Shortly
I am currently working as a DevOps engineer. My task is to support the project at all stages of its life cycle. In addition, I act as a mentor and train interns. I like to share my knowledge and experience with other people, helping them develop. To keep up with the latest trends and techniques, I actively read technical literature, attend conferences and meetups, and take courses. This allows me to get inspired and find new ideas for my work.
In addition, I am interested in information security(DevSecOps, Application Security), SRE, Arhitecture.
More detailed
DevOps engineer with 6+ years of experience. For more than 10 years in IT, he has worked his way up from support to the role of managing expert. My focus is automation, stability and security of the infrastructure, as well as team development.
He started with technical support: he dealt with incidents, including payment systems, reduced the burden on developers, collected a database of templates and trained the first line. At the same time, he actively worked with monitoring (Zabbix) and task accounting systems (Bitrix24, Ostick).
Later, he delved into system automation and infrastructure. In one of the companies, I solved the acute problem of lack of licenses and equipment: I deployed MS Office and ConsultantPlus on Linux, set up cross‑platform access to printers, thereby significantly reducing dependence on Windows. At the same time, he implemented Zabbix in order to respond faster to incidents.
In a large housing and communal services infrastructure, he was responsible for comprehensive IT support (virtualization, network, servers, operating systems, telephony): I deployed an OpenSource mail server for 4,500 employees, which made it possible to meet data storage requirements and reduce software costs. Automated mailbox configuration and integration with Active Directory, as well as tools for searching and deleting erroneous emails. I set up telephony (FreePBX, Yealink) and trunks between branches - this significantly reduced communication costs. To speed up the response to accidents, I implemented alerts from Zabbix via Asterisk so that problems can be fixed even at night. During the pandemic, I quickly prepared the infrastructure and instructions for remote work - employees switched to a new mode in a short time. Another example of lean solutions is the assembly of POE power for cameras and image output on Raspberry PI: this made it possible to do without expensive specialized equipment.
In the banking environment, as a DevOps, he consistently developed CI/CD and an automation culture. Migrated projects from Jenkins to GitLab CI, unified processes and reduced support resources. I automated the comparison of commits and tasks in Jira, which freed release managers from routine reports. He developed a graphical utility that made it possible to use GitLab CI even in projects with automation processes built for a different tool.
In higher roles, he built processes from scratch to meet strict security requirements: adapted CI/CD to the results of information security audits, prepared projects for commercial commissioning with mission critical and business critical statuses. Implemented key tools: Keycloak, Kafka, OpenSearch, Hashicorp Vault, Docker. I worked on role models and access policies to ensure that the team worked safely and transparently. I paid special attention to reducing risks: I set up a Content Security Policy, migrated repositories as part of import substitution, and integrated secret management into CI/CD.
He reduced the time of routine operations - for example, he brought the service establishment in CI to 30 minutes instead of a couple of hours. I always strive for measurable improvements: less manual labor, higher predictability, clear processes and understandable metrics. 5+ years without failures in my area of responsibility (the only incident was at the start of my career).
The development of people and knowledge has always been an important part of the work. He participated in projects within the framework of the corporate school of digital competencies: he trained students and connected them to work tasks - this helped reduce the backlog of projects. He prepared checklists for the start of projects and onboarding interns, systematized the knowledge base, organized channels with books and articles. I made presentations, led a book club and an open microphone - I believe that the exchange of experience directly affects the maturity of the team.
Publications#
- 🌐 Blog with Impostor syndrome Dzen, Setka, Telegram - I analyze practical cases, share life hacks for IT specialists, and struggle with impostor syndrome.
- 🌐 Notes - my notes: configuration templates, checklists for code review, tool collections.
- 🎬 Book Club | Dale Carnegie “How to Win Friends and Influence People” Presentation
- 🎬 A basic introduction to the world of GenAI and interactions with it. Presentation, Recorded presentation
- 🎬 How was a migration monolith-project from one CI system to another. Presentation, Rutube
- ✍️ Flow theory in Game Development. International Scientific Congress. The role of business in the transformation of society. Presentation, Article
Professional development#
- Managed Service for Kubernetes. (Yandex Practicum)
- Software architecture. (Yandex Practicum)
- Postgres for testers. (SoftLine)
- Mentoring. (PSBank)
- IPv6 Certification. (Hurricane Electric)
- DevOps-engineer. (Skillbox)
- Python-developer from nothing. (Skillbox)
- SRE. (Slurm)
- Digium, Asterisk administrator. (qtraining)
- MTCNA. (MikroTik-Courses)
Skills#
Programming Languages#
- Python, Bash
Operating Systems#
- *NIX, Red Hat based, Debian based
- AstraLinux, RedOS
CI/CD#
- GitLab CI, Git
- Ansible
- Nexus
Web Servers#
- Nginx
Message Queues#
- Kafka
Security & Authentication#
- Keycloak
- PKI x509
Monitoring & Logging#
- OpenSearch, Vector
Standards & Regulations#
- Understanding regulatory requirements and industry standards
- GOST R 56939-2024
- GOST R ISO/IEC 12207
- GOST R 50922
- GOST R 58412
- GOST R 70860-2023
- Mentoring
- Kanban-method
Telephony and VoIP#
- FreePBX, Asterisk, Yealink, Provisioning
Operating Systems and Identity Management#
- Windows, Active Directory
Application Servers#
- WebLogic
Storage Systems#
- SAN, NAS
Databases#
- MariaDB, PostgreSQL
Virtualization#
- VMWare (ESXi)
Monitoring#
- Zabbix
Network Equipment#
- Networking, MikroTik
Cryptography and Security#
- CryptoPro
Java Ecosystem#
- Java applications
- Maven/Gradle
Service Discovery and Configuration#
- Consul
VPN#
- OpenVPN, L2TP, EoIP, IPsec
Mail Servers#
- Postfix, Dovecot, iRedMail
CI/CD#
- Jenkins
Web Frameworks#
- Flask
Vector Databases and Search#
- Qdrant
AI/ML Tools#
- LangChain, LLamaIndex, Ollama, llama.cpp
PostgreSQL Tools#
- PgBouncer, Patroni
Diagrams and Modeling#
- PlantUML, C4 model
Message Queues#
- RabbitMQ
Security Tools#
- Ghidra
- Binwalk
- Burp Suite
- ZAProxy
- mitmproxy
- apk-mitm
API Testing#
- Postman, Bruno
Load Testing#
- JMeter, Locust
Programming Languages#
- GoLang
- Java, Scala
Frameworks and Libraries#
- Akka
Containerization#
- Podman, Docker
VPN#
- Wireguard
CI/CD#
- Github Actions
Cloud Services#
- Yandex Cloud
- Yandex AI
- Yandex Managed Service for K8S
- Yandex Functions
Container Orchestration#
- Kubernetes
Infrastructure as Code#
- Terraform
Virtualization and Development Environments#
- Vagrant
Load Balancers#
- HAProxy
Embedded Systems and Microcontrollers#
- UART
- Raspberry PI
- Arduino
Security Policies#
- Open Policy Agent
Game Engines#
- RenPy, Unity3d, LibGDX
Serialization and RPC#
- Thrift, Protobuf
CMS#
- Joomla, Drupal, Wordpress, MODX
