photo
Rostyslav Fridman


Frankfurt am Main, Germany


English
German
Spanish
A2
Ukrainian
native
Russian
native


Cloud Solutions Architect - Professional Summary

Seasoned Professional Services Architect with 15+ years of expertise in the IT field, focusing on DevOps, Clouds, and Networking. Extensive background in SaaS/high-tech, public cloud, retail, automotive, and telecommunications industries. Experienced in leading major, multi-million dollar cloud migration and transformation projects. Experienced in developing private and hybrid cloud solutions.


Core Qualifications

  • Cloud migration and systems transformation
  • DevOps and digital transformation
  • Team technical and business agility streamlining using Agile and XP methodologies
  • System architecture design and implementation
  • Software architecture, patterns, and development in multiple languages
  • Building high load and high availability solutions based on top of bare metal and cloud resources
  • Staff recruiting and team management
  • Leading cross-functional internal, partner and customer teams

Certifications


Technical key skills

  • Clouds: Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Oracle Cloud Infrastructure (OCI), Nutanix
  • Infrastructure as Code (IaC): terraform/terragrunt, opentofu, pulumi, Cloudformation, CDK
  • Containers and container orchestration: Kubernetes (k8s), EKS, AKS, GKE, ECS
  • Programming experience: Python, Go, bash
  • Linux: Debian/Ubuntu, RedHat/CentOS, Container Linux (CoreOS), Amazon Linux, Alpine, Bottlerocket
  • Configuration management: Ansible, Chef, Saltstack
  • Virtualization: VMWare ESXi, Vagrant, Hyper-V
  • Continuous integration: GitHub Actions, GitLab CI/CD, CodeBuild/CodePipeline, Jenkins
  • Database administration: MySQL, PostgreSQL, MongoDB, Redis
  • VPN: openvpn, openswan/strongswan, wireguard
  • Software-defined networks: openvswitch, weave, flannel, calico, cumulus, cni
  • Network administration: routing, switching, hands-on experience with Cisco, Juniper, Huawei, and other equipment

Education

2003 - 2008
Master's degree in Computer Science
National Aviation University, Kyiv, Ukraine
2007 - 2009
Bachelor's degree in Organization Management
National Aviation University, Kyiv, Ukraine


Relevant work experience

Rackspace Technology
Senior Cloud Consulting Architect; Rackspace Technology Professional Services
Nov 2023 - Present · Full-time


Senior Cloud Consulting Architect; Project: German Automobile Manufacturer (NDA)
Mar 2024 - Present
Frankfurt am Main, Hesse, Germany · Remote
Project
The customer is a German automobile manufacturer.
Team's scope
Focused on customer obsession and enabling customers by consulting them on architecture, design, and implementation of their solutions in public and hybrid clouds.
My responsibilities
Identifying and scoping opportunities that provide business value to the customers, leading the customers to the desired business outcomes, and leading a team through engagements.
My achievements
I improved and sped up the existing SDLC flow by introducing CI/CD. I designed and integrated SAP with AI/ML AWS services to streamline the customer support experience by transcribing, summarizing, and translating customer calls and correspondence. Additionally, I designed, developed, and implemented a new SAML authorization architecture on CloudFront CDN with Lambda@Edge to reduce the latency for end users.


Senior Cloud Consulting Architect; Project: Middle Eastern Government (NDA)
Dec 2023 - Mar 2024
Frankfurt am Main, Hesse, Germany · Remote
Project
The customer is a Middle Eastern Government.
Team's scope
Focused on customer obsession and enabling customers by consulting them on architecture, design, and implementation of their solutions in private and hybrid clouds.
My responsibilities
Identifying and scoping opportunities that provide business value to the customers, leading the customers to the desired business outcomes, and leading a team through engagements.
My achievements
I led the discovery and architecture design of a private cloud tailored for a data and AI initiative. Additionally, I created high-level architectures for Kubernetes solutions (Charmed, Tenzu, Openshift) running on VMWare, OpenStack, and Bare Metal servers.


Amazon Web Services
DevOps Architect; AWS Professional Services
Oct 2021 - Oct 2023 · Full-time


EKS Stream Lead; Project: German Automobile Manufacturer (NDA)
Jan 2023 - Jun 2023
Frankfurt am Main, Hesse, Germany · Remote
Project
The customer is a German automobile manufacturer.
Team's scope
Creating an end-to-end platform to launch a cloud-based next-generation autonomous driving platform.
My responsibilities
Leading internal, partner, and customer teams, as well as guiding cross-functional teams to achieve successful business outcomes. Designing the overall architecture and implementing Infrastructure as Code (IaC) to ensure a streamlined and effective project execution.
My achievements
I helped to win the project by participating in the Request for Proposal (RFP) process, contributing to the proposal, and presenting an architecture for the Amazon Elastic Kubernetes Service (Amazon EKS) platform. I developed a solution that played a pivotal role in the project's success, seamlessly replicating thousands of images and becoming an integral part of the overall delivery. Successfully addressed and resolved the rate-limiting challenge during the delivery phase, ensuring the completion of the Statement of Work (SoW) and the overall success of the project. Effectively navigated compliance constraints and convinced customers to sign a buy-in for an in-house developed solution.


IT Operations Stream Lead; Project: German Automobile Manufacturer (NDA)
Sep 2022 - Dec 2022
Frankfurt am Main, Hesse, Germany · Remote
Project
The customer is a German automobile manufacturer.
Team's scope
Creating IT operations management processes and refining existing application onboarding journey.
My responsibilities
Gathering business requirements, identifying issues with the existing processes, and collaborating with essential stakeholders. Designing incident and security incident management processes, change request flows, escalation paths, and RACI matrices.
My achievements
Created a new workstream by recognizing an opportunity. Successfully developed and implemented new process flows that streamlined incident and security management processes, enhancing efficiency. During real-world incidents, the refined processes demonstrated a 30% reduction in response time. Revamped app onboarding journey and successfully eliminated bottlenecks associated with individual dependency, fostering enhanced collaboration among teams. Achieved a notable increase in the average satisfaction score for onboarding, rising from 6 to 9, reflecting the positive impact of process improvements on user experience.


Workstream Lead; Project: German Automobile Manufacturer (NDA)
Apr 2022 - Oct 2023
Frankfurt am Main, Hesse, Germany · Remote
Project
The customer is a German automobile manufacturer.
Team's scope
Building a new platform to consolidate and transform customers' siloed aftersales system landscape.
My responsibilities
Gathering business requirements, identifying issues with the existing processes, and collaborating with essential stakeholders. Leading a team, consolidating findings, and proposing solutions. Building trust with partner and customer teams.
My achievements
Expedited the onboarding process, increasing AWS accounts from 10 to over 360 within six months. Successfully deduplicated the codebase by approximately 20,000 lines, reducing the overall codebase by 30%. Implemented 30 security guardrails and excluded sensitive data from the code, enhancing the platform's security posture and passing the security audit. Introduced a comprehensive suite of over 60 security policies that effectively addressed 95% of the platform threats. Integrated the solution with Security Hub, leading to a 99% reduction in reaction times and enabling the team to swiftly identify potential threats. Equipped the team with near-real-time visibility, transitioning from weeks of response time to mere minutes, allowing proactive tackling of security concerns and ensuring platform protection.


DevOps Consultant; Project: German Automobile Manufacturer (NDA)
Dec 2021 - Mar 2022
Frankfurt am Main, Hesse, Germany · Remote
Project
The customer is a German automobile manufacturer.
Team's scope
Building a global Machine Learning & Operations initiative, seeking to expedite ML Industrialization worldwide.
My responsibilities
Gathering business requirements, identifying issues with the existing processes, and collaborating with essential stakeholders. Designing the overall architecture, and implementing Infrastructure as Code (IaC).
My achievements
Successfully implemented the security solution, resolving over a hundred issues and reducing code vulnerabilities by 90%. Applied this solution across 4 projects, enhancing security and code quality consistently. Contributed to the technological advancement of the MLOps platform, reducing time to market for ML models by 95%. Facilitated the rollout of the MLOps platform to 20+ business units, utilized by 100+ customer employees, and supported various AI/ML initiatives.


EPAM Systems GmbH
Jul 2014 - Oct 2021


Systems Architect; Project: Cloudmobility (cloudmobility.io)
Apr 2020 - Oct 2021 · Full-time
Frankfurt am Main, Hesse, Germany · Remote
Project
Cloudmobility is a special-purpose private cloud for mobility and transportation powered by Daimler AG. The project's goal is to provide a complete ecosystem and a business-to-business solution for customers and partners, to ensure they benefit from the best experience around customer and vehicle data.
Team's scope
Enabling Infrastructure as Code (IaC) across all levels of the cloud (system, compute, storage, network, etc.), creating Continuous Integration/Continuous Deployment (CI/CD) infrastructure, containerizing applications, building pipelines, and deploying them in Kubernetes.
My responsibilities
Leading the partner and customer teams to achieve successful business outcomes, designing the overall architecture, and implementing Infrastructure as Code (IaC).
My achievements
I designed the architecture and led a team in implementing Infrastructure as Code (IaC), designed the deployment and upgrade process, and created additional services that generated new revenue streams for the customer.


Systems Architect; Project: Robert Bosch GmbH (etas.com)
Oct 2019 - Mar 2020 · Full-time
Frankfurt am Main, Hesse, Germany · Remote
Project
ETAS offers comprehensive solutions for the development of automotive embedded software in the application fields of software engineering, test and validation, measurement, calibration, diagnostics, middleware, and cybersecurity.
Team's scope
Streamlining the test and Business Intelligence (BI) processes for the stakeholders.
My responsibilities
Leading the engagement to achieve successful business outcomes, designing the overall architecture, and managing a team.
My achievements
I designed and led the team in implementing a Continuous Integration/Continuous Deployment (CI/CD) solution for running UI tests. This solution successfully reduced the time spent on running tests by 95%, significantly accelerating the customer's development lifecycle.


Systems Architect; Project: Certascale (certascale.io, simplikube.com)
Aug 2016 - Oct 2019 · Full-time
Frankfurt am Main, Hesse, Germany · Hybrid
Project
Certascale provides a complete, enterprise-grade, seamlessly integrated private cloud solution.
Team's scope
Creating a full-fledged hybrid cloud by implementing a comprehensive end-to-end solution, covering infrastructure, network, storage, compute, Continuous Integration (CI), user interface (UI), and monitoring.
My responsibilities
Designing the overall architecture, creating network-specific architecture, prototyping APIs for microservices, obtaining buy-in on new features from stakeholders, engaging with customers, and managing the team.
My achievements
I designed and led the implementation of a hybrid cloud solution based on Kubernetes, positioned as a competitor for enterprises in the public cloud space. Additionally, designed and prototyped a custom Software-Defined (SDN) solution with the capability to integrate Kubernetes workloads with enterprise networks. Led the team in designing and implementing a Google Cloud Platform (GCP) Virtual Private Cloud (VPC)-style flat overlay network for the hybrid cloud. Streamlined cluster installation by enabling offline installation and promoting a container-only approach. Notably, increased network throughput by 400%.


Lead Systems Engineer; Project: DHL (dhl.com)
Aug 2015 - Jun 2016 · Full-time
Kyiv, Ukraine · On-site
Project
DHL is the global market leader in the logistics industry with 1,5B parcels delivered per year.
Team's scope
Implementing and supporting Infrastructure as Code (IaC) and zero-downtime deployment for the new DHL online shipping system. Additionally, the team was responsible for creating CI/CD infrastructure, containerizing applications, and building pipelines.
My responsibilities
Designing the overall infrastructure architecture and deployment processes, understanding customer needs, and overseeing team management.
My achievements
I designed, developed, and obtained stakeholder approval for a zero-downtime deployment architecture and the associated tooling. Additionally, created state-of-the-art Infrastructure as Code (IaC) to meet customer business requirements. Played a pivotal role in developing a sophisticated multi-step CI/CD solution with visualization, accessible to both developers and the customer's upper management.


Senior Systems Engineer; Project: Canadian Tire (canadiantire.ca, fglsports.com)
Jul 2014 - Aug 2015 · Full-time
Kyiv, Ukraine · On-site
Project
Canadian Tire Corporation Limited is a Canadian retail company that operates in the automotive, hardware, sports, leisure, and housewares sectors.
Team's scope
Empowering the customer by streamlining both development and deployment processes, developing Infrastructure as Code (IaC), and establishing Continuous Integration/Continuous Deployment (CI/CD) pipelines.
My responsibilities
Creating Infrastructure as Code (IaC) scripts, automating deployments, implementing Continuous Integration/Continuous Deployment (CI/CD) pipelines, and providing leadership for the team.
My achievements
Significantly enhanced the deployment speed of the customer's e-commerce platform by approximately 90%, reducing it from 5 hours to just 20 minutes through the redesign of existing processes. Additionally, streamlined the local development process, achieving a 70% reduction in build time. Led the team in the successful adoption of DevOps methodologies.


Previous roles

GlobalLogic Ukraine
Senior DevOps Engineer
Nov 2012 - Jul 2014
Project
Private WiFi is easy-to-use VPN software that protects clients' sensitive personal information whenever they are connected to a public WiFi network.
Team's scope
The creation of APIs, implementation of Infrastructure as Code (IaC), development of additional services, and establishment of Continuous Integration/Continuous Deployment (CI/CD) pipelines.
My responsibilities
Understanding customer needs, leading a cross-functional team, designing additional services to boost customer business revenue, creating Infrastructure as Code (IaC) scripts, automating deployments, implementing Continuous Integration/Continuous Deployment (CI/CD) pipelines, developing APIs, and implementing monitoring solutions.
My achievements
I designed and developed a solution for providing additional services over VPN that included ad-blocking, parental control, on-the-fly image compression, and anti-virus checks. I also decreased OpEx by increasing the possible number of users per server by 900%. I led the migration of API from Perl to PHP as well as creating new APIs for authentication purposes. Furthermore, I led the customer to adopt DevOps methodologies and tools.
MUK Ukraine
Deputy Head of System Administration
Jul 2012 - Jul 2013
Project
The MUK group's main area of work is the project-oriented distribution of leading IT products in the fields of hybrid and cloud solutions, data center convergence, information security, mobile devices and the Internet of things, data analytics, and artificial intelligence.
Team's scope
IP network administration, maintenance and optimization, unified monitoring deployment, new services deployment, and technical documentation writing.
My responsibilities
Leading the team.
CJSC PrioCom
Systems Engineer
Jul 2011 - Jul 2012
Project
PrioCom is a leading Ukrainian system integrator and regular partner of major national telecom operators.
Team's scope
Developing, documenting, and implementing solutions for customers in the telecommunication business.
My responsibilities
Core IP/MPLS network optimization, configuration, and creating technical documentation.
My achievements
Upgraded IP/MPLS core network solution and documented design for the biggest Ukrainian service provider.
CDMA Ukraine
Lead Network Engineer
Apr 2009 - Jul 2013
Project
CDMA Ukraine was the largest CDMA mobile operator in Ukraine, providing voice and data services based on CDMA2000 technologies in the 800 MHz frequency band.
Team's scope
Supporting, optimizing, and monitoring IP and CDMA networks.
My responsibilities
Core IP network optimization, 3G-Internet configuration, optimization, and unified monitoring deployment.
My achievements
I designed and deployed the first 3G prepaid solution in Ukraine, I also collaborated with the billing team in creating the new billing system. Moreover, I designed and implemented a completely new network topology for the core IP network, and introduced and configured a monitoring solution.
JSC Datagroup
Network Engineer
Jul 2007 - Apr 2009
Project
Datagroup is an all-Ukrainian provider of telecommunication services for business and home.
Team's scope
Troubleshooting, monitoring, and fixing IP, MLPS, and Frame-Relay networks.
My responsibilities
Troubleshooting, monitoring, and fixing customer cases.

Download pdf version of this page