Personal information hidden

Hanna Nyzhnia
DevOps & DevSecOps Engineer
[open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | github.com/grepxz | nyzhnia.com |
Barcelona, Spain
PROFESSIONAL SUMMARY
DevOps & DevSecOps engineer who builds and secures cloud infrastructure, with a security-first origin (M.S. Cybersecurity; ISO
27001/NIST bank audits at KPMG). I built out and hardened a full stack on AWS EKS: Terraform IaC, ArgoCD GitOps, container/IaC scanning
(Trivy, tfsec), Kyverno policies, and keyless CI/CD via GitHub Actions + AWS OIDC. I automate reliable delivery across GitLab, GitHub
Actions and Jenkins, and bake security in by default - because I first learned how systems break. Fluent in English and Russian.
CORE COMPETENCIES
Kubernetes (AWS EKS) Infrastructure as Code (Terraform) CI/CD - GitLab, GitHub Actions, Jenkins GitOps (ArgoCD)

Docker & Containers AWS & Azure Pipeline Security (SAST/DAST/SCA) Policy-as-Code (Kyverno)

WORK EXPERIENCE
Archilabs Sep 2024 - Feb 2025
Full Stack Developer - Houston, TX (remote)
Built and deployed automation across a multi-tool pipeline (AutoCAD to Blender to Unreal Engine), cutting processing time from 5 minutes to
30 seconds.
Maintained and optimized backend infrastructure for browser-based rendering, sustaining 200+ concurrent users at peak with lower latency
and faster load times.

Mission Zero May 2023 - Dec 2023
Full Stack Developer - Houston, TX (remote)
Implemented and supported scalable backend infrastructure serving up to 5,000 concurrent users for container-tracking operations.
Integrated RESTful APIs and third-party services, improving data-sync efficiency by 35% across 15,000+ installs.

KPMG Dec 2021 - Dec 2022
Cybersecurity Consultant - Kyiv, Ukraine
Audited bank systems and security policies against ISO 27001/27002, NIST, and VAIT across a 5-client portfolio, lifting compliance by ~40%.
Delivered remediation plans and technical documentation that removed identified vulnerabilities for banking-sector clients.

PROJECTS
Project-Ramus - DevSecOps on AWS EKS Kubernetes | IaC | GitOps
Built out and hardened a three-tier microservices app on self-managed AWS EKS (Kubernetes v1.30): provisioned VPC, subnets, IAM and cluster in
Terraform, delivered via ArgoCD GitOps, added container + IaC scanning (Trivy, tfsec) and Kyverno admission policies, managed secrets with
External Secrets Operator + AWS Secrets Manager, and ran keyless GitHub Actions CI/CD via AWS OIDC.
github.com/grepxz/Project-Ramus

Project-Gemma - Automated CI/CD pipeline on AWS Jenkins | Docker | CI/CD
Built out a hands-free Jenkins pipeline deploying a Flask + MySQL app to AWS EC2 on every push; containerized with Docker and Docker
Compose across the full build and deploy lifecycle.
github.com/grepxz/Project-Gemma

AI-Powered SIEM - Splunk-style clone Incident Response | Detection | Python
Reverse-engineered a Splunk-style SIEM - core log ingestion, search, and alerting - to understand SIEM internals, then built an AI layer for
automated alert analysis and triage.
EDUCATION
M.S., Cybersecurity - Kyiv National University of Construction and Architecture Jan 2023
CERTIFICATIONS
Azure Fundamentals (AZ-900) | ISC2 Certified in Cybersecurity (CC) Microsoft | ISC2
CompTIA A+ & Network+ | Google Cybersecurity & IT Support Certificates CompTIA | Google
SKILLS
Cloud & Containers: AWS (EC2, EKS, IAM, VPC, S3, Secrets Manager, OIDC), Azure (AZ-900), Docker, Kubernetes, Istio
IaC & CI/CD: Terraform, ArgoCD (GitOps), GitLab CI, GitHub Actions, Jenkins
DevSecOps: Trivy, tfsec, Semgrep (SAST), OWASP ZAP (DAST), Kyverno, keyless OIDC, OWASP Top 10, ISO 27001, NIST, GDPR
Scripting & Networking: Python, Bash, PowerShell, SQL | TCP/IP, DNS, TLS/SSH, VPN, firewalls (CompTIA Network+)
Languages: Ukrainian (native), English (fluent), Russian (fluent), Spanish (A1)