Matvey Aleksandrov

DevOps Engineer (Kubernetes, Cloud, SRE)

Saint Petersburg
Full-time • Remote / Hybrid • Ready to relocate
Copied!

Summary

DevOps Engineer specializing in Kubernetes, GitOps, and modern network security (eBPF, Cilium, Service Mesh). Experienced in architecting multi-cloud solutions with Terraform, building streamlined CI/CD pipelines, and automating workflows using Python. Focused on service reliability (SRE) and FinOps practices (autoscaling, cloud cost optimization).

Work Experience

Human Help |DevOps Engineer (EdTech • Yerevan, Armenia)

Mar 2025 – Aug 2026

Built DevOps processes and the startup's cloud architecture from scratch in close collaboration with the development team.

  • Designed a highly available multi-cloud architecture (Selectel, Hetzner, Cloudflare) using Terraform.
  • Reduced monthly infrastructure costs by 2.5x through autoscaling (HPA+Karpenter) and Spot instances.
  • Deployed Cilium and Service Mesh to ensure secure and observable communication between microservices.
  • Automated CI/CD processes using GitLab CI and implemented a GitOps approach for application deployment via ArgoCD.

MTS |DevOps Engineer (BigTech • Moscow)

Sep 2024 – Mar 2025

IT subsidiary of the largest telecom operator in Russia.

  • Implemented proactive server defense against brute-force attacks by configuring fail2ban and nftables integration.
  • Configured centralized authentication (SSO) for internal Git hosting (Forgejo) via Keycloak, simplifying access management for development teams.

Projects

Zytro |R&D Project

2023 – 2024

Designing and developing a private mesh network architecture based on WireGuard. The project won 2nd place at the SUAI scientific and technical conference (2023).

  • Deployed and configured a WireGuard-based VPN server, set up basic network routing (iptables) in Linux.
  • Wrote a managing Python Telegram bot: the bot generated encryption key pairs for new network devices.
  • Restricted SSH access to server infrastructure, allowing connections exclusively inside the private perimeter (WG -> SSH).

Technical Skills

Infrastructure:
KubernetesDockerLinux
IaC & CI/CD:
GitLab CIArgoCD (GitOps)HelmTerraformAnsible
Network & Security:
Gateway APICiliumService MesheBPFEnvoyKeycloakVault
Databases & Brokers:
PostgreSQLRedisNATS
Monitoring:
VictoriaMetrics StackPrometheusGrafana
Development:
PythonBashGolang

Education

Self-education

Languages

  • Russian — Native
  • English — B2