Samirus

Samir Shahub
DevOps Engineer
[open contact info](look above in the "contact info" section) · [open contact info](look above in the "contact info" section) · [open contact info](look above in the "contact info" section) · https://github.com/Samironius · Ukraine · Open to remote
SUMMARY
DevOps and Support Engineer with 5 years at SoftServe building and operating cloud infrastructure on AWS. Strong across CI/CD (Jenkins, GitHub Actions), Infrastructure as Code (Terraform, CloudFormation), containers (Docker, Kubernetes), and observability (Datadog, Prometheus, Grafana, PagerDuty). Cyber-security background with hands-on IAM, least-privilege access, and vulnerability management. Comfortable owning on-call, incident response, and platform migrations across multi-region production environments.
TECHNICAL SKILLS
Cloud & IaC: AWS, Terraform, CloudFormation
CI/CD & Automation: Jenkins, GitHub Actions, Rundeck, CodeBuild, Packer, Make
Containers & Orchestration: Docker, Kubernetes
Configuration Management: Ansible
Monitoring & Alerting: Datadog, Prometheus, Grafana, PagerDuty
Security & Access: IAM, least-privilege models, Teleport, VPN, vulnerability triage
Languages & Scripting: Python, Bash, SQL, Groovy, YAML
Databases: PostgreSQL
Operating Systems: Linux (Debian)
EXPERIENCE
DevOps / Support Engineer - SoftServe
2020 – 2025 · Ukraine (remote)
• Built and maintained Jenkins CI/CD pipelines, migrating workloads from Rundeck and CodeBuild; generated Ansible deployment scripts and automated image builds with Packer, Python, and Make.
• Deployed and optimized Docker containers in a custom PaaS, ensuring high availability and scalability across [N] global data centers.
• Provisioned and decommissioned physical servers; automated data-center decommissioning through Jenkins jobs, reducing manual effort by [X%].
• Authored and managed Terraform and CloudFormation templates; administered AWS IAM roles and policies following least-privilege principles.
• Provided on-call support for production and staging across multiple regions using PagerDuty, Datadog, Prometheus, and Grafana - triaged incidents, troubleshot, and applied rapid mitigations.
• Investigated and resolved infrastructure alerts (CPU spikes, network tunnel limits, ENI manager, NAT), applied mitigations, and coordinated long-term fixes with engineering teams.
• Managed secure remote access with Teleport agents and break-glass VPN; ran VPN firedrills, documented SOPs, and validated access paths for supported and unsupported scenarios.
• Handled security vulnerability tickets end-to-end: triaged, filtered false positives, coordinated with security teams, and tracked fixes through to closure.
• Set up Network Load Balancers and IAM-based security models for remote access across the platform.
• Supported platform migrations (e.g., Jenkins agent OS upgrades) by fixing pipeline/tooling compatibility issues, pinning dependency versions, and validating builds.
• Authored runbooks and operational guides for recurring incidents, enabling faster resolution; delivered knowledge-sharing sessions and maintained clear technical documentation.
CERTIFICATIONS
• DevOps Development Crash Course - SoftServe (Certificate Series QT № 3901/2020).
EDUCATION
Bachelor’s Degree, Cyber Security
Lviv State University of Life Safety (LDUBGD) · 2018 – 2022
LANGUAGES
Ukrainian - Native · English - Intermediate
INTERESTS
Chess, hiking, cycling, board games, guitar, drums, Bachata dancing.