Андрій

Andrii Salo Uzhhorod, Ukraine
[відкрити контакти](див. вище в блоці «контактна інформація»)
[відкрити контакти](див. вище в блоці «контактна інформація»)
DevOps Engineer
Dynamic DevOps Engineer with hands-on experience in IaC, container orchestration, and
highly available infrastructure design. Adept at migrating legacy systems to modern virtualized
clusters, automating deployment pipelines, and ensuring robust network security and
observability.

EXPERIENCE SKILLS

Astra-Dia Infrastructure as Code

Systems & Infrastructure Engineer Terraform, Ansible, Packer
2023 – Present
Containers & Orchestration
• Virtualization & IaC: Architected and managed a Proxmox VE cluster infrastructure hosting ~40 Docker, Docker Compose, Kubernetes (K8s)
virtual machines. Implemented Infrastructure as Code using Packer for golden OS images,
Terraform for automated provisioning, and Ansible for configuration management, drastically CI/CD & GitOps
reducing environment deployment time from hours to minutes. GitLab CI, ArgoCD

• Containerization & Orchestration: Wrote optimized Dockerfiles and deployed multi-container Virtualization & Cloud
applications using Docker Compose. Managed containerized workloads and implemented
Proxmox VE, Google Cloud Platform (GCP)
foundational deployment strategies in Kubernetes.
Networking & Ingress
• CI/CD & GitOps: Designed and maintained automated deployment pipelines using GitLab CI.
Implemented GitOps methodology using ArgoCD for declarative, continuous delivery of cluster Traefik, Caddy, Nginx Proxy Manager, Nginx, VLAN,
configurations. WireGuard, OpenVPN, Cloudflare

• Storage, Backups & Disaster Recovery: Configured highly available distributed storage using Storage & Data Protection
Ceph. Engineered a robust backup strategy utilizing Proxmox Backup Server (PBS) with node Ceph, Proxmox Backup Server (PBS), S3
replication and encrypted remote backups to S3. (Encrypted Backups)

• Networking, Ingress & Security: Built fully managed, segmented network topologies (VLANs) Security & Secrets Management
with strict firewall policies and secure VPN tunnels (WireGuard/OpenVPN). Managed traffic
HashiCorp Vault, Ansible Vault, Firewall Policies
routing, load balancing, and automated SSL/TLS termination using Traefik, Caddy, and Nginx
Proxy Manager. Observability
• Secrets Management: Secured sensitive infrastructure credentials, tokens, and certificates centrally Prometheus, Grafana, Loki, Alertmanager
using HashiCorp Vault and Ansible Vault.
OS, DB & Scripting
• Observability & High Availability: Deployed centralized monitoring and log aggregation stacks Linux (Debian/Ubuntu), Bash, Python, PostgreSQL,
using Prometheus, Grafana, and Loki. Developed auto-recovery mechanisms to ensure high Firebird, InterBase
availability and minimize downtime during server failures.

Freelance & Independent Projects
Infrastructure & Operations Engineer
2023 – Present

• Cloud Infrastructure & Edge Security: Provisioned and managed resources on Google Cloud
Platform (GCP). Implemented Cloudflare for DNS management, global CDN caching, SSL
offloading, and robust WAF configurations to secure externally exposed services.

• Database Administration & Reliability: Automated backup workflows and routine maintenance
for Firebird/InterBase databases. Analyzed gbak execution logs to ensure data integrity and resolved
critical network anomalies to maintain high availability.

• Web Servers & API Environments: Configured Nginx as a reverse proxy for self-hosted
infrastructure. Set up secure local development environments and webhook testing pipelines using
ngrok, facilitating the seamless integration of various third-party cloud APIs.