Дмитро

Dmytro Hatsenko
INFRASTRUCTURE / DEVOPS ENGINEER
Kyiv, Ukraine | [відкрити контакти](див. вище в блоці «контактна інформація») | [відкрити контакти](див. вище в блоці «контактна інформація»)
[відкрити контакти](див. вище в блоці «контактна інформація») | github.com/VanDirBan

PROFESSIONAL SUMMARY
DevOps-focused Infrastructure Engineer with 3+ years of experience automating and operating Linux infrastructure
for 40-50 users in a 250-300-person sales company. Cut provisioning from ~4 hours of manual work to ~5 minutes of
operator input, built Prometheus/Grafana monitoring for ~100 hosts, and delivered a zero-downtime migration to
Linux thin clients with VPS-hosted desktops. Strong foundation in Linux, Bash, networking, and observability, with
hands-on experience in Docker and Ansible and project experience with Terraform, GitHub Actions, and AWS.

CORE SKILLS
Systems: Debian, Ubuntu, Windows endpoints, Nginx, Proxmox VE, KVM/LXC, ZFS, TrueNAS
Automation & Scripting: Bash, Ansible, cloud-init, systemd, Git; Python (working knowledge)
Containers & IaC: Docker, Docker Compose, Kubernetes (lab experience), Terraform, AWS (project experience)
CI/CD: GitHub Actions, GitLab CI, Jenkins
Observability: Prometheus, Grafana, Zabbix, Alertmanager, Loki, node_exporter, Uptime Kuma
Networking & Security: WireGuard, pfSense, TCP/IP, DNS, NAT, VPN, SSH

PROFESSIONAL EXPERIENCE
Infrastructure / IT Operations Engineer | Confidential Company (Sales, 250-300 employees)
Dec 2022 - Present | Kyiv, Ukraine
• Serve as the sole technical owner for two departments (~60 employees) and provide partial infrastructure support to
four additional departments (~100 employees), covering endpoints, servers, networking, VPN, monitoring, and
account security.
• Designed and delivered a migration for 40-50 users from local Windows workstations to Debian thin clients with
Ubuntu VPS-hosted desktops over WireGuard and NoMachine, preparing the replacement environment in one week
and transitioning users with zero operational downtime.
• Reduced workstation and VPS provisioning from ~4 hours of manual work to a 30-minute automated workflow
requiring only 3-5 minutes of operator input by building idempotent Bash pipelines validated with bash -n and
ShellCheck.
• Converted core provisioning workflows into reusable Ansible roles with per-host inventory, handlers, templates, and
Vault-managed secrets, while retaining the validated Bash workflow as the operational baseline.
• Built and currently maintain Prometheus, Grafana, and Alertmanager monitoring for ~100 Linux endpoints and VPS
instances, with node_exporter metrics exposed only through the WireGuard network.
• Designed a segmented WireGuard/pfSense network topology with group-specific firewall policies and hardened
administrative access using SSH keys and restricted root login.
• Created operational runbooks and interactive CLI launchers that enable less experienced administrators to execute
provisioning and maintenance workflows safely without deep Linux expertise.
• Designed, deployed, and operated an internal sales analytics web application end to end (Python, SQLite, Apache on
Ubuntu) in an isolated network, owning data ingestion, reporting, and server operations.

1
SELECTED PROJECTS
Thin Client & VPS Rollout Automation | Bash, Ansible, Linux, WireGuard
github.com/VanDirBan/thin-client-vps-rollout-workspaces
• Published a sanitized implementation of the production rollout workflow, including fleet-aware Bash provisioners,
interactive operator launchers, systemd services, runbooks, and parallel Ansible role trees.
• Separated secrets from source control using ignored environment files and Ansible Vault templates, with syntax
validation and documented dry-run procedures.
Three-Node Proxmox Home Lab | Proxmox, pfSense, TrueNAS/ZFS, Observability
github.com/VanDirBan/My-Home-Lab
• Built and currently maintain a three-node Proxmox VE cluster with 16 VM/LXC workloads across compute,
networking/observability, and storage/home-automation roles.
• Operate centralized monitoring and alerting, pfSense routing, TrueNAS/ZFS storage, NFS backups, split-horizon DNS,
UPS-coordinated shutdown, Frigate NVR with OpenVINO, and Home Assistant.
AWS WordPress Infrastructure | Personal Project - Terraform, AWS, GitHub Actions
github.com/VanDirBan/DevOps-AWS-WordPress-project
• Built a modular Terraform stack for VPC, EC2, RDS for MySQL, ElastiCache for Redis, ALB, ACM, and IAM, with separate
development and production environments and remote state in S3 with DynamoDB locking.
• Added cloud-init provisioning, HTTP-to-HTTPS redirection, least-privilege reviewer access, and a GitHub Actions CI
pipeline that runs terraform fmt, validate, and plan on pull requests.

EARLIER EXPERIENCE
CAD / Simulation Engineer (Freelance) | Self-employed
Aug 2021 - Dec 2022
Created 3D models and performed engineering simulations using SolidWorks, ANSYS, and Blender.
Structural Design Engineer | Steko
Nov 2018 - Mar 2019 | Dnipro, Ukraine
Prepared technical drawings and 3D models in AutoCAD and SolidWorks, coordinating technical details with suppliers.

EDUCATION
Master's Degree in Aviation and Aerospace Technologies | Oles Honchar Dnipro National University
2018 - 2021 | Dnipro, Ukraine
Specialization: Space Information Technology
Bachelor's Degree in Aircraft Production and Rocketry | Oles Honchar Dnipro National University
2014 - 2018 | Dnipro, Ukraine

LANGUAGES
English - B2 (Upper-Intermediate) | Ukrainian - Native

2