Ivan Rozhkov

Senior DevOps / Site Reliability Engineer

ikrozhkov@gmail.com LinkedIn Telegram: @ikrozhkov

Senior DevOps / SRE engineer with 10+ years of experience operating high-load systems in AdTech, finance, and media/CDN environments at production scale
Specialized in Kubernetes platforms, GitOps, observability, resilience, cloud infrastructure, and platform security
Focused on 99.95%+ availability targets, MTTR reduction, automation, and reliable production operations

Work Experience

Verve

July 2023 - Present

Site Reliability Engineer

Operated and upgraded Kubernetes clusters across prod/stage/test/dev environments in line with SLO/SLA and security requirements
Delivered AWS-to-Google Cloud transition for Kubernetes workloads and supporting infrastructure using Terraform/Terragrunt and GitOps workflows
Migrated traffic ingress from legacy Kubernetes Ingress resources to Gateway API / Envoy Gateway, standardizing routing, TLS termination, and traffic management across environments
Developed and maintained Helm charts for application and platform components
Implemented Argo CD-based GitOps workflows, eliminating manual deployments and improving change auditability
Built observability stack with VictoriaMetrics, VictoriaLogs, Grafana, Fluent Bit, and Vector; reduced MTTR by ~40% through alerting, SLI/SLO dashboards, and centralized logging
Participated in P1/P2 incident response, post-mortems, and vulnerability remediation tracking

Stack: Kubernetes, Helm, Argo CD, Terraform, Terragrunt, GCP, AWS, GitHub Actions, VictoriaMetrics, VictoriaLogs, Grafana, Kafka, Redis, Fluent Bit, Vector, Gateway API, Envoy Gateway, Bash, Python, Go

Snapcart

April 2022 - June 2023 (1 year 1 month)

DevOps Engineer

Migrated company infrastructure to Google Cloud, improving architecture consistency and operational reliability
Rebuilt GitLab CI/CD pipelines and refactored Helm charts to improve reuse across services and environments
Implemented automated validation for GraphQL schemas and gRPC proto files in CI/CD workflows
Maintained and upgraded Kubernetes platform components to support reliable application delivery

Stack: Kubernetes, Helm, Docker, Terraform, GCP, GitLab CI, Prometheus, Grafana, Pub/Sub, Redis, MySQL, VPN, Bash, Go

Bell Integrator

January 2021 - June 2022 (1 year 6 months)

Lead Engineer - DevOps / Site Reliability Engineer

Migrated 200+ microservices to Kubernetes with Istio Service Mesh, implementing pod-to-pod mTLS, RBAC, and least-privilege network policies
Operated and upgraded Kubernetes clusters across prod/stage/test/dev environments in line with internal SLO/SLA and security requirements
Developed and maintained Helm charts, Ansible roles, and playbooks; reduced deployment time from ~30 to ~5 minutes using Jenkins and GitLab CI
Designed and supported HA clusters for MongoDB, Kafka, PostgreSQL, Elasticsearch, and MinIO, including backups and performance tuning
Participated in P1/P2 incident response, post-mortems, and vulnerability remediation tracking
Mentored 3-4 engineers and contributed to architecture reviews and platform strategy decisions

Stack: Kubernetes, Helm, Istio, containerd, Docker, Terraform, Ansible, GitLab CI, Jenkins, Prometheus, VictoriaMetrics, VictoriaLogs, Grafana, Kafka, Redis, MongoDB, PostgreSQL, Elasticsearch, Fluent Bit, Vector, MinIO, Nginx, Bash, Groovy

Coleman Services

January 2020 - January 2021 (1 year)

Senior System Support Engineer

Supported high-load online cinema platform with ~400k MAU
Operated CDN infrastructure for video content delivery under high-availability and low-latency SLA requirements
Administered Linux servers across VM and bare-metal environments, including monitoring and incident response
Automated data collection, processing, and infrastructure configuration tasks
Commissioned new video platform components and supported Huawei Eudemon / CloudEngine network infrastructure

Stack: CDN, DNS, ACL, NAT, Linux, Bash, Git, Ansible, Huawei Eudemon, CloudEngine

CROC Incorporated

June 2016 - December 2019 (3 years 7 months)

Support Engineer

Implemented hardware-software systems and remotely administered clients' network and server infrastructure
Configured and administered customer-site equipment from multiple vendors, primarily Cisco routers, switches, firewalls, and VPN gateways
Maintained network fault tolerance and performance through monitoring and incident resolution within SLA
Coordinated with vendors, providers, and contractors during complex network incidents and infrastructure changes
Trained users and internal teams on network infrastructure operations and procedures

Stack: BGP, OSPF, VPN, QoS, ACL, NAT, DNS, DHCP, IPAM, VMware ESXi/vSphere, SNMP, Zabbix, Grafana, Linux, Bash, Git

Technical Skills

Orchestration	Kubernetes, Helm, Istio, Gateway API, Envoy Gateway, Calico, Cilium
CI/CD & GitOps	Argo CD, GitLab CI, GitHub Actions, Jenkins, Atlantis
Infrastructure as Code & Automation	Terraform, Terragrunt, Ansible, Bash, Python, Go
Observability	Prometheus, VictoriaMetrics, VictoriaLogs, Grafana, Fluent Bit, Vector
Databases	MongoDB, Elasticsearch, PostgreSQL, Redis, MinIO, MySQL
Streaming	Apache Kafka, Google Pub/Sub
Cloud Providers	GCP, AWS, Oracle Cloud
Networks	BGP, OSPF, VPN, DNS, ACL, NAT, CDN, Nginx

Certifications & Recognition

CKA: Certified Kubernetes Administrator - The Linux Foundation
CKS: Certified Kubernetes Security Specialist - The Linux Foundation
CKAD: Certified Kubernetes Application Developer - The Linux Foundation
KCNA: Kubernetes and Cloud Native Associate - The Linux Foundation
KCSA: Kubernetes and Cloud Native Security Associate - The Linux Foundation
CNCF Kubestronaut - recognition awarded by CNCF for earning CKA, CKS, CKAD, KCNA, and KCSA certifications
Professional Cloud Architect - Google Cloud
AWS Certified Cloud Practitioner - Amazon Web Services
Build with the Claude API - Anthropic

Education

Moscow Technical University of Communications and Informatics (MTUCI)

2012 - 2016

Faculty — Networks and Communication Systems
Major — Multichannel Telecommunication Systems

Languages

Russian — native
English — B2
Spanish — A1