09/28/2026 updated

**** ******** ****
100 % available

Senior Elastic / Observability / Platform Engineer

Prague, Czech Republic
Worldwide
Master's Degree — Information Technology, University of Pardubice (2020–2024)
Prague, Czech Republic
Worldwide
Master's Degree — Information Technology, University of Pardubice (2020–2024)

Profile attachments

cvJiriNovotny.pdf

About me

Senior Platform / DevSecOps Engineer specializing in Elastic Stack, observability and Kubernetes. Experienced in large-scale production environments, security, solution architecture, GitOps/CI/CD and cross-team technical leadership in regulated banking.

ObservabilityArgo CDGitOpsBash ShellLinuxElasticsearchPython (Programming Language)Network SecurityElastic LogstashAnsibleSecurity Information and Event ManagementSolution ArchitectureGrafanaKubernetesElastic KibanaDevSecOpsJenkins
Elastic Stack & Observability
Engineering and operating Elastic Stack observability and log-management workflows, including TB–PB-scale data ingestion and processing, custom log parsing, operational/security integrations, troubleshooting and production support.
Kubernetes & Platform Engineering
Operating and automating production Kubernetes workloads, including deployments, namespaces, Secrets/ConfigMaps, persistent storage, nodes, troubleshooting, logging and monitoring. Experience with OpenShift, Kubernetes and AWS EKS, including GitOps workflows with Argo CD.
CI/CD, GitOps & DevSecOps
Development and maintenance of Jenkins CI/CD pipelines with CyberArk integration and automated Kubernetes deployments. Configuration of Argo CD GitOps workflows with Bitbucket, GitHub Actions and containerized delivery workflows.
Security & Infrastructure Architecture
Design and implementation of identity-based firewall access models, network segmentation, firewall policies and security-oriented infrastructure using RBAC, NetworkPolicies and IRSA. Experience contributing to solution architecture in regulated banking environments.
Linux & Networking
Strong Linux, networking and infrastructure troubleshooting background, including VPN connectivity, routing/network concepts, firewalling and operational troubleshooting in enterprise environments.
Automation & Scripting
Python and Bash/Shell automation for infrastructure and operational workflows, including AI-assisted tooling and workflow integrations using Python, LangChain and LangGraph.
Technical Leadership & Mentoring
Cross-team technical coordination, solution design, production rollout planning, technical requirements translation and hands-on mentoring of colleagues in software, DevOps and application development fundamentals.

Experience

Professional experience5 - 10 years
Freelancer since2022

Languages

EnglishFluent

Project history

DevSecOps / Elastic Platform Engineer

Komerční Banka a.s.
Operating and automating production Kubernetes workloads including deployments, namespaces, Secrets/ConfigMaps, persistent storage, nodes, troubleshooting, logging and monitoring. Engineering and operating Elastic Stack observability and log-management workflows including TB–PB-scale data ingestion and processing, custom log parsing and operational/security integrations. Developing and maintaining Jenkins CI/CD pipelines with CyberArk integration and automated Kubernetes deployments; configuring Argo CD GitOps workflows with Bitbucket. Contributing to infrastructure and solution architecture including platform/storage integrations and cross-team technical dependencies. Co-designing automated data-movement and restore pipelines. Coordinating a cross-functional log-quality initiative across application teams, product owners/architects, antifraud, legal and the requesting team. Technologies: Kubernetes, Elastic Stack, Jenkins, Argo CD, Docker, Python, Linux, Git, Bitbucket, CI/CD, GitOps.

Infrastructure & Platform Administrator

Interagencie
Part-time / ad hoc employment (DPP) alongside primary employment. Administration of Windows and Linux systems, networking and VPN connectivity, Microsoft 365 administration, operational IT support and troubleshooting, and infrastructure design for smaller enterprise environments. Technologies: Windows Server, Linux, Microsoft 365, Networking, VPN.

Cloud-Native Operational Assistant on AWS EKS

Personal Project
Kubernetes-based operational tooling platform deployed on AWS EKS. Adapter-oriented orchestration architecture with observability and audit logging. CI/CD automation using GitHub Actions and containerized deployments. Security-oriented infrastructure design with RBAC, NetworkPolicies and IRSA. Architecture documentation including ADRs and threat modelling. Technologies: Kubernetes, AWS EKS, Docker, Python, FastAPI, GitHub Actions, Elastic, CI/CD.

Portable AI Developer Infrastructure Platform

Personal Project
Architected a reusable AI-assisted developer-infrastructure platform separating platform source, workspace governance and product repositories through explicit lifecycle and ownership boundaries. Designed workspace lifecycle, upgrade and rollback mechanisms, project registration, model/profile governance, isolated review workflows, validation gates, diagnostics and release provenance. Led AI-assisted implementation and hardening while retaining ownership of architecture, constraints, acceptance criteria, failure scenarios, remediation priorities and release decisions. Established regression testing, consumer acceptance and release-validation practices. Validated the platform through 49 canonical test suites and 3,600+ passing checks across final acceptance cycles.

Reliability-Focused Financial Research Platform

Personal Project
Architected a Python/Temporal financial research platform built around immutable source evidence, point-in-time-safe financial data, provenance tracking and DuckLake/Parquet analytical storage. Designed and validated durable recurring workflows with failure isolation, idempotent processing and explicit recovery behaviour. Led an architecture audit and redesign separating the analytical evidence plane from future transactional economic state. Selected a modular-monolith and worker-based architecture instead of premature microservices. Defined engineering and AI-governance boundaries so that LLM-assisted components can support research and development while deterministic components retain authority over future risk and execution.

Information Technology Security Analyst

Komerční Banka a.s.
Planned and coordinated an enterprise-wide 2FA rollout for approximately 12,000 users, defining migration waves and coordinating execution across four departments and contact-centre leadership. Designed and implemented an identity-based firewall access model using Active Directory groups/roles. Designed the branch-office migration approach to identity-aware firewall policies. Designed and coordinated rollout of Windows proxy configuration using PAC files. Designed network segmentation and firewall rules, analysed application/microservice communication and contributed to security architecture, operational security and scripting. Provided hands-on technical mentoring to approximately five colleagues. Designed AI-assisted operational tooling and workflow integrations using Python, LangChain and LangGraph. Technologies: Linux, Windows, Networking, Firewall, Python.

Teaching Assistant / University Lecturer

University of Pardubice
Teaching selected IT and infrastructure-related topics for university students, including practical exercises and student guidance, communication of technical concepts, and mentoring and knowledge transfer.

Systems Administrator

Idioma World
Administration of Windows and Linux systems, endpoint and network support, and troubleshooting and operational support.

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in