
I have worked in the IT industry for more than 12 years. During this time, I have gained significant experience in working with Linux, networked devices, databases, web servers, and more. Today, I am capable of developing, building, and supporting robust and secure production infrastructures of various sizes, ranging from mid-sized setups to geographically separated large-scale solutions. I also have experience in working with and managing teams.
My work is not just a job; it's my main hobby, and I devote most of my free time to developing my professional skills.
- Choosing the direction of the work of my team.
- monitoring the implementation of intermediate tasks.
- infrastructure procurement planning.
- Other managerial functions.
Business company requires from infrastructure high
- availability (SLA for partners)
- data security (PCI DSS )
- manageability (simple, fast and reliable code delivery to productive system, and convenient system managment.)
My task is to implement services in accordance with these requirements.
I'm designing, implementing ans support a 24x7x365 Server Infrastructure based on Debian Linux.
I spend part of my time automating and modernisation my current infrastructure, make serviseces high availibly.
We are using this stack:
web:
Nginx, php-fpm, apache (with mod_security), haproxy, tomcat, jboss, wildfly
DataBase's:
Postgresql 13, replication, logical replication and more.
Mysql-percona (Size ~ 4TB and qps about 1500), mongo, elk, influxdb.
Monitoring: Zabbix, nagios, grafana, prometeus (in implement stage )
Virtualisation: KVM, Lxc. Proxmox with Cpeh. Docker, managment: Ansible .
Deploy and build: Jenkins .
Support Network infrastructure, based on Cisco
We are also use (RabbitMQ,pm2, go,corosync and pacemaker) and more.
Server administration
Based on RHEL and Centos 6.
- Support mail system based on postfix.
- Build and support IPS based on Snort.
- Writing scripts automation on bash and perl.
- Build and support monitoring system based on nagios
- introduction virtualization based on kvm.
- Support DNS based on Bind.
- Network infrastructure support. Cisco AsA, Cisco 18xx, 26xx, 28xx, 29xx, Catalyst 2600 series. In my work I was use eigrp, bgp, ospf, and link aggregation .
- Ensuring the availability of all systems and network equipment in 24x7 mode and compliance with the PCI DSS standard.
- Direct participation in PCI DSS audits, on plce interview.
- My area of
responsibility was infrastructure network and server (Linux only) small banking processing.
- Minimal skill forking with IBM AIX platform.
- Where data security and infrastructure availability were top required.
Support server of virtual hosting based on FreeBSD and CentOS.
Support
- web (high availability)
typically based on nginx+apache, php/mysql stack.
- mail (Exim/dovecot)
- Hypervisor's based on KVM/Xen/
- Container FreeBSD Jail