Principal Systems Engineer
CCBILL
Keywords
Skills
Linux system administration, Virtualization, Linux, CentOS, OpenSUSE, Ubuntu, Debian, Xen Server, Windows, Docker, VMWare ESX 6.x, VMWare NSX-t, AWS EC2/VPC, Oracle OCI, Programming, bash, awk, expect, ruby, Postfix, Dovecot, Amavis, Squid, HAProxy, OpenVPN, Git, Apache HTTPD, Tomcat, Nginx, Hadoop, Pentaho, ActiveMQ, Sensu, Spacewalk, Puppet, Ansible, Chef, Kubernetes, Jenkins, Bamboo, Bitbucket Server, SonarQube, Artifactory, Prometheus, Grafana, Sensu GO, Hashicorp Vault, Consul, MySQL, MongoDB, Postgresql, IBM Informix, Devops, VMWare ESX, MySQL CE 5.6 and 5.7, HTTPD, perl, DNS, CI/CD, compilers, java, Spring Boot, Hashicorp, Continuous Deployment, cloud, key management, CentOS5, CentOS6, PCI-DSS, GitHub, aws, ec2, Zabbix, middleware, database, Apache, MySQL configuration, Cloudera, Backup, Symantec Backup Exec, Symantec Backup Exec System Recovery, Windows Server Backup, StorageCraft backup, Server administration, backups, DHCP, MS Exchange Server, Linux systems, PXE Server environment, Kickstart and network installs, filesystems, firmware, user administration, printer, nagios, OTRS, ITIL, Wavelink Avalanche Server (mobile device management platform, Windows server, LAN/WANs, Remote-Access, Lan, VPNs, Cisco, Xen, VMWare's ESXi, Informix database, JBOD, netapp, erp system, script
Project history
03/2019
-
03/2022
Provided administration, architecting, and automating services in a primarily
VMWare ESX environment for the CCBill fintech payment system based on CentOS,
Standalone/Embedded Tomcat, MySQL CE 5.6 and 5.7, HTTPD and various legacy
services/scripts running on perl.
* Migrated on-premise infrastructure services in 3 different sites (DNS,
CI/CD, Monitoring, Git etc) from old VMWare ESX datacenter to a new
reliable, redundant, locally-hosted data centers using WMWare's NSX-t as
network virtualization technology.
* Deployed and maintained brand new Puppet Enterprise 2019 architecture
with single Puppet server(single site) and multiple compilers located in
different sites for consistent host configuration across the multi-tenant
environment.
* Introduced, deployed and maintained Prometheus stack including
Alertmanager, Karma, Grafana, Blackbox Exporter, Node Exporter etc. for
monitoring/alerting as Sensu Enterprise replacement.
* Automated monitoring, discovery of internally built java components based
on Spring Boot 2 using Prometheus. Automated Grafana dashboard deployment
per service/project/team.
* Introduced and deployed Code Properties Management system based on
Hashicorp's Vault, Consul and Consul Template. Integration with pre
existing Continuous Deployment Subsystem based on Jenkins and Ansible.
* Key role in migrating multiple Jenkins environments to a brand new
end-to-end CI/CD coverage system based on Jenkins integrated with
Kubernetes. Main goal achieved was speeding time to production and
automating code quality checks to conserve developer time and velocity.
* Key role in deploying Sensu Go as a monitoring solution for Fortanix DSM
(cloud based key management service used by our clients).
VMWare ESX environment for the CCBill fintech payment system based on CentOS,
Standalone/Embedded Tomcat, MySQL CE 5.6 and 5.7, HTTPD and various legacy
services/scripts running on perl.
* Migrated on-premise infrastructure services in 3 different sites (DNS,
CI/CD, Monitoring, Git etc) from old VMWare ESX datacenter to a new
reliable, redundant, locally-hosted data centers using WMWare's NSX-t as
network virtualization technology.
* Deployed and maintained brand new Puppet Enterprise 2019 architecture
with single Puppet server(single site) and multiple compilers located in
different sites for consistent host configuration across the multi-tenant
environment.
* Introduced, deployed and maintained Prometheus stack including
Alertmanager, Karma, Grafana, Blackbox Exporter, Node Exporter etc. for
monitoring/alerting as Sensu Enterprise replacement.
* Automated monitoring, discovery of internally built java components based
on Spring Boot 2 using Prometheus. Automated Grafana dashboard deployment
per service/project/team.
* Introduced and deployed Code Properties Management system based on
Hashicorp's Vault, Consul and Consul Template. Integration with pre
existing Continuous Deployment Subsystem based on Jenkins and Ansible.
* Key role in migrating multiple Jenkins environments to a brand new
end-to-end CI/CD coverage system based on Jenkins integrated with
Kubernetes. Main goal achieved was speeding time to production and
automating code quality checks to conserve developer time and velocity.
* Key role in deploying Sensu Go as a monitoring solution for Fortanix DSM
(cloud based key management service used by our clients).
04/2015
-
08/2019
Linux Systems Engineer
CCBILL
* Modernizing existing Puppet Enterprise infrastructure version 3.7
managing ~2k nodes. Introduced a new simplified Puppet workflow along
with roles & profiles pattern. Served as an effective "Puppet subject
matter expert".
* Established Puppet CI/CD workflow with PDK/Onceover testing.
* Involved in a corporate-wide migration from CentOS5 and custom built
Linux distros to CentOS6 servers for production/development applications.
* Introduced and deployed new end-to-end CI/CD environment based on
Jenkins, Kubernetes, SonarQube
* Having a role in PCI-DSS audits, collecting data for auditors.
* Taking part in on-call rotation.
managing ~2k nodes. Introduced a new simplified Puppet workflow along
with roles & profiles pattern. Served as an effective "Puppet subject
matter expert".
* Established Puppet CI/CD workflow with PDK/Onceover testing.
* Involved in a corporate-wide migration from CentOS5 and custom built
Linux distros to CentOS6 servers for production/development applications.
* Introduced and deployed new end-to-end CI/CD environment based on
Jenkins, Kubernetes, SonarQube
* Having a role in PCI-DSS audits, collecting data for auditors.
* Taking part in on-call rotation.
03/2014
-
04/2015
Linux Systems Administrator
Levi9 Global Sourcing Serbia
* Maintenance and development of internal Puppet OSS infrastructure.
* Implementing GitHub workflow on Bamboo cloud combined with aws/ec2.
* Built custom Zabbix monitoring solution for OS, cluster, network,
middleware, database, and application and custom scripting for such.
* Apache httpd, Tomcat, Nginx and MySQL configuration, deployment, tuning,
monitoring and management.
* Deployment and maintenance of Cloudera infrastructure on EC2.
* Introduced and deploymed Pentaho BI(both CE and Enterprise version) on
aws/ec2. Created a custom puppet module for automating deployment of
Pentaho and integrated this into the existing environment.
* Provisioning internal yum repository environment.
* Taking part in on-call rotation.
* Implementing GitHub workflow on Bamboo cloud combined with aws/ec2.
* Built custom Zabbix monitoring solution for OS, cluster, network,
middleware, database, and application and custom scripting for such.
* Apache httpd, Tomcat, Nginx and MySQL configuration, deployment, tuning,
monitoring and management.
* Deployment and maintenance of Cloudera infrastructure on EC2.
* Introduced and deploymed Pentaho BI(both CE and Enterprise version) on
aws/ec2. Created a custom puppet module for automating deployment of
Pentaho and integrated this into the existing environment.
* Provisioning internal yum repository environment.
* Taking part in on-call rotation.
12/2013
-
03/2014
Linux Systems Administrator
PC MAC IT LLC
* Providing remote support for business customers on technical issues via
email, telephone and other means of electronic communication (LogMeIn).
* Managing N-able's N-central, (tasks like setting up hardware and system
services remote monitoring and management).
* Backup systems (Symantec Backup Exec, Symantec Backup Exec System
Recovery, Windows Server Backup, StorageCraft backup components -Shadow
Protect and Image Manager).
* Server administration tasks (backups, upgrades, maintenance etc.) Windows
Server family (2003, 2008, 2012) administration (AD, GPO, DNS, DHCP).
* MS Exchange Server administration.
email, telephone and other means of electronic communication (LogMeIn).
* Managing N-able's N-central, (tasks like setting up hardware and system
services remote monitoring and management).
* Backup systems (Symantec Backup Exec, Symantec Backup Exec System
Recovery, Windows Server Backup, StorageCraft backup components -Shadow
Protect and Image Manager).
* Server administration tasks (backups, upgrades, maintenance etc.) Windows
Server family (2003, 2008, 2012) administration (AD, GPO, DNS, DHCP).
* MS Exchange Server administration.
09/2011
-
12/2013
Linux Systems Administrator
Univerexport
* Build new Linux systems via PXE Server environment using Kickstart and
network installs, then customize OS for the middleware(storage,
filesystems, users, OS settings, etc), deploy packaged software
applications using Sysrescue.
* Maintain all systems in question to varying degrees. This included
replacing failing hardware, firmware/hmc patching, os updates, middleware
fixes, application updates, system/database/application backups,
networking configurations, user administration, printer administration,
proactive storage growth, etc.
* Built custom nagios monitoring solution for OS, cluster, network,
middleware, database, and application and custom scripting for such.
* Introduced, configured and maintained OTRS ITSM (ITIL compliant, open
source problem ticketing and asset management system).
* Introduced, configured and maintained Wavelink Avalanche Server (mobile
device management platform used for PDT devices).
* Windows server 20xx maintenance, user administration, creating and
managing group policy objects, DNS, DHCP.
network installs, then customize OS for the middleware(storage,
filesystems, users, OS settings, etc), deploy packaged software
applications using Sysrescue.
* Maintain all systems in question to varying degrees. This included
replacing failing hardware, firmware/hmc patching, os updates, middleware
fixes, application updates, system/database/application backups,
networking configurations, user administration, printer administration,
proactive storage growth, etc.
* Built custom nagios monitoring solution for OS, cluster, network,
middleware, database, and application and custom scripting for such.
* Introduced, configured and maintained OTRS ITSM (ITIL compliant, open
source problem ticketing and asset management system).
* Introduced, configured and maintained Wavelink Avalanche Server (mobile
device management platform used for PDT devices).
* Windows server 20xx maintenance, user administration, creating and
managing group policy objects, DNS, DHCP.
12/2006
-
09/2011
Linux Systems Administrator
Viator&Vektor
* Architect and implement wired/wireless LAN/WANs, Remote-Access and
Lan-To-Lan VPNs (Cisco and OpenVPN)
* Architect, build, maintain Centos/OpenSUSE physical and virtual servers
* Co-lead migration project from an older Xen-based virtualization
environment to a private environment based on VMWare's ESXi
* IBM Informix database on Linux administration
* Storage via local disk, JBOD, dell arrays, netapp
* Managed and maintained internal DNS infrastructure with BIND
* Implemented mass automated erp system deployment with bash script
* Respond to and troubleshoot issues that included CPU bottlenecks,
excessive memory usage, filesystem and database storage, application
queues, middleware problems, OS problems, hardware problems, load
balancing problems, and any customer-reported issues or slowness.
Lan-To-Lan VPNs (Cisco and OpenVPN)
* Architect, build, maintain Centos/OpenSUSE physical and virtual servers
* Co-lead migration project from an older Xen-based virtualization
environment to a private environment based on VMWare's ESXi
* IBM Informix database on Linux administration
* Storage via local disk, JBOD, dell arrays, netapp
* Managed and maintained internal DNS infrastructure with BIND
* Implemented mass automated erp system deployment with bash script
* Respond to and troubleshoot issues that included CPU bottlenecks,
excessive memory usage, filesystem and database storage, application
queues, middleware problems, OS problems, hardware problems, load
balancing problems, and any customer-reported issues or slowness.
Certifications
Local Availability
Only available in these countries:
Serbia
