Position: Senior/Lead DevOps/SRE
Category: DevOps
English level: fluent
Years of experience: 11

=) Designed, managed the implementation, and coded up critical parts of OS patching process and automation for a fleet of 8k servers. The automation remediated over 95% of in-scope vulnerabilities with the target of 90%, and reduced by 70% the human resource allocation for the patching activities.  

=) Designed and managed the implementation of a complex application patching automation for a fleet of 50k servers; coded up supporting puppet modules, custom APIs, and a 5k puppet node simulation environment. The project brought the fleet into security compliance in a heavily regulated industry.

=) Designed, implemented, and operated a system which provided configuration visibility and allowed to query information ab 70k hosts in matters of seconds; the system reduced time spent on the fleet reporting from days to minutes, saving hundreds man-hours over the year and became a basis for incident response and migration projects.

=) Developed and operated configuration management automation for a fleet of 70k servers, designed self-healing auto-balancing configuration management infrastructure, developed OS and application upgrade and patching automation which was estimated to result in 2k man-days and $250k per year savings.
# About #

I am an engineer with 20 years of experience in SA/SRE/DevOps roles with the emphasis on automation, orchestration, and configuration management. I have an extensive experience in designing and operating large-scale configuration management infrastructure, HA production application environments (on-prem and cloud), and project CI/CD pipelines.

# Experience #

Latest project: designed, set up, and supported high-load infrastructure for illegal online video content discovery and takedown service.
 
% Tech stack: RHEL, ansible/AWX, gitlab/CI, python, docker, prometheus/grafana, netdata, graylog, AWS:dynamodb/SNS/SQS/S3

# Previous #
Designing and implemented OS patching processes and automation in a telecom firm with ca. 8k server fleet. The system implemented a controlled rollout of patches across tiered environment within policy deadlines and respecting system's ownership.

% Tech stack: RHEL, Satellite 6, ansible/AWX, gitlab/CI, python, docker, docker-compose, bash, prometheus/grafana, postgresql, slack.
//
Designed and set up the template CI/CD pipeline with automatic release promotion, approval gates, chatops, and monitoring in a large telecom used by dozens of application development teams. 

% Tech stack: GitLab, Jenkins, Artifactory, ansible, prometheus, pagerduty, slack.
//
Designed and implemented application patching/upgrade automation for a fleet of 50k servers in a major international bank. 

% Tech stack: RHEL, CentOS, puppet, ansible, LXC/LXD, KVM, GitLab, GitHub, Jenkins, python, bash, golang, TICK, Nagios, nginx, redis, mysql.
//
Developed configuration management policies for a fleet of 70k servers, managed server-side infrastructure, provided L3 support, developed OS and application upgrade automation in a major international bank.

% Tech stack: RHEL, cfengine3, redis, mongodb, groundworks/nagios, bash, perl, svn, IBM Tivoli, apache, tomcat.
• Linux/UNIX stack only, no MS/Windows
• Looking for a long-term job to make impact: fintech, healthcare/medtech, manufacturing, telecom, product firms are preferred
• Competent management