Renato

Jagudi

Built, configured, tested and administered Supermicro and Dell servers; operated dedicated and VPS infrastructure hosted on Hetzner. Worked with Hyper-V Server 2016, Proxmox VE, Citrix XenServer, Windows Server 2012 R2 / 2016, 1C 8.x, MS SQL, BitrixVM, Active Directory, DHCP, DNS, GPO, RDS, IIS, WSUS, VPN, Samba/CIFS, Veeam and Windows backup targets. Managed file servers, RDS farms and supporting infrastructure roles. Installed, tested and operated SAN, ACS, VoIP and video surveillance systems. Configured pfSense, Cisco, MikroTik and HPE network equipment. Coordinated external IT contractors, hosting providers and service vendors.

Coordinated a managed-services partner accountable for corporate IT infrastructure; Single point of contact with vendors across all IT-owned topics: Audited and maintained stability across the wider IT footprint (50+ servers, 500 workstations and 250 mobile laptops). Planned, coordinated and supervised migration from 1C:UPP to 1C:ERP. Administered VoIP stacks and PBX platforms: Mango Office, UISCOM. Reviewed and signed off procurement for IT hardware and components company-wide. Received, assembled, configured, tested and handed over servers and related equipment.

Linux and Windows Server administration; Active Directory user and access management. Cloud, VPS and dedicated infrastructure in Google Cloud, Yandex Cloud and Hetzner, including Dell dedicated servers and a 4-node DX293 pool. Virtualization with Proxmox, including nested virtualization. Networking: routing, NAT, VPN, WireGuard, OpenVPN, firewalls/UFW and secure remote access. Reverse proxy and load balancing with NGINX. Monitoring with Zabbix. MongoDB and MS SQL administration, backups, restores and S3-compatible storage. Server hardening: SSH key-only access, isolation, access control and production security. Designed, deployed and operated 1C/MS SQL infrastructure for Accounting, Trade Management and ERP. Built and operated Bitrix corporate portal and Microsoft 365 for 500+ users. CI/CD with GitLab CI, GitLab Runner, Docker, Compose, Swarm, Terraform and Ansible. Migrated infrastructure from Hetzner to Yandex Cloud and Microsoft 365 to Yandex 360.

Sole engineer responsible for the full infra layer of a multi-project environment, end to end: provisioning, hardening, secrets, backups/DR and observability across the whole host fleet. Infra as Code: a single Ansible monorepo as source of truth for the fleet (cloud, dedicated and LAN-behind-gateway hosts); base/hardening/docker/backup/networking roles; idempotent, ansible-lint-clean playbooks. Self-hosted GitLab: host audit, risk assessment, incident response and operational runbooks; daily offsite backups to S3-compatible storage. DevSecOps: two-tier secrets (Bitwarden + sops/age-encrypted machine secrets in git), fail-closed gitleaks pre-commit hooks, SSH key-only access, fail2ban, firewalls, service isolation; drove a real data-exposure incident end to end (containment, remediation, secret rotation). Backend platform: ~70 TypeScript/Node microservices (npm workspaces), event-driven via Kafka outbox, database-per-service (PostgreSQL), gateway/BFF; CI-first delivery with protected b