DevSecOps Engineer / Infrastructure & Security Consultant
12.2025 - 01.2026 |TraffClan
Google Workspace, Cloud Identity, Slack, Atlassian, GitHub, Notion, Trello, VPN, DNS, SSO, RBAC
● Built the corporate IT and security perimeter from scratch for a fully remote team (150+ staff): Google Workspace, Cloud Identity, Slack, Atlassian, GitHub, Notion, Trello, VPN, DNS.
● Designed an identity and access workflow (Cloud Identity, SSO, RBAC) and standardised onboarding/offboarding, reducing the technical work per user to under 30 minutes.
● Optimised SaaS and VPN spend, delivering a one-off saving of $7,500 over the 70-day project and reducing the ongoing monthly budget by 19%.
DevOps Engineer
04.2024 - 10.2025 |KEK Entertainment
Ansible, Bash, TeamCity, GitLab Container Registry, Docker, AWS, GCore, Hetzner, DigitalOcean, Terraform, Prometheus, Grafana, Alertmanager, OpenVPN, WireGuard, Outline, Unity, .NET
● Sole DevOps engineer on a game development project (Unity / .NET).
● Optimised CI/CD pipelines (Ansible, Bash, TeamCity, GitLab Container Registry) for Unity / .NET applications.
● Implemented Infrastructure as Code for a heterogeneous (Windows, Linux, macOS) hybrid (AWS, GCore, Hetzner, DigitalOcean) infrastructure using Ansible and Terraform, cutting new environment provisioning to 20 minutes.
● Implemented a comprehensive monitoring stack (Prometheus, Grafana, Alertmanager), reducing MTTD and MTTR.
● Ensured secure connectivity and availability for globally distributed staff by deploying a corporate VPN (OpenVPN, WireGuard, Outline).
DevOps Engineer
07.2023 - 03.2024 |Mayflower
Prometheus, Grafana, Alertmanager, Ansible, Terraform, GitLab, Kubernetes, Helm, OpenShift, OpenStack
● Served as on-call L3 SRE on a high-load project, ensuring production infrastructure operations and incident resolution (diagnostics, recovery, escalations, post-mortems).
● Managed the monitoring stack (Prometheus, Grafana, Alertmanager).
● Ensured Infrastructure as Code (Ansible, Terraform) and GitOps practices (GitLab, Kubernetes, Helm, OpenShift, OpenStack) for application infrastructure.
DevOps Engineer
08.2017 - 02.2023 |AutoDoc
Elasticsearch, Logstash, Grafana, MySQL, MongoDB, PostgreSQL, Redis, Prometheus, Zabbix, Kibana, GitLab CI, Docker, Ansible, Bash, GCP, Kubernetes, Helm, LEMP, Compute Engine, Cloud CDN, VPC, Cloud SQL
● Implemented an end-to-end logging system (Elasticsearch, Logstash, Grafana).
● Administered high-load databases: MySQL source/replica, MongoDB sharded cluster, multi-node Elasticsearch cluster, PostgreSQL, Redis.
● Managed a comprehensive monitoring stack (Prometheus, Grafana, Zabbix) and logging stack (Elasticsearch, Logstash, Kibana).
● Developed and maintained CI/CD pipelines in GitLab CI (Docker, Ansible, Bash).
● Oversaw the migration of an application suite (LEMP, Kubernetes, Helm) to GCP cloud infrastructure (Compute Engine, Cloud CDN, VPC, Cloud SQL, Kubernetes Engine).
IT System Administrator
07.2015 - 05.2018 |Clever Solution
LEMP, Zabbix
● Part-time concurrent role.
● Ensured high availability (SLA 99.9%) of VPS/VDS hosting infrastructure for LEMP projects.
● Implemented Zabbix monitoring and ensured incident resolution within SLA (up to 1 hour).
DevOps Engineer
10.2015 - 04.2018 |Opporty.com
GitLab CI, Docker, Bash, Zabbix, MEAN stack, VPS/VDS
● Part-time concurrent role.
● Ensured uninterrupted operation of the MEAN project's VPS/VDS infrastructure.
● Automated CI/CD (GitLab CI, Docker, Bash).
● Implemented Zabbix monitoring and resolved incidents within SLA (up to 1 hour).
DevOps Engineer
07.2017 - 03.2018 |We Are Immediate
LEMP, Zabbix, VPS
● Part-time concurrent role.
● Ensured uninterrupted operation of a LEMP project's VPS infrastructure.
● Implemented Zabbix monitoring and resolved incidents within SLA (within 1 hour).
DevOps Engineer
07.2015 - 07.2017 |Singree.com
AWS (EC2, RDS, S3, IAM), Azure (Virtual Machines, SQL, Redis Cache), Hetzner, DigitalOcean, GitLab CI, Docker, Ansible, Bash, LEMP, LAMP, MEAN
● Sole DevOps engineer at a web studio (custom web development).
● Managed hybrid infrastructure for production and test environments: AWS (EC2, RDS, S3, IAM), Azure (Virtual Machines, Azure SQL, Redis Cache), Hetzner, DigitalOcean.
● Implemented and maintained CI/CD with GitLab CI (Docker, Ansible, Bash) for three teams, enabling weekly automated releases.
● Automated deployment of LEMP/LAMP/MEAN stacks with Ansible, provisioning a new environment within 35 minutes.
IT System Administrator
10.2014 - 04.2015 |Arka-media.de
Windows, Linux, IT infrastructure
● Provided technical support to employees and maintained the company's heterogeneous IT infrastructure (Windows, Linux) for 10+ staff.
● Served as project manager for the corporate email newsletter project, responsible for quality and uninterrupted operation.
● Performed functional and regression testing of company websites (WordPress, Joomla, Drupal, Yii).
Web-master
06.2014 - 10.2014 |Gepur
PHP, MySQL, HTML, CSS, Photoshop, GIMP, DigitalOcean, Hetzner
● Ran A/B tests and performed SEO optimisation, increasing organic search traffic by 21% and conversion by 7% in 3 months.
● Developed and optimised web pages (PHP, MySQL, HTML, CSS), coded email newsletters.
● Managed web-hosting infrastructure (DigitalOcean, Hetzner) and provided technical support to 30+ employees.
IT System Administrator
08.2013 - 04.2014 |SmartLab
InterBase, SQL, Delphi, VPN, ADSL, 3G, 4G, Windows
● Administered the in-house record-keeping system (InterBase, SQL, Delphi): backups, monitoring, schema and query optimisation.
● Ensured connectivity for 12 offices: VPN and failover across ADSL, 3G, 4G, and dial-up; 99.9% availability, failover in 4 minutes.
● Supported Windows infrastructure and 40+ users; average incident resolution time 37 minutes.
Deputy Head of Internal Security Department
03.2013 - 08.2013 |Investbank
ISMS, access control, video surveillance
● Responsible for establishing and maintaining the bank's Information Security Management System (ISMS).
● Administered and maintained access control and video surveillance systems; conducted information security incident investigations.
● Oversaw compliance with National Bank of Ukraine information protection requirements as Information Security Administrator.
IT System Administrator
08.2011 - 02.2013 |Vitol
Windows, Linux, Microsoft Exchange, Microsoft IIS, Active Directory, VPN, LAN, Ubuntu
● Administered a heterogeneous (Windows, Linux) IT infrastructure (Microsoft Exchange, IIS) and networks (VPN, LAN, PBX).
● Ensured information security (Active Directory Group Policy, WSUS, MBSA, antivirus, incident analysis).
● Planned and executed the migration of 23 workstations to Ubuntu Linux, saving ~$2,000/year on Microsoft licensing.
● Managed IT vendor engagement, contract drafting, budgeting, and hardware/software procurement.
● Provided technical support to 60+ users.
Head of Information Technology Department
04.2008 - 08.2011 |First Ukrainian International Bank
Active Directory, Terminal Servers, Windows, Debian Linux, Cisco, Client-Bank
● Led a 12-person IT department; ensured stable operations of the entire IT infrastructure (AD, Terminal Servers, File Servers, Windows, Debian Linux, Client-Bank, POS terminals, ATMs, Cisco) for 300+ users.
● Ensured close coordination with vendors and service providers; promptly resolved telecom and equipment outages.
● Ensured IT systems' compliance with National Bank of Ukraine information security requirements; passed two regulator audits with no material findings.
Leading Specialist
04.2007 - 04.2008 |First Ukrainian International Bank
InterBase, Delphi, Client-Bank, Hypercom POS terminals, structured cabling
● Oversaw the rollout of Hypercom POS terminal networks across five major shopping malls (120+ cabling ports) as part of a merchant acquiring network expansion.
● Managed the infrastructure of the Client-Bank system (InterBase, Delphi) and supported 200+ corporate clients.
● Oversaw National Bank of Ukraine information security compliance as Information Security Administrator.
Senior Specialist
03.2006 - 04.2007 |First Ukrainian International Bank
Diebold ATMs, Hypercom POS terminals, Windows NT/2000/XP, Cisco
● Monitored and maintained the self-service network: 15+ Diebold ATMs and 150 Hypercom POS terminals, sustaining ≥99.9% availability per SLA.
● Supported IT infrastructure of 5 branches: workstations (Windows NT/2000/XP), LAN (3Com, HP, Cisco), peripherals.
● Provided technical support to 80+ employees.
IT System Administrator
03.2006 - 07.2006 |German Autocentre
Active Directory, File Server, CentOS Linux, VPN, DNS, DHCP, ELSA, ETKA, 1C
● Part-time concurrent role.
● Administered Windows domain infrastructure (AD, File Server, Print Server, DHCP, DNS), VPN on CentOS Linux.
● Maintained ELSA, ETKA, and 1C applications: backups, updates, data recovery.
Chief Engineer
02.2006 - 03.2006 |State Savings Bank of Ukraine
Novell NetWare, Firebird, Delphi, Clipper, dBase, MS-DOS, Windows
● Administered Novell NetWare and Novell servers for 50+ city branches (150+ employees); average recovery time 25 minutes.
● Ensured operation of HERZ (Firebird, Delphi) and ASVO (Clipper, dBase): daily synchronisations, backups, data recovery.
● Coordinated support of branch IT infrastructure: MS-DOS and Windows 98/NT workstations, networks, peripherals.
Leading Engineer
12.2005 - 01.2006 |State Savings Bank of Ukraine
Firebird, Delphi, Clipper, dBase, Windows 98/NT
● Ensured operation of HERZ (Firebird, Delphi) and ASVO (Clipper, dBase): daily synchronisations, backups, data recovery; average recovery time 40 minutes.
● Supported branch IT infrastructure: MS-DOS and Windows 98/NT workstations, network, peripherals; closed L2 escalations within SLA.
● Performed component-level PC repairs: 83% of repairs completed within SLA (up to 2 business days).
Engineer
07.2005 - 11.2005 |State Savings Bank of Ukraine
Clipper, dBase, Windows 98/NT
● Ensured operation of the ASVO distributed database (Clipper, dBase): daily data exchanges, backups, data recovery; average recovery time 40 minutes.
● Supported MS-DOS and Windows 98/NT workstations: reinstallation, driver and network setup, software configuration; 89% of tickets closed within SLA.
● Performed component-level PC repairs: 83% of repairs completed within SLA (up to 2 business days).