Cloud Infrastructure Hands-On

Sergei Chesnokov

****.********@*****.***

347-***-****, Hallandale Beach, FL, 33009

https://www.linkedin.com/in/sergei-chesnokov-32b371124/ Professional Summary:

15+ years of experience in Network System Engineering across global enterprises.

6+ years of hands-on expertise in AWS DevOps, including services like EC2, S3, RDS, Lambda, and VPC.

Skilled in Terraform for Infrastructure as Code, streamlining deployment and scalability of cloud resources.

Proficient in GitHub Actions, Jenkins, and CI/CD pipelines to automate and enhance software delivery.

Designed and implemented Terraform modules to automate cloud infrastructure across AWS/GCP.

Integrated Harness.io to streamline CI/CD with secure artifact promotion and rollback strategies.

Enhanced pipeline quality using SonarQube for static code analysis and Artifactory for artifact management.

Hands-on with YAML configuration, aligning with modern SRE deployment standards.

Familiar with Helm Charts and Kubernetes, and integrating containerized services into production environments.

Understanding of SRE principles, with a focus on reliability, observability, and performance optimization.

Implemented AWS security best practices by integrating GuardDuty for continuous threat detection and Security Hub for centralized compliance reporting.

Automated vulnerability assessments with AWS Inspector across EC2 and container workloads.

Managed secure data encryption and access control using AWS KMS and IAM policies.

Supported cloud migration initiatives, ensuring secure, scalable, and automated network environments.

Strong collaboration and communication skills, aligning IT operations with business goals and timelines.

Strong background in network design and security, including LAN/WAN, VPNs, and Cisco firewall implementations.

Successfully optimized Cisco routers, switches, and wireless systems to maintain 99.9%+ uptime.

Experience with QoS, VLANs, and VPNs to ensure secure, high-performance enterprise networking.

Designed and implemented robust IDS/IPS protocols and managed Cisco ASA/Firepower firewalls.

Conducted RF surveys and spectrum analysis for optimal wireless connectivity and minimal interference.

Technical Skills:

Containerization: Docker, Kubernetes, Helm

Cloud Platforms: AWS, GCP, Azure

CI/CD Tools: Jenkins, GitHub, GitHub Actions

Configuration Management: Terraform, Ansible

Scripting Languages: Python, Bash, JSON, YAML

Monitoring: Prometheus, Grafana

Security: IAM, GuardDuty, AWS Inspector, AWS Key Management Service

Databases: MongoDB, PostgreSQL, SQL

Other: CloudFormation, ALB, Ingress, EKS, EC2, S3, IAM, Argo CD, Lambda, VPC Work Experience:

Digital Vertex Enterprises, Atlanta, GA/Remote December 2020 - Present Role: Cloud DevOps Engineer

Developed Security Architecture: Orchestrated and implemented advanced security measures, including encryption, access controls, and vulnerability assessments, increasing system security and compliance by 50%.

Implemented Infrastructure as Code (IAC): Utilized Terraform and Ansible for automated and consistent infrastructure deployments, enhancing efficiency and reliability.

Enhanced CI/CD Pipelines: Streamlined CI/CD processes with Jenkins, achieving a 40% reduction in deployment times.

Optimized Cloud Infrastructure: Managed AWS cloud resources, reducing operational costs by 30% through strategic resource allocation and optimization.

Managed Containerized Applications: Managed scalable, containerized applications using Docker, Kubernetes, and Helm, ensuring seamless service scalability.

Team Leadership & Collaboration: Guided cross-functional teams and independently managed projects, ensuring successful and timely delivery of key initiatives. CI/CD Pipeline Management with Jenkins and Terraform

Cost Optimization: Reduced infrastructure costs by 40% and setup time by 50% through CI/CD pipeline refinements.

Automated Resource Management: Developed AWS Lambda functions to automate test environments, cutting manual tasks by 90%.

Streamlined Reporting: Integrated AWS Cost Explorer API for automated cost reporting, enhancing budget adherence by 20%.

Automated, Scalable AWS Deployment with Kubernetes and CI/CD

Scalable Pipeline Design: Developed a CI/CD pipeline for a Flask/MySQL application, increasing user capacity.

High-Availability System: Deployed a reliable system using Docker, Kubernetes, and Helm, achieving 99.9% uptime and reducing downtime by 60%.

Deployment Acceleration: Streamlined deployments with Amazon EKS and Terraform, boosting efficiency by 30% and reducing setup time by 80%.

Enhanced VPC Security: Strengthened VPC configurations to secure the AWS environment, ensuring robust access controls and network isolation.

Integrated GitHub Actions to automate build, test, and deployment workflows, improving delivery speed and consistency.

Developed reusable GitHub Actions workflows for multi-environment deployments, enhancing pipeline maintainability and scalability. ArgoCD Implementation for Kubernetes Deployments

Automated Deployments: Integrated ArgoCD to automate Kubernetes application deployments, enhancing CI/CD efficiency.

GitOps Workflow: Implemented GitOps with ArgoCD for version-controlled, consistent, and traceable deployments.

Multi-Cluster Management: Configured ArgoCD for seamless multi-cluster deployments across development, staging, and production.

Helm and Monitoring Integration: Used Helm with ArgoCD for easy updates and rollbacks; integrated monitoring with Prometheus and Grafana.

Authored and maintained YAML configuration files for Kubernetes deployments, Helm charts, and ArgoCD GitOps workflows.

Defined Kubernetes manifests (Deployments, Services, ConfigMaps, Ingress) in YAML to manage scalable, containerized applications.

Created and versioned YAML templates for automated CI/CD pipelines, infrastructure provisioning, and monitoring integrations with Prometheus/Grafana. Accenture, Saint Petersburg, FL July 2016 – November 2020 Role: Software/QA/ DevOps Engineer

Used SQL for back-end database validation

Developed test cases against business requirements using TestRail.

Deep expertise in Amazon Web Services (AWS), including working with EC2, S3, RDS, Lambda, and VPC to design and manage scalable cloud infrastructures.

Proficient in using Infrastructure-as-Code (IaC) tools, such as Terraform, AWS CloudFormation, and AWS CDK, for automating the provisioning and management of cloud resources.

Hands-on experience with container orchestration platforms, primarily Kubernetes and Amazon EKS, to deploy, scale, and manage containerized applications in the cloud.

Performed smoke, functional, UI, API, and regression testing

Tracked and reported defects in Jira bug-tracking system

Regressed issues with previously released versions to understand where the break is. Bind-Rite Services Inc., New Jersey, NJ July 2015 – June 2016 Role: Network Engineer

Designed, deployed, and maintained secure, high-performance network infrastructure, including LAN/WAN, VPNs, and firewall configurations.

Diagnosed and resolved network issues, optimizing performance and ensuring minimal downtime through proactive monitoring and maintenance

Implemented network security protocols, including firewall rules, IDS/IPS, and access controls, enhancing overall network security.

Managed and configured routers, switches, and other networking equipment to support business operations and connectivity requirements. Foratec Communication JSC Sep 2004 - Nov 2014

Network System Engineer

Designed, implemented, and maintained enterprise-grade network solutions, including routing, switching, and firewall configurations using Cisco technologies.

Configured and managed Cisco routers and switches for LAN/WAN optimization.

Implemented QoS, VLANs, and VPN solutions to ensure secure and efficient data transmission.

Conducted regular performance monitoring and troubleshooting to maintain network uptime exceeding 99.9%.

Configured and managed Cisco wireless controllers and access points to provide seamless connectivity.

Conducted RF surveys and spectrum analysis to identify and mitigate interference issues.

Integrated wireless solutions with network authentication systems.

Managed the installation and maintenance of telecommunications base stations for seamless mobile and data communications.

Oversaw deployment, testing, and troubleshooting of base station equipment, including antennas, power supplies, and backhaul connections.

Ensured compliance with safety and regulatory standards during site installations and operations.

Collaborated with cross-functional teams to optimize network coverage and capacity.

Implemented robust security measures to protect network infrastructure against evolving threats.

Managed Cisco ASA/Firepower firewalls for perimeter security and intrusion prevention.

Conducted regular security audits and applied patches to mitigate vulnerabilities.

Enforced access control policies and monitored for unauthorized access.

Successfully upgraded a multi-site network infrastructure to improve performance and scalability.

Reduced downtime by 30% through proactive maintenance and real-time monitoring.

Designed a high-availability wireless solution for a corporate campus, supporting over 2,000 simultaneous users.

Technical Skills:

Cisco Technologies, Routing (OSPF, EIGRP, BGP), Switching (VLAN, STP), Wireless Network Design, Base Station Configuration, RF Survey, Network Security, VPNs, QoS, and Troubleshooting.

Education

Master’s Degree, Computer Science from Saint Petersburg State University of Aerospace Instrumentation 1987-1994

Contact this candidate