Roman

ROMAN CHERNUKHA
Junior DevOps Engineer | Kubernetes • CI/CD • Infrastructure Automation
Open to relocation within Europe
[відкрити контакти](див. вище в блоці «контактна інформація») | github.com/romanchernukha8-ctrl | [відкрити контакти](див. вище в блоці «контактна інформація»)
Portfolio: romanchernukha8-ctrl.github.io/portfolio-v2

SUMMARY
Junior DevOps Engineer with 13 months of hands-on training, focused on containerized applications, Kubernetes
deployments, CI/CD automation, infrastructure as code and observability. Portfolio projects include a multi-service audio
transcription platform with automated testing, security scanning, container image publishing and local Kubernetes
deployment. Brings 7 years of prior experience in instrumentation and control at a thermal power plant, including
troubleshooting industrial automation and safety-critical systems.

TECHNICAL SKILLS
Containers & Orchestration: Docker, Docker Compose, Kubernetes, Minikube, Helm
CI/CD & Security: GitHub Actions, GitLab CI/CD, self-hosted runners, GHCR, Gitleaks, OSV-Scanner, Trivy, Kubeconform
Testing: pytest, Vitest
Cloud & IaC: AWS (EC2, IAM, VPC, RDS, ALB), Terraform
Linux & Networking: Linux, Bash, Nginx, TCP/IP, DNS, reverse proxy
Monitoring & Logging: Prometheus, Grafana, Loki, Promtail
Backend & APIs: Python, FastAPI, Flask, REST APIs, SQLAlchemy, Alembic
Data & Messaging: PostgreSQL, Redis, RabbitMQ, MinIO
Other: React, Vite, Faster-Whisper, Ollama, Git

SELECTED PROJECTS
AI Voice Transcriber — DevOps / Kubernetes Portfolio Project | GitHub:
github.com/romanchernukha8-ctrl/ai-voice-transcriber
Built a local microservices platform for audio transcription and AI-powered text processing using Docker, Kubernetes, Minikube and
Helm.
• Containerized a multi-service application with React (JavaScript), FastAPI, PostgreSQL, Redis, RabbitMQ and MinIO.
• Implemented asynchronous audio processing with RabbitMQ and Faster-Whisper, with optional local AI text processing
through Ollama.
• Configured Helm-based Kubernetes deployment, persistent volumes and health probes.
• Built GitHub Actions CI/CD checks for backend and frontend tests (pytest, Vitest), secret detection, dependency scanning,
Helm and Kubernetes manifest validation, and container image vulnerability scanning.
• Automated building of six container images, publishing to GitHub Container Registry, and deployment to a configured local
Minikube cluster using a self-hosted runner.
• Added deployment readiness checks, API/authentication smoke tests, diagnostics collection and Helm rollback to the last
good revision on failure.
• Found critical and high-severity dependency vulnerabilities with Trivy and fixed them by upgrading the package in three
services.
• Documented with an Architecture Design Document and a System Requirements Specification.
Technologies: Kubernetes, Minikube, Helm, Docker, GitHub Actions, GHCR, Trivy, Gitleaks, OSV-Scanner, Kubeconform, FastAPI,
RabbitMQ, PostgreSQL, MinIO, Redis, Ollama, Faster-Whisper, React
AI File Analysis Platform — Personal Project
Production-inspired Kubernetes microservices platform for AI-powered document processing.
• Kubernetes microservices architecture with dev/staging/production namespace isolation.
• 11-stage GitHub Actions CI/CD: linting, Pytest, Helm lint, Docker build/push, Trivy scan, Helm deployment, rollout
verification, API smoke tests.
• JWT authentication with Redis-backed token blacklisting, rate limiting and session management; RabbitMQ with a
dedicated background worker.
• Ollama document analysis; PostgreSQL backup/restore scripts; Persistent Volume Claims for stateful data.
• Observability with Prometheus, Grafana, Loki and Promtail; HPA with 1–5 replicas and 50% CPU target.
Technologies: Kubernetes, Docker, Helm, Python, FastAPI, RabbitMQ, PostgreSQL, Redis, Ollama, GitHub Actions, Prometheus,
Grafana, Loki
GitHub: github.com/romanchernukha8-ctrl/ai-file-analysis-platform

AWS Infrastructure with Terraform (Flask API) — Personal Project
AWS infrastructure provisioned with Terraform for a Flask API behind a load balancer.
• Provisioned EC2, VPC, IAM and networking; Flask API behind an Application Load Balancer with Auto Scaling.
• Connected the application to PostgreSQL on Amazon RDS; reusable Terraform modules.
Technologies: Terraform, AWS, EC2, ALB, Auto Scaling, RDS, IAM, VPC, Flask
DevOps App — CI/CD with Automated Rollback — Personal Project
Dockerized application with load balancing and automated recovery.
• GitHub Actions pipeline with automatic rollback on failed health checks; Nginx load balancing across containerized
instances.
Technologies: Docker, Nginx, GitHub Actions, Health Checks
Flask Auth Platform — GitLab CI/CD to AWS — Personal Project
Authentication service with automated deployment to AWS.
• Flask auth service (JWT and session-based) in Docker behind Nginx; GitLab CI/CD deploying to AWS EC2 via Bash and
the GitLab API.
Technologies: Flask, JWT, Docker, Nginx, GitLab CI/CD, Bash, AWS EC2

PROFESSIONAL EXPERIENCE
Instrumentation & Control Technician — Zmiiv Thermal Power Plant
Instrumentation & Control Department | 2014 – 2021
• Maintenance, diagnostics and repair of industrial measurement, control and automation systems.
• Systematic troubleshooting of electrical and control equipment in live industrial operation.
• Worked with safety-critical systems following technical documentation and operating procedures.

EDUCATION & TRAINING
DevOps Engineering — Individual Mentorship Program | Sep 2025 – Present
Bachelor of Engineering, Energy Engineering — Ukrainian Engineering Pedagogical Academy | Sep 2017 – Jul 2022
Thesis defended remotely after relocating to Germany due to the war in Ukraine.
Vocational Diploma — Electrician, 4th Grade — Zmiiv Vocational-Technical Lyceum

LANGUAGES
Ukrainian — Native | Russian — Native | English — Technical communication and documentation

TARGET ROLES
Junior DevOps Engineer | DevOps Engineer | Cloud / Infrastructure Engineer | Kubernetes-focused Platform Engineer