Roman Nabilskyi

DevOps / Site Reliability Engineer

image

DevOps and site reliability engineer in Kyiv. Builds and operates AWS and Kubernetes infrastructure with Terraform, EKS, Helm, and CI/CD, from production on-call through cost and reliability work. Earlier work covers NOC, monitoring, and system administration.


Work Experience

DevOps Engineer

Yotpo | September 2022 - Present

Kyiv, Ukraine. AWS, EKS, EC2, IAM, Route53, RDS, MSK, S3, VPC, CloudFront, Terraform, Helm, Argo, GitHub Actions, Jenkins, Prometheus.

  • Develop and maintain AWS infrastructure with Terraform Cloud, including EKS, MSK, RDS, S3, IAM, ALB, and Kong.
  • Upgrade EKS and Terraform modules, including breaking changes.
  • Maintain Helm-based Kubernetes deployments and write internal Helm charts.
  • Handle production incidents and on-call for infrastructure and Kubernetes.
  • Support application deployment and runtime issues in Kubernetes, GitHub, Jenkins, and AWS.
  • Run monitoring and logging with Prometheus, Grafana, and Elasticsearch.
  • Track cloud cost and investigate spend spikes.
  • Maintain legacy infrastructure and Chef recipes.
  • Write post-mortems after production incidents.
  • Cut infrastructure cost with Reserved Instances, Graviton, removal of unused EBS, RDS, EC2, and ELB, CastAI for EKS spot capacity, and tighter Kubernetes requests, limits, replicas, and autoscaling.
  • Moved resources to Terraform Cloud and off Chef, and added Karpenter as a fallback scaler.

DevOps Engineer

Windward | July 2021 - August 2022

Kyiv, Ukraine. AWS, EKS, EC2, RDS, IAM, S3, Terraform, Ansible, Chef, Jenkins, Docker.

  • Deploy services to AWS with Terraform.
  • Improve CI/CD with developers, including new and existing Jenkins jobs.
  • Build and update Docker images and Jenkins pod templates.
  • Take part in DevOps escalations and on-call.
  • Added EC2 Instance Connect so hosts can be reached without a long-lived SSH key, with IAM policies for admin, dev, and QA.
  • Upgraded the Jenkins controller and moved agents to EKS, which cleared the job queue.
  • Converted Jenkins freestyle jobs to pipelines with shared libraries, including a Java deploy pipeline.
  • Upgraded self-hosted Confluence to the latest LTS.

DevOps Engineer

EZ Texting | January 2018 - July 2021

Kyiv. GCP, CentOS, Ansible, Terraform, Packer, ELK, Zabbix, Prometheus, Grafana, Jenkins.

  • Run production and stage deploys with Ansible and Jenkins.
  • Deploy VMs on Google Cloud with Terraform.
  • Keep Ansible and Terraform in GitHub.
  • Add Zabbix and Prometheus monitoring, plus Datadog integrations.
  • Tune the ELK stack under load, including during elections.
  • Debug production issues with Zabbix, Prometheus, Pingdom, ELK, and Datadog, and run smoke tests after releases and hotfixes.
  • Deployed an ELK hot-warm stack with RabbitMQ buffering millions of log messages per day.
  • Deployed Prometheus and Grafana for datacenter and GCP metrics.
  • Added Datadog integrations for RabbitMQ, PHP, PHP-FPM, Kubernetes, PagerDuty, and Logstash, and New Relic for Java.

NOC Engineer / NOC Team Lead

CallFire | February 2015 - January 2018

Kyiv. GCP, CentOS, Zabbix, Ansible, Asterisk, PagerDuty, ELK.

  • Monitor stability with Zabbix and ELK, debug production issues, write downtime reports, and contact vendors during emergencies.
  • Deploy Zabbix checks with Ansible and keep documentation current.
  • On-call rotation.
  • As team lead: train NOC engineers, send weekly reports, and work with other teams on monitoring and process changes.

System Administrator

Innovecs | February 2013 - February 2015

Kyiv. Windows Server 2012 Active Directory, Windows 7, Cisco, HP, Aruba, Asterisk, Office 365, Zabbix.

  • Support more than 150 users in the head office and branch, and keep infrastructure available around the clock.
  • Select, install, and configure hardware and software, and repair workstations.
  • Run Windows Server, CentOS, Asterisk, Atlassian, Office 365, Hyper-V, the corporate website, 1C, and backups.
  • Set up Hyper-V for production VMs, a second domain controller, Windows Deployment Services for unattended Windows 7 and 8 installs, FortiGate SSL-VPN with Active Directory LDAP, and Zabbix.

Junior System Administrator

Govitall.com | November 2011 - February 2013

Kyiv.

  • Technical support through the issue tracker.
  • Install and monitor workstations, and connect printers, scanners, routers, and IP phones.
  • Install and configure Windows Server 2003, Active Directory, and Group Policy.
  • Configure the access control system.

Help Desk

КНДІСЕ | December 2009 - February 2012

Kyiv. First job.

  • Help desk for operating systems and software.
  • Repair laptops, PCs, and peripherals.
  • Help build structured cabling.