Андрій

Andriy Andrukhiv
DevOps Engineer (Systems Engineer with experience in DevOps practices)

Ukraine, Lviv
[открыть контакты](см. выше в блоке «контактная информация»)
[открыть контакты](см. выше в блоке «контактная информация»)
Telegram: @AndriyAndrukhiv
[открыть контакты](см. выше в блоке «контактная информация»)

Summary of Qualifications:
Results-driven DevOps Engineer (Ph.D. in Computer and Mathematical Sciences) with over 3
years of commercial IT experience and 15+ years in system administration, infrastructure
automation, and cloud engineering.
Combines a deep academic background with hands-on expertise in building, automating, and
securing production-grade environments for modern microservices architectures.
●​ Cloud & Infrastructure Expertise:​
Proven experience with AWS (EKS, RDS, S3, IAM, CloudWatch, ALB) and Hetzner
Cloud, non-commercial knowledge of GCP Kubernetes. Skilled in designing highly
available, cost-optimized, and secure multi-cloud infrastructures.​

●​ Infrastructure as Code & Automation:​
Terraform, a little Ansible, and GitOps workflows. Implemented end-to-end infrastructure
provisioning pipelines and cluster deployments through Argo CD, Helm, and CI/CD
pipelines (GitLab & Bitbucket).​

●​ Kubernetes & Containerization:​
Production-grade deployments using EKS, K3s, K8s with advanced integrations (e.g.,
Hetzner Cloud Controller Manager, Cilium CNI, Karpenter autoscaling, Longhorn, SMB
CSI). Skilled in managing multi-namespace, multi-environment setups with isolation,
observability, and resilience best practices.​

●​ Stateful and Microservice Deployments:​
Designed, deployed, and maintained complex applications including RabbitMQ, Redis,
CloudNativePG (PostgreSQL), MariaDB Galera Cluster, Synapse (Matrix server), and
Zammad helpdesk.

●​ Monitoring & Observability:​
Built full-stack observability systems using Prometheus, Grafana, Loki, and
Alertmanager, ensuring metrics, logs, and alerts coverage across all clusters and
environments.​

●​ Security & Secrets Management:​
Experience with IAM roles, IRSA, Doppler, security scanners.​

●​ Research & Innovation:​
Actively engaged in Research & Development (R&D) with over 70 peer-reviewed
scientific publications, integrating AI, data engineering in academic and enterprise
projects.
 ●​ You can find some of the most interesting cases on my blog - Andriy Andrukhiv – Medium
●​ Have a deferment from mobilization

Skills:
●​ Areas of Expertise: Infrastructure Automation (Terraform, Ansible), Containerization
(Docker), CI/CD (GitLab, Bitbucket), Kubernetes with non-commercial expierence
●​ Security & DevSecOps: Snyk, SonarQube, Scout, Dive, DefectDojo, WAF, Talos Linux
●​ Web Technologies & Development: Python, BASH, WordPress, Nginx, PHP, Nodejs
●​ Monitoring & Observability: Prometheus, Grafana, Loki
●​ Databases: DocumentDB, MongoDB, Mysql, Postgresql, Mariadb
●​ Cloud Platforms & Services: Hetzner – VM, Storage, AWS – ECS, RDS, EC2,
LoadBalancer,etc, GCP – Kubernetes (as pet project), K8S (Kubernetes) as a
development environment, Zoho Mail Services

Experience:

Nicely Group, start-up (Jan 2025 - Present)

Product: Business Startup
Role: DevOps Engineer
Responsibilities & Key Achievements:

●​ Built and maintained a fully automated Hetzner Cloud infrastructure using Terraform
following GitOps best practices.
●​ Set up a monitoring stack with Prometheus, Grafana, Loki, and integrated security
scanners for code and Docker images in CI/CD pipelines.
●​ Improved WordPress application performance by 35% through SQL query optimization and
caching configuration.
●​ Created a management system for Hetzner Cloud to automate VM operations.
●​ Deployed a K3s Kubernetes cluster on Hetzner with Argo CD, Loki, and Prometheus for
GitOps-driven deployment and observability.
●​ Developed a microservices-based business platform (30+ services):

Dev: K8s on Hetzner (Talos Linux)​
Prod: AWS EKS (Auto mode)​
Integrated: RabbitMQ, Redis, PostgreSQL, MongoDB, MariaDB, Matrix Synapse, Velero,
Keycloak, Doppler

Technologies: Terraform, Ansible, Python, Hetzner API
Team Size: 10

Brains, product company (Jan 2023 - Jan 2025)

Product: Crowdfunding business platform
Role: DevOps Engineer.
Responsibilities: Developed and architected the entire project infrastructure and solutions
independently, utilizing Hetzner Cloud for development and AWS (ECS+DocumentDB) for
production; successfully passed rigorous banking security audits and implemented a
comprehensive security management system featuring automated code scanning tools.
Technologies: DocumentDB, RabbitMQ, MongoDB, ECS, GitLab, Nodejs, WordPress
Team Size: 5
Project: wishes.inc

Lviv Polytechnic National University (sep 2015 – Present)
Role: System administrator, programmer
Responsibilities: I managed multiple university web servers, deploying WordPress websites and
developing a specialized online book reading platform leveraging WordPress integrated with
LDAP authentication. Additionally, I implemented advanced database replication strategies
(Oracle-to-MySQL, MySQL-to-MySQL) for internal web systems, and optimized Nginx
configurations utilizing HTTP/3, ModSecurity (OWASP rules), GeoLocation, and Brotli
compression.
Technologies: Dspace, Moodle, Wordpess, Python, Nodejs, Postgres, MariaDB, Nginx, Drupal
Team Size: 7
Projects: integrations internal systems, web-sites on Wordpress, web archives, etc.

***More experience details are available upon request.***

Certifications:
Development of Generative AI Models (robotdreams, Feb 2025 )
DevOps GL BaseCamp (GlobalLogic, Feb 2023)
TEACHER'S DEVOPS COURSE (SoftServe IT Academy, Aug 2022)

Education:
Ph. D - Mathematical methods and software of computer systems - 2015
Master's degree of Computer Science (Intelligent systems of decision making) - 2005
Lviv Polytechnic National University

Languages:
English –Intermediate,
Polish - Uper-Intermediate,
Ukrainian - Native