Sasha – AWS, GCP, Terraform

A large-scale e-commerce platform for a global home improvement and construction supplies retailer, supporting high-traffic online shopping experiences, product discovery, order management, and customer-facing digital services.

• Managed a GKE Fleet spanning multiple production Kubernetes clusters provisioned via Terraform, standardizing multi-cluster operations, high availability, and scaling strategies across environments;
• Enabled canary releases using Argo Rollouts to reduce deployment risk and improve release reliability. Operated Linkerd service mesh to guarantee mTLS compliance and deliver granular traffic telemetry across the microservices;
• Integrated Wiz, SonarQube, and Trivy into CI/CD pipelines to automate security and compliance checks, enforce vulnerability scanning policies, and prevent non-compliant workloads from reaching production environments;
• Created GitHub agentic workflows to summarize incident logs and automate routine diagnostic queries, reducing manual triage time and improving response efficiency.

A large-scale e-commerce platform for a well-established jewelry retailer. The project focused on enhancing the online shopping experience, implementing customer-facing features, and supporting scalable digital commerce solutions for a high-volume retail business.

• Orchestrated the migration of core services from GCP to AWS, simultaneously transitioning infrastructure-as-code from Terraform to AWS CDK. Engineered programmatic, reusable CDK constructs;
• Migrated legacy Jenkins pipelines to GitHub Actions with self-hosted EKS runners (ARC), standardizing deployments via Helm and significantly improving developer deployment frequency;
• Maintained high-availability stateful systems, including PostgreSQL (Patroni) and distributed Kafka clusters. Built and scaled a ClickHouse analytics cluster for high-throughput data ingestion;
• Deployed VictoriaMetrics as a scalable backend for Prometheus metrics, integrated with Grafana dashboards, and implemented a centralized logging pipeline using Fluent Bit and OpenSearch;
• Built CLI tools in TypeScript and Python to streamline developer onboarding, handle secure secret rotation, and eliminate operational bottlenecks for product teams.

Contributed to the development of enterprise-grade payment solutions for a global financial technology platform. The project focused on building scalable, secure systems to support digital payment processing, transaction workflows, and integrations within a high-availability fintech environment.

• Developed and maintained Terraform modules for AWS infrastructure, contributing to the migration of legacy CloudFormation resources and supporting automation across AWS and VMware environments;
• Hardened Linux environments using Ansible; automated PostgreSQL backups and HashiCorp Vault secure secret rotations via Python and Bash scripting;
• Refactored Jenkins and GitLab CI pipelines to utilize ephemeral Kubernetes agents, optimizing build resource consumption and execution speed;
• Developed a self-service staging environment provisioning tool using Python and the GitLab API, implementing automated TTL teardowns to enforce FinOps best practices and to control cloud costs.

A digital platform for vehicle maintenance and service operations. The project focused on streamlining service workflows, improving operational efficiency, and supporting customer-facing and internal management features within the automotive domain.

• Deployed and maintained the automotive service platform on Linux-based hosting, ensuring high availability and stable production operations;
• Designed and maintained CI/CD pipelines to automate application build, testing, and deployment processes;
• Managed Linux servers, web servers, SSL certificates, DNS configuration, and application environments;
• Implemented infrastructure monitoring, logging, and alerting to improve system reliability and reduce downtime.