↓ Skip to main content

About

Shortly

I am currently working as a DevOps engineer. My task is to support the project at all stages of its life cycle. In addition, I act as a mentor and train interns. I like to share my knowledge and experience with other people, helping them develop. To keep up with the latest trends and techniques, I actively read technical literature, attend conferences and meetups, and take courses. This allows me to get inspired and find new ideas for my work.

In addition, I am interested in information security(DevSecOps, Application Security), SRE, Arhitecture.

More detailed

DevOps engineer with 6+ years of experience. For more than 10 years in IT, he has worked his way up from support to the role of managing expert. My focus is automation, stability and security of the infrastructure, as well as team development.

He started with technical support: he dealt with incidents, including payment systems, reduced the burden on developers, collected a database of templates and trained the first line. At the same time, he actively worked with monitoring (Zabbix) and task accounting systems (Bitrix24, Ostick).

Later, he delved into system automation and infrastructure. In one of the companies, I solved the acute problem of lack of licenses and equipment: I deployed MS Office and ConsultantPlus on Linux, set up cross‑platform access to printers, thereby significantly reducing dependence on Windows. At the same time, he implemented Zabbix in order to respond faster to incidents.

In a large housing and communal services infrastructure, he was responsible for comprehensive IT support (virtualization, network, servers, operating systems, telephony): I deployed an OpenSource mail server for 4,500 employees, which made it possible to meet data storage requirements and reduce software costs. Automated mailbox configuration and integration with Active Directory, as well as tools for searching and deleting erroneous emails. I set up telephony (FreePBX, Yealink) and trunks between branches - this significantly reduced communication costs. To speed up the response to accidents, I implemented alerts from Zabbix via Asterisk so that problems can be fixed even at night. During the pandemic, I quickly prepared the infrastructure and instructions for remote work - employees switched to a new mode in a short time. Another example of lean solutions is the assembly of POE power for cameras and image output on Raspberry PI: this made it possible to do without expensive specialized equipment.

In the banking environment, as a DevOps, he consistently developed CI/CD and an automation culture. Migrated projects from Jenkins to GitLab CI, unified processes and reduced support resources. I automated the comparison of commits and tasks in Jira, which freed release managers from routine reports. He developed a graphical utility that made it possible to use GitLab CI even in projects with automation processes built for a different tool.

In higher roles, he built processes from scratch to meet strict security requirements: adapted CI/CD to the results of information security audits, prepared projects for commercial commissioning with mission critical and business critical statuses. Implemented key tools: Keycloak, Kafka, OpenSearch, Hashicorp Vault, Docker. I worked on role models and access policies to ensure that the team worked safely and transparently. I paid special attention to reducing risks: I set up a Content Security Policy, migrated repositories as part of import substitution, and integrated secret management into CI/CD.

He reduced the time of routine operations - for example, he brought the service establishment in CI to 30 minutes instead of a couple of hours. I always strive for measurable improvements: less manual labor, higher predictability, clear processes and understandable metrics. 5+ years without failures in my area of responsibility (the only incident was at the start of my career).

The development of people and knowledge has always been an important part of the work. He participated in projects within the framework of the corporate school of digital competencies: he trained students and connected them to work tasks - this helped reduce the backlog of projects. He prepared checklists for the start of projects and onboarding interns, systematized the knowledge base, organized channels with books and articles. I made presentations, led a book club and an open microphone - I believe that the exchange of experience directly affects the maturity of the team.

Publications
#

  • 🌐 Blog with Impostor syndrome Dzen, Setka, Telegram - I analyze practical cases, share life hacks for IT specialists, and struggle with impostor syndrome.
  • 🌐 Notes - my notes: configuration templates, checklists for code review, tool collections.

  • 🎬 Book Club | Dale Carnegie “How to Win Friends and Influence People” Presentation
  • 🎬 A basic introduction to the world of GenAI and interactions with it. Presentation, Recorded presentation
  • 🎬 How was a migration monolith-project from one CI system to another. Presentation, Rutube
  • ✍️ Flow theory in Game Development. International Scientific Congress. The role of business in the transformation of society. Presentation, Article

Professional development
#

  • Managed Service for Kubernetes. (Yandex Practicum)
  • Software architecture. (Yandex Practicum)
  • Postgres for testers. (SoftLine)
  • Mentoring. (PSBank)
  • IPv6 Certification. (Hurricane Electric)
  • DevOps-engineer. (Skillbox)
  • Python-developer from nothing. (Skillbox)
  • SRE. (Slurm)
  • Digium, Asterisk administrator. (qtraining)
  • MTCNA. (MikroTik-Courses)

Skills
#

Programming Languages
#

  • Python, Bash

Operating Systems
#

  • *NIX, Red Hat based, Debian based
  • AstraLinux, RedOS

CI/CD
#

  • GitLab CI, Git
  • Ansible
  • Nexus

Web Servers
#

  • Nginx

Message Queues
#

  • Kafka

Security & Authentication
#

  • Keycloak
  • PKI x509

Monitoring & Logging
#

  • OpenSearch, Vector

Standards & Regulations
#

  • Understanding regulatory requirements and industry standards
    • GOST R 56939-2024
    • GOST R ISO/IEC 12207
    • GOST R 50922
    • GOST R 58412
    • GOST R 70860-2023
  • Mentoring
  • Kanban-method

Telephony and VoIP
#

  • FreePBX, Asterisk, Yealink, Provisioning

Operating Systems and Identity Management
#

  • Windows, Active Directory

Application Servers
#

  • WebLogic

Storage Systems
#

  • SAN, NAS

Databases
#

  • MariaDB, PostgreSQL

Virtualization
#

  • VMWare (ESXi)

Monitoring
#

  • Zabbix

Network Equipment
#

  • Networking, MikroTik

Cryptography and Security
#

  • CryptoPro

Java Ecosystem
#

  • Java applications
  • Maven/Gradle

Service Discovery and Configuration
#

  • Consul

VPN
#

  • OpenVPN, L2TP, EoIP, IPsec

Mail Servers
#

  • Postfix, Dovecot, iRedMail

CI/CD
#

  • Jenkins

Web Frameworks
#

  • Flask

Vector Databases and Search#

  • Qdrant

AI/ML Tools
#

  • LangChain, LLamaIndex, Ollama, llama.cpp

PostgreSQL Tools
#

  • PgBouncer, Patroni

Diagrams and Modeling
#

  • PlantUML, C4 model

Message Queues
#

  • RabbitMQ

Security Tools
#

  • Ghidra
  • Binwalk
  • Burp Suite
  • ZAProxy
  • mitmproxy
  • apk-mitm

API Testing
#

  • Postman, Bruno

Load Testing
#

  • JMeter, Locust

Programming Languages
#

  • GoLang
  • Java, Scala

Frameworks and Libraries
#

  • Akka

Containerization
#

  • Podman, Docker

VPN
#

  • Wireguard

CI/CD
#

  • Github Actions

Cloud Services
#

  • Yandex Cloud
    • Yandex AI
    • Yandex Managed Service for K8S
    • Yandex Functions

Container Orchestration
#

  • Kubernetes

Infrastructure as Code
#

  • Terraform

Virtualization and Development Environments
#

  • Vagrant

Load Balancers
#

  • HAProxy

Embedded Systems and Microcontrollers
#

  • UART
  • Raspberry PI
  • Arduino

Security Policies
#

  • Open Policy Agent

Game Engines
#

  • RenPy, Unity3d, LibGDX

Serialization and RPC
#

  • Thrift, Protobuf

CMS
#

  • Joomla, Drupal, Wordpress, MODX
Peter Galonza
Author
Peter Galonza
Automating infrastructure, building resilient CI/CD pipelines, implementing DevSecOps practices.