DevSecOps Engineer

Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering team

Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts

AWS Cloud migration:

Design & implement CI/CD for deploying AWS resources (GitLab CI, Terraform, GitOps)

Create DevOps toolchain (Jenkins, Harbor, Vault) and configure them

Deploy billing application, microservices, and supporting infra services to Nomad clusters

Re-designed TLS/mTLS certificate management (Vault, Lambda)

Write documentation

Security (infrastructure hardening, patch management & vulnerability scanning):

Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts

Created hardened AMIs (CIS benchmark-based) via Packer for Nomad, Jenkins, Harbor, Vault; deployed using Terraform

Integrated Trivy (via Harbor plugin) for container image scanning

Implemented strict AWS VPC security group rules

Developed and maintained patching process across environments (Qualys/Wiz)

Deployed Qualys Cloud Agent to all EC2 instances

Tracked CVEs and available patches; tested patches in lower environments before rollout

Automated patch deployment using Terraform and GitLab CI across all AWS accounts

Verified patch compliance via Qualys/Wiz dashboards

Tools: AWS (ASG, AMI, RDS, Athena, Route53, ALB, Lambda, CloudWatch), Terraform, Consul, Nomad, Vault, Packer, Shell scripting, Python, Docker, devcontainers, Harbor, GitLab CI, GitLab Runner, Jenkins, JCasC, Traefik, Splunk, Qualys, Wiz, MySQL, PostgreSQL, RabbitMQ, Redis, Jira, Confluence

Member of the IT-Engineering team and contributor to a datacenter migration project

Wrote and maintained Ansible playbooks and modules; configured Ansible Tower; managed Red Hat Satellite Content Views and Composite Content Views

Conducted connectivity testing; submitted firewall requests; configured Icinga2 for new system setups

Responsible for migrating Jenkins pipelines and transitioning from Subversion to Git

Tools: JBoss EAP, Tomcat, Apache, Splunk, RHEL, Red Hat Satellite, Icinga/Nagios monitoring, Bash scripting, TLS certificates, JKS, Jenkins, Ansible Tower, GitLab, Gerrit, git, Subversion, Jira

Member of eSW Infrastructure team

Implemented IaC for build/test agents and Azure Cloud resources

Pipeline script implementation; troubleshot problems with developers; implemented build versioning and packaging

Tools: Azure DevOps (Repos, Pipelines, Boards), Azure Cloud, Ansible, Terraform, Bitbucket, Artifactory, Conan, CMake, Docker, Podman, git, Python, Visual Studio Code devcontainers

Member of Data Science Platform team

Improved HA of services; tested and deployed a new DNS solution; created test cluster for HashiCorp stack

Performed version upgrades for HashiCorp Consul, Nomad, Python, Ansible

Implemented Nexus apt repositories; maintained ELK; created GitLab CI pipelines; wrote internal process and tool usage documentation; interviewed new candidates

Monitoring tools project:

Configured Prometheus (retention, storage, rules, re-labeling)

Configured exporters (cAdvisor, node_exporter, gitlab-pipelines exporter)

Created new Grafana dashboards

Azure Cloud migration project:

Created Jenkins pipelines & shared pipeline library (Job DSL & scripted syntax)

Implemented Terraform code; deployed Helm charts to AKS

Created support requests, firewall & proxy changes

Maintained Jenkins in OpenShift; configured, upgraded, installed new plugins

Learned Azure Cloud (ACR, AKS, Key Vault, IAM, SP)

Tools: Ansible, Bash & Python scripting, Consul, Nomad, Vault, Nexus, Linux, Docker, Git, GitLab CI, Azure Cloud, AKS, Azure Container Registry, Terraform, Helm, Jenkins, JCasC, Job DSL, ELK, Filebeat, Slack, Jira, IaC, GitOps, KanBan, Prometheus, Alertmanager, Alerta, Grafana

Worked as a Configuration Manager consultant in Android platform CM team

Maintained Android SW builds; created system branches; hosted CM education course; deployed test automation system; wrote test cases; conducted code reviews; contributed code to an open-source project

Tools: Git, Jenkins, Jenkins Job Builder, YAML, Gerrit, Jira, Python, bash scripting, repo tool, Ubuntu Linux, Android, ADB, Java

Member of Continuous Integration team

Kept CI system fully functional; ensured high-quality SW builds; administered Jenkins and Gerrit daily

Performed problem solving; scripting for build/release automation and commit metrics visualization

Tools: Git, Gerrit, Jenkins, Gitorious, Jira, OE, Python, bash scripting, repo tool, Ubuntu Linux, gnuplot, metrics, LaTeX

04/2006–09/2007: External employee at client’s premises; performed software configuration management; prepared sources & binaries; built, tested, and released deliverables; troubleshooting; build tools development

10/2005–04/2006: Developed Java-based UI design/customization tool based on Xuikon/S60 framework; ported engine and UI components from Symbian framework to Java

Maemo Linux C++ application development: ported Symbian C++ application to Maemo platform; redesigned keyboard UI for pen input

SymbianOS application development: implemented mobile multimedia application for S60 terminals

Tools: Symbian OS build toolchain, Synergy, Perl & batch scripting, Eclipse, Java J2SE, AWT, C, C++, Hildon