[nom]

Senior Infrastructure & Network Engineer

Open to remote | Open to relocate | [e-mail] | [lien] | [lien]

SUMMARY

Senior Infrastructure & Network Engineer who keeps business-critical platforms online: 15+ years across fintech & payments, banking, government, retail and quantitative finance. Designs and operates multi-data-center networks sustaining 99.99%+ availability under live transaction load, with deep BGP/RPKI and VXLAN/EVPN expertise on top of Linux, Kubernetes and AWS

• everything automated with Python, Ansible and Terraform. Delivers measurable impact: routing incidents cut by 30–50%, provisioning 75% faster, PCI DSS segmentation for a national payment platform. RIPE NCC certified; leads teams and sets engineering standards.

SKILLS

Networking: Cisco, Juniper, MikroTik, VyOS; BGP (RPKI/IRR), OSPF, EIGRP; VLAN/VRF; VXLAN/EVPN; multicast; ECMP;

HSRP/VRRP; ACLs/firewall; NetFlow

Infrastructure & Virtualization: VMware vSphere (ESXi, vCenter, vDS, HA/DRS); Proxmox; Linux (Ubuntu, Debian, RHEL);

Windows Server/AD

Cloud & Containers: AWS (VPC, EC2, S3, Route 53, IAM); Kubernetes (RKE2, K3s); Docker; Harvester HCI; Hetzner Cloud;

Cloudflare (DNS, CDN, WAF)

Security: RPKI/IRR filtering; VPN (IPsec/IKEv2, WireGuard); MFA/SSO; PCI DSS segmentation; Symantec, Wazuh, Palo Alto, Fortinet

Automation: Python (Netmiko), Ansible, Terraform, Bash, PowerShell, PowerCLI

Monitoring & Backup/DR: Zabbix, Prometheus, Grafana, Syslog; Veeam B&R, DR runbooks, restore testing

Databases: PostgreSQL, MySQL, MS SQL

EXPERIENCE

Senior Infrastructure Engineer · May 2025 – Present

ALT Fund

Quantitative hedge fund building low-latency trading infrastructure.

• Designed and delivered core office + data center infrastructure across 3 geo-distributed sites (active-active-active), achieving >99.9% availability for critical applications.
• Implemented site-to-site and remote-access VPN with MFA (Cisco + WireGuard/IPsec) and centralized monitoring/alerting (Prometheus/Zabbix), improving detection and on-call response.
• Administer the Linux (Debian/Ubuntu) server fleet and Kubernetes (RKE2) clusters hosting trading and internal services; automated provisioning, hardening and patching with Ansible.
• Manage the AWS environment (VPC, EC2, S3, Route 53) with site-to-site VPN to on-prem; provisioned as code with Terraform, changes version-controlled and peer-reviewed in Git.

Senior Infrastructure Engineer · Aug 2024 - May 2025

Kaspi.kz

Kazakhstan’s largest fintech and digital payments platform, serving millions of customers across payments, banking.

• Operated high-availability core/edge across dual data centers (ECMP, VRRP/HSRP) for payment-processing services, sustaining sub-second convergence and 99.99%+ availability under live transaction load.
• Designed and operated a VXLAN/EVPN BGP overlay fabric across dual data centers for multi-tenant workloads.
• Implemented BGP with IRR/RPKI filtering (max-prefix, AS-path) and NetFlow analysis; cut routing incidents ~30–50%.
• Delivered PCI DSS segmentation (CDE/corporate/guest) and secured branch and payment-terminal connectivity (IPsec/IKEv2).
• Automated network configuration with Python/Netmiko and Ansible against golden-config baselines, eliminating drift.

Senior Lead Infrastructure Engineer · Feb 2023 - Aug 2024

Samgau

Kazakhstan-based IT holding company delivering large-scale digital transformation projects.

• Formally led a team of 5 engineers: hiring, task assignment, performance reviews, mentoring.
• Rebuilt AD (OU/GPO) with baseline hardening; integrated Entra ID, rolled out MFA/SSO and standardized access reviews.
• Standardized VMware vSphere and Proxmox (HA/DRS, vDS), created golden images and automated VM provisioning (PowerCLI/Ansible), cutting provisioning lead time by ~50%.
• Administered AWS workloads (VPC, EC2, S3) integrated with on-prem infrastructure via site-to-site VPN.
• Rolled out Zabbix and Prometheus/Grafana monitoring with actionable alerts and NOC dashboards.
• Automated account lifecycle and service deployments (PowerShell/Ansible), saving ~5-10 hours/week.

Senior Lead Infrastructure Engineer · Jul 2020 - Feb 2023

Butterfly Effect Corporate System

Kazakhstan-based IT company, focused on developing digital products and corporate technology solutions.

• Led a team of 8 engineers running the company’s infrastructure, operations and on-call.
• Built data center infrastructure (network, virtualization, storage, AD, backups) as a greenfield environment.
• Standardized vSphere/Proxmox (HA/DRS, vDS, golden images) and automated VM provisioning (PowerCLI, Cloud-Init).
• Deployed Veeam B&R with encrypted offsite copies to AWS S3 and quarterly restore tests; created DR runbooks.
• Implemented Zabbix/Prometheus/Grafana alerting and ITIL/CAB change process; automated routine tasks with PowerShell.

Senior Infrastructure Engineer · Aug 2019 - Jul 2020

Mechta Market

One of Kazakhstan’s leading retail chains for consumer electronics and home appliances, combining nationwide stores.

• Designed a standard branch blueprint for 54+ stores: access switching, CE routers, APs, CDE/guest/CCTV segmentation.
• Implemented centralized DHCP/DNS/NTP with templated configurations for uniform rollouts across all branches.
• Ensured WAN resiliency with dual-WAN (wired + LTE), IPsec (IKEv2) tunnels and BGP/OSPF for predictable failover.

Senior Infrastructure Engineer · Jan 2017 - Aug 2019

Ministry of Agriculture of the Republic of Kazakhstan

• Architected nationwide government IT and network infrastructure: 400+ network devices and 32 blade servers across regional sites.
• Built L2VPN/L3VPN inter-regional connectivity linking regional offices countrywide.

PROJECTS

Infrastructure support | Equant AG | Zurich, Switzerland

Infrastructure consulting for a Swiss telecommunications provider: virtualization standardization and monitoring.

• Standardized VMware vSphere (ESXi, vCenter, vDS, HA/DRS) for 99.9% availability of critical VMs; implemented Zabbix monitoring with email/Telegram alerts.
• Created golden templates (Sysprep/Cloud-Init), cutting VM provisioning time from ~2 hours to ~30 minutes (~75% faster).

TECHNICAL LEADERSHIP

• Defined infrastructure and network standards (golden configs, branch blueprints, virtualization baselines) for 54+ sites.
• Mentored engineers, promoted automation-first and IaC practices; collaborated with security, DevOps and engineering teams on PCI DSS compliance and ITIL/CAB change management.

EDUCATION

Bachelor’s degree — Economics and Statistics Academy, Almaty, Kazakhstan (2011 - 2013)

LANGUAGES

English – B2 · Russian – Native

CERTIFICATIONS

RIPE NCC: BGP Security Associate · IPv6 Security Expert · Database Associate (2025) · MTCINE, 2025