Костянтин

Kostiantyn Yagusevych
IAM Specialist & Security Support
[open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | github.com/kiurakku | hackerone.com/cloud9s |
Lviv, Ukraine

Profile
Cybersecurity-trained IT and access specialist with hands-on IAM and offensive security research
(HackerOne) experience. Turns manual access processes into faster, auditable workflows.
Skills
Identity & Access: RBAC design & administration, SAP user/access administration, authorization workflow
design
Security Hardening: SSH hardening, TLS/SSL, encryption, Cloudflare WAF/DDoS/DNS security
Security Research: HackerOne bug bounty program (hackerone.com/cloud9s)
IT / Security Support: ticketing & troubleshooting, access provisioning, admin automation (Python, Bash)
Systems & Tools: Linux, Docker, Kubernetes, CI/CD, SAST/secret-detection, Grafana/Prometheus/Loki,
Git, Jira, Confluence
Experience
SAP System Administrator, KindgeekJun 2025 – Sep 2025
Hybrid, Lviv
● Automated SAP access-provisioning with Python/Bash, reducing manual processing time for
user-access requests.
AI Access Intelligence Architect, IDENTRA AIApr 2026 – Present
Hybrid, Ukraine
● Design access-intelligence systems automating authorization decisions across infrastructure.
IT Support Specialist, GranditSep 2016 – Mar 2018
Hybrid, Lviv, Part-time
● Resolved account/access issues as front-line IT support and automated recurring admin tasks.
Arbitration Case Support Specialist, NICELY.GROUPOct 2025 – Nov 2025
Hybrid
● Cut incident-investigation time via structured logging (Loki, Prometheus).
Python & Cybersecurity Coach, American Young Coder SchoolNov 2024 – Mar 2025
Remote
● Taught cybersecurity fundamentals; mentored students through full project delivery.
Freelance Security & Support Consultant — Contract, Self-EmployedOngoing
Remote
● Delivered 5.0/5.0-rated work across Freelancehunt, Kabanchik, Upwork, and Fiverr, incl. Garuda
(commercial all-in-one CRM — initial architecture) and SHOK (open-source VPS monitoring tool).
● Hardened client infrastructure with custom Cloudflare WAF rules and encryption, reducing
web-attack exposure.
Education
B.S. in Cybersecurity — Lviv Polytechnic National University, 2023–2027 (expected)
Cybersecurity and DevOps — SoftServe IT Academy, 2025
Languages
Ukrainian — Native; English — B2 Upper-Intermediate; German, Polish — A2