10h → 20min
Automated the entire infrastructure deployment process for edge devices (mini-PCs)
~ $ whoami
Kalislav Smirnov
DevOps Engineer
DevOps engineer with 4.5 years of experience. I build Kubernetes platforms, GitLab CI/CD pipelines and infrastructure automation with Ansible and Terraform, most recently for banks and government agencies, including fully air-gapped environments. I also integrate SAST, DAST and SCA scanning into pipelines. I live in Tbilisi, Georgia, and I am open to relocation or remote work.
01Impact
5
End-to-end DevSecOps platform implementations for banking and government clients
100+ VMs
Multi-datacenter Kubernetes platforms with disaster recovery protocols
2w → 3d
Release cycle for 20+ microservices
02Case studies
Client names are left out on purpose. The numbers are from the projects themselves.
Federal company · 90+ development teams · 200+ products · team of 3 engineers · 1 year
Secure development process across the whole company
Dozens of teams shipped code with no shared security checks, and open source packages reached developers unchecked.
- Deployed OSA Firewall and put it into the package supply chain, so open source dependencies are checked before developers get them.
- Deployed an ASOC platform that collects findings from every scanner in one place.
- Added Gitleaks, Trivy, SCA and OSA checks to the shared GitLab CI templates, so teams got them without writing pipelines by hand.
- Trained DevOps engineers and developers to work with the findings. Together with the client we prepared and agreed 30+ process documents and instructions.
Press release about the project
100% of pipelines run security checks
Major bank · air-gapped network
Signed package delivery into a closed network
The bank's Nexus repository has no internet access, and every package that enters it has to come from a trusted source.
- Built a delivery service in Python that runs on Kubernetes.
- Every package is signed with GPG, and the signature is checked before it lands in Nexus.
Developers in the closed network get the packages they need, and each one can be traced to a signature.
Investment bank · edge devices
Mini-PC setup automated end to end
Each edge device (a mini-PC) was set up by hand, which took a full working day.
- Automated the entire infrastructure deployment with Ansible and custom scripts.
10h → 20min to set up one device
Investment bank · core application
From a monolith to 10 services on Kubernetes
The core application was a single monolith, and there was no monitoring for a service based setup.
- Designed and ran the first migration of the monolith to 10 containerized microservices on Kubernetes.
- Wrote Helm charts for all 10 services.
- Built monitoring and alerting from scratch with Prometheus, Grafana and ELK.
Any service deploys or rolls back with one command, and the team sees problems in real time.
03Experience
-
DevSecOps Engineer
Feb 2025 - Aug 2026Swordfish Security Full-time
Deploying and maintaining DevSecOps platforms for enterprise clients in banking, fintech, and government sectors, including fully air-gapped environments.
- Led 5 end-to-end DevSecOps platform implementations for banking and government clients, from architecture design to final handover.
- Engineered and deployed a secure, GPG-signed package delivery service using Python and Kubernetes for a major bank's air-gapped Nexus repository.
- Automated the integration of SAST, DAST, and SCA tools (Semgrep, Trivy) into GitLab CI, enabling security scans on 100% of new code commits.
- Developed a suite of 15+ reusable Ansible roles to standardize deployments across client environments, reducing setup time for new projects by an estimated 30%.
- Designed and managed multi-datacenter Kubernetes platforms (100+ VMs) with disaster recovery protocols for high-availability financial systems.
- Prepared and conducted product demonstrations and acceptance testing (Nexus, GitLab, DevSecOps products).
- Maintained internal infrastructure: GitLab, proprietary products, RnD and PROD environments
-
DevOps Engineer
Oct 2024 - Feb 2025Sinara Investment Bank
- Automated the entire infrastructure deployment process for edge devices (mini-PCs), slashing setup time from 10 hours to 20 minutes using Ansible and custom scripts.
- Architected and executed the initial migration of a core monolithic application to 10 containerized microservices on Kubernetes.
- Built a complete observability stack from scratch using Prometheus, Grafana, and ELK, providing real-time monitoring and alerting for the new microservices architecture.
- Developed and managed Helm charts for all 10 services, enabling one-command deployments and rollbacks.
-
DevOps Engineer
Apr 2022 - Oct 2024Engineering & Manufacturing Company
- Overhauled the CI/CD process by implementing automated testing and deployment pipelines in GitLab CI, cutting the release cycle for 20+ microservices from 2 weeks to 3 days.
- Automated manual deployment checklists with Ansible and Bash scripts, reducing hands-on deployment time from over 4 hours to under 30 minutes per release.
- Led the containerization of 20+ legacy Java microservices using Docker, standardizing environments and eliminating configuration drift between staging and production.
- Managed and maintained the company's production infrastructure, consisting of 50+ Linux servers across two data centers.
04Skills
Platform
Automation & IaC
CI/CD
Security
Observability
Data & messaging
05Projects
Public repositories on GitHub, loaded live.
All repositories on GitHub06Homelab
This site runs on a mini-PC at my home.
Architecture
Built from the Terraform code in the homelab repo. terraform/outputs.tf
- Proxmox VE on ZFS.
- Local DNS with ad blocking and wildcard Let's Encrypt certificates issued via DNS-01.
- No open ports. I connect over Tailscale, and this site is published through Cloudflare Tunnel.
- Monitoring with Gatus (configured in YAML) and Uptime Kuma.
Recent changes in the repo
All commits07Sandbox
A real shell in a throwaway VM on my Proxmox host.
- Isolated network: no internet and no access to other hosts.
- 1 vCPU capped at 50%, 768 MB RAM, 6 GB disk.
- Rolled back to a clean snapshot every 30 minutes.
- Up to 5 people at a time.
guest@sandbox:~$
08Learning & education
Kubernetes certifications: CKA, then CKAD
In progressPreparing for the Certified Kubernetes Administrator exam first, then Certified Kubernetes Application Developer. Started in 2026.
Master of Engineering, Aerospace, Aeronautical and Astronautical Engineering
Bauman Moscow State Technical University, 2020 - 2026
English - B2
Russian
09For recruiters
Where are you based, and will you relocate?
I live in Tbilisi, Georgia. I am open to relocation to the EU, the USA or Kazakhstan, and to remote work for a company in any country.
What type of employment are you looking for?
Full-time work as an employee, on a B2B basis or on a contract.
When can you start?
Right away. I am open to offers now.
Do you need a visa?
For relocation, yes: I need visa sponsorship or another work permit. I do not have a right to work outside Georgia yet. Remote work does not need one.
What roles are the best fit?
DevOps and platform engineering: Kubernetes, GitLab CI/CD, Ansible and Terraform, with security checks built into pipelines. I have the most experience with banks, fintech and government projects, including air-gapped environments.
What languages do you work in?
English (B2) and Russian.