Shamil Sattarov

DevOps Engineer · Platform Engineer · Cloud Engineer

Shamil Sattarov

Summary

I build and operate fault-tolerant Kubernetes platforms using GitOps, IaC, CI/CD, observability, and operator-managed stateful services.

I work across the platform lifecycle, from infrastructure provisioning and migration to application delivery and operations. I prefer standard tooling and declarative workflows that keep platform changes and operational knowledge in Git and minimize routine manual intervention.

Contacts

shamil@shamil.pro @youngbluesman GitHub LinkedIn HeadHunter
Resume · PDF · EN

Working arrangements

Work format
Remote
Location
Ufa, Russia
Time zone
GMT+5
Business travel
Available

Languages

Russian
Native
English
B2 · used professionally

Core stack

Platform & Cloud:
Kubernetes, Docker, Helm/Kustomize, Kubernetes Operators, Google Cloud Platform, Google Kubernetes Engine, Cloudflare, Gateway API, AWS
Infrastructure as Code:
Crossplane, Terraform, Ansible
CI/CD & GitOps:
GitHub Actions, Argo Workflows, GitLab CI, Argo CD, Flux
Data:
PostgreSQL (CloudNativePG), Kafka (Strimzi), Redis/Valkey/Dragonfly, Elasticsearch (ECK)
Security & Secrets:
External Secrets Operator, Vault/OpenBao (Bank-Vaults)
Observability:
Prometheus, Grafana, OpenTelemetry, ELK/EFK, Jaeger
Engineering & Automation:
Bash, Python, Go, GNU Make
Systems & Networking:
GNU+Linux, KVM/Libvirt, VMware vSphere, Cisco

Selected Achievements

Zero-downtime platform migrations

~300 RPS · zero downtime

Migrated a ~300 RPS platform from a manually configured VPS to Docker Swarm provisioned with Ansible, then to GKE managed with Terraform; completed both migrations without downtime.

Technologies: Docker Swarm · Ansible · Google Kubernetes Engine · Terraform

Lower infrastructure cost

Almost five-fold cost reduction

Achieved an almost five-fold reduction in monthly cloud spend by moving suitable workloads onto spot nodes and replacing SaaS ClickHouse, PostgreSQL, and Dragonfly with operator-managed clusters.

Technologies: Google Kubernetes Engine · Kubernetes Operators · ClickHouse (Altinity)

One path to production

15+ microservices · 8 developers

Standardized continuous delivery for 15+ microservices on Docker Swarm clusters provisioned with Ansible, giving 8 developers a shared path to production instead of per-service scripts.

Technologies: Docker · Docker Swarm · Ansible

Experience

January 2020 — present

Funnelflux

Senior Platform Engineer

Hong Kong · Remote · funnelflux.com

Own the multi-region Kubernetes production platform used by a six-developer team and its application delivery infrastructure: CI/CD, GitOps, reliability, observability, secrets, and stateful services. The current implementation runs on GCP/GKE.

Outcomes

  • Migrated a ~300 RPS platform from a manually configured VPS to Docker Swarm provisioned with Ansible, then to GKE managed with Terraform; completed both migrations without downtime.
  • Built four production GKE clusters across four regions plus dedicated staging and infrastructure clusters, and linked the production clusters through a Multi-Cluster Gateway.
  • Introduced Argo CD GitOps for 20+ services and internal tools; cut deployment time from five minutes to a minute and a half and increased release frequency from two or three a week to as many as ten a day. Rollback requires reverting a single Git commit and completes in under two minutes.
  • Achieved an almost five-fold reduction in monthly cloud spend by moving suitable workloads onto spot nodes and replacing SaaS ClickHouse, PostgreSQL, and Dragonfly with operator-managed clusters.
  • Unified application and infrastructure management under GitOps by moving infrastructure from Terraform to Crossplane: resources are plain YAML manifests in the Kubernetes API, and the controller continuously reconciles them to the desired state.
  • Replaced Helm template rendering in Argo CD with pre-rendered YAML manifests (Rendered Manifests Pattern). Changes are visible in plain YAML diffs, and Argo CD does not spend resources rendering templates.
  • Moved secret synchronization configuration into GitOps with External Secrets Operator while keeping secret values outside Git.
  • Unified lifecycle management for PostgreSQL, ClickHouse, Redis (now Dragonfly), and Elasticsearch under Kubernetes operators; migrated Kafka from SaaS to a Strimzi-managed cluster.
  • Moved static file serving from Nginx to Google Cloud Storage behind a CDN: updates no longer serve stale files, and the Nginx configuration no longer needs to be maintained.
Responsibilities
  • Coach team members in DevOps practices: IaC, branching strategies, and twelve-factor application development.
  • Ensure application resilience and high availability; configure cloud infrastructure: GCP, GKE, GCLB, and Cloudflare.
  • Deploy supporting services and databases through operators: ExternalDNS, cert-manager, Prometheus, Jaeger, Elasticsearch, ClickHouse, Dragonfly, and PostgreSQL.
  • Help developers prepare applications for cloud operations: monitoring, logging, and tracing.

April 2018 — January 2020

Rossko

Senior DevOps Engineer

Novosibirsk, Russia · Remote · www.rossko.ru

Supported an auto parts distribution portal for repair shops and retailers, maintaining virtual infrastructure, CI/CD, and the container platform.

Outcomes

  • Automated provisioning for 20+ vSphere hosts and ~100 VMs with Ansible, Ansible Tower (AWX), and Terraform, replacing manual server configuration.
  • Standardized continuous delivery for 15+ microservices on Docker Swarm clusters provisioned with Ansible, giving 8 developers a shared path to production instead of per-service scripts.
  • Centralized microservice logs and metrics with EFK, Prometheus, and Grafana, giving the team a single place for incident diagnostics.
  • Moved web service assets from application servers to MinIO object storage.
Responsibilities
  • Maintained CI/CD for the portal services: build, test, and release pipelines.
  • Containerized web applications and infrastructure services, maintained Docker Swarm clusters, and helped the team adopt twelve-factor principles.
  • Trained the system and network administration team in DevOps practices: IaC, configuration management, CI/CD, and Git.

January 2017 — April 2018

Plussell

DevOps Engineer

Yekaterinburg, Russia · Remote

Maintained builds, releases, and infrastructure for a Java platform on OpenStack, including provisioning automation and Kubernetes operations.

Outcomes

  • Automated builds with Jenkins and Nexus, and moved dependency management to Gradle. Build time fell from hours to minutes.
  • Migrated the platform from two hand-configured bare-metal servers to Mail.ru Cloud (now VK Cloud) running on OpenStack. Provisioned infrastructure with Heat and Ansible.
  • Built a Kubernetes cluster on OpenStack with its provisioning described in code. Moved Elasticsearch, Jenkins, and Nexus onto it.
  • Moved the Liferay portal from Tomcat to WildFly.
Responsibilities
  • Maintained the Java build and release process for Liferay and OSGi applications, including versions and dependencies.
  • Deployed servers with OpenStack Heat through its AWS CloudFormation-compatible API, Ansible, and shell/Python.
  • Operated Docker and Kubernetes-based container infrastructure.
  • Designed and maintained LDAP and PKI infrastructure with FreeIPA.
  • Deployed SDN with OpenStack Neutron and Flannel.
Earlier experience, 2006–2017

April 2015 — January 2017

Republic of Bashkortostan ICT Center

System Administrator (formally Leading Expert)

Ufa, Russia · ciktrb.ru

Outcomes

  • Integrated FreeIPA, Foreman, ISC DHCP, and Zabbix into a single server provisioning and monitoring workflow.
  • Automated environment provisioning for testing and hypothesis validation.
  • Deployed and operated Proxmox and VMware vSphere virtualization clusters.
  • Developed and tested disaster recovery scenarios for server systems.
  • Performed information security audits, vulnerability remediation, and load testing.

April 2014 — April 2015

Freelance

System and Network Engineer

Ufa, Russia · Remote

Outcomes

  • Delivered turnkey office infrastructure — structured cabling, servers, and monitoring.
  • Designed and deployed network and server infrastructure for small companies.

March 2012 — April 2014

Bashkir National Library named after Akhmet-Zaki Validi

Network Engineer (formally Software Engineer)

Ufa, Russia · bashnl.ru

Outcomes

  • Built a secure network connecting the central office with remote sites, and set up remote staff access through OpenVPN.
  • Modernized the LAN: designed structured cabling, selected and configured equipment, prepared specifications, and coordinated with vendors.
  • Designed and deployed network infrastructure, including structured cabling and active equipment from Cisco, MikroTik, and Juniper.
  • Administered Windows and GNU+Linux servers.
  • Deployed and maintained Nagios monitoring.

November 2010 — March 2012

ICT Center under the Government of Bashkortostan

Network Engineer (formally Leading Expert)

Ufa, Russia · www.ciktrb.ru

Outcomes

  • Led the build-out of a fault-tolerant network for public authorities: 30+ institutions in the city and every district centre in the republic.
  • Designed and deployed network solutions for government institutions.
  • Prepared project documentation and technical specifications.

January 2009 — October 2010

Chelyabtyazhmashproekt OJSC

System Administrator (formally Information Security Administrator)

Chelyabinsk, Russia

Outcomes

  • Built the office LAN from scratch: equipment, structured cabling, and an Active Directory domain. Established a dedicated channel to the parent company.
  • Automated hardware inventory with OCS Inventory.
  • Administered Active Directory, Squid, and a FreeBSD gateway.
  • Ran information security for the office network.

August 2008 — January 2009

RON-Telecom LLC

System Administrator

Chelyabinsk, Russia

Outcomes

  • Connected the Chelyabinsk office and the Tryokhgorny plant networks.
  • Migrated Windows Server 2003 R2 to 2008 without interrupting services.
  • Administered Active Directory, Sendmail, Squid, an IP telephony gateway, and a Nortel BCM 2000 PBX.

January 2008 — June 2008

Heineken Logistics-Chelyabinsk

System Administrator

Chelyabinsk, Russia

Outcomes

  • Moved the logistics office to a new site with no break in warehouse operations.
  • Administered Active Directory, Lotus Domino, 1C:Enterprise on MS SQL, Squid on ALT GNU+Linux, and Bacula backups.

December 2006 — December 2007

Unimilk LLC

System Administrator (formally IT Specialist)

Chelyabinsk, Russia · danone.ru

Outcomes

  • Relocated the office and its telephone system without disrupting operations.
  • Administered Active Directory, Exchange, and 1C:Enterprise, and maintained Panasonic PBX systems.

August 2006 — December 2006

Soyuz-Region LLC

Senior System Administrator

Chelyabinsk, Russia · www.soyuz.ru

Outcomes

  • Prepared a new site for launch — cabling, workstations, and staff training.
  • Administered the internet café network and the FreeBSD gateway.

January 2006 — August 2006

Profsistemy LLC

PC Service Technician

Uchaly, Russia

Outcomes

  • Built a preconfigured Windows XP deployment image with drivers and software bundled in, cutting installation on a new machine from about 90 minutes to roughly 10.
  • Assembled, configured, and repaired PCs, and deployed operating systems.

How I work

  • Prefer CNCF projects where they fit, and account for monitoring, disaster recovery, and secret rotation when designing a platform.
  • Know how applications in Go, Java, Python, Node.js, .NET, and Rust are built and released: dependency management, packaging, and artifact repositories.
  • Share what I know and help teams adopt new processes and technologies. Set up development and release workflows - branching strategy, semantic versioning, automated releases, twelve-factor principles.

Education

2018 · Bachelor's degree

VEGU Academy

Applied Computer Science

2008 · Bachelor's degree

South Ural State University

Information and Measurement Technology

Additional technologies

Platform & Cloud:
GitHub, ExternalDNS, Nginx Ingress, Nginx, GCLB, Google Cloud Storage, Docker Swarm, Azure, Alibaba Cloud, Yandex Cloud, OpenStack
Infrastructure as Code:
Ansible Tower (AWX), Foreman, Google Config Connector, AWS CloudFormation, OpenStack Heat, Google Cloud Deployment Manager
CI/CD & GitOps:
Jenkins, Concourse CI, Bitbucket Pipelines, Tekton
Data:
ClickHouse (Altinity), MySQL/MariaDB, MinIO
Security & Secrets:
cert-manager, FreeIPA, Active Directory
Observability:
Zabbix, Nagios
Build & Packaging:
Maven/Gradle/npm/pip/Cargo, Artifactory/Nexus, NuGet, Go modules
Engineering & Automation:
Taskfile
Systems & Networking:
Windows Server, FreeBSD, Proxmox, MikroTik, Juniper, OpenStack Neutron, Flannel, ISC DHCP