maggnixx

Own the full delivery lifecycle across 6 production Kubernetes clusters (~1,100 Deployments/StatefulSets in the largest) and ~3,000 GitLab repositories, delivered via ArgoCD (GitOps), in a 5-person infrastructure team. Replaced Werf-based builds with docker buildx / BuildKit pipelines, cutting build times by ~30% across the repository fleet; run Harbor as the private registry with Trivy vulnerability scanning and SonarQube static analysis in CI. Initiated the platform core, built it from scratch, and run it single-handedly: Vault + External Secrets, Cilium networking, cert-manager, Kyverno admission policy (audit-first rollout), Nginx/HAProxy load balancing, Prometheus/Grafana observability. Support day-to-day operations of the data layer — PostgreSQL (CloudNativePG) and MySQL clusters, Weaviate vector DB, RabbitMQ and Kafka: backups, incident response, performance troubleshooting. Drive platform architecture decisions and guardrails: no kubectl-apply from CI, policy-as-code before enforcement, staged rollout of progressive delivery.

Built and maintained GitLab CI delivery for the decomposition of a monolithic credit-scoring system into ~50 microservices in production on on-premise Kubernetes: multi-stage pipelines per environment (dev/stage/prod), image reuse across stages, automated tests and quality gates. Brought order to an undocumented legacy estate: reverse-engineered and drew the complete system-architecture and network-interaction diagrams of the scoring system from scratch, authored the infrastructure regulations, and onboarded the development and analytics teams on how the project works and how to run it going forward. Embedded banking-grade security into CI/CD: static analysis and vulnerability scanning at build stages, strict artifact control, image versioning, environment isolation. Ran the observability stack (Prometheus, Grafana, ELK), deployed and administered Sentry, automated production processes in Bash/PowerShell, and participated in the ArgoCD (GitOps) adoption.

Administered Linux infrastructure (CentOS, Debian, Ubuntu, OpenSUSE) and a fleet of 1,200+ workstations and laptops: diagnostics, incident resolution, automation with Bash and PowerShell. Diagnosed and resolved network issues across the provider's infrastructure on Cisco, MikroTik, Huawei and Juniper equipment: TCP/IP, routing, DNS.