Михайло

Mykhailo Manakhin
Fullstack Software Engineer
[відкрити контакти](див. вище в блоці «контактна інформація») | [відкрити контакти](див. вище в блоці «контактна інформація») | Telegram: @Writeif | github.com/Oikawhy

PROFESSIONAL SUMMARY
Software Engineer with a multidisciplinary background spanning Fullstack Development,
DevOps, Data Engineering, and Applied AI. Experience leading engineering teams,
architecting large-scale systems, automating complex business processes, and
delivering solutions that significantly reduce operational costs and manual effort. Skilled
in translating business requirements into scalable technical platforms with long-term
maintainability and measurable impact.

CORE SKILLS
Infrastructure & DevOps Linux, Docker, Kubernetes, Helm, Ingress, ConfigMaps /
Infrastructure & DevOps Secrets, container orchestration, Ansible, GitLab CI/CD,
GitHub Actions, GitOps, Proxmox

Databases & Data PostgreSQL, MySQL, Redis, MongoDB, Qdrant, Kafka,
SQLAlchemy, MinIO
Monitoring,
Monitoring, Logging
Logging &
& Prometheus, Grafana, Zabbix, Graylog, Wazuh, PagerDuty,
Reliability
Reliability Loki
Automation
Automation &
& Scripting
Scripting Python, Bash, Selenium, Playwright, n8n

Networking WireGuard, Nginx, Apache, DNS, SPF, DKIM, DMARC,
Networking &
& Security
Security ModSecurity, MikroTik, VLANs

Additional
Additional Languages
Languages &
& C, C#, JavaScript, HTML/CSS, Git, FastAPI, LangChain
Tools
Tools

PROFESSIONAL EXPERIENCE
Software Engineer | ANH
12.2022 - 01.2026
- Engineered an enterprise agent RAG architecture using LangChain and LLaMA models, reducing
information retrieval time for L1/L2 operators from minutes to seconds. Implemented a 4-stage
pipeline featuring semantic document chunking (improving context accuracy by ~20%), hybrid
search (vector + lexical), dynamic context merging, and Role-Based Access Control (RBAC).
Ensured LLM reliability and transparency by integrating automated hallucination testing, relevance
scoring, and dynamic source citations for generated responses, significantly reducing support
resolution times
- Architected a Computer Vision data processing pipeline using Python and DeepFaceLab,
automating video ingestion, frame extraction, image segmentation, annotation workflows, and model
training for large-scale facial recognition and synthetic media datasets. Leveraged Hugging Face
vision segmentation models to replace manual masking processes.
- Developed a high-performance CRM ecosystem (React, Node.js) with a Python backend handling
a 50M+ record PostgreSQL database. Optimized database performance through advanced
indexing, partitioning, and replication strategies.
- Automated massive-scale OSINT data collection using Python and OCR neural networks to
scrape, compare, and deduplicate potential client data. This automated workflow reduced manual
data entry staffing by 88% (from 17 to 2 operators) and saved the IT department ~70 hours per
month previously spent aggregating Excel reports.
- Engineered end-to-end business automation workflows using Python scripts and n8n, eliminating
routine cross-departmental manual tasks.
- Built real-time operational monitoring and KPI dashboards using Grafana and Prometheus,
providing visibility into business workflows, infrastructure performance, and data processing
pipelines. Enforced enterprise security standards by implementing full workstation encryption
(BitLocker, VeraCrypt) and advanced endpoint protection/SIEM using Wazuh
DevOps Engineer | Team Challenge
10.2019 - 11.2022
- Managed Proxmox VE (LXC) infrastructure across development, staging, and production
environments, operating approximately 30 virtual machines on 6 dedicated OVHcloud servers.
- Provisioned and maintained Linux-based infrastructure for development teams and production
applications, ensuring clear dev/stage/prod separation and stable delivery for around 50 production
services.
- Designed, maintained, and improved CI/CD pipelines in GitLab CI/CD and GitHub Actions,
eliminating manual deployment steps and reducing backend deployment time by 95%.
- Automated infrastructure provisioning, configuration management, and server/cluster deployment
using Ansible, improving environment consistency and reducing manual operational work.
- Managed Docker Compose-based stacks for web applications, databases, monitoring, automation,
and VPN services; containerized backend services and supporting infrastructure.
- Supported and maintained Kubernetes-based environments, including deployment configuration,
service exposure, configuration management, and troubleshooting of containerized workloads.
- Worked with Helm, Ingress, ConfigMaps, and Secrets to improve deployment consistency and
operational reliability in Kubernetes environments.
- Followed GitOps-oriented workflows for infrastructure and deployment changes, improving
traceability and rollback safety.
- Built and operated monitoring, logging, and security observability systems using
Prometheus/Grafana, Zabbix, Graylog, and Wazuh, improving infrastructure visibility and incident
response.
- Designed and implemented automated backup and recovery workflows using Proxmox Backup
Server, NFS-based backup storage, database dumps, and file archives.
- Improved PostgreSQL and MySQL environments in the context of performance, backup, recovery,
and production resilience.
- Participated in 24/7 on-call operations with 30-minute SLA response, handled incidents through
PagerDuty, and maintained 99%+ uptime across production systems.
- Performed full bare-metal recovery after node failure/destruction, strengthening disaster recovery
readiness and infrastructure resilience.
- Configured Nginx/Apache reverse proxy, SSL termination, WireGuard VPN, DNS and email
authentication (SPF, DKIM, DMARC), and strengthened access control to infrastructure services.
- Collaborated closely with PM, frontend, backend, QA, and design teams to improve deployment,
testing, release, and operational support processes.

System Administrator | Claude Systems
01.2019 - 08.2019
- Administered and maintained on-premise IT infrastructure, supporting a network of ~40
workstations and local servers. Ensured continuous operation of core business services, hardware
health, and seamless user access.
- Redesigned internal network architecture by implementing VLAN-based segmentation using
MikroTik equipment. Configured firewall rules and complex routing, improving traffic isolation,
network manageability, and internal security controls.
- Deployed and managed enterprise VoIP telephony (Asterisk/FreePBX) for 40+ internal/external
extensions, alongside IP video surveillance networks, optimizing inter-office communication
reliability.
- Designed and developed a custom C# desktop application to automate routine accounting
workflows. This code-based automation replaced manual data entry processes, reduced human
error, and optimized the accounting team's operational efficiency.

EDUCATION & ADDITIONAL INFORMATION
Education Dnipro National University of Technology - Cybersecurity, 2020 - 2024

English B2