Andrei Ivanov - DevSecOps Engineer

Summary

DevSecOps and Cloud Infrastructure Consultant with 26+ years of experience architecting secure, scalable, and automated environments for major Canadian enterprises. Proven ability to lead cloud-native transformations, establish CI/CD pipelines, and implement zero-trust security in highly regulated industries. Repeatedly extended on contracts for outstanding delivery.

Overview

26

years of professional experience

36

Certification

Work History

DevSecOps Engineer

Canada Life

Toronto, ON

10.2022 - 08.2024

Deployed AKS-based infrastructure using IaC (Bicep, Terraform) for Azure Stack HCI
Built automated pipelines for secure workloads across Azure and AWS
Integrated Venafi Zero Touch PKI into CI/CD for automated cert/key rotation
Developed big data pipelines using Kafka, Databricks, ADLS, Airflow, HDFS
Reviewed pentest results and implemented security hardening measures
Developed high-quality engineering designs and plans to meet industry standards.
Designed and implemented quality control processes to facilitate customer satisfaction.
Evaluated vendor proposals for equipment procurement, selecting optimal solutions based on performance requirements.
Led engineering teams to successfully complete projects on time and within budget.
Achieved significant cost savings in material usage through development and application of innovative recycling program.
Developed proprietary algorithm that enhanced data analysis capabilities, leading to more informed decision-making.
Conducted rigorous quality control checks, ensuring all engineering projects met internal and external quality standards.
Developed comprehensive maintenance schedule for critical machinery, extending equipment lifespan and minimizing production delays.
Developed positive working relationships with stakeholders to effectively coordinate work activities.
Provided input to team lead regarding areas for process and procedural improvement.
Developed and maintained relationships with suppliers to facilitate quality and timely delivery of materials.
Improved client satisfaction with detailed progress reports and proactive communication during project execution phases.
Reviewed technical drawings developed by CAD technicians and drafters.
Participated in formal internal design reviews of proposed products and components.
Enhanced product reliability by leading team in meticulous design and testing of new engineering software tools.
Optimized workflow and increased productivity by introducing cutting-edge engineering software for project management.
Assisted in developing cost-effective solutions to engineering problems.
Led cross-functional teams to innovate on product design, enhancing user experience and functionality.
Enhanced product performance by conducting thorough failure analysis and recommending improvements.
Conducted detailed research and analysis to identify potential improvements in engineering methods, resulting in more sustainable practices.
Trained and mentored junior engineers, providing guidance and direction.
Developed comprehensive engineering documents for all projects.
Monitored and evaluated engineering performance to recommend improvements.
Analyzed and interpreted data to identify trends and recommend improvements.
Implemented automated systems to improve accuracy and efficiency of engineering processes.
Conducted research to identify and evaluate new technologies and concepts.
Conducted feasibility studies for new projects, providing detailed analysis and recommendations that informed leadership decisions.
Coordinated with suppliers to secure high-quality materials, negotiating favorable terms that led to reduction in project costs.
Developed cost estimates and project specifications for proposals.
Conducted technical evaluations of engineering designs and test results.
Enhanced team performance by implementing structured onboarding program for new engineers, reducing ramp-up time.
Collaborated with other departments to facilitate successful project completion.
Reduced project completion time with efficient resource allocation and effective communication strategies.
Verified construction documentation to meet client requirements and vision.
Improved energy efficiency in manufacturing processes by redesigning mechanical systems and components.
Optimized engineering processes by implementing innovative solutions and streamlining workflow.
Performed complex calculations to analyze and optimize engineering processes.
Conducted rigorous quality assurance tests, identifying areas of improvement for product optimization.
Supported junior engineers through mentorship, offering guidance on complex problem-solving and technical skills development.
Established strong working relationships with clients through exceptional communication skills, fostering trust and collaboration.
Documented and developed engineering procedures and processes.
Presented technical findings to stakeholders, ensuring clear understanding of project status and goals.
Wrote, reviewed and edited technical document in accordance with template requirements.
Analyzed and interpreted customer requirements to develop engineering solutions.
Enhanced safety protocols during construction projects, ensuring compliance with national standards and reducing workplace accidents.
Initiated and led sustainability task force, integrating eco-friendly practices into engineering projects and reducing environmental impact.
Achieved successful project outcomes by maintaining accurate documentation and meeting strict deadlines.
Developed and implemented procedures to verify compliance with engineering standards.
Streamlined permit acquisition process for new projects, working closely with local authorities to ensure compliance and timely approval.
Negotiated with suppliers to secure high-quality materials at cost-effective prices.
Implemented new strategies to reduce costs and improve efficiency of engineering team.
Collaborated on interdisciplinary teams to develop creative, cost-effective solutions for complex projects.
Reduced downtime during system upgrades with thorough planning and implementation of new hardware across company networks.
Streamlined project delivery processes, implementing agile methodologies that improved team collaboration and efficiency.
Facilitated knowledge sharing sessions on latest engineering trends, fostering culture of continuous learning among team members.

DevOps / DevSecOps Engineer

Sun Life Financial

Toronto, ON

08.2021 - 09.2022

Automated secure CI/CD pipelines with Jenkins, Ansible Tower, and CDD
Enabled AWS Secrets Manager auto-rotation for Lambda, RDS, API Gateway
Conducted SRE post-deployment validations with dashboards in Grafana/Kibana

DevOps Engineer

Morneau Shepell

Toronto, ON

08.2020 - 08.2021

Led AKS, Terraform, and Octopus deployments for containerized workloads
Migrated Azure DevOps task groups and libraries across tenants
Built Kafka clusters on Kubernetes; managed Helm/ProGet repos

DevOps Engineer

LCBO

Toronto, ON

06.2018 - 06.2020

Automated infrastructure provisioning with Terraform Enterprise and Jenkins
Built HA Kubernetes clusters for IBM Cloud Pak and internal ELK stack
Created secure, multi-stage deployment pipelines for WCS and OMS platforms

DevOps Consultant – Shared Services

TD Bank

Toronto, ON

11.2017 - 03.2018

Automated deployments for data platform on AKS, ADF, Synapse, and Databricks
Maintained Red Hat OpenShift clusters and Venafi certificate integrations
Delivered enterprise-grade security logging with Splunk and Confluence workflows

Education

M.Sc. - Aerospace Engineering

Bauman Moscow State Technical University

Certificate - Artificial Intelligence: Implications for Business Strategy

MIT Sloan & MIT CSAIL

Skills

Cloud Platforms: Azure (AKS, ADF, Bicep), AWS (EC2, RDS, IAM, GuardDuty), GCP
Containerization: Kubernetes, Docker, Helm, OpenShift, AKS
Infrastructure as Code: Terraform, ARM/Bicep, CloudFormation, Ansible
CI/CD & Automation: Azure DevOps, Jenkins, GitHub Actions, Octopus, ArgoCD

Security & Compliance: Venafi, Secrets Manager, Macie, KMS, PKI, WAF
Monitoring & Logging: Prometheus, Grafana, ELK Stack, Splunk, AppDynamics
Programming & Scripting: Python, Bash, PowerShell, Groovy

Languages

English

Certification

Certifications

· Harness AI – Platform Fundamentals

· Harness – Infrastructure as Code Management (IaCM)

· MS badge: "Manage authentication by using Microsoft Entra ID"

· MS badge: "Secure Azure AI services"

· MS badge: "Deploy Azure AI services in containers"

· MS badge: "Use an Azure Machine Learning job for automation"

· MS badge: "Trigger Azure Machine Learning jobs with GitHub Actions"

· MS badge: "Secure your cloud apps and services with Microsoft Defender for Cloud Apps"

· MS badge: "Accelerate your migration, modernization, and innovation journey to Azure"

· AWS Certified Security Specialty

· AWS Certified Cloud Practitioner

· AWS Certified Security – Specialty Official Practice Question Set (SCS - C01)

· ITIL 4 Foundation Practice Certification Exams

· Master Go (Golang) programming

· Certified Master Linux Administration: The Complete Linux Bootcamp for 2022

· Certified CompTIA Security+ (SY0-601) Complete Course & Exam - 2022

· Certified Kubernetes and Istio with Amazon Elastic Kubernetes Service (EKS)

· Certified Kubernetes on AWS

· Certified Azure Kubernetes Service – AKS

· Certified Kubernetes Administrator 2022

· Certified Containers and Kubernetes on Azure

· Certified HashiCorp: Terraform Associate

· Certified Kubernetes Administrator (CKA) - Updated for latest CKA (2022) 1.22 version of Exam

· Certified Kubernetes Application Developer (CKAD)

· Certified Splunk Admin and Architect

· Certified Google Cloud Platform (GCP) Fundamentals

· Docker Certified Associate (DCA)

· HELM - Package Manager for Kubernetes Complete Master Course

· Certified Advanced Selenium Automation

· Certified OpenShift - Hands-on

· Certified The Complete Apache Groovy Developers Course

· Certified Python Programming Masterclass

· Certified Apache Kafka Series - Kafka Cluster Setup & Administration

· Certified MIT Sloan & MIT CSAIL Artificial Intelligence: Implications for Business Strategy Program

· Certified Ethical Hacker [312-50]

· Certified by PROGRESS Software: “Character Programming in Progress” and “4 GL Performance Tuning and Advanced Program”A)

Section name

Full project and technical history available upon request.

Timeline

DevSecOps Engineer

Canada Life

10.2022 - 08.2024

DevOps / DevSecOps Engineer

Sun Life Financial

08.2021 - 09.2022

DevOps Engineer

Morneau Shepell

08.2020 - 08.2021

DevOps Engineer

LCBO

06.2018 - 06.2020

DevOps Consultant – Shared Services

TD Bank

11.2017 - 03.2018

Certificate - Artificial Intelligence: Implications for Business Strategy

MIT Sloan & MIT CSAIL

M.Sc. - Aerospace Engineering

Bauman Moscow State Technical University