Available for work
Dmitrii
Bogomolnyi
DevOps.
Infrastructure engineer who automates everything that moves. Kubernetes, GitOps, observability — building systems that don't wake you up at 3am.
➜ ~/infra kubectl get nodes
NAME STATUS ROLES AGE
master-01 Ready control 42d
worker-01 Ready worker 42d
worker-02 Ready worker 42d
➜ ~/infra helm ls -A
NAME NAMESPACE STATUS
monitoring ops deployed
ingress-nginx ingress deployed
cert-manager certs deployed
➜ ~/infra
01
Skills
Kubernetes
Managed clusters (Timeweb Cloud and others) — deployments, Helm, FluxCD GitOps, RBAC, networking. Studied cluster provisioning with kubeadm on local VMs.
Docker
Multi-stage builds, optimized images, Docker Compose, container security hardening.
Ansible
Infrastructure as code, idempotent playbooks, roles, Galaxy collections, vault secrets.
CI/CD
FluxCD GitOps, GitHub Actions workflows, Jenkins pipelines — automated testing, builds and zero-downtime deployments.
Observability
VictoriaMetrics & VictoriaLogs deployed from scratch via custom Ansible roles and self-built images. Prometheus scraping, Grafana dashboards as code via grafonnet, notifications via Alertmanager.
Linux & Scripting
Bash automation, systemd, networking, performance tuning, security hardening on Debian/RHEL-based systems.
Istio
Service mesh traffic routing across namespaces — HTTP internally, TLS at the edge. Full set of resources: VirtualService, DestinationRule, ServiceEntry, Gateway for complex cross-namespace routing chains.
02
Projects
CI/CD from scratch for a fitness platform
Built a complete CI/CD pipeline from zero. GitHub Actions builds and pushes images, FluxCD syncs state to a managed Kubernetes cluster on Timeweb Cloud. Helm manages all releases — developers push code, everything else is automatic.
github-actionsfluxcdhelmdockermanaged-k8s
Observability stack with no external dependencies
Deployed VictoriaMetrics, VictoriaLogs and Alertmanager behind HAProxy under strict constraints — no official operators, charts or public images allowed. Manually sourced binaries, built all container images internally, wrote Ansible roles and Helm charts from scratch. vmstorage runs on VMs, other components in Kubernetes.
ansiblehelmvictoriametricshaproxydocker
Istio service mesh: full traffic routing layer
Wrote Istio configurations for multi-namespace traffic routing — internal HTTP between services and TLS termination at the edge. Full set of resources: VirtualService, DestinationRule, ServiceEntry, Gateway across namespace boundaries.
istiovirtualservicedestinationrulek8s
Alertmanager webhook processor — prod Python service
Built a production FastAPI service that receives Alertmanager webhooks, validates payloads against a Pydantic schema, persists alerts to PostgreSQL, and forwards them to a corporate notification gateway handling email, chat and SMS delivery.
fastapipydanticasynciopsycopg3alertmanager
Grafana dashboards as code via grafonnet
Maintained and extended an Ansible role that deploys Grafana dashboards via API using grafonnet-generated JSON. All dashboards live in git — no manual UI work, full version history, changes deployed automatically.
grafonnetgrafanaansiblejsonnet
03
Contact
Let's build
something reliable.
Open to interesting projects, consulting work, or full-time positions. If you need someone who treats infrastructure as a product — let's talk.
Send email