Alex s

Intro

Kubernetes and Cloud-Native Specialist | Helm Charts | Cluster Lifecycle Management | OpenShift & Rancher Expertise HashiCorp Vault Expertise: Custom Docker implementations for token generators, webhooks, and specialized scripts Fine-grained RBAC policies Multi-environment management with CI/CD promotion pipelines Infrastructure as Code: Terraform, Terragrunt, OpenTofu Comprehensive monitoring/auditing with Prometheus/Grafana, security compliance Documentation: SOPs, runbooks, ADRs, architecture diagrams POC development for new features and architectural improvements Technical Stack: HashiCorp VaultOpenTofu • ArgoCD • Keycloak • cert-manager • GitLab CI/CD • Backstage • GCP/AWS/Azure • Prometheus • Grafana • FluxCD • Ansible Kubernetes: cluster management, deployment, scaling, upgrades Helm: building Helm charts, publishing Helm charts, chart repositories, Helm upgrades, Helm hooks Kustomize: custom resource definitions (CRDs), environment overlays, patching Cluster Lifecycle Management: multi-cluster management, cluster upgrades, automation, autoscaling, high availability (HA) Infrastructure Monitoring: Prometheus, Grafana, logging, alerting, Kubernetes observability OpenShift & Rancher: managing large-scale environments, 300+ clusters, cluster provisioning, OpenShift Operators, Rancher multi-cluster management CI/CD & GitOps: GitHub Actions, GitHub Workflows, continuous integration (CI), continuous delivery (CD), deployment pipelines Security: Kubernetes RBAC, Secrets management, certificates, security policies, Kubernetes auditing eed security maintenance and remediation efforts for customer extensive fleet of Kubernetes clusters, ensuring consistent compliance across all environments. Developed automation tools in Python to streamline the creation, maintenance, and security of over 1,000 AKS clusters globally. Designed and implemented CI/CD pipelines for cloud-native applications, leveraging Skaffold and Kaniko for in-cluster container builds, providing developers with a unified local-to-production workflow. Configured and managed self-hosted GitHub runners for multi-region Kubernetes clusters, enabling continuous integration and deployment with Flux CD. Established OIDC integrations for secure workload interactions between Kubernetes, Vault Enterprise, and GitHub Actions. Built Kubernetes admission controllers for enforcing ingress policies in multi-tenant environments, enhancing security and tenant isolation. Developed Helm charts for microservices to automate post-cluster setup, including Rancher onboarding and CI/CD pipeline integration.

Links