Laurentiu – Kubernetes, AWS, Unix

An internal Kubernetes-based platform providing infrastructure provisioning, application lifecycle management, and shared services for engineering teams. The platform supports hybrid deployments across on-premises, air-gapped, customer-managed Kubernetes environments, and AWS, enabling standardized infrastructure operations, security, observability, and automated software delivery.

• Led the architecture and product development of an internal Kubernetes platform, defining its roadmap, gathering requirements from engineering teams, and translating them into actionable development tasks;
• Designed a hybrid deployment architecture supporting on-premises, air-gapped, customer-managed Kubernetes clusters, and Amazon EKS, implementing a Go-based Day-1 provisioner with Terraform integration;
• Developed Kubernetes operators in Go to extend Kubernetes APIs and automate infrastructure lifecycle management, alongside secrets management and decoupled shared platform services;
• Implemented GitOps-based CI/CD workflows using GitLab and Argo CD to automate platform and application deployments;
• Integrated security controls into CI/CD pipelines, implementing custom OPA/Rego policies with Trivy and release gates using Black Duck, Polaris, and Nessus;
• Designed and implemented an OpenTelemetry-based observability architecture using the OpenTelemetry Operator, Grafana LGTM stack, and MinIO across hybrid deployment environments;
• Built and maintained AWS-based engineering infrastructure, including release environments, automated regression testing, and Coder development workspaces;
• Developed AI-assisted engineering workflows using Claude Code, Codex, Devin, and MCP integrations to support requirements analysis, implementation, and code review.

An internal Kubernetes-based platform providing product teams with a portable and resilient runtime for application deployment and management. The platform supports configurable infrastructure, storage, networking, and availability models, along with automated software delivery and integration with third-party managed Kubernetes services.

• Architected and developed an internal Kubernetes platform, translating engineering teams' functional and non-functional requirements into reusable templates and integration patterns;
• Designed and implemented deployment automation and GitOps-based CI/CD workflows using Bamboo and Flux CD;
• Defined platform resilience capabilities, including configurable infrastructure and storage options, replication models, availability levels, geo-redundancy, and multi-network support;
• Introduced chaos engineering practices using Chaos Mesh, Litmus, and Chaos Toolkit to validate platform resilience under simulated failure conditions;
• Extended platform portability to third-party managed Kubernetes services, reducing dependency on a single deployment environment;
• Built cloud-based development environments using code-server and preconfigured engineering stacks to simplify developer onboarding and environment setup;
• Designed and implemented automated testing frameworks using Go and Ginkgo for infrastructure validation and Python with Behave (BDD) for service-level testing.

A private cloud infrastructure initiative focused on migrating seven telecommunications products from bare-metal environments to an ETSI NFV-aligned OpenStack platform. The project also included a shared Operations, Administration, and Maintenance (OAM) virtual network function providing centralized analytics, storage, software repositories, and fault and performance management across application VNFs.

• Coordinated the migration of seven telecommunications products from bare-metal infrastructure to an ETSI NFV-aligned OpenStack private cloud, using Nokia CBIS for infrastructure management and CBAM for VNF lifecycle management;
• Led the requirements, architecture, and development of a shared OAM VNF, providing centralized analytics, storage, software repositories, and fault and performance management for seven application VNFs;
• Designed distributed analytics infrastructure using Elasticsearch clusters across three sites (24 nodes per site) with cross-cluster search, alongside an 18-node GlusterFS cluster for scalable shared storage;
• Automated infrastructure provisioning with OpenStack Heat templates and configuration management using approximately 20 Chef cookbooks and over 10 roles;
• Designed and automated the cloud deployment of a WiFi database server spanning six server types, five networks, and persistent volumes, using Heat, Bash, and over 50 Ansible roles; automated qcow2 image creation with diskimage-builder;
• Proposed and implemented the migration of internal lab infrastructure from VMware to OpenStack, including KVM virtualization, networking, DNS, LDAP, and Elastic Stack monitoring;
• Implemented CI/CD pipelines and automated regression testing using Jenkins, GitLab, OpenStack, Heat, Docker, Docker Swarm, and internal tooling;
• Contributed to telecommunications application development using C++/ACE and Java, including dynamic statistics and real-time device query functionality for an Equipment Identity Register.

An enterprise device monitoring solution featuring a JavaFX-based desktop application for monitoring and managing device information.

• Developed and maintained features for a JavaFX-based desktop application supporting device monitoring;
• Maintained the project's CI/CD pipeline to support automated builds and release validation.

Backend telecommunications systems supporting online charging, usage metering, and billing operations. The solutions ran on Solaris and Linux infrastructure, enabling session-based charging, credit control, and usage tracking.

• Designed and developed a C/C++-based data-metering solution for online session-based charging, usage tracking, and credit control;
• Developed and maintained backend billing components running on Solaris and Linux;
• Improved regression testing for legacy C applications by integrating static analysis, Valgrind, and code coverage tools to support code quality and defect detection.