Description

Senior Platform / DevOps Engineer with 6+ years delivering production-grade Kubernetes infrastructure, GitOps pipelines, and full-stack observability for cloud and on-premise environments.

I take ownership of the full platform lifecycle — from cluster provisioning and GitOps delivery with ArgoCD, to secrets management with HashiCorp Vault, service mesh with Linkerd, and end-to-end observability with Prometheus, Grafana, Loki, Tempo, and Thanos. Infrastructure as Code with Terraform and Ansible across multi-environment setups (DEV/TEST/UAT/PROD).

Previous roles include AWS infrastructure ownership at a PCI-DSS regulated fintech — ECS, EC2, Lambda, VPC, IAM, KMS, WAFv2, Shield — full lifecycle from provisioning to cost optimisation.

Outside client work I run a self-hosted Kubernetes homelab, local LLM inference stack, RAG pipeline, and live observability — because staying sharp means owning the full stack.

📊 Live Grafana: Available for fully remote EU contracts · B2B · €50/hr · €400/day

Core skills: Kubernetes · EKS · OKE · ArgoCD · Helm · Terraform · Ansible · Jenkins · Docker · AWS · Prometheus · Grafana · Loki · Tempo · Thanos · Vault · External Secrets Operator · Linkerd · CrowdSec · Linux · Bash · Python

Languages

English
Native or bilingual
German
Basic

Workplace preferences

Remote only

Primarily works remotely

Media IT Services Bulgaria (Otto Group)
Senior Platform Engineer
August 2024 - Today (1 year and 10 months)
Plovdiv, Bulgaria
Production Kubernetes
• · GitOps
◦ · Full Observability Stack
◦ · Secrets Management
◦ · IaC
◦ · Remote
• • Managing multi-environment production Kubernetes clusters (DEV/TST/INT/PRD) with GitOps via ArgoCD and Helm; zero-downtime rollout strategy across all environments
• • Full observability stack: Prometheus, Grafana, Loki, Tempo, Fluent Bit, Linkerd service mesh - end-to-end distributed tracing and alerting in production
• • Secrets management: HashiCorp Vault + External Secrets Operator - zero plaintext secrets, automated rotation
• • Infrastructure as Code with Terraform (modularised, linted, version-controlled); Ansible for OS patching, SSL certificate lifecycle, configuration management
• • CI/CD with Jenkins; containerisation with Docker and Podman
• • Resolved Vault Oracle plugin Alpine/musl binary incompatibility - rebuilt image on debian:bookworm-slim, patched docker-entrypoint.sh bash substring syntax
• • Executed SonarQube staged upgrade 10.3 -> 10.7 -> 24.12 -> 26.1 -> 26.3 with zero data loss across calendar versioning boundary
Kubernetes Gitlab Terraform Argo CD Ansible
eMerchantPay LTD
AWS DevOps Engineer
April 2022 - July 2024 (2 years and 3 months)
AWS Infrastructure
• · PCI-DSS
◦ · Jenkins
◦ · Terraform
◦ · Puppet
◦ · Ansible
• • AWS infrastructure ownership: KMS, ECS, ECR, VPC, ACM, S3, EC2, API Gateway, Lambda, Shield, WAFv2 - full lifecycle from provisioning to cost optimisation
• • CI/CD with Jenkins including performance tuning and pipeline optimisation; IaC with Terraform
• • PCI-DSS compliant environment - nginx hardening with ModSecurity WAF; security controls across all tiers
• • Configuration management with Puppet and Ansible; Docker image and container management; vCenter/VMware operations
DXC
AWS DevOps - JEE Web & Middleware Support Engineer
March 2021 - March 2022 (1 year)
AWS CloudFormation
• · Datacenter Migration
◦ · Java Middleware
◦ · ITIL
• • AWS infrastructure deployment via CloudFormation templates; supported datacenter migration to hybrid cloud
• • Java middleware administration: Tomcat, WebSphere; ITIL Change Management processes