Публикатор: Sanzhar
Обсуждение: @devops_jobs
#резюме #cv #devops #sre #platformengineer #kubernetes #gitops #cloudnative #observability #security #web3 #remote #fulltime
Позиция: Senior DevOps / Platform Engineer / SRE
Формат: удалённо / relocation
Локация: Астана, Казахстан
Занятость: full-time / project
Оформление: ИП / контракт / обсуждаемо
Ожидания:
— full-time: от 4000$ net
Контакты:
Telegram: @svejakowski
Email: sbmazhitov@gmail.com
About me:
Senior DevOps engineer with 5+ years of experience building production-grade Kubernetes platforms for Web3 and cybersecurity.
Proven track record in incident ownership, zero-downtime migrations, and systematic debugging of complex distributed systems.
Expertise in observability, security, and automation to drive reliability, scalability, and team efficiency.
Core Stack:
— Kubernetes, Talos Linux, Helm, Kustomize
— ArgoCD, FluxCD, GitHub Actions, GitLab CI
— Terraform, Ansible
— Envoy Gateway, Nginx, kube-ovn, Netbird, Authentik, Cloudflare
— Prometheus, VictoriaMetrics, Grafana Cloud, Loki, Alertmanager
— PostgreSQL (CloudNativePG, Patroni), ClickHouse, MongoDB, Redis, Redpanda / Kafka
— HashiCorp Vault, ExternalSecrets
— AWS, Yandex Cloud
Experience:
Fluence — Decentralized cloud / Web3 infrastructure
— Designed and deployed end-to-end Kubernetes infrastructure for a decentralized cloud platform, including custom networking with kube-ovn, resource optimization, and security hardening.
— Led GitOps delivery with FluxCD and ArgoCD, standardizing Helm/Kustomize workflows and reducing manual changes by 40%.
— Diagnosed and resolved blockchain node performance issues including Solana slow block synchronization, peer connectivity, and resource bottlenecks, improving sync times by 30%.
— Improved resource efficiency by 60% using VPA recommendations and Kyverno policies for Kubernetes workloads, creating a path toward request/limit standardization.
— Built observability pipelines with Prometheus/VictoriaMetrics/Grafana Cloud, creating SLO-based alerting for error rates and latency, reducing false positives by 50%.
— Designed Grafana OnCall/IRM + Slack alert routing with team labels, escalation policies, and acknowledge-based incident flow, improving incident resolution time by 25%.
— Integrated AI into monitoring systems to predict and resolve performance bottlenecks.
— Replaced ad-hoc uptime checks with Terraform-managed Grafana Synthetic Monitoring for 20+ public endpoints, APIs, explorers, registries, and internal services.
— Secured service access with Netbird + Authentik, implementing private service exposure and internal connectivity debugging, reducing security incidents by 40%.
— Replaced legacy ingress with Envoy Gateway + Gateway API for L7 routing, TLS, and security policies, achieving zero-downtime migration.
— Centralized secrets with HashiCorp Vault + ExternalSecrets and integrated Vault JWT auth into GitHub Actions CI/CD.
— Operated CloudNativePG PostgreSQL and tuned database connectivity for production workloads, improving query latency by 25%.
— Troubleshooted low-level networking issues using tcpdump, service logs, and provider-side diagnostics, resolving critical outages within 15 minutes.
TSARKA / WebTotem / Bult.ai — Cybersecurity products
— Led migration from HashiCorp Nomad to Kubernetes on bare-metal (Hetzner), designing topology, running capacity planning, and executing cutover with minimal downtime.
— Implemented security hardening practices across Kubernetes clusters, reducing vulnerability exposure and achieving SOC 2 compliance.
— Designed ArgoCD + Kustomize deployment architecture and standardized CI/CD across product teams in GitLab CI and GitHub Actions.
— Embedded SAST/SCA into pipelines with vulnerability gating, driving product certification for Kazakhstan’s Registry of Trusted Software.
— Architected a centralized logging and monitoring solution (ELK + Grafana) for 10+ microservices, improving incident detection time by 50%.
CV: https://drive.google.com/file/d/1PtP5N4ywJuwopZJx66ZXRbiFu-aQ745Y/view?usp=sharing
Обсуждение: @devops_jobs
#резюме #cv #devops #sre #platformengineer #kubernetes #gitops #cloudnative #observability #security #web3 #remote #fulltime
Позиция: Senior DevOps / Platform Engineer / SRE
Формат: удалённо / relocation
Локация: Астана, Казахстан
Занятость: full-time / project
Оформление: ИП / контракт / обсуждаемо
Ожидания:
— full-time: от 4000$ net
Контакты:
Telegram: @svejakowski
Email: sbmazhitov@gmail.com
About me:
Senior DevOps engineer with 5+ years of experience building production-grade Kubernetes platforms for Web3 and cybersecurity.
Proven track record in incident ownership, zero-downtime migrations, and systematic debugging of complex distributed systems.
Expertise in observability, security, and automation to drive reliability, scalability, and team efficiency.
Core Stack:
— Kubernetes, Talos Linux, Helm, Kustomize
— ArgoCD, FluxCD, GitHub Actions, GitLab CI
— Terraform, Ansible
— Envoy Gateway, Nginx, kube-ovn, Netbird, Authentik, Cloudflare
— Prometheus, VictoriaMetrics, Grafana Cloud, Loki, Alertmanager
— PostgreSQL (CloudNativePG, Patroni), ClickHouse, MongoDB, Redis, Redpanda / Kafka
— HashiCorp Vault, ExternalSecrets
— AWS, Yandex Cloud
Experience:
Fluence — Decentralized cloud / Web3 infrastructure
— Designed and deployed end-to-end Kubernetes infrastructure for a decentralized cloud platform, including custom networking with kube-ovn, resource optimization, and security hardening.
— Led GitOps delivery with FluxCD and ArgoCD, standardizing Helm/Kustomize workflows and reducing manual changes by 40%.
— Diagnosed and resolved blockchain node performance issues including Solana slow block synchronization, peer connectivity, and resource bottlenecks, improving sync times by 30%.
— Improved resource efficiency by 60% using VPA recommendations and Kyverno policies for Kubernetes workloads, creating a path toward request/limit standardization.
— Built observability pipelines with Prometheus/VictoriaMetrics/Grafana Cloud, creating SLO-based alerting for error rates and latency, reducing false positives by 50%.
— Designed Grafana OnCall/IRM + Slack alert routing with team labels, escalation policies, and acknowledge-based incident flow, improving incident resolution time by 25%.
— Integrated AI into monitoring systems to predict and resolve performance bottlenecks.
— Replaced ad-hoc uptime checks with Terraform-managed Grafana Synthetic Monitoring for 20+ public endpoints, APIs, explorers, registries, and internal services.
— Secured service access with Netbird + Authentik, implementing private service exposure and internal connectivity debugging, reducing security incidents by 40%.
— Replaced legacy ingress with Envoy Gateway + Gateway API for L7 routing, TLS, and security policies, achieving zero-downtime migration.
— Centralized secrets with HashiCorp Vault + ExternalSecrets and integrated Vault JWT auth into GitHub Actions CI/CD.
— Operated CloudNativePG PostgreSQL and tuned database connectivity for production workloads, improving query latency by 25%.
— Troubleshooted low-level networking issues using tcpdump, service logs, and provider-side diagnostics, resolving critical outages within 15 minutes.
TSARKA / WebTotem / Bult.ai — Cybersecurity products
— Led migration from HashiCorp Nomad to Kubernetes on bare-metal (Hetzner), designing topology, running capacity planning, and executing cutover with minimal downtime.
— Implemented security hardening practices across Kubernetes clusters, reducing vulnerability exposure and achieving SOC 2 compliance.
— Designed ArgoCD + Kustomize deployment architecture and standardized CI/CD across product teams in GitLab CI and GitHub Actions.
— Embedded SAST/SCA into pipelines with vulnerability gating, driving product certification for Kazakhstan’s Registry of Trusted Software.
— Architected a centralized logging and monitoring solution (ELK + Grafana) for 10+ microservices, improving incident detection time by 50%.
CV: https://drive.google.com/file/d/1PtP5N4ywJuwopZJx66ZXRbiFu-aQ745Y/view?usp=sharing