DevOps-инженер

ESB / integration platform team • Collaborated with two engineers to design and deploy a Kubernetes cluster for internal operational services, running approximately 50 pods on 3 control-plane and 5 worker nodes. • Co-developed the migration plan and moved internal support services and web interfaces to Kubernetes; co-authored Helm charts, values files, and reusable GitLab CI templates; used Longhorn for persistent storage and rolling updates for application changes. • Built GitLab CI pipelines to build and deploy approximately 10 services using GitLab runners, built-in artifacts, and Helm; subsequently helped the team introduce Argo CD. • Configured Prometheus scraping and service discovery, recording and alert rules, Alertmanager routing, Grafana RED/USE dashboards, and node/JVM exporters for approximately 10 services; used the resulting metrics to investigate a JVM heap/non-heap memory leak. • Reviewed alert rules and routing, reducing email notifications from thousands to dozens of relevant messages. • Developed an Ansible role for Linux security hardening covering SSH, auditd, filesystem permissions, and sysctl settings; applied standardized controls to approximately 700 hosts. • Investigated ESB incidents, participated in root-cause analysis, and contributed to postmortems for cross-system SLA violations.

OpenShift application and platform operations • Supported approximately 25 microservices on OpenShift: diagnosed pod failures and network connectivity issues and managed resource quotas, requests, and limits for development environments. • Investigated P1/P2 incidents using Kibana and Elasticsearch and prepared structured technical escalations for L2/L3 teams. • Developed a Python utility for parallel health checks during mass outages, reducing diagnostic time across approximately 25 services from 15 to 2 minutes. • Maintained Prometheus/Grafana alerting and dashboards for JVM, application response time, and Linux/Windows host metrics.

IT systems integration and consulting • Deployed and administered Proxmox VE environments with KVM/LXC, Linux servers, and lightweight k3s clusters for internal tools across a client base of 50+ organizations. • Migrated workloads for 12 clients from bare metal to Proxmox VE and introduced snapshot-based recovery workflows, reducing recovery time in the reported scenario from approximately 4 hours to 15 minutes. • Automated Linux provisioning with Ansible; configured VM and PostgreSQL/1C backups to cloud storage; built GitLab CI/CD pipelines for building and deploying internal services. • Worked with colleagues on production AWS infrastructure for a containerized client application across two Availability Zones; personally provisioned EKS, VPC and subnets, security groups, IAM roles, and persistent storage using Terraform, with architecture and changes reviewed by colleagues. • Configured Kubernetes Ingress and AWS Load Balancer Controller for an ALB; validated cluster and application access, network rules, and workload deployment; supported subsequent configuration and deployment changes. • Configured MikroTik networks, VLANs, firewall/NAT rules, and VPNs; delivered remote-access VPN for 100+ client employees within the project deadline.

Medical systems integration and technical support • Installed medical software and integrated equipment with hospital PACS/DICOM infrastructure and local TCP/IP networks. • Provided remote IT support; performed software updates, backups, account administration, log analysis, and documentation; coordinated complex incidents with vendors. • Automated equipment intake reporting with Excel/VBA, reducing report preparation time from 45 to 10 minutes.