUAGES
Ukrainian - Native | English - Intermediate