Operations Lead at Confidential (Fintech/Payments)

Owned infrastructure, security, and development for a payments company (~20 people), working independently and taking tasks directly from the CEO. Defined infrastructure as code (Terraform for AWS resources; Kubernetes manifests; Docker for services), with CI/CD via GitHub Actions and a standard that everything is deployed only through manifests. Implemented automated tests and security checks before releases, including vulnerability scanning and static analysis (Trivy, Semgrep), dependency supply-chain review, and penetration testing using MCP tools prior to agent-written changes. Built internal Python/PHP services (e.g., merchant whitelisting automation between service desk and payment platform API, compliance validation across 1,000+ sites per run, daily financial reporting, and a DWH on PostgreSQL/AWS RDS). Migrated on-prem servers and staff access to AWS and set up a private mesh network with host-level access policies. Ran monitoring with Python health checks and Telegram alerts,

Lead Infrastructure Engineer at bbf

Planned and led migration of on-prem infrastructure to Azure. Applied AI to infrastructure workflows using ChatGPT and Codex to automate monitoring and Azure automation scripts, delivering daily/weekly reports and statistics to teams; prepared job descriptions for engineers using AI. Maintained conditional access, DLP and SIEM policies; administered Microsoft 365 and workstations for 200+ users on macOS and Windows with Intune and JAMF. Set up monitoring and alerting with Grafana, Azure Monitor, and Teams webhooks; unified multi-site networking on UniFi.

IT Manager at PropellerAds

Led IT preparation for successful ISO 27001 audits for two consecutive years, including endpoint security and device management controls. Built IT infrastructure for three new offices (India, Serbia, Cyprus) and managed Google Cloud, Azure, Active Directory, VMware, Proxmox, networks, and security systems.

IT Specialist and DevOps Engineer at Pentegy

Supported production operations of a national medical rescue system in Poland under strict SLAs. Worked with CentOS Linux, MySQL replication and backups, WildFly, VMware ESX, Fortinet load balancing, Puppet deployments, and Zabbix monitoring.