Публикатор: Sanzhar (компания не указана)
IT-направление
Публикатор: [Sanzhar](tg://user?id=2102849345) Обсуждение: @devops_jobs #резюме #cv #devops #sre #platformengineer #kubernetes #gitops #cloudnative #observability #security #web3 #remote #fulltime Позиция: Senior DevOps / Platform Engineer / SRE Формат: удалённо / relocation Локация: Астана, Казахстан Занятость: full-time / project Оформление: ИП / контракт / обсуждаемо Ожидания: — full-time: от 4000$ net Контакты: Telegram: @svejakowski Email: [email protected] About me: Senior DevOps engineer with 5+ years of experience building production-grade Kubernetes platforms for Web3 and cybersecurity. Proven track record in incident ownership, zero-downtime migrations, and systematic debugging of complex distributed systems. Expertise in observability, security, and automation to drive reliability, scalability, and team efficiency. Core Stack: — Kubernetes, Talos Linux, Helm, Kustomize — ArgoCD, FluxCD, GitHub Actions, GitLab CI — Terraform, Ansible — Envoy Gateway, Nginx, kube-ovn, Netbird, Authentik, Cloudflare — Prometheus, VictoriaMetrics, Grafana Cloud, Loki, Alertmanager — PostgreSQL (CloudNativePG, Patroni), ClickHouse, MongoDB, Redis, Redpanda / Kafka — HashiCorp Vault, ExternalSecrets — AWS, Yandex Cloud Experience: Fluence — Decentralized cloud / Web3 infrastructure — Designed and deployed end-to-end Kubernetes infrastructure for a decentralized cloud platform, including custom networking with kube-ovn, resource optimization, and security hardening. — Led GitOps delivery with FluxCD and ArgoCD, standardizing Helm/Kustomize workflows and reducing manual changes by 40%. — Diagnosed and resolved blockchain node performance issues including Solana slow block synchronization, peer connectivity, and resource bottlenecks, improving sync times by 30%. — Improved resource efficiency by 60% using VPA recommendations and Kyverno policies for Kubernetes workloads, creating a path toward request/limit standardization. — Built observability pipelines with Prometheus/VictoriaMetrics/Grafana Cloud, creating SLO-based alerting for error rates and latency, reducing false positives by 50%. — Designed Grafana OnCall/IRM + Slack alert routing with team labels, escalation policies, and acknowledge-based incident flow, improving incident resolution time by 25%. — Integrated AI into monitoring systems to predict and resolve performance bottlenecks. — Replaced ad-hoc uptime checks with Terraform-managed Grafana Synthetic Monitoring for 20+ public endpoints, APIs, explorers, registries, and internal services. — Secured service access with Netbird + Authentik, implementing private service exposure and internal connectivity debugging, reducing security incidents by 40%. — Replaced legacy ingress with Envoy Gateway + Gateway API for L7 routing, TLS, and security policies, achieving zero-downtime migration. — Centralized secrets with HashiCorp Vault + ExternalSecrets and integrated Vault JWT auth into GitHub Actions CI/CD. — Operated CloudNativePG PostgreSQL and tuned database connectivity for production workloads, improving query latency by 25%. — Troubleshooted low-level networking issues using tcpdump, service logs, and provider-side diagnostics, resolving critical outages within 15 minutes. TSARKA / WebTotem / Bult.ai — Cybersecurity products — Led migration from HashiCorp Nomad to Kubernetes on bare-metal (Hetzner), designing topology, running capacity planning, and executing cutover with minimal downtime. — Implemented security hardening practices across Kubernetes clusters, reducing vulnerability exposure and achieving SOC 2 compliance. — Designed ArgoCD + Kustomize deployment architecture and standardized CI/CD across product teams in GitLab CI and GitHub Actions. — Embedded SAST/SCA into pipelines with vulnerability gating, driving product certification for Kazakhstan’s Registry of Trusted Software. — Architected a centralized logging and monitoring solution (ELK + Grafana) for 10+ microservices, improving incident detection time by 50%. CV: https://drive.google.com/file/d/1PtP5N4ywJuwopZJx66ZXRbiFu-aQ745Y/view?usp=sharing