Bohdan Ihnateko - Резюме Devops

DevOps Engineer | Patrianna Jan 2025 – Oct 2026 Platform & Infrastructure Maintained and scaled Kubernetes clusters; managed workloads via ArgoCD (GitOps): rollouts, rollbacks, service health monitoring. Deployed Istio service mesh in Kubernetes: traffic management, mTLS, service-to-service routing. Provisioned and managed infrastructure on GCP: GKE, AlloyDB, Firestore, Cloud Storage, Secret Manager, VPC and firewall rules, IAM / service accounts. Administered AWS resources (EC2, S3, IAM, EKS, ECS) and MinIO; configured Cloudflare DNS, SSL/TLS and access rules; managed VPN via OPNsense. Managed infrastructure as code with Terraform and Terragrunt (reusable modules, units, stacks catalog, local ↔ git source switching) and Ansible; pinned toolchains and tasks with mise. Containerized applications with Docker / Docker Compose; managed container images in Docker registries (Artifact Registry, GitLab Container Registry, ECR). Managed secrets with Vault (dynamic secrets, token-based access policies) and GCP Secret Manager. Set up and managed Kafka for event streaming and processing pipelines; administered Nginx and PostgreSQL (replication, backups). Managed identity across Google Workspace, FreeIPA, Keycloak and GitLab; administered Ubuntu Server environments and Proxmox virtualization. CI/CD Built and maintained CI/CD pipelines with GitHub Actions: build, test, image publishing and deployment workflows, reusable workflows, environment-based secrets and approvals. Deployed self-hosted GitHub Actions runners in Kubernetes (Actions Runner Controller) with autoscaling ephemeral runners. Maintained GitLab CI pipelines and GitLab Runners across multiple projects. Followed PR-based workflow with Conventional Commits on GitHub; automated routine tasks (backups, alerting) with Python and Bash. Observability & Incident Management Deployed the observability stack: Prometheus for metrics, Grafana for visualization; centralized logging via Elasticsearch, Fluent Bit and Kibana: log shipping, filtering, incident investigation. Managed Grafana as code with the Terraform provider: dashboards, folders, organizations, users and RBAC. Managed user access and roles as code. Built a real-time PagerDuty incident dashboard on the Infinity datasource: open and triggered incidents, urgency, filtering by assignee. Built a unified Sentry dashboard across on-prem and Cloud instances: unresolved, new, escalating and assigned issues. Built application-metrics dashboards for backend services: Temporal workflow and activity latency, transaction time, HikariCP pool, log-discard rate. Built a business-metrics dashboard: game supplier, platform and product trends, with delta by top suppliers; built a QA dashboard for game rollout tracking. Migrated the Elasticsearch dashboard to the new API version; refactored the ClickHouse dashboard. Designed a Slack bot that manages PagerDuty maintenance windows via the PagerDuty REST and Slack APIs Documentation Wrote and maintained technical documentation and incident runbooks in Confluence (alert response procedures, infrastructure and dashboard guides) to speed up on-call response and onboarding. DevOps Engineer | Kitsoft Jan 2024 – Dec 2024 Maintained and scaled Kubernetes (RKE2) clusters; managed workloads via ArgoCD — rollouts, rollbacks, service health monitoring. Built and maintained CI/CD pipelines using GitLab CI and GitLab Runners across multiple projects. Deployed observability stack: Prometheus for metrics, Grafana dashboards for visualization; centralized logging via Elasticsearch, Filebeat, Kibana — log shipping, filtering, and incident investigation. Configured service mesh with Consul (service discovery) and Vault (dynamic secrets, token-based access policies). Set up and managed Kafka for event streaming and processing pipelines. Managed VPN via OPNsense; configured Cloudflare DNS, SSL/TLS, and access rules. Administered AWS resources (EC2, S3, IAM, EKS, ECS) and MinIO. Containerized applications with Docker / Docker Compose; managed IaC via Ansible and Terraform; administered Nginx, PostgreSQL (replication, backups). Managed identity across Google Workspace, FreeIPA, Keycloak, GitLab; administered Ubuntu Server environments and Proxmox virtualization. Automated routine tasks (backups, alerting) with Python and Bash scripts. System Administrator | Megapolis Dec 2022 – Jan 2024 Maintained 6 Windows Servers and 2 Ubuntu Servers; administered Microsoft Active Directory: users, GPO, access rights. Managed network infrastructure via MikroTik: NAT, Wi-Fi, firewall, DHCP, L2TP. Configured VPN access (L2TP, OpenVPN). Deployed and managed VMs via Hyper-V and Proxmox; implemented backup solutions using Veeam and Proxmox Backup Server. Configured Nginx, worked with PostgreSQL, managed Microsoft 365 and Google Workspace. Automated tasks with Python and Bash. Built containerized environments with Docker. System Administrator (Internship) | UnicommMar 2022 – Oct 2022 Assembled and maintained an IoT sensor network for device monitoring. Developed the network interface supporting customer billing, fault detection, network management and data storage.

Radiotechnical Systems and Devices | Kyiv Electromechanical Professional College 2018 – 2022

Английский