Anton Novikov

Senior Cloud InfraDevOps Engineer

Fintech lending group live in Vietnam, the Philippines, South Africa, India, Sri Lanka and Europe — each product (risk engine, communication platform, API gateway, DWH, KYC/scoring) on its own AWS EKS cluster. Own the reference architecture across 6 AWS accounts, 5 regions and 25 clusters — 100% Terraform + the shared Helm library chart, GitOps via ArgoCD and FluxCD, no manual console work.

• Own the AWS/EKS reference architecture across 6 AWS accounts and 5 regions (Africa, Asia-Pacific, Europe) — 25 clusters, one per product/environment, 100% provisioned via Terraform, GitOps via ArgoCD and FluxCD, zero manual console work
• Built a new production EKS cluster from zero for the Africa DWH team — networking, cross-account IAM, ArgoCD bootstrap — then added StarRocks with its load balancer, DNS and security groups
• Rolled out the Linkerd service mesh to new namespaces via Terraform across two regions (Africa and Europe)
• FinOps: Karpenter consolidation policies and node-class rightsizing keep compute spend flat as the fleet grows past 25 clusters
• Added graceful shutdown to the shared Helm library chart — terminationGracePeriodSeconds + lifecycle hooks — shipping to 10+ clusters, documented in the platform's autoscaling/RBAC/secrets/jobs guides every dev team works from
• Built and maintain an internal Kubernetes dashboard (FastAPI + vanilla JS) — workloads, RBAC, real disk usage, ingress health checks — dev teams' daily driver instead of kubectl

InfraDevOps Engineer

Four years at Sirena-Travel, across three products. I ran the full infrastructure at each: cloud, Kubernetes, CI/CD, observability, and tooling.

Middle Sysadmin / Junior DevOps Engineer

Ran hybrid infra for web apps on Proxmox and VMware ESXi — introduced Docker and Kubernetes. Set up CI/CD with GitLab CI and Jenkins, managed config with Ansible, replaced Zabbix with Grafana/Prometheus. Automated routine tasks in Bash/Python and kept the hardware running — MikroTik/HP/DELL/SuperMicro.

Junior / Middle Sysadmin

Where it started — sysadmin and user support (Windows/Linux, MS Office, 1C), accounts in AD/Atlassian/GitLab. Ran Proxmox VMs (Nginx, PHP-FPM) and kept the office hardware running — SuperMicro/DELL/MikroTik, AXIS/UniFi.

DevOps Engineer

MTS crypto/fintech division — blockchain settlement (VED) and two B2C exchanges. Deployed 8 environments on bare kubeadm, GitOps with ArgoCD, and a shared GitLab CI library (Kaniko, Trivy + OPA policy, SonarQube, Semgrep). Ansible managed the full cluster lifecycle; Kafka via Strimzi, secrets in Vault, node access over WireGuard.

DevOps Engineer

Ticketing startup, sole engineer on infra — built it from an empty account. Full IaC on Yandex Cloud, k8s, self-hosted GitLab. Postgres backups with WAL archiving (RPO < 1 hr, RTO < 30 min), env provisioning from 3 days down to 30 min. 15 months, zero data loss.

I treat internal tools as production code. env-view — a FastAPI dashboard of live ingress/service/pod state with HTTP/TCP checks (Helm chart, in every cluster). abot — an Alertmanager webhook receiver with per-team routing (~300 lines of Python, Helm). trivy-to-sonarqube — converts Trivy findings to SonarQube external issues. confluence-publisher — auto-syncs Markdown docs from git to Confluence.

Personal site & homelab

Site and homelab on a single VPS (k0s, Prague). FastAPI + Jinja2 behind APISIX, per-host TLS from Let's Encrypt via cert-manager, a private Docker registry, WireGuard and IKEv2, HTTP/SOCKS5/Shadowsocks proxies with health checks, one-command deploys (build → push → rollout). Full observability — metrics, logs, alerts, dashboards — within ~452 MiB of memory requests. A dozen more services run on the same VPS, ~€130/year all-in.

Technical write-ups from real infrastructure — FluxCD, observability, security, self-hosting; not rewrites of docs, but real solutions from production. Plus a working cheatsheet: 1600+ commands across 100+ tools (kubectl, helm, terraform, vault, linux and more), published and maintained.