07/28/2026 updated
not available
info: not available until 12/31/2026
Senior DevOps Engineer | AWS | Azure | Kubernetes | Terraform | CI/CD
Florești, Romania
Only remote
Bachelor of ArtsAbout me
Senior platform engineer (AWS, Azure, Kubernetes) building cloud infrastructure where mistakes are expensive and auditors watch
Azure Kubernetes ServiceAmazon Elastic Compute CloudCloud EngineeringVirtual Private ServersAWS CDKDocker for AWSCloud TechnologiesInfrastructure as Code (IaC)AWS VPCAWS ECSAWS AuroraAWS FargateAzure AKSDevSecOpsAWS EKS
Cloud Infrastructure (AWS & Azure)
Expertise in operating production infrastructure on AWS and Azure, including services such as EKS, ECS, Fargate, Lambda, EC2, Aurora PostgreSQL, RDS, S3, CloudFront, Route53, CloudWatch, IAM, SSM, AKS, Azure SQL, App Service, Application Gateway, Front Door, Key Vault, and Private Endpoints for regulated banking, fintech, and enterprise SaaS clients.
Kubernetes & Container Orchestration
Deep experience with Kubernetes at scale across EKS, AKS, and on-premises environments, including Helm, Docker, Istio service mesh, Cilium, Kong API Gateway, HAProxy Ingress Controller, and Karpenter autoscaling for multi-tenant production platforms.
Infrastructure as Code & CI/CD Automation
Proficiency in Terraform, Terragrunt, CloudFormation, Ansible, and Helm charts for multi-cloud automation, combined with CI/CD tooling including GitHub Actions, GitLab CI, Jenkins, ArgoCD, Flux, Bitbucket Pipelines, Azure Pipelines, AWS CodePipeline, and TravisCI to deliver zero-downtime platform migrations and deployments.
Observability & Monitoring
Implementation and operation of observability stacks using Prometheus, Thanos, Grafana, OpenTelemetry, New Relic, CloudWatch, ELK, FileBeat, and WinLogBeat across 50+ services and 5+ production tenants.
Security & Identity Management
Application of security practices including OKTA SAML, Entra ID, JumpCloud, Akeyless, HashiCorp Vault, OPA, Trivy image scanning, SBOM, IAM, RBAC, TLS, mTLS, DevSecOps, and shift-left security to meet regulatory and compliance requirements.
Databases
Administration and configuration of Aurora PostgreSQL, PostgreSQL, pg_cron, Azure SQL, Redis, and ElastiCache in production environments for banking and SaaS clients.
Scripting & Programming Languages
Automation and tooling development using Python (boto3), Bash, PowerShell, Go (basic), YAML, and HCL for infrastructure management and operational workflows.
Networking
Design and management of cloud networking including TCP/IP, TLS termination, NLB, ALB, VPC peering, Transit Gateway, hub-and-spoke topology, private endpoints, DNS, and BGP fundamentals.
Site Reliability Engineering & DevSecOps Methodologies
Application of SRE, Platform Engineering, GitOps, FinOps, DevSecOps, Agile/Scrum, and on-call incident management practices to improve deployment velocity, security posture, and cloud spend efficiency.
Expertise in operating production infrastructure on AWS and Azure, including services such as EKS, ECS, Fargate, Lambda, EC2, Aurora PostgreSQL, RDS, S3, CloudFront, Route53, CloudWatch, IAM, SSM, AKS, Azure SQL, App Service, Application Gateway, Front Door, Key Vault, and Private Endpoints for regulated banking, fintech, and enterprise SaaS clients.
Kubernetes & Container Orchestration
Deep experience with Kubernetes at scale across EKS, AKS, and on-premises environments, including Helm, Docker, Istio service mesh, Cilium, Kong API Gateway, HAProxy Ingress Controller, and Karpenter autoscaling for multi-tenant production platforms.
Infrastructure as Code & CI/CD Automation
Proficiency in Terraform, Terragrunt, CloudFormation, Ansible, and Helm charts for multi-cloud automation, combined with CI/CD tooling including GitHub Actions, GitLab CI, Jenkins, ArgoCD, Flux, Bitbucket Pipelines, Azure Pipelines, AWS CodePipeline, and TravisCI to deliver zero-downtime platform migrations and deployments.
Observability & Monitoring
Implementation and operation of observability stacks using Prometheus, Thanos, Grafana, OpenTelemetry, New Relic, CloudWatch, ELK, FileBeat, and WinLogBeat across 50+ services and 5+ production tenants.
Security & Identity Management
Application of security practices including OKTA SAML, Entra ID, JumpCloud, Akeyless, HashiCorp Vault, OPA, Trivy image scanning, SBOM, IAM, RBAC, TLS, mTLS, DevSecOps, and shift-left security to meet regulatory and compliance requirements.
Databases
Administration and configuration of Aurora PostgreSQL, PostgreSQL, pg_cron, Azure SQL, Redis, and ElastiCache in production environments for banking and SaaS clients.
Scripting & Programming Languages
Automation and tooling development using Python (boto3), Bash, PowerShell, Go (basic), YAML, and HCL for infrastructure management and operational workflows.
Networking
Design and management of cloud networking including TCP/IP, TLS termination, NLB, ALB, VPC peering, Transit Gateway, hub-and-spoke topology, private endpoints, DNS, and BGP fundamentals.
Site Reliability Engineering & DevSecOps Methodologies
Application of SRE, Platform Engineering, GitOps, FinOps, DevSecOps, Agile/Scrum, and on-call incident management practices to improve deployment velocity, security posture, and cloud spend efficiency.
Experience
Professional experience5 - 10 years
Freelancer since2021
Languages
EnglishFluentRomanianNative speaker
Project history
Built a commercial CLI (terraback.io) that imports live AWS, Azure, and GCP infrastructure into idiomatic Terraform HCL across 105+ resource types. Designed a plugin-based engine spanning compute, networking, identity, storage, databases, and managed services across all 3 major clouds. Managed versioned releases, licensing, customer-facing documentation, and CI via GitHub Actions on a 2-week cadence.
B2B engagements with clients in banking, fintech, and enterprise SaaS across the EU, UK, US, and Middle East. Engagements included Lead DevOps Engineer at a Tier-1 Commercial Bank in UAE (Mar 2024 - Present): engineered multi-cluster AKS networking, deployed Kong API Gateway, hardened production AKS clusters, spearheaded disaster recovery for 5 live banking tenants, slashed mean-time-to-patch, and mentored junior engineers. Senior DevOps Engineer for a Quality Management SaaS US Client (Nov 2022 - Mar 2024): refactored Terraform modules, operated ECS and Windows hybrid platform, implemented pg_cron job scheduling, resolved production incidents, and drove ~30% reduction in AWS spend. DevOps Engineer for UK Public Transport Ticketing Platform (Nov 2022 - Nov 2023): migrated workloads from EC2-hosted Kubernetes to EKS, refactored CloudFormation templates, and owned Bitbucket Pipelines redesign. DevOps Lead for Banking Mobile and Web Platform EU (Nov 2021 - Jun 2022): led a 3-engineer DevOps team, operated self-hosted GitLab on Azure with OKTA SAML, rolled out Akeyless secrets management, and authored 15+ Terraform modules. DevOps Consultant for Multiple AWS-Focused Engagements (Apr 2021 - Aug 2021): deployed AWS infrastructure via CloudFormation and Terraform across 4 client accounts and provided post-deployment monitoring and incident-response coverage.
Optimized 30+ Azure Pipelines through caching strategy and parallelization, cutting average build duration by ~35%. Authored and maintained Terraform modules for shared Azure infrastructure including AKS clusters, networking, and storage accounts. Operated and upgraded AKS clusters with standardized Prometheus and Grafana monitoring. Identified and executed cost-saving initiatives across Azure subscriptions, reducing monthly spend by an estimated 20%.