| Sydney | github.com/enkron |
| srj.belokon@gmail.com | linkedin.com/in/sbelokon |
| enkron.org | t.me/enkron |
Devops engineer with a bachelor’s degree in CS and ~10 years of experience across systems, infrastructure and automation over SDLC. I mainly act in the devops field: from writing developer pipelines to designing, deploying and owning distributed multi-region CI infrastructures.
In recent years my focus was shifted mainly to platform engineering and running Kubernetes on AWS.
Work in software engineering areas: platform engineering, DevOps, SRE, kernel/user space, embedded systems or security
Languages (familiar: can read, debug and maintain code; write a bit)
Assembly (x86_64), C, Java, Groovy, Go, Rust
Languages (proficient: can read, write, debug)
Python, Bash
Tools & technologies
Vim, Git, Jenkins (JCasC, Job DSL), Kubernetes, Argo CD, Kustomize, Helm,
Terraform, Docker, Podman, Docker Swarm/Compose, cert-manager, Gateway
API/Envoy Gateway, HAProxy, Nginx, Cilium (eBPF), Talos Linux, FRRouting
(BGP), libvirt, QEMU, LXC, Ansible, Kerberos, sssd, BIND, systemd, SSH,
LVM, make, Nix, certbot, Vagrant
Databases
PostgreSQL, MySQL, Apache HBase
Miscellaneous
AWS (EKS, Fargate, EC2, EFS/EBS, RDS, S3, ECR, IAM/IRSA, ACM PCA, Secrets
Manager, KMS, VPC, Route53, ELB/NLB, CloudFormation), Prometheus,
Alertmanager, Grafana, Grafana Mimir, JIRA, Confluence, Bitbucket, jFrog
Artifactory, Buildbot, Salesforce, Hadoop, Hive, Impala, Spark, Zookeeper,
Apache Kafka, Apache Tomcat
| Morse Micro (full-time) | Dec 2022 - Present (3 years, 8 months) |
|---|---|
| Devops engineer | Sydney NSW, Australia |
Rebuilt the CI platform on AWS EKS, provisioned with Terraform across three regional clusters, MNG and Fargate profiles, EFS-backed Jenkins controller, IRSA and SAML SSO. The platform drives a verification lab of ~500 DUTs.
Migrated every in-cluster workload out of Terraform state into GitOps (Argo CD) with Kustomize, transferring ownership with SSA.
IaC: configured the Jenkins controller declaratively using JCasC, pipeline jobs generated from a Job DSL seed and a shared groovy library for the dev and tester teams.
Prototyped a Go service to replace the Jenkins lockable resources plugin with lease-based reservation of lab devices.
Ran self-hosted Prometheus, Alertmanager, Grafana and Grafana Mimir with long-term metrics on S3, dashboards and alert rules as code.
Consolidated ingress onto a single Gateway API / Envoy Gateway data plane behind an internal NLB. Retired ingress-nginx and HAProxy. Automated certificates rotation through AWS Private CA and cert-manager.
Maintained around 30 container images for the firmware, FPGA and certification toolchains, served from ECR with a Docker Hub pull-through cache and the SOCI snapshotter for lazy pulls of large images.
Before the EKS platform: built the original CI system on Jenkins, Docker Swarm and HAProxy, with the first Prometheus, Grafana and Mimir monitoring stack, Slack alerting and self-hosted runners for bitbucket pipelines.
| onsemi (full-time) | Nov 2021 - Oct 2022 (1 year) |
|---|---|
| Devops engineer | St Petersburg City, Russia |
Developed Ansible playbooks for upgrading and deploying Confluence to the stage and production environments, deployed and troubleshooted a Bitbucket mirror farm, and maintained the configuration for the Buildbot CI tool.
Developed a Python CLI utility for automatic migration from one CRM system to another (Salesforce to JIRA).
Monitored the state of servers and administered Linux hosts (authentication, logging, cleanup, provisioning new VMs and containers, networking problems &c) along with the Atlassian stack (JIRA, Confluence, Bitbucket).
| EPAM Systems (full-time) | Jul 2018 - Nov 2021 (3 years, 5 months) |
|---|---|
| Systems engineer | St Petersburg City, Russia |
Started as a L2 support engineer in a big data field, keeping distributed data processing clusters running (Hadoop, Hive, Impala, Spark, HBase, Zookeeper, Apache Kafka) and learning Linux internals along the way (PAM, cgroups, systemd, LVM &c).
Developed CI/CD pipelines for customers’ applications on the big data platform using Jenkins, Ansible, Python, Gitlab and Bash, automated standard operations to cut manual routine work, and containerized a custom data processing application with Docker.
Modeled and maintained AWS CloudFormation templates, refactored the Ansible playbooks that configured the full infrastructure, configured Kerberos authentication within the Hadoop cluster, and provided backup and disaster recovery strategies (EBS snapshots, RDS multi A-Z, S3 cross-region replication).
| self-employed | May 2016 - Jun 2018 (2 years, 2 months) |
|---|---|
| Independent | St Petersburg City, Russia |
Studied algorithms and data structures, software testing principles and agile software development models.
k8s-lab-v2.0
Kubernetes lab on QEMU/aarch64 VMs: Talos Linux immutable nodes, Cilium eBPF
CNI in native routing mode with kube-proxy replaced. A two-tier BGP fabric (FRR
route reflector over iBGP, eBGP to a simulated edge router) on an IPv6-first
dualstack network. Successor to
local-kubernetes-lab.
enkron.org
Static site generator in Rust that renders this CV, with a PDF writer and
AES-256-GCM encrypted entries decrypted in WebAssembly.
Peter the Great St. Petersburg Polytechnic University (SPbPU)
English professional working proficiency
IELTS test report form number: 22AU009114BELS468G
Russian native