Сергей

[відкрити контакти](див. вище в блоці «контактна інформація») @white_1193 /sshevczo in/sergei-shevtsov-4913161a4 [відкрити контакти](див. вище в блоці «контактна інформація»)

Education KHADI, faculty of mechanics, bachelor
2014 - 2018
bachelor speciality "Information and
measurement technologies"

Experience IT_SPROUT Dec 2023 – Dec 2024

Globaldev Group Dec 2024 – Present

Responsibilities & Achievements Infrastructure & System Administration
* Advanced administration of Linux environments with a primary focus on Debian-
based systems, including system configuration, package management (APT),
performance optimization, troubleshooting, and Bash scripting.

* Administration and maintenance of Windows Server environments, including
Active Directory, DNS, DHCP, Group Policy, and core network services.

* Configuration and administration of Nginx web servers and reverse proxies,
including SSL/TLS management, load balancing, virtual hosts, caching, and
performance optimization.

Automation & Infrastructure as Code
* Developed and maintained Ansible playbooks and roles for automated server
provisioning, configuration management, application deployment, and infrastructure
orchestration.

* Implemented Infrastructure as Code (IaC) solutions using Terraform for
provisioning and managing AWS and on-premises infrastructure.

CI/CD & DevOps
* Designed, implemented, and maintained CI/CD pipelines using GitLab CI for
automated testing, building, and deployment processes.

* Configured and administered Jenkins automation servers to support continuous
integration and delivery workflows.

* Managed GitLab Runners and optimized pipeline performance and reliability.

Monitoring & Observability
* Implemented monitoring, alerting, and visualization solutions using Prometheus
and Grafana to ensure system availability, performance tracking, and proactive
incident detection.

* Developed dashboards and alerting rules for infrastructure and application
monitoring.

Atlassian Administration
* Administered Jira and Confluence (Cloud and Data Center/Server), including user
management, workflow customization, permission schemes, integrations, upgrades,
and performance optimization.

Cloud Platforms
* Extensive experience with AWS services, including EC2, ECS, Lambda, S3,
CloudFront, Route 53, RDS, Aurora, CloudWatch, SNS, Elasticache, and Load
Balancers.

* Managed cloud infrastructure, networking, security groups, IAM permissions, and
cost optimization initiatives.

Containers & Application Platforms
* Containerized applications using Docker and Docker Compose, optimized
container images, and maintained multi-container environments.

* Deployed and supported applications built with Python, .NET, and JavaScript/
Node.js technologies.

* Managed application environments, troubleshooting deployment issues and
improving system reliability.

Git & GitLab Administration
* Administered GitLab environments, including repository management, access
control, branch protection policies, GitLab Runner configuration, and CI/CD pipeline
maintenance.

* Managed source control workflows, repository permissions, and integration with
deployment automation processes.

AWS Identity & Access Management (IAM)
* Configured and maintained AWS IAM users, groups, roles, and policies following
the principle of least privilege.

* Implemented secure access controls for applications, services, and engineering
teams across AWS environments.

SSL/TLS & Certificate Management
* Managed SSL/TLS certificates for web applications and internal services,
including certificate issuance, renewal, deployment, and troubleshooting.

* Configured HTTPS, TLS security settings, and automated certificate renewal
processes using industry-standard solutions.

DNS Administration
* Administered DNS infrastructure and domain configurations using Route 53 and
other DNS providers.

* Managed DNS records, hosted zones, domain migrations, and troubleshooting of
name resolution issues.

Backup & Disaster Recovery
* Implemented and maintained backup strategies for databases, application data,
and infrastructure components.

* Participated in disaster recovery planning, backup validation, and restoration
procedures to ensure business continuity.

Networking
* Worked with TCP/IP networking, VPN connectivity, routing, firewalls, load
balancers, and network troubleshooting.

* Configured and maintained secure communication between cloud and on-
premises environments.

Security Hardening
* Applied security best practices for Linux and Windows servers, including access
control, system hardening, patch management, and vulnerability remediation.

* Improved infrastructure security through least-privilege access policies, secure
configurations, and regular maintenance activities.

Troubleshooting & Incident Response
* Investigated and resolved infrastructure, application, networking, and
deployment-related incidents in production and staging environments.

* Performed root cause analysis (RCA) and implemented preventive measures to
improve system stability and reliability.

Technical Skills
Terraform Ansible Docker Jenkins

Docker Compose GitLab CI/CD Nginx

Prometheus Grafana PostgreSQL MySQL

Redis MongoDB Linux (Debian, Ubuntu)

Windows Server Bash

AWS
EC2, ECS, S3, CloudFront, Route 53, RDS, Aurora, CloudWatch,
SNS, ElastiCache, Lambda, Load Balancers, IAM