DevOps工程师

Enterprise-grade private cloud platform based on Kubernetes • Architected and deployed production-grade Kubernetes clusters across multiple environments (dev/stage/prod) • Designed and deployed a clustered Apache Kafka setup in Yandex Cloud using Terraform for dev, stage, and production environments • Integrated HashiCorp Vault for centralized and secure secrets management • Refactored and standardized Helm charts to ensure consistent application deployments • Automated cluster provisioning and deployments using GitLab CI and Ansible • Implemented observability stack (Prometheus, Grafana, Loki) improving monitoring and incident response • Configured KEDA in Kubernetes based on custom application metrics to enable flexible and event-driven autoscaling • Built CI/CD workflows for artifact migration across container registries • Developed a custom Python-based monitoring tool to analyze cluster state and improve capacity planning Stack: Kubernetes, Helm, Ansible, GitLab CI, Yandex Cloud, Prometheus, Grafana, Loki, Vault, Apache Kafka, KEDA, Nexus

ERP system development and implementation project for Barenbrug • Designed and maintained AWS-based infrastructure to support ERP system deployment and operations. • Provisioned and configured EC2 instances in AWS, including setup of VPC Peering connections and Route Tables for secure inter-network communication • Created and configured S3 buckets with appropriate access policies for integration with CloudFront distributions • Managed and configured IAM roles and policies for user accounts following least-privilege principles • Developed Ansible roles for integration with Zabbix API, enabling automated host registration and monitoring setup • Wrote Ansible playbooks to bootstrap new EC2 instances, including dependency installation, security hardening, and automated deployment of Wazuh agents • Led migration from AmazonMQ to self-hosted RabbitMQ, reducing infrastructure costs while maintaining system reliability • Conducted cost analysis in AWS; optimized RDS and EC2 by leveraging Spot Instances and rightsizing - achieving 35% cloud cost savings Stack: AWS (EC2, S3, IAM, VPC, CloudFront), Ansible, Zabbix, Wazuh, RabbitMQ

IT outsourcing company focused on customer infrastructure setup and maintenance (hardware and virtual environments). • Deployed and managed VMware/ESXi infrastructure using Terraform. • Created Pythons to patch vulnerabilities on Huawei servers. • Developed Ansible roles with Jinja2 templates to configure VMs, manage users, and deploy Zabbix/Wazuh agents. • Configured Zabbix alerting to improve SLA compliance during incidents. • Recovered data from RAID arrays, analyzed logs, and maintained SAN/NAS systems: Dell, HPE, IBM, Huawei, Lenovo, Cisco. • Configured Redfish APIs and LACP aggregation on physical servers. Stack: Terraform, VMware, Ansible, Zabbix, Python, Cisco, HPE, Huawei, SAN, Linux