The document provides a summary of Mykola Hromivchuk's work experience and qualifications as a DevOps engineer. It includes his contact information, education background in applied mathematics and various IT certifications. It also lists his strong technical skills in programming languages, operating systems, virtualization tools, configuration management, cloud technologies, networking, and security. The work experience section summarizes his roles and responsibilities on several projects between 2009-2017, where he deployed and managed infrastructure, developed automation processes, and provided technical support.

1. Mykola Hromivchuk
DevOps engineer / Linux engineer
Email: mhromivchuk@gmail.com
Mobile Phone: +380979297580
https://github.com/mhrom
https://ua.linkedin.com/in/mykolahromivchuk
Education
LPIC 1, 2015
Cisco Security White Belt Advanced, 2015;
Global Software Certification Testing course, 2013;
CCNA course, 2011;
Specialist in Applied mathematics, 2008 (National Chernivtsi University, Applied mathematics,
Engineer-programmer);
Languages
Ukrainian – Native;
Russian — Advanced;
English – Upper intermediate.
Japanese - Elementary
Technical skills
Programming Languages and Framework: Python, Bash, Django, DSL, Java
RDBMS / Database servers: MySQL, Oracle, Redis, Memcached, MongoDB
Operating Systems: Linux (Debian, Ubuntu, RedHat, CentOS), FreeBSD, Windows
Other:
 Virtualization environments and tools (Docker, Kubernetes, Xen, OpenVZ,
VMware, Hyper-V);
 Services and roles (sync, bacula, apache, nginx, nfs-server, tftpd, squid,
iptables, ipfw, dhcpd, bluecoat, flexlm, rsyslog, snmpd, ntop, zabbix,
amanda, nagios, windows (Active Directory, DHCP, DNS, group policy);
 Distributed file systems (ZFS, DFS);
 Version Control System (Git, Perforce, Subversion);
 Provisioning (Ansible, Puppet, Chef, SaltStack, Vagrant, Terraform, LDAP);
 Routing (EIGRP, OSPF , RIP , RIP2, NAT, PAT, bridge, ISAKMP, GRE, IPSec);
 Switching (Rapid-STP, STP, DTP, trunk, Vlan, VTP, PagP, QinQ, HSRP, GLBP,
VRRP);

2.  Security (802.1x, ACL, DARP Inspection, DHCP snooping, TACACS+,
RADIUS);
 VoIP (PRI, SIP, RTP, MGCP).
 Storage (SAN, NAS, Ceph, Swift)
 Cloud (Amazon, OpenStack, Azure)
 Continuous Delivery (Jenkins, GoCD, Gerrit, Cgit, Gitlab)
 Artifactory (Jfrog, Nexus)
 Build tools (Maven, Ant, Gradle, Groovy)
Experience
Freelancers projects
( February 2017 - March 2017), DevOps engineer
Create new environment on tools docker, docker swarm, docker-compose, bash scripts,
kubernetes.
(January 2017 - February 2017), DevOps engineer
Create new deployement and cotinues intergration pipeline from sratch using capistrano, jenkins,
nexus, git, ruby templates, ruby DSL.
Epam, (January 2016 — July 2016), DevOps Engineer
Project responsibilities:
 Daily team meeting, working with Scrum approach, updating and creating information,
planning and developing new infrastructure. ( Confluence, Jira )
 Deployment, development and provision monitoring and backup solutions.
 Developing code for new components and re-writing exists to perform deploying of
application, provision reviewing and browsing tools for engineers.
 Management third-party repositories for storing application.
 Planning and developing CI/CD pipeline to deliver application to prepared environments.
 Planning and analyze infrastructure cost, security, redundancy.
 Provision custom code to tie together different systems.
Softserve, (June 2015 — December 2015 ), DevOps Engineer
Project responsibilities:
 Be part of Scrum planning, daily team meeting, updating and creating information, new
user stories, tasks, features that needed to be implemented. (Rally, Confluence);
 Deployment, configuration, troubleshooting, updating of application environment
(OpenStack, Swift, Ceph). The service is organized based on internal private cloud, with

3. internal ordinary scheme and Security Dynamic Life Cycle. The data centers are built
around the world;
 Performance, load, stress and functional testing of application or part of application;
 Monitoring internal and external resources in the cloud;
 Redundancy and fail-over of different chunks of sites.
Playtech, (January 2015 – May 2015), DevOps Engineer
Project responsibilities:
 Deployment, configuration, troubleshooting, updating of application environment (all
projects are based on Liferay platform. The application included front end and back end
parts and different additional components);
 Manage communication via email and link with different departments and teams in the
scope of daily issues and tasks (production and development environments installed in
multiple DC and under control of different team that belong to offices in foreign countries);
 Management CI/CD and SCM systems (Jenkins, Git, Gitlab, ant, gradle, npm);
 Administration and monitoring the pool of servers arranged for application (New Relic,
Nagios, HP Openview, CDN(AKAMAI);
 Update and create information in the knowledge base, bug tracking system (Confluence,
Version one, Jira).
Samsung Research and Development Institute, (March 2012 – October 2014),
DevOps/System/Network engineer
Project responsibilities:
 Provisioning DHCP, DNS services, filtering based on mac-address, 802.1x;
 Deployment, updating and reporting about testing of engineers in scope of Software
Certification Testing Project that was originated from HQ office in Seoul (Apache tomcat,
Mysql, GCC, Jvm, Jdk);
 Planning of redundancy, configuration, troubleshooting of interaction between core
network and data network equipment;
 Provisioning of network access (routing, switching, security, wireless (1500 users);
 Locale support of wan area equipment;
 Provisioning and troubleshooting Escort, Nasca, Secure print services for Kiev and Kharkiv
offices;
 Provisioning license service based on flexlm server (1500 users);
 Improvement and integration of monitoring system;
 Installing and configuring monitoring system from scratch;
 Organise the central system for gathering information about devices in the Enterprise
network, near 500 hundred hosts;
 Automation of creating template for new devices that support SNMP interface;

4.  Creating network and office interconnection diagram and maps;
 Provisioning ldap authorization and authentication for monitoring system;
 Deployment the scripts and delivery a notification about alarm events on monitoring hosts
to the responsible engineers;
 Configure automated updating of internal VLANs throughout VTP domain on the hundred
of switches in Kiev and Kharkiv offices. Configure limits for broadcasting and multicasting
type of traffic.
 Dedicate autonomous system for both offices.
 Configuration of access-lists for denied traffic for open relay, telnet, ssh, and access to
internal resources. Tuning of STP and HSRP for better convergence, applied configuration
from flooding and spoofing attacks.
 Using of ssl certification tools for security communication and deployment SSL certificates.
 Automation backups of configuration files of network equipment;
 Deployment and integration of tacacs+ authentication with support of ldap groups;
 Planning of redundancy and deployment of equipment for subsidiary of Samsung (Cheil
Ukraine);
 Analyze, planning of scalability, purchase equipment, installing in scope of provisioning
channels between offices Kiev – Kharkiv;
 Planning, deployment of network infrastructure of Kharkiv office. Installing and configure
VoIP devices;
 http://www.itcook.kiev.ua – blog, framework Django that I've made contribution in
development and creating content.
Joint Venture AMP, (September 2009 – March 2012), System/Network/Operation/Support
engineer
 Planning, monitoring, deployment, purchasing of servers and network equipment;
 Administrattion services and databases (Liga, 1c, Dinai, AD, DNS, DHCP, DFS, APACS (system
of access enterprise campus), SFTP, MySQL, MsSQL, Mdaemon Pro 11 mail server (SMTP,
POP3, IMAP, MAPI, HTTP, HTTPS, LDAP).);
 performing backups important network services, configuration and databases;
 Automation access to network drivers and printers;
 Installing and configuring access points, switches and other network equipment;
 Support end-users;
 Rebuild optical channel between offices;
 Migration of internal windows domain to new level;
 Used VLAN technology for segmentation of enterprise network. (router on a stick);
 Planning and purchase new server equipment for Virtualization environment;
 Configuration remote vpn for users access;
 Inventory and write off old equipment in the company.
About me
I was involved as IT specialist in different projects and took participation in development
and deployment of infrastructure for enterprise level of business. I have near 8 years of
experience in IT area, worked from junior to senior positions in department and team.