Available now — remote DevOps / Cloud Engineer
Oleksii
Kuzkin
DevOps / Cloud Engineer
Bratislava, SK · remote-first
Thirteen years of running production enterprise IT — incidents, on-call, escalations, root cause — now pointed entirely at cloud infrastructure. I build and automate AWS platforms with Terraform, Kubernetes, GitLab CI/CD and ArgoCD, validated by four current certifications and three production-grade systems I designed, shipped and still operate.
CNCF
Certified Kubernetes Administrator
CKA · issued May 2026
AWS
Solutions Architect – Associate
SAA-C03 · issued Jun 2026
AWS
Developer – Associate
DVA-C02 · issued Dec 2025
AWS
AI Practitioner
AIF-C01 · issued Jan 2026
Cloud
AWS
EC2
VPC
IAM
S3
EKS
ECS
Lambda
CloudFront
CloudWatch
RDS
WAF
SES
ACM
Containers
Kubernetes
Docker
Helm
Buildah
Infra as code
Terraform
CloudFormation
Ansible
CI/CD & GitOps
GitLab CI
GitHub Actions
ArgoCD
OIDC federation
Observability
Prometheus
Grafana
Loki
CloudWatch
OS & scripting
Linux
Bash
Python
Node.js
Windows Server
Automation & AI
Claude Code
Codex
Temporal
Designed, built and operated end to end — infrastructure defined as code, deployed through CI, monitored in production.
Serverless static site & contact-form backend
A production site with zero servers and zero long-lived credentials — every resource defined in Terraform, deployed by pipeline.
- ›Private S3 origin behind CloudFront with Origin Access Control, AWS WAF managed rule groups and geo-blocking.
- ›API Gateway → Lambda → SES contact backend with DynamoDB per-IP rate limiting, origin verification and least-privilege IAM.
- ›GitLab CI/CD with OIDC federation — short-lived AWS credentials, no static access keys; SAST and secret detection automated.
- ›Strict CSP with self-hosted assets; DKIM and DMARC at
p=reject; console-created resources imported into state without downtime.
Terraform
CloudFront
WAF
Lambda
API Gateway
DynamoDB
SES
OIDC
Self-hosted AWS/EKS platform for a rental-listings scraper
A full-stack scraper aggregating Bratislava apartment listings from rental sites and Telegram channels — and the Kubernetes platform underneath it.
- ›Normalizes heterogeneous listing sources into a single unified dataset.
- ›Production-style EKS platform: Terraform + Helm, GitLab CI with OIDC, Buildah images, zero-downtime rollouts, envelope-encrypted secrets.
- ›Prometheus / Loki / Grafana dashboards and alerts as code; cost-aware autoscaling trade-offs documented.
- ›Teardown/rebuild on demand via Makefile with a deliberate persistence boundary — RDS and S3 survive, compute doesn't — to cap spend without risking data.
EKS
Helm
Terraform
Prometheus
Loki
Buildah
RDS
Python
AI film production platform
In progress — an end-to-end pipeline that turns a text film idea into a finished short.
- ›Stateful Temporal workflow architecture coordinating multiple LLM, image and video vendors with automatic failover.
- ›Cost-gated generation steps; AWS ECS / RDS / S3 under AWS Organizations with account separation.
- ›Delivered through GitLab CI/CD with Jira-tracked scope.
Temporal
Next.js
ECS
RDS
AWS Organizations
GitLab CI/CD