09/27/2026 updated

**** ******** ****
100 % available

Lead DevSecOps & Platform Architect | Cloud Infrastructure | Engineering Leadership

Valencia, Spain
Only remote
Vilnius Business College — BA, Network Administration & System Programming, 2002–2005
Valencia, Spain
Only remote
Vilnius Business College — BA, Network Administration & System Programming, 2002–2005

Profile attachments

Sebastian_Vaisov_CV_DevSecOps_Platform.pdf

About me

I build secure, reliable cloud platforms and lead infrastructure teams. 15+ years across AWS, Azure, GCP, Kubernetes, IaC and CI/CD, including fintech. EU citizen and autónomo in Spain; open to remote B2B, fractional and leadership engagements.

FinOpsIAMAmazon CloudfrontAmazon S3Cloud Computing SecurityCloud EngineeringVirtual Private ServersDevOpsRAIDAmazon DynamoDBInternet Protocol Security (IP SEC)Virtual Private Networks (VPN)AnsibleVaultVulnerability ManagementDatadogGoogle CloudCloud Platform SystemIstioCloud TechnologiesInfrastructure as Code (IaC)AWS VPCKubernetesRancherCloudflareTeamcityCloud OptimizationCloudwatchRundeckTerraformOracle Cloud InfrastructureDevSecOpsVMware
Lead DevSecOps, platform and infrastructure leader with 15+ years across fintech, cloud, security and reliability. Recent work includes GCP infrastructure as code, GitHub Actions CI/CD, Cloudflare security, OpenTelemetry, vulnerability remediation and Co-CTO delivery leadership. Earlier: grew Syntropy's DevOps team from 1 to 7 and led migration to 200+ node Kubernetes clusters at Tesonet.

AWS: EC2, EKS, RDS, SQS, DynamoDB, CloudFront, Route 53, IAM, KMS, CloudWatch, CloudTrail, Lightsail, EBS and S3.

Google Cloud (GCP): Cloud Run, Cloud SQL, Cloud Storage, Cloud Build, Compute Engine VMs, GKE/Kubernetes on GCP, VPC, IAM, Secret Manager, BigQuery, Cloud Armor and FinOps. Other clouds and virtualization: Azure, OCI, Hetzner, ProfitBricks, Vultr, DigitalOcean, OpenVZ and VMware.

Containers, orchestration and service mesh: Kubernetes, Docker, Rancher, Nomad, Istio and Helm.

Infrastructure as code (IaC) and automation: Terraform, Terragrunt, Ansible, Chef, SaltStack, Packer and Rundeck.

Storage: RAID, Rook, Longhorn, NFS, GlusterFS and cloud block/object storage.

CI/CD and code: GitHub Actions, GitLab CI, Git, Jenkins, Argo CD, TeamCity, Bash, Python and Ruby.

Security, networking and edge: DevSecOps, PCI DSS, SOC 2, GDPR, vulnerability management, dependency/container scanning, secrets management, Vault, Cloudflare Workers, Access, WAF, SSL/TLS, DNS and rate limiting, firewalls, Fortigate, pfSense, VPN, IPsec, IPTables, load balancing, Cilium, Akamai, HAProxy and Auth0.

Monitoring, logs and incidents: OpenTelemetry, Prometheus, Grafana, Nagios, Icinga, Munin, Splunk, Graylog, Elasticsearch/ELK, Fluentd, Zabbix, Sentry, Datadog, New Relic, Opsgenie, InfluxDB, TICK/Chronograf, Big Brother monitoring, alerting and on-call response.

Databases and messaging: PostgreSQL, MySQL, MariaDB, Percona, Redis, MongoDB, Memcached, MSSQL, Oracle DB, Cassandra, QuestDB, TimescaleDB, InfluxDB, Couchbase, RabbitMQ, Kafka, NATS and IBM MQ.

Web and systems: Apache, Nginx, Tomcat, IBM WebSphere, CentOS, Debian, Ubuntu, VyOS/Vyatta, Windows Server, Postfix, Amavis, uWSGI, SolusVM, Plesk and Blesta.

Leadership and delivery: team building, coaching, stakeholder/vendor management, strategy, performance and project management, Agile/Scrum/Kanban, capacity planning, incident management, documentation, Jira, Confluence, Linear, Metabase reporting, communication, negotiation and cross-cultural collaboration.

Broad self-reported inventory from my CV and LinkedIn history. Some niche tools were used in earlier roles; project-specific depth and recency are available on request. Remote B2B, fractional or permanent work from Spain.

Experience

Professional experience10+ years
Freelancer since2019

Languages

EnglishFluentRussianNative speakerSpanishBasic knowledgeLithuanianNative speaker

Project history

Co-CTO

Gemba Finance
Lead six engineers across product, infrastructure and an outsourced vendor, including ownership of the core-banking vendor relationship. Introduced capacity-based delivery planning; the best recorded cycle reached 65% completion versus 23–43% in comparable cycles. Built delivery reporting for planning and reviews. Own technical compliance work across PCI DSS, SOC 2 and GDPR and supported a CASS 15 safeguarding audit. Designed a BigQuery-to-Metabase reporting data lake for leadership visibility and led the migration to Linear as the engineering system of record.

Lead DevSecOps Engineer

Gemba Finance
Built and secured GCP infrastructure with Terraform, including Cloud Run, Cloud SQL, VPC, IAM, Cloud Armor and Secret Manager; migrated legacy AWS and Azure workloads to GCP. Remediated 70+ production vulnerabilities across four services and implemented Cloudflare WAF, rate limiting and Access. Built GitHub Actions pipelines with promotion-based deployments and automated dependency and container scanning. Implemented OpenTelemetry, centralised logging and alerting for observability and incident response.

CTO

Benme
* Strategic Product Development: Collaborated with clients for requirements
gathering. Directed user-friendly feature development, improving usability and
performance. Vetted and outsourced to development agencies.
* Stakeholder Engagement: Supported CEO in investor pitches. Achieved GDPR
compliance, enhancing platform trustworthiness.
* Technical Leadership: Mentored and coached 6-member team, building skills,
engagement, motivation, and high-performing workforce.
* Infrastructure Management: Secured and optimized infrastructure for the platform
and internal tools on AWS, leveraging services like EKS, RDS, SQS, Auth0, Sentry,
Grafana/Prometheus and others.
* Operational Excellence: Managed daily operations with a balanced approach,
emphasizing productivity, accountability, and team well-being to prevent burnout,
resulting in a motivated and efficient team.

DevSecOps Team Lead

Syntropy
* Team Building & Agile Transformation: Expanded DevOps team from 1 to 7
members within a year. Implemented Agile workflows, enhancing team dynamics,
happiness and productivity.
* Strategic Leadership & Coaching: Guided infrastructure planning, tool integration,
and coached team using neuroscience principles, fostering technical and personal
growth.
* Process Optimization: Developed roadmap focused on team well-being and
company goals. Streamlined communication and deployment processes, boosting
overall efficiency.
* Stakeholder Management & Technical Support: Organized and led stakeholder
meetings and provided hands-on support across Kubernetes, GitLab, TimescaleDB,
Postgres, NATS, Vault, Terraform, Packer, Ansible, and other tech.

Senior DevSecOps Engineer

Syntropy
* Infrastructure Optimization: Stabilized legacy ELK cluster for high availability and
resilience. Resolved Kubernetes storage challenges and implemented HA solutions.
* Automation & Streamlining: Automated cloud management and node
bootstrapping with Ansible and Terraform. Implemented GitLab pipelines for
optimized infrastructure management and deployment.
* Security Enhancement: Secured existing infrastructure based on security best
practices, safeguarding against vulnerabilities and threats.
* Tech Stack Management: Managed diverse technologies including Kubernetes,
Elasticsearch, Prometheus, Grafana, Opsgenie, GitLab, Terraform, Ansible, Nomad,
TimescaleDB, Postgres, and multiple cloud platforms (AWS, Azure, GCP, Hetzner,
OCI, Vultr, DigitalOcean and 100+ others clouds and hosting providers).




* Technical Expertise: Demonstrated proficiency in systems, networking,
troubleshooting, VPN, load balancing, security, and incident management for robust
performance and reliability.
* Cloud Automation Excellence: Automated VM and bare-metal server bootstrapping
across 100+ clouds and hosting providers, enhancing deployment efficiency and
scalability.

Senior DevOps Engineer

CUJO AI, Pharma4u GmbH, Danske Bank
Led key DevOps and infrastructure initiatives for multiple organizations, focusing on cloud
migration, automation, and system optimization:

DevOps Lead

Tesonet
* Containerization and Cloud Migration: Led dockerization and migration of
Python/PHP apps to highly scalable 200+ node Kubernetes clusters on multiple
clouds.
* Infrastructure Overhaul: Implemented robust security, high-availability,
auto-recovery, backups, and cost optimizations to elevate existing infrastructure
reliability and efficiency.
* Resource and Team Management: Optimized cloud resources across Hetzner and
AWS. Headed and mentored a 3-member DevOps team for major projects.
* Kubernetes and Database Specialization: Managed advanced HA Kubernetes
setups with Istio and Rancher. Optimized Couchbase, RabbitMQ, Redis, MongoDB
for high availability, sharding, and performance.
* Automation, Monitoring, and Documentation: Deployed Ansible, GitLab for CI/CD
automation, and Nagios, Graylog for monitoring/logging. Created detailed procedure
documentation for streamlined operations.
* MySQL high availability implementation : Implemented MySQL replication and
high-availability solution.
* Performance troubleshooting : Skilled in identifying and resolving complex
performance issues, maintaining high system reliability.

Senior Linux System Engineer

Delivery Hero
* Systems Updates and Automation: Designed and automated package updates
using Python/Confluence. Utilized Chef, SaltStack, and scripting (Bash, Python) for
automating daily tasks, custom backup solutions, and infrastructure
setup/configuration management. Developed custom Nagios plugins.
* Cloud, Database, and Server Administration: Managed VMs (Ubuntu, CentOS,
VyOS), databases (Postgres, MySQL), mail servers (Postfix, Amavis), web servers
(Apache, Nginx, Uwsgi) across ProfitBricks, Hetzner, AWS. Administered database
setup, replication, maintenance, and optimal performance.
* Infrastructure Monitoring Migration: Led migration from Icinga to Icinga2 for
improved monitoring capabilities and system reliability.
* Robust Monitoring and High Availability: Deployed Icinga/Nagios, Munin, Splunk
for comprehensive monitoring. Administered RabbitMQ, GlusterFS, Memcached,
Redis for high availability and caching.




* System Security, On-Call and Troubleshooting: Configured network security with
IPTables, Vyatta. Skilled in troubleshooting, debugging performance issues, and
maintaining system stability. Provided on-call support and incident resolution.

Certificates

Brain Based Coaching

NeuroLeadership Institute

2023

AWS Solutions Architect Associate

AWS

2020


Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in