DevOps Engineer
@ Amelkis
- Migrated the company’s on-premise infrastructure to Microsoft Azure (rehost and replatform), managed as code with Terraform: about 150 resources including VMs, SQL Managed Instance, PostgreSQL Flexible Server, Container Apps, Redis and Azure OpenAI
- Set up network segmentation (VNet, subnets, NSGs, route tables), Private Endpoints with Private DNS, Bastion for admin access, secrets in Key Vault, and least-privilege RBAC with managed identities; reconciled configuration drift between Terraform and live resources
- Manage the deployment pipelines: Azure DevOps, GitLab CI, and GitHub Actions using OIDC workload identity federation (no stored credentials) to build images to ACR and deploy to Container Apps
- Built a multi-tenant dashboard for managing LLM token quotas per client
- Observability: Log Analytics, Application Insights synthetic availability tests, metric alerts with action groups, Managed Grafana; automated TLS certificate renewal and rollout
- Containerised the 10-service platform with Docker Compose and ran k6 load tests (up to 378 concurrent virtual users) for capacity planning