Devops Engineer

One of biggest travel industry customer (airlines, hotels, cars).
Environment: Agile, SAFe, 2 daily standups, more than 2000 AWS instances, distributed team (5 engineers + 2 On- Call at nights), Java/NodeJS microservices, REST API, 10 AWS customer accounts, all code is hosted on Bitbucket
Monitoring: via Nagios, Grafana, Telegraf, Kapacitor, AWS Cloudwatch, ELK Stack (kibana-logstash-AWS Elasticsearch/hosted Elasticsearch)
Automation, deployment and scripting: Ansible, Jenkins (groovy), Puppet, Python and shell scripting
Security: PCI DSS, OpenVAS, Let's Encrypt, ansible-vault, lastpass, gpg etc.
Databases: MongoDB, AWS RDS (MySQL/Aurora), Influxdb, AWS Elasticsearch
Messaging systems: RabbitMQ, Kafka
On-call support: Pagerduty, Nagios, AWS Cloudwatch, Grafana
Typical daily tasks:
- Provisioning AWS instances using Ansible, python (boto) and automated setup with all necessary software using
Puppet
- Deploying with no-downtime the microservices with Jenkins and Ansible (blue-green)
- Security scans (internal and external) and mobile user removal using GDPR scripts, scans using OpenVAS and with some other minor tools like lynis, Python Lambda scripts to detect security group changes and ELB certificates expiration, getting application logs from PCI instances and from Cloudwatch
- Environment health monitoring: supporting ELK Stack Clusters and TICK Stack. Over 3000 Nagios checks for all application, systems metrics
- Requests from NoSQL/SQL databases
- On-call support (1-3 weeks per month) - alerts are triggered via PagerDuty
- Automating routine tasks: Jenkins+ansible pipelines for systems upgrade (automate taking off instances from ELBs, update, reboot and put it back), basic security checklists, adding/removing users, provisioning Nagios with new checks using Ansible, altering existing Puppet manifests, generating AWS inventory using Python scripts
- Scripting: Ansible playbooks (an example: playbook to update Apache from 2.2 to 2.4 on all customer instances + migrating configs and redirects), Python scripts for system or Lambda (REST API calls, YAML/JSON output parsing, getting data from MongoDB, shutdown some EC2 instances at night etc.), shell scripting (check certificate expiration date, nagios checks etc.)
- Many more different requests as we work in Jira per ticket basis (approx. 100 tickets weekly served), documenting all work in Confluence and in Readme git repository files

Websites System Engineer.
- Working as hosting support for host.md.
- Gaining experience with Parallels products such Plesk Control Panel and Parallels Business Automation System.
- Providing support via chat, emails and phone.

Computer Engineer.
- Working as systems administrator in department real-time systems.
- Working with Solaris and Oracle.
- Installing from scratch NetBackup with Linux, Windows and Solaris clients.
- Bare-metal backup restore.

Developer, System Administrator
- worked as programmer in Delphi/Visual C++ which created and maintained different utilities like internal tool for hardware/software evidence; software which stores students marks; employee evidence application
- Managed a set of Linux (CentOS, Gentoo) and FreeBSD/OpenBSD servers internal-gates and database servers
- wrote a backup script for Sybase databases using bash and rsync for all 9 servers
- wrote scripts for Linux (iptables), FreeBSD (ipfw) and OpenBSD (pf) internet gates firewalls
- provisioned environment for Distant Learning system written in Java
- recompiled kernels on some Linux and FreeBSD servers
- continuous monitoring using Cacti, logwatch, sqstat etc.
- setup a VPN using pptp and OpenVPN between geographical entities
- setup a monitoring solutions using Cacti, MySQL, logwatch, SNMP

Technical Specialist / System Administrator.
- Offering technical support and acting as a technical expert in computer security.
- Working with CNA inspectors in the IT field to conduct research based on suspicious of illegal economic activities.
Technical
Environment: Gentoo, CentOS, OpenVPN, Cacti, bash, rsync, zyxBackup,
MySQL, logwatch, Squid (sqstat, rejik, squint), SNMP.