Senior Linux/DevSecOps Engineer

• Sep 2022 - Present

Lead DevOps Software Engineer

• Oct 2021 - Jul 2022

A High Frequency Cryptocurrency Trading Platform: 1) Implementing best practices with Python and IaC in building multi-cloud DevSecOps solution 2) Many optimizations in the build(CI/CD) process, strictly following the 12 factor application principles 3) DevOps Software solution also done following the 12 factor application princples 4) Networking infrastructure layer optimizations 5) Optimized monitoring solution following best practices only, with focus on minimizing costs 6) VDI and IDP optimizations Show less

Lead DevOps Software Engineer

• Aug 2019 - Oct 2021

In EGT Interactive, I've done, alone: 1) Integrated Git Workflow 2) Created workflow procedures for implementing new features from the System Administrators team 3) Updated Server Maintenance Ansible logic 4) Created CI logic for testing Ansible Roles in Docker Containers and Virtual Machines 5) Integrated TestInfra( https://github.com/philpep/testinfra ) for testing Ansible roles 6) Integrated Liquibase for managing SQL DDLs (https://www.liquibase.org) 6) CI/CD for the new application stack ( Goolge Guice Based Java Services) building Docker Containers with multibranch pipelines 7) Created a local run feature, allowing the developers to run all of the 19 services locally, specifying particular branches for each of the services. The feature does dynamically generate all service configurations based on the developers choice to use a local MySQL instance or a dockerized one 8) Deployment logic for all services allows the developers to specify particular branch for each of the services, Java Heap and whether they need to deploy certain service and/or apply liqubase updates on the Test Server 9) Integrated Server Locking mechanism, to prevent developers deploying on the same server, e.g. each time you deploy on a test server, its being locked with your user from Jenkins and manual unlock is required, for the deployment to happen again on the same server. The locking mechanism is done using a GO service 10) Implemented an automated build of the FrontEnd resources, each time the develop or master branches are build - a Jenkins job is triggered that updates the Docker Container with the games engines and resources, deploying it automatically to the demo environment 11) Did CI for the old platform ( Glassfish3 Based ) allowing integration tests to run in Docker Container Show less

Lead DevOps Software Engineer

• Sep 2019 - Sep 2021

As a part-time freelancer for Toptal I've participated in a lot, different projects: 1) Built a DevOps software solution with AWS CodeCommit and AWS CodeDeploy for maintaining Groovy microservices pipelines and allowing the execution of automated tests using docker based on branch name with AWS CloudFormation. Done for 2 months, 4h workday 2) Build a DevOps software solution with AWS Cloudformation to deploy a PHP microservices application to AWS ECS with BASH. Done in 1 month, 4h workday 3) Build DevOps Software Solution with AWS Cloudformation, Bash, Jenkins Declarative Pipeline and AWS EKS to fully manage a Big Data Application( Java Spring + AWS MSK + MongoDB) CI/CD, scalability, deployment, all this as part of a AWS Organization with automated credential rotation on the CI side. Done for 6 months, 4h workday 4) Optimized PCI-DSS Java Microservices application with MongoDB to work with AWS EKS and scale easily based on the load. Done in 3 months, 4h workday 5) Actively participating in Toptal DevOps hiring process 6) Consultancy tasks mostly related with internal Toptal Projects and AWS optimizations 7) Azure DevOps CI/CD from scratch for a .NET project 8) Apache Spark for ETL processes Show less

Senior DevOps Software Engineer

• Nov 2017 - Aug 2019

A brief description of the projects done in Endava: 1) Build a Sitecore CI&CD PIpeline, hosted in AWS - 3 months 1.1) Result AWS Cloudformation Powershell automation to provision the Sitecore Application Stack, running on Windows 2012 Servers, with Powershell DSC modules. 1.2) Automated build & deploy of NuGet packages, all done with Jetbrains TeamCity and OctopusDeploy. 1.3) Тhe Sitecore Cloudformation Application Stack provision time ~ 47seconds 1.4) 16minutes for the building of the Sitecore NuGet Packages and deploying them with Octopus. 2) Small Java SpringBoot Project with image recognition ~ 2 weeks 2.1) Develoment environment done with docker-compose 2.2) build, deployment and performance testing done in BASH. 3) Payment Gateway monolith with Java Spring+OSGI, MariaDB, Apache Karaf, Apache Ignite, ELK stack and Docker 3.1) Done performance improvements on Docker and MariaDB layers 3.2) Successfully planned and executed for 3 months migration of the Development Environment, providing to the developers the ability to independely build and deploy the whole Application Stack on both Development Environments(old and new) in order not to stop the development process 3.3) Done analysis and proposal on moving the monolith architecture to microservice one, involving Kubernetes, Apache Kafka and MongoDB Cluster, excluding PCI-DSS related services to separate network, thus lowering the scope of the PCI-DSS audit to be done only on particular microservices 3.4) Replace ELK Stack with ElasticSearch+SearchGuard(because of PCI-DSS compliance)+Kibana+Fluentd, done to lower the hardware requrements of the Log Agregator Nodes, so that they can satisfy more than one Application(of course including DevEnv, UAT and ProdEnv service load) 3.5) Successfully passed PCI-DSS audit on the new Infrastructure 4) Migration from AWS CodeBuild to Azure DevOps CI/CD Show less

Senior DevOps Engineer

• Nov 2016 - Nov 2017

I was hired to build a local development environment to be used from software engineers in deploying source code changes to a running Payment Gateway Application Stack. Brief description of the process done: 1) Reverse engineering clones of all VMs part of the Staging DevEnv 2) Connecting all of them to a Puppetmaster(using puppet2 architecture, as this was the original setup done from the datacenter engineers). 3) Write Jenkinsfiles to allow the developers to independently deploy different services on the Local DevEnv, with server-lock during the deployment and automated unlock after QA tests complete 4) Fixed all pre and after deployment issues, providing the company with a fully automated way to deploy to all environments(dev, staging and production) using Jenkinsfiles. 5) Created a Docker Development Environment with one container used only for Ruby Gems cache, thus allowing a quick rebuild of all modules, which improved the development process on overall stage. 6) Managing a team of 2 DevOps engineers, guiding them in the Application Stack Architecture and providing knowledge on different problem debugging techniques, sharing knowledge and experience for all to learn. Show less

Freelance Web Security Analyst, Webhosting System Guru, Virtual Environments Automation Master

• Apr 2015 - Nov 2017

At this point of my professional career I've had to become a freelancer, due to the huge amounts of tasks. I do continuously look for the perfect task to implement my knowledge into. My skills include: Webhosting server management, optimization for different platform and service usage, for example if you're going to host a Magento webstore with huge amount of visitors -I'd build you a system with Varnish storing in RAM, answering before Apache to every user request, thus lowering system load and improving performance, etc. Development and implementation of various automation processes in virtual environments, from virtual platform architecture changes, all types of data and service migration, fine-tuning of KVM, VMWare and LXC hosts to optimize performance and lower system load. Provide web security consultancy and implementation to a lot of webmasters cleaning up and securing their webservices, so that no customer info could get out of their databases. As every web security specialist knows - this task is always related with re-writing code to 'close' some open doors, implement system patches and configuration changes according to the system architecture. Consultancy, help in implementation and future monitoring of all Company policies and documentation for the Self-Audit ISO27001 ceritifation and other IT Security related audits Show less

Senior DevOps Software Engineer

• Dec 2015 - Sep 2016

Got hired to complete these tasks: - Build a complex API gateway with Nginx that is managed from a Java Daemon, allowing dynamic api key ratelimit and scaling based on the load of the particular cluster of Nginx machines - Develop tools to improve ability to rapidly deploy and effectively monitor custom applications in a large-scale UNIX environment - Design cross-datacenter, world-wide systems with a high availability mindset - Build automated ETL (in this case DB anonymization ) process, to provide the ability for the developers to always be able to do performance tests with latest production data Show less

Systems Specialist

• Mar 2012 - Apr 2015

Installation, configuration, maintenance, troubleshooting and optimization of Red Hat Enterprise Linux servers, VMWare ESX and HA environments. Writing custom tools on Groovy, PHP, Powershell, Bash and Perl to help improving internal IT and Development environments. Troubleshooting and optimization of GIT/SVN-like software version control systems, different build automation software and repository managers. Installation, configuration, maintenance, troubleshooting and optimization of Red Hat Enterprise Linux servers, VMWare ESX and HA environments. Writing custom tools on Groovy, PHP, Powershell, Bash and Perl to help improving internal IT and Development environments. Troubleshooting and optimization of GIT/SVN-like software version control systems, different build automation software and repository managers.

Linux System Administrator

• May 2009 - Dec 2011

Troubleshoot problems on Debian and CentOS shared/dedicated hosting servers; OpenVZ containers and hardware hosts; KVM hosts; Linux Software RAID to ensure the 24/7 availability of the hosting service. Management, optimization and troubleshooting Apache; MySQL; PostgreSQL; Bind; Exim and Courier mail server in a high-traffic/heavy-load web hosting environment. Nagios and Cacti network monitoring with custom plugins. Handling DDOS attacks as a target. Troubleshoot PHP,Perl and Python based CMS, shopping cart scripts, internet forums, blog tools and publishing platforms. Clean up and secure hacked/exploited websites. Train newly hired support personnel and monitor their performance. Show less

Unix Support Engineer and Analyst in HP Global Delivery Centre

• Jan 2008 - Apr 2009

Troubleshoot problems and maintain: - HP-UX Superdome - Red Hat Enterprise Linux(RHEL) servers - OpenVMS servers - HP VSE(Virtual Server Environment) - HP Serviceguard Clusters - Red Hat Clusters - Veritas Clusters - VMSCluster - VMWare ESX and HA environments - KVM/XEN virtualization environments to ensure 24/7 service availability. Troubleshoot problems and maintain: - HP-UX Superdome - Red Hat Enterprise Linux(RHEL) servers - OpenVMS servers - HP VSE(Virtual Server Environment) - HP Serviceguard Clusters - Red Hat Clusters - Veritas Clusters - VMSCluster - VMWare ESX and HA environments - KVM/XEN virtualization environments to ensure 24/7 service availability.

Web hosting support engineer and analyst

• Feb 2007 - Jan 2008

Use PHP, Perl and Python to help customers integrate their websites in the hosting environment. Troubleshoot performance problems of PHP, Perl and Python based web software products. Secure vulnerable websites and clean up already hacked ones. Train other support engineers. Monitor server performance and network load. Use PHP, Perl and Python to help customers integrate their websites in the hosting environment. Troubleshoot performance problems of PHP, Perl and Python based web software products. Secure vulnerable websites and clean up already hacked ones. Train other support engineers. Monitor server performance and network load.