Роман

Roman Karpovets
Junior DevOps Engineer
Ukraine | Remote | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section)
github.com/rkarpovets | [open contact info](look above in the "contact info" section)
SUMMARY
Junior DevOps Engineer and 4th-year Information Systems student who independently built and operates a
public production Linux server. Hands-on with Linux (Ubuntu) administration, Bash and Python scripting,
Docker, and Infrastructure as Code (Ansible). Built end-to-end monitoring (Prometheus / Grafana / Loki)
with alerting, an Nginx reverse proxy with TLS, and a 3-stage CI/CD pipeline (GitHub Actions: lint,
scheduled drift-check, gated deploy). Self-directed, automation-minded, and comfortable owning a system
end to end.
TECHNICAL SKILLS
Infrastructure & OS: Linux (Ubuntu Server), WSL2, Docker, Docker Compose, Nginx
Configuration Management & CI/CD: Ansible (roles, vault), Git, GitHub Actions
Networking & Security: TCP/IP, DNS, HTTP/HTTPS, UFW/iptables, fail2ban, SSH hardening, TLS/Let's
Encrypt, Xray-core VPN (3x-ui panel)
Scripting & Development: Python, Bash, Steam Web API, Telegram Bot API, YAML, JSON
Monitoring & Observability: Prometheus (PromQL), Grafana, Loki (LogQL), node_exporter
Administration Tools: systemd, journald, cron, user/permission management
HANDS-ON EXPERIENCE & PROJECTS
Production Linux Server (Self-hosted) May 2026 - present
• Independently administer a public-facing Linux game server (Insurgency: Sandstorm) on an Ubuntu
VPS, growing it to a peak rank of #71 out of 792 tracked servers on BattleMetrics (top 10%) within two
months of launch.
• Hardened the host: UFW firewall, fail2ban (multiple jails), SSH key-only authentication on a
non-standard port, and TLS via Let's Encrypt.
• Developed a dependency-light Python RCON manager that auto-recovers a recurring map-vote crash,
tracks live players by resolving names via the Steam Web API (mapping SteamID64 to a cached
persona name) over a persistent RCON connection, and reports status through in-game chat, Telegram,
and a Prometheus/Grafana metric, running under systemd with automatic restart.
github.com/rkarpovets/insurgency-sandstorm-server
• Built full observability using Prometheus and Grafana dashboards, Loki log aggregation, and Telegram
alerts for service-down, CPU, RAM, and disk events, enabling near real-time incident detection.
• Authored 8 idempotent Ansible roles (Infrastructure as Code) that provision the entire server from a
clean OS, covering hardening, Docker, monitoring, logging, Nginx, VPN, and the game server itself, with
all secrets encrypted in Ansible Vault. github.com/rkarpovets/server-infrastructure
• Built a 3-stage GitHub Actions CI/CD pipeline (lint, a scheduled drift-check against production, and a
manually-gated deploy with SSH host-key verification), backed by a disaster-recovery runbook designed
for seamless infrastructure rebuilding and migration to new hardware.
EDUCATION
National Technical University of Ukraine "Igor Sikorsky Kyiv Polytechnic Institute" - Information
Systems and Technologies
2023 - 2027 (expected), 4th year
LANGUAGES
Ukrainian - Native | English - Intermediate