Михайло

Mykhailo Lavrentiev
Mi d d l e D e v Op s e n g i n e r

CONTACT
Phone: [открыть контакты](см. выше в блоке «контактная информация») Address: Saltivske highway 69, Kharkiv, Ukraine
Email: [открыть контакты](см. выше в блоке «контактная информация») LinkedIn: [открыть контакты](см. выше в блоке «контактная информация»)

WORK EXPERIENCE
Middle DevOps enginer | 2023 - Present
Automat-it | AWS Premier Partner

Client A
Supported a U.S.-listed enterprise client in improving cloud security posture by collaborating with
their internal security team to integrate CNAPP and SAST tools, eliminating all critical
vulnerabilities and 91% of high-severity findings.
Built a continuous DR solution via AWS DRS from on-prem DC, achieving <15 min RPO and <45
min RTO. Secured via STS VPN in cooperation with the internal team.
Developed an event-driven Lambda system to bypass AWS limitations on cross-region/account
RDS and Redshift backups. Reduced RPO to 4 hours. Diagnosed and fixed KMS grant
accumulation that was blocking Redshift snapshot replication.
Refactored a Terraform module for onboarding DNS zones to Cloudflare by upgrading the
provider and migrating WAF and rate limiting resources to a newer API version. Wrote
automation scripts in Python and Bash to streamline the migration across 51 zones.
Improved observability in ECS clusters serving 40M+ users and 76M daily requests by applying
placement constraints to guarantee monitoring container scheduling during traffic spikes.
Resolved alert noise and restored NOC visibility.
Client B
Improved GitHub security posture by automating ruleset enforcement for 42 repositories and
consolidating secrets and variables at the organization level for better governance and scalability.
Migrated workloads from EC2 to EKS with Karpenter autoscaling and resource tuning, improving
uptime and enabling continuous use of fresh AMIs instead of outdated EC2 OS images.
Client C
Migrated client workloads from shell-based Docker orchestration on ScaleWay to AWS EKS
using a lift-and-shift approach, improving platform scalability and reliability.
Engineered a modular Helm chart for onboarding 49 microservices to EKS, automating
deployment configuration, and reducing manual setup overhead.
Engineered DRY CI/CD workflows for Terraform with reusable GitHub Actions and matrix builds.
Introduced ArgoCD ApplicationSet for scalable GitOps-based deployment of Helm charts to
Kubernetes.
Supported and coached customer-side DevOps engineers with little prior experience in
Kubernetes/Helm/ArgoCD, enabling them to deploy and manage workloads using GitOps best
practices.
Other projects:
Optimized EKS topology using Karpenter to cut cross-AZ traffic costs by 75%, and refactored
networking to reduce ALB usage, achieving a 70% decrease in load balancer expenses.
Modernized frontend delivery by moving from S3 + CloudFront to AWS Amplify, introducing
integrated CI/CD pipelines and reducing deployment friction.
Helped developers understand Kubernetes networking limitations affecting WebSocket
broadcasting and effectively advocated for a solution to enable scalable communication.
Junior DevOps enginer | 2022 - 2023
SMISS Ltd | IT Services and IT Consulting

Sport streaming platform
Build and maintain a CI/CD process across test, dev, stage, and production environments.
Support serverless infrastructure based on AWS.
Investigating and resolving QA and dev incidents.
Staff management application
Established CI/CD infrastructure for a project by developing environment-aware GitLab
workflows. Ensured code quality and security through automated linting, formatting, and
container vulnerability scans.
Standardized infrastructure workflows by building CI/CD pipelines for Terraform and Ansible,
improving change visibility, reducing risks, and ensuring environment consistency for Hetzner.
Upgraded Docker-based infrastructure from single-host Compose to Swarm mode, introducing
native orchestration, service discovery, and better resilience for production workloads.

Customer Support Specialist | 2021 - 2021
ZONE3000 | IT Services and IT Consulting

Chat client support (P3 incident handling)

SKILLS
Cloud Platforms: AWS, Hetzner
IaC: Terraform/Terragrunt, Ansible, Atlantis
CI/CD: GitHub Actions, GitLab, CircleCI, Jenkins, ArgoCD
Virtualization: Docker, Docker compose, Docker swarm, Kubernetes
Programming languages: Bash, Python, PowerShell, Go templating (Helm)
Observability: Grafana, Prometheus, Mimir, Data Dog, New Relic, ELK, CloudWatch
Database & Storage: SQL, NoSQL, Redis, S3
Security tools: WIZ, Scout, TruffleHog, GitLeaks, pre-commit, Security Hub,
Inspector, CloudFlare WAF, AWS WAF, CloudFlare Zero Trust

CERTIFICATION
AWS Certified Cloud Practitioner | 2024 AWS Certified SysOps Administartor | 2024
Amazon Web Services (AWS) Amazon Web Services (AWS)

ACADEMIC HISTORY
National University of Pharmacy | 2018-2022
Chemical and bioengineering
ECTS: 240
Best student of the faculty Awardee
Diploma with honours
First-place awards at multiple conferences
in bioengineering