Devops Engineer

One of biggest travel industry customer (airlines, hotels, cars).
Environment: Agile, SAFe, 2 daily standups, more than 2000 AWS instances, distributed team (5 engineers + 2 On- Call at nights), Java/NodeJS microservices, REST API, 10 AWS customer accounts, all code is hosted on Bitbucket
Monitoring: via Nagios, Grafana, Telegraf, Kapacitor, AWS Cloudwatch, ELK Stack (kibana-logstash-AWS Elasticsearch/hosted Elasticsearch)
Automation, deployment and scripting: Ansible, Jenkins (groovy), Puppet, Python and shell scripting
Security: PCI DSS, OpenVAS, Let's Encrypt, ansible-vault, lastpass, gpg etc.
Databases: MongoDB, AWS RDS (MySQL/Aurora), Influxdb, AWS Elasticsearch
Messaging systems: RabbitMQ, Kafka
On-call support: Pagerduty, Nagios, AWS Cloudwatch, Grafana
Typical daily tasks:
- Provisioning AWS instances using Ansible, python (boto) and automated setup with all necessary software using
Puppet
- Deploying with no-downtime the microservices with Jenkins and Ansible (blue-green)
- Security scans (internal and external) and mobile user removal using GDPR scripts, scans using OpenVAS and with some other minor tools like lynis, Python Lambda scripts to detect security group changes and ELB certificates expiration, getting application logs from PCI instances and from Cloudwatch
- Environment health monitoring: supporting ELK Stack Clusters and TICK Stack. Over 3000 Nagios checks for all application, systems metrics
- Requests from NoSQL/SQL databases
- On-call support (1-3 weeks per month) - alerts are triggered via PagerDuty
- Automating routine tasks: Jenkins+ansible pipelines for systems upgrade (automate taking off instances from ELBs, update, reboot and put it back), basic security checklists, adding/removing users, provisioning Nagios with new checks using Ansible, altering existing Puppet manifests, generating AWS inventory using Python scripts
- Scripting: Ansible playbooks (an example: playbook to update Apache from 2.2 to 2.4 on all customer instances + migrating configs and redirects), Python scripts for system or Lambda (REST API calls, YAML/JSON output parsing, getting data from MongoDB, shutdown some EC2 instances at night etc.), shell scripting (check certificate expiration date, nagios checks etc.)
- Many more different requests as we work in Jira per ticket basis (approx. 100 tickets weekly served), documenting all work in Confluence and in Readme git repository files

Websites System Engineer.
- Working as hosting support for host.md.
- Gaining experience with Parallels products such Plesk Control Panel and Parallels Business Automation System.
- Providing support via chat, emails and phone.

Computer Engineer.
- Working as systems administrator in department real-time systems.
- Working with Solaris and Oracle.
- Installing from scratch NetBackup with Linux, Windows and Solaris clients.
- Bare-metal backup restore.

System Administrator.
- Development in Delphi/C++ which created different utilities.
- Systems administration.
- Offering technical support for users.
- Managing and supporting Linux and Unix servers (Internet-gates and database servers where runs Sybase).
Technical
Environment: Squid (sqstat, rejik, squint), Cacti, OpenVPN, Sybase,
MySql, bash, iptables, logwatch, rsync, SNMP etc. Mostly used Gentoo and
RedHat distributions.

Offered technical support and acted as technical expert in computer security
- Used to work with CNA officers in IT field to search on suspicious of illegal economic activities
- Managed internal network with CentOS, Gentoo and FreeBSD servers
- Bug-fixing the internal Java applications (mainly JSP servlets)
- Setup a monitoring solutions using Cacti, MySQL, logwatch, SNMP
- Setup an internal Proxy with users authentication for internet access with detailed monitoring using Squid, sqstat, rejik, squint
- Setup a VPN using pptp and OpenVPN between geographical entities
- Recompiled kernels on some Linux and FreeBSD servers
- Setup a Samba controller with antivirus for Windows hosts file sharing
- Organized backups of MySQL databases using rsync and shell scripts. On some location a tool called zyxBackup was used
- Wrote detailed documentation about what was done on servers and provided some videotutorials for end users