• Operate and improve production and staging infrastructure for a US fintech startup under NDA, focusing on Kubernetes reliability, CI/CD automation, secrets management and observability.

• Designed and implemented centralized secret management for multi-cluster Kubernetes environments using HashiCorp Vault, KV v2 and Vault Secrets Operator.

• Migrated application secrets from native Kubernetes Secrets to Vault-backed synchronization while preserving existing secret names and avoiding application-side changes.

• Built automation scripts for auditing, exporting, classifying and migrating Kubernetes secrets across namespaces and environments.

• Improved GitLab CI workflows for infrastructure and application delivery, reducing manual deployment steps and making releases more predictable.

• Maintained Kubernetes workloads, ingress routing, services, persistent volumes, DNS, certificates and environment-specific configuration.

• Improved monitoring and troubleshooting workflows using Prometheus/Grafana-based observability and alerting.

• Supported infrastructure security hardening, access control improvements, secret rotation readiness and operational standardization for fintech workloads.

• Collaborated with developers to troubleshoot production and staging incidents, analyze deployment failures and improve service reliability.

• • Designed and deployed a Kubernetes cluster and migrated bare-metal hosted services to it, improving reliability, scalability and observability.
• • Implemented Rancher RKE with autoscaling to provide additional cluster capacity during peak load.
• • Redesigned the Jenkins-based build system, reducing build times for selected projects by up to 70%.
• • Refactored a frontend application build process with Docker, enabling consistent builds and a more flexible testing approach.
• • Administered MikroTik-based network infrastructure.
• • Maintained Infrastructure-as-Code repositories and automated configuration management with Ansible.

• • Deployed a Kubernetes cluster with a Ceph storage backend and migrated website hosting infrastructure to it, increasing fault tolerance and uptime to 99.95%.
• • Implemented automated testing and vulnerability pre-check infrastructure for user websites, including rollback to previous Ceph snapshots in case of exploitation or failure.
• • Consolidated servers scattered across low-performance hardware onto a Proxmox-based platform, improving stability and performance while reducing hardware maintenance overhead.
• • Established automated product build and delivery workflows using Jenkins and GitLab CI, introducing a testing-stage-production process.
• • Containerized products that did not require strict hardware binding into Docker containers, standardizing deployment across Linux servers.
• • Automated host-based product deployments using Ansible.
• • Implemented secure access control workflows and supported infrastructure security hardening, including RKHunter and SELinux configuration.
• • Monitored vulnerabilities, applied fixes and identified a MikroTik network vulnerability that allowed unauthorized access and developer-mode switching.
• • Set up infrastructure monitoring with Prometheus and Grafana, integrating alerts with Slack and Telegram.
• • Managed a team of two employees, including task planning, priority distribution and operational follow-up.

• Administered Linux-based production and internal systems.
• Automated product deployment using Ansible and containerized core products with Docker.
• Built and administered industrial-grade servers in an in-house data center, using VMware ESXi or Proxmox depending on project requirements.
• Monitored and mitigated newly discovered vulnerabilities.
• Managed MikroTik-based network infrastructure.

• Administered Linux and Windows systems for internal company infrastructure.
• Supported users, workstations, networking equipment and routine infrastructure maintenance.