Experience
Infrastructure as Code
- Manage multi-cloud DNS and edge infrastructure in
Terraformacross Cloudflare, Hetzner Cloud, and OVH — 800+ zones, WAF and rate-limiting policy, custom hostnames, and enterprise CDN onboarding for dozens of consumer-facing brands. - Build and maintain a 50+-role Ansible fleet covering frontend/backend app servers, databases, proxies, and monitoring nodes, with separate inventories for dev, staging, and production.
Observability & Reliability
- Run the monitoring stack end to end: Prometheus and Grafana for metrics, Loki/Alloy/Promtail for log aggregation, Tempo for tracing, and Blackbox/node/MySQL/Redis exporters for external and host-level checks.
- Built automated status pages — inventory, VPN users, Cloudflare stats, alert digests — generated and redeployed on every change via CI.
Data & Messaging
- Operate MySQL/Percona clusters alongside ClickHouse, Kafka, RabbitMQ, and Redis/Valkey services.
Networking & Access
- Administer Pritunl VPN with org-scoped access control across a dozen business units, plus WireGuard and iptables.
- Manage Cloudflare WAF/rate-limit policy and Squid whitelisting, generating and shipping PAC files through CI on every relevant change.
CI/CD & Automation
- Maintain a GitLab CI pipeline — path-scoped builds, tests, and deploys.
- Write Bash/Python tooling for general work automation, geo-routing checks, and documentation publishing.
Previous Experience
SDLC and release-engineering support for a regulated banking & capital-markets team: environments, pipelines, and deployment tooling inside a large enterprise IT-services setup.
Owned IT end to end across the group: ERP rollout, a warehouse management system, a new logistics center, and a mobile app, plus the cross-department automation and management accounting behind them.
Introduced modern IT practices and led ERP system development, managing a team of on-site staff and contractors.
Grew from hands-on sysadmin work into department leadership over a decade, building the company's IT infrastructure and management-accounting systems from the ground up, including an in-house-to-colocation server migration with minimal downtime.