Experience

RADcube

• United States
• IT System Custom Software Development
• 1 - 100 Employee

• Cloud Strategy Advisor

  • May 2020 - Present



Universal Music Group

• United States
• Musicians
• 700 & Above Employee

• SENIOR DEVOPS ENGINEER

  • Sep 2019 - Present



Happiest Baby (the maker of SNOO)

• United States
• Consumer Electronics
• 100 - 200 Employee

• SENIOR DEVOPS ENGINEER

  • May 2017 - Sep 2019

  • Manage AWS Services such as EC2, S3, EBS, EKS, EFS VPC, ELB, Route53, Elastic Beanstalk, CloudFront, API Gateway, IoT, Cloud Watch, Security Groups, Cloud Trail, IAM, ECR, Kinesis, and Lambda. • Perform security tasks for AWS account via Inspector, CloudTrail, Config, GuardDuty, following up on CIS benchmark. • Run Elasticsearch cluster to store system and application-specific logs. Use Logstash to collect and deliver logs and events from sources (kinesis, HTTP, Syslog) to destinations (Google GigQuery, ElasticSearch, S3). • Utilize Kibana and Grafana as logs and metrics visualization and alerting tool with different data sources like InfluxDB, Graphite, CloudWatch, BigQuery, and Elasticsearch. Monitor system performance via Collectd and Graphite. • Set/manage Linux based VPN in AWS cloud powered by strongSwan and xl2tpd. • Create Docker container environments for developers work with HashiCorp products such as Packer and Vagrant. • Patch and install software on Linux machines using Ansible & AWS Systems Manager and scan hosts for vulnerability. • Build CI/CD pipeline to build and automate embed Linux builds on Jenkins, running parallel automation test on different Jenkins node agents, hardware, and deliver builds. • Observe business logic metrics and overall system status by aggregating metrics for microservices • Monitor and log Kubernetes cluster nodes, pods metrics, and pods logs to Elasticsearch via Filebeat and Metricbeat. • Handle backup automation by creating and scheduling scripts which will process backup on S3 for DBs as MongoDB, Graphite, Elasticsearch, and other cloud components like AWS API Gateway, Lambda, Elasticsearch, etc. Key Accomplishments:  Utilized Terraform infrastructure as code to manage dev/stage/prod environments on AWS  Deployed an Elastic Beanstalk application with Jenkins and custom scripts & migrated Elastic Beanstalk applications to Docker and Kubernetes (EKS). Built/deployed containers on Kubernetes with Jenkins and Spinnaker. Show less



Picsart

• United States
• Software Development
• 700 & Above Employee

• Senior System Support Engineer

  • Mar 2014 - May 2017

  • Oversaw and monitored all installed systems and infrastructure by utilizing diamond, collectd, netdata, Graphite Prometheus, and Grafana, as well as costume collectors for DBs performance monitoring. • Configured and administered the Nexus Repository. Automated software and services config via Ansible and puppet. • Optimized Nginx reverse proxy load balancer for high loads and tuned up Linux kernel sysctl and limits for high loads. Scaled on-premise application on clouds like AWS and GC during high load. • Used TeamCity to deploy containers and Node.js applications, Jenkins to build containers, Terraform to deploy to Kubernetes, and Packer to build Docker containers and AWS AMI. • Tracked CVE and automating packages upgrade on servers. Planned and undertook scheduled maintenance upgrades. • Secured all servers on iptables level by creating a bash script which had config file to define ACL between servers. • Streamed NetFlow traffic to Kafka, then to Elasticsearch to analyze network security using Snort, Apache Flume, and Logstash. Encrypted traffic between servers within the service level by using SSL TLS. • Extensively used KOPS to deploy production-ready Kubernetes Clusters on top of Amazon EC2 instances. • On-boarded and trained junior engineering and technical staff, sharing best practices and technical knowledge. Key Accomplishments:  Designed information and operational support systems. Designed hybrid infrastructure on-premise and cloud environment as AWS and GC. Implemented automation of AWS and GC infrastructure via Terraform and Jenkins.  Established and maintained MongoDB replica set, GridFS, Redis cluster as application cache, and high available Graphite cluster with replication and sharding. Set up Linux based site-to-site VPN xl2tp/IPsec and IPsec protocols.  Created Keepalived and Ipvsadm applications high available load balancers and failovers.  Wrote custom bash and python scripts to increase system efficiency and lower the human intervention. Show less



TUMO center of creative technologies

• Armenia

• Server and database administrator

  • Dec 2010 - Mar 2014

  • Administrated infrastructure, security audits, data room maintenance, networking, and hardware, as well as worked with Windows Server 2008 and 2012, configure Active Directory, Group Policy object, Roaming profile, and DFS. • Advised and assisted IT Helpdesk on Corporate Network and System Infrastructure, and resolving complex issues. • Monitored servers and network equipment via SNMP and Munin, and tested the backup infrastructure, performing disaster recovery to check setup scripts and DB backups. • Applied MooseFS Linux distributed filing system and CentrifyDC to join Linux instances to Windows domain, as well as configured SMB share accessible for authenticated users and group. • Used PowerShell to get pool users list from MySQL and created in AD, as well as PowerShell/bash scripts to configure Mac and Windows systems after deployment. Used DeployStudio to deploy MacOS and Windows on iMacs. • Maintained NFS for update delivery, backups, and automated backups, and stored on NFS and Tape drives. • Collected system and application server logs using Syslog, centralized using Syslog-ng, and monitored system and application logs via custom bash scripts and alerts. • Upgraded and rebuilt systems, performed regular security and software level updates, and managed databases like MySQL and PostgreSQL cluster environments. Utilized Jenkins and custom scripts to deploy code on production. Key Accomplishments:  Migrated existing on-premises applications to Azure, choosing appropriate Azure services and security requirements.  Setup VPN for different location/sites with pfSense and managed the virtualization layer of ESXi and vSphere server.  Designed and managed high available web hosting and created API to create and delete accounts. Show less



Antares Media Holding

• Armenia

• System & network administrator

  • Jul 2008 - Dec 2010

  • Maintained Linux based routers, VPN (xl2tpd over IPsec), and print servers using CUPS. • Managed Windows Server 2008, Active Directory, and Group Policy Objects. • Installed and configured software and hardware, and managed networks, servers, and technology tools. • Monitored performance, maintained systems according to requirements, and guaranteed security through access controls and firewalls. Upgraded systems with new releases and models. • Set up automated backups and reserved copy to the cloud. Monitored network devices and servers with Munin. Show less