English:
Upper Intermediate
Dmytro S.
Vetted by YouTeam
Ukraine
UTC +02:00
Ukraine/Kyiv
English:
Upper Intermediate
Senior DevSecOps
I am an IT Engineer with 20+ years of experience in the IT industry. My background includes programming experience, network and systems management, tuning, security strategy, and network solutions for hosting high-load web services, both on-premises and in the cloud. I have experience in managing and ensuring the security of medium sized environments (thousands of) virtual instances through automated deployment and monitoring systems. Achieving an acceptable balance between security and management convenience is a complex task that requires a comprehensive approach, which has been implemented through a modern approach to the development and deployment process, as well as compliance with security requirements. This is something that I have been able to successfully handle. For the past 7 years, I have been focused on ensuring the security of small and medium-sized cloud accounts.
Want to hire this engineer?
Check if Dmytro is availableExpertise
Years of commercial development experience
20 years of experience
Core technologies
Project Highlights
NDA
May `21 - Dec `23
3 years
The company provides software for supply chain visibility.
Responsibilities & achievements
- Managing WAF and network protection. - Managing and customizing SAST and DAST tools. - Managing and customizing network, application, account permission, repository security, etc., scanning tools. - Developing IaC (AWS CDK) and CI/CD (Teamcity) pipelines to seamlessly integrate everything into the cloud. - Conducting penetration testing and updating the regular pentest report. - Developing and coordinating the implementation of security policies, procedures, and best practices for AWS accounts, web platform components, and infrastructure. - Performing reviews of infrastructure code from a security standpoint. - Optimizing security tooling and automating recurring tasks.
CommPeak
Feb `20 - May `21
1 year
Telecommunications. CommPeak makes cloud-based business communication easier and more affordable, empowering people with superior quality products. Our modularly available solutions enable companies to create highly customized solutions based on their unique business models.
Responsibilities & achievements
- Configuration management of a swarm of virtual machines (VoIP/SMS services) in cloud and hybrid hosting services through SaltStack and Terraform - Automatic log collection from numerous virtual and physical computers using the ELK stack - Deployment and management of a distributed ELK cluster - Deployment and management of an object distributed storage cluster Minio - Creation and maintenance of a container-based on-demand VPN service delivery system - Writing and refactoring deployment and service maintenance modules on Python - Deployment and management of on-premises clusters based on the DRBD distributed data storage service and the Nomad container orchestration service - Development and implementation of a centralized firewall management secure system, scalable to thousands of instances - Deployment and management of a Vault cluster for centralized storage of sensitive information used in infrastructure deployment through Salt - Writing APIs for managing the on-demand multiservice deployment system - Deployment of Qualys and Nessus network and infrastructure scanning systems - Development and implementation of an SMS provider emulation system
Bazaarvoice
May `18 - Feb `20
2 years
Building smarter shopper experiences across the entire customer journey.
Responsibilities & achievements
- Building automated vulnerability scanning systems for mid-sized AWS cloud accounts (around 100,000 assets/10,000 instances) - Investigating and integrating to cloud third-party tools for security checks - Resolving security incidents Technologies: AWS stack: CloudFormation, IAM, EC2, Lambda, S3, Glue, Athena, GuardDuty, SecurityHub, Secret Manager, SES, DNS(route 53), CloudFront; scripting: python, bash; devops: serverless, CF, packer, terraform; scanning/security tools: Alertlogic, Rapid7, VMware Cloud Services, OpenVAS, Tenable.io, Prowler, StreamAlert, Wazuh, Panther Labs, etc.
Stylepit
May `15 - May `18
3 years
Retail Apparel and Fashion
Responsibilities & achievements
- Administration, development and security audit of corporate multi-system private cloud( around 150 servers) and networks (internal/external IPs, NAT, firewalls, VPNs, storage iSCSI, etc...). - Web services optimization - Penetration testing - Security incidents resolving. - VoIP services administration and security. Technologies: vendors: Dell, Cisco (catalyst, ASA, wireless); network: IP, SAN; virtualization: VMware, hyper-V; containerization: docker, kubernetes; OS: Linux debian/RHeL, windows server 2008/12/16, Microsoft Dynamics NAV, DBS: mssql, mongodb, postgre; search: solr, elastic; webservers: IIS, nginx, tomcat; CDN: Akamai, Fastly; monitoring: zabbix; CI/CD: git, TeamCity, atlassian tools.
Sinergia - SIP wholesale
Jan `14 - May `15
1 year
Commercial VoIP traffic transit. Wholesale sip trunking.
Responsibilities & achievements
Administration and maintenance VoIP services, security audit, incident resolving Technologies: KVM, FreeSwitch.
Education
Higher education in Computer Science
Agency
100-400
GMT+2
Krakow/Poland, Dnipro/Ukraine
Core Expertise
Industries
Education & Science, Logistics & Transportation, Banking & Finance, Construction & Real estate, Healthcare & Medicine, Data Science & Machine Learning, Big Data, Automotive, SaaS, Point-of-Sale
Want to hire this engineer?
Check if Dmytro is available