nvimq - Nurdaulet Bolat
Senior SRE, Platform and DevSecOps Engineer | AWS | Kubernetes | Terraform | 8 yrs | Cloud Architecture
Hi, I'm nvimq - a Senior SRE, Platform and DevSecOps Engineer with 8 years of experience across FinTech, SaaS, and e-commerce. I build resilient cloud architectures, Kubernetes platforms, and CI/CD pipelines where uptime and clean releases are non-negotiable.
My engineering philosophy is simple: Infrastructure as Code starts every system, and security is built-in from day one.
What I Do
- Platform Engineering & GitOps: I design self-service developer portals using Backstage and Crossplane. GitOps (ArgoCD/Flux) drives all releases, making rollbacks as simple as a git revert.
- Cloud & Architecture: Extensive multi-account AWS environments (Terraform/OpenTofu, Terragrunt, AWS Organizations) built on least-privilege principles, cutting IAM escalation risks by 80%.
- Kubernetes & Network Security: I own the full K8s lifecycle (EKS). From cluster architecture and Karpenter scaling to eBPF-powered Cilium networking and Istio service meshes. Policy-as-Code (Kyverno, OPA) blocks drift and misconfigurations before they apply.
- DevSecOps: Security is a gate, not an afterthought. SonarQube, Trivy, and Gitleaks are embedded deep into GitLab CI so vulnerabilities surface before production, not after. Dynamic secrets are handled by HashiCorp Vault.
- SRE & Observability: Architected around SLIs and SLOs. A unified stack of Prometheus, Grafana, OpenTelemetry, and VictoriaMetrics gives correlated metrics and traces, which is what actually cuts detection time and MTTR.
- Resiliency: Disaster recovery is proven, not theoretical. I have rebuilt production environments after full provider-side data loss and engineered automated restore testing so it never repeats.
Core Tech Stack
- Cloud & IaC: AWS, Azure, Terraform, OpenTofu, Terragrunt, Crossplane, Packer, Ansible, Cloudflare
- Containers & Orchestration: Kubernetes (EKS/AKS), containerd, Helm, ArgoCD, Flux, Kyverno
- Networking & Service Mesh: eBPF (Cilium, Calico), Istio, HAProxy, Nginx
- CI/CD: GitLab CI, GitHub Actions, Jenkins
- Observability & Reliability: OpenTelemetry (OTel), Prometheus, Grafana, Loki, VictoriaMetrics, Datadog
- Security & Compliance: HashiCorp Vault (OIDC/mTLS), IAM SCPs, Trivy, SonarQube, OPA
- Programming & Scripting: Golang, Python, Bash
Competitive Rankings & CTFs
| Platform | Achievement / Event | Ranking |
|---|---|---|
| Project Euler+ | Top 0.02% (#49 of 256,473) | |
| Cyber Apocalypse CTF 2026 | Top 7.7% (#519 of 6,744) | |
| Orchestrate Hackathon (Aug '26) | Top 3.6% (#72 of 1,983) |
(Plus 70+ completed labs and challenges across HTB, TryHackMe, LeetCode, and LetsDefend - see full activity)
Certifications
| Issuer | Certification | Verification |
|---|---|---|
| Securing Your Software Supply Chain with Sigstore (LFS182) | Verify | |
| AWS Knowledge: Amazon EKS | Verify | |
| AWS Knowledge: Cloud Essentials | Verify | |
| Cilium AI/ML Security | Verify | |
| Discovery: SecOps Engineer | Verify | |
| Certified Calico Operator: eBPF | Verify | |
| Claude with Amazon Bedrock | Verify | |
| Kubernetes Cluster Lifecycle Management | Verify | |
| Infrastructure Identity for Platform Engineers | Verify | |
| Docker Foundations Professional Certificate | Verify | |
| Ubuntu Linux Professional Certificate | Verify | |
| Go (Intermediate) & SQL (Advanced) | Verify | |
| OWASP Top 10 | Verify | |
| System & Network Security / Cybersecurity Fundamentals | Verify | |
| Chaos Engineering | Verify |
Open to conversations on infra scaling, platform design, or CNCF.
Personal projects
View allLoading
About
Senior DevOps / DevSecOps & Platform Engineer. Portfolio: https://nvimq.is-a.dev/
Info
Member since August 03, 2025