Владислав

Reutte, Tyrol, Austria
Vlad Samarets [open contact info](look above in the "contact info" section)
DevOps Engineer — 3+ years of experience [open contact info](look above in the "contact info" section)
github.com/samarets-vlad
Remote / Open to Relocation

Ukrainian — Native | Russian — Native | English — B1 (Intermediate)

PROFILE

DevOps engineer with 3+ years of hands-on experience designing and operating cloud
infrastructure on AWS. Career path: Technical Support → Linux System Administration → full
DevOps. Owns the full infrastructure lifecycle — from Terraform modules and CI/CD pipelines to
Kubernetes workloads and production observability with Prometheus, Grafana and Loki. Handled
real on-call incidents and maintains a runbook library. Master's in Cybersecurity (NURE, 2025).

SKILLS

Cloud & IaC: AWS (EC2, S3, RDS, Lambda, DynamoDB, CloudFront, VPC, IAM) | Terraform
(Modules, Remote State, Workspaces)

CI/CD & GitOps: GitHub Actions | GitLab CI | ArgoCD | Blue-Green Deploys

Containers & Docker & Docker Compose | Kubernetes (k3s, Helm, Traefik, cert-manager)
Orchestration:

Observability: Prometheus | Grafana | Loki | Alertmanager | Zabbix

Databases & HA: PostgreSQL & MySQL Administration | Patroni, etcd, HAProxy, pgBouncer |
WAL-G, PITR, RPO/RTO

Systems & Linux Administration (Ubuntu/Debian, systemd) | Nginx | SSH Hardening |
Networking: UFW/iptables | SSL/TLS

Automation & Ansible | Bash | Python (boto3) | Git & Version Control
Scripting:

Security & IAM Least-Privilege & Secrets Management | Incident Response & On-Call
Operations:
 WORK EXPERIENCE

NDA (Confidential) Apr 2023 – Feb 2026

DevOps Engineer — Full-time Jun 2023 – Feb 2026 | Remote
• Designed reusable Terraform modules covering the full AWS stack (VPC, EC2/ALB, RDS, S3,
Lambda, CloudFront, ECR, Route53) with isolated per-env workspaces, cutting provisioning time from
3–4 hours to under 15 minutes and eliminating cross-environment incidents.
• Built CI/CD pipelines in GitHub Actions and GitLab CI with manual approval gates and automatic
rollback on failed health checks, cutting deploy time by ~60% with zero broken production releases
over six months.
• Deployed a full observability stack (Prometheus, Grafana, Loki, Alertmanager) with 8 CloudWatch
composite alarms, reducing mean time to detect production issues to under 5 minutes.
• Operated a k3s Kubernetes cluster with 6+ Helm-managed services and automated TLS via
cert-manager, maintaining 99.9% uptime with zero data-loss incidents.
• Provisioned a fully serverless stack (Lambda, API Gateway, DynamoDB, S3/CloudFront) entirely in
Terraform, delivering a live environment in under 3 minutes from a git push.
• Managed RDS (MySQL & PostgreSQL) with automated snapshots and PITR, achieving RPO under 5
minutes and RTO under 15 minutes.
• Automated S3 lifecycle policies and backup verification with Bash/Python (boto3), replacing 8+
recurring manual tasks and saving several engineering hours per week.

DevOps Engineer — Part-time Apr 2023 – Jun 2023 | Remote
• Provisioned AWS resources and developed Ansible playbooks for a small product team while
working full-time elsewhere, laying the Terraform/CloudWatch foundation later expanded into the
full-time role.

Trifle Co., Ltd May 2022 – Jun 2023

Linux System Administrator / SysOps Engineer Dec 2022 – Jun 2023 | On-site
• Managed 10 production Linux servers end-to-end (users, systemd, patching), maintaining 99.5%+
uptime over 18 months with zero unplanned downtime.
• Deployed Zabbix monitoring with custom triggers across all servers, proactively catching disk, CPU
and NIC issues before they caused incidents.
• Authored an Ansible playbook library for provisioning and security hardening, eliminating hours of
manual per-server setup and making the environment fully reproducible.
• Configured Nginx reverse proxy for 5+ internal services with automated SSL/TLS renewal and load
balancing.
• Owned incident response end-to-end (triage → fix → post-mortem), building a versioned runbook
library that cut MTTR by ~50% over 18 months.

Technical Support Specialist May 2022 – Dec 2022 | On-site
• Resolved hardware, software and network tickets with average resolution time under 4 hours,
including root-cause analysis and escalation.
• Wrote onboarding and escalation documentation that was adopted company-wide and remained in
use after promotion to SysAdmin.

EDUCATION

Master's — Cyber Security and Data Protection 2024–2025
Kharkiv National University of Radio Electronics (NURE)

Bachelor's — Cyber Security 2020–2024
Kharkiv National University of Radio Electronics (NURE)
PORTFOLIO PROJECTS

postgres-cluster
Production-grade HA PostgreSQL 16 cluster with Patroni/etcd automated failover (<30s), HAProxy
read/write split, pgBouncer pooling and WAL-G backups to MinIO.
github.com/samarets-vlad/postgres-cluster

serverless-aws-pipeline
Fully serverless CI/CD: Terraform provisions Lambda, API Gateway, S3 and CloudFront, deployed
automatically via GitHub Actions.
github.com/samarets-vlad/serverless-aws-pipeline

docker-ecr-ec2-pipeline
CI/CD pipeline with multi-stage Docker build, push to AWS ECR, and zero-downtime deploy to EC2 via
GitHub Actions with auto-rollback.
github.com/samarets-vlad/docker-ecr-ec2-pipeline

k8s-helm-app
Full-stack Todo app on k3s: Python Flask + MySQL, packaged as Helm charts with Traefik, cert-manager
and full Prometheus/Grafana/Loki observability.
github.com/samarets-vlad/k8s-helm-app

monitoring-stack
Production monitoring stack (Prometheus, Grafana, Alertmanager, Node Exporter) deployed idempotently
via Ansible + Docker Compose.
github.com/samarets-vlad/monitoring-stack

ansible-server-setup
Server hardening and configuration playbook: Nginx reverse proxy, Docker, automated TLS via Let's
Encrypt.
github.com/samarets-vlad/ansible-server-setup

aws-terraform-infra
Reusable Terraform modules for a full AWS environment: VPC, EC2/ALB, RDS, S3, CloudFront, ECR and
Route53 across isolated workspaces.
github.com/samarets-vlad/aws-terraform-infra