Open to remote DevOps and platform engineering roles

Serge Abroyan

DevOps Engineer · Yerevan, Armenia

DevOps engineer with 7+ years in software engineering and 5+ years running cloud infrastructure, Kubernetes, and delivery pipelines in production. A background in Java backend development means I know how applications are built as well as what it takes to run them reliably.

  • 7+ years in software
  • 5+ years in DevOps
  • CKA
  • Terraform Associate

What I do

How I help engineering teams

Cloud infrastructure as code

AWS networks, EKS clusters, databases, and queues built with Terraform and Terragrunt, the same way in every environment.

Kubernetes and GitOps delivery

Every change goes through Git and reaches production through Argo CD and Helm, with safe rollouts and easy rollbacks.

Monitoring and reliability

Metrics, logs, traces, and alerts with Prometheus, Grafana, and Loki, so problems are found before users notice them.

Security and cost

Least-privilege access, signed images, and policy checks, with AWS spending kept in line with real usage.

Experience

Where I have worked

  1. DevOps Engineer

    Company under NDAApr 2024 – Present
    • Designed, provisioned, and maintain AWS infrastructure from scratch with Terraform and Terragrunt, built for scalability, security, and maintainability.
    • Designed and run Amazon EKS clusters, including Kubernetes networking, workload deployment, and cluster configuration.
    • Introduced GitOps delivery with Argo CD and Helm, standardizing how applications reach every environment.
    • Designed the AWS network and security layer: VPCs, public and private subnets, routing, security groups, and IAM policies.
    • Built monitoring, logging, and observability with Prometheus, Grafana, Loki, and the Elastic Stack.
    • Developed CI/CD pipelines in GitLab CI/CD and GitHub Actions, and automated operations with Bash and Python.
  2. DevOps Engineer

    SoftConstructSep 2021 – Apr 2024
    • Managed GitLab CI/CD pipelines that built and deployed slot game services and their backend applications.
    • Deployed and maintained containerized applications on Docker and Kubernetes, with Helm for deployment and configuration.
    • Supported staging and production, troubleshooting deployment failures, system issues, and performance problems.
    • Monitored infrastructure and applications with Prometheus and Grafana, and automated routine Linux administration with Bash.
  3. Java Software Engineer

    AddeviceJun 2019 – Sep 2021
    • Developed backend applications and REST APIs with Java and Spring Boot.
    • Implemented business logic and integrated third-party APIs and external services.
    • Designed and optimized database queries and data access on PostgreSQL and MySQL.
    • Wrote unit and integration tests and took part in code reviews.

Skills

Tools I work with

AWS

  • EC2
  • EKS
  • ECS
  • ECR
  • S3
  • RDS
  • ElastiCache
  • SQS
  • SNS
  • CloudWatch
  • CloudFront
  • Route 53
  • ALB
  • NLB
  • ACM

Networking and security

  • VPC design
  • NAT gateways
  • VPC endpoints
  • Security groups
  • IAM
  • OIDC federation
  • EKS Pod Identity
  • KMS
  • Secrets Manager
  • AWS WAF

Kubernetes and GitOps

  • Kubernetes
  • Docker
  • Helm
  • Kustomize
  • Argo CD
  • Karpenter
  • Istio
  • Envoy
  • Cilium
  • NGINX

Infrastructure as code

  • Terraform
  • Terragrunt
  • Ansible
  • TFLint

CI/CD

  • GitHub Actions
  • GitLab CI/CD
  • Jenkins
  • Bitbucket Pipelines

Security

  • Trivy
  • Checkov
  • Kyverno
  • SonarQube

Observability

  • Prometheus
  • Grafana
  • Loki
  • OpenTelemetry
  • Elastic Stack

Programming

  • Bash
  • Python
  • Go
  • Java
  • Spring Boot

Data and messaging

  • PostgreSQL
  • MySQL
  • Redis
  • Valkey
  • RabbitMQ

Credentials

Certifications and education

The Linux FoundationCertified Kubernetes Administrator (CKA)Verify on Credly (opens in a new tab)HashiCorpHashiCorp Certified: Terraform Associate (004)Verify on Credly (opens in a new tab)
EducationMaster's degree in RadiophysicsBachelor's degree in RadiophysicsYerevan State University
LanguagesArmenian (native)English (C1)

Projects

What I have built

Each one is built and documented the way a production team would do it, with the decisions and the problems written down.

01Platform engineering

Nexus Platform

A production-style AWS platform built entirely as code: three environments, GitOps delivery, signed images, full observability, and admin access without an open port. Any environment can be destroyed and rebuilt from Git.

  • AWS
  • Terraform
  • EKS
  • Karpenter
  • GitHub Actions
  • Argo CD
  • Kyverno
  • cosign
  • Prometheus
  • Grafana
  • +16 more

02Static hosting on AWS

Portfolio Site

This website, hosted on AWS for less than a dollar a month and run like a production service: infrastructure in Terraform, deployments without stored keys, strict security headers, and visitor statistics without a tracking script.

  • Astro
  • TypeScript
  • S3
  • CloudFront
  • Terraform
  • Cloudflare DNS
  • GitHub Actions
  • OIDC
  • Gitleaks
  • TFLint
  • +8 more

Incidents

Problems I found and fixed

Real failures from building Nexus, each traced to its root cause, fixed in code, and turned into a lesson.

Kubernetes

Nodes that could never be replaced

Symptom
Karpenter kept an old node running for an hour, so two servers were billed for one workload.

Check every disruption budget against the replica count it protects.

Cost

A surprising NAT bill

Symptom
Gigabytes went through the NAT gateway while the cluster had almost no users.

Per-gigabyte charges hide in background jobs; read the flow logs before guessing.

Cost

Eleven gigabytes of logs a day

Symptom
CloudWatch log ingestion cost more than the servers it described.

Log volume is a cost decision to make per environment.

Autoscaling

A worker that never scaled down

Symptom
Two worker pods kept running with an empty queue.

Scale on a signal that drops when a pod is added.

Contact

Let's talk

Open to remote DevOps and platform engineering roles. The fastest way to reach me is email or LinkedIn.