Pavol Odlevak

Platform, cloud and infrastructure engineering for small and mid-size teams. Fractional or fixed-scope, remote, B2B via my Slovak company • Platform engineering and IaC: OpenTofu/Terraform, AWS Organizations, ECS/Fargate, GitHub Actions • Security and SecOps: CIS baselines, supply-chain security, vulnerability gating in CI • Cloud cost optimisation and SRE: Budgets, anomaly alerts, SLOs as code, cross-region DR • AI-augmented operations: Claude Code agentic workflows, PR review and scanning on every change

• Managed full IaC stack in Terraform/OpenTofu covering ECS/Fargate, Aurora PostgreSQL, ElastiCache Valkey (Redis), OpenSearch (Elasticsearch), CloudFront, WAFv2, and Route 53 • Operated a daily Claude Code agentic workflow to author platform code (OpenTofu), CI/CD pipelines (GitHub Actions), and runbooks • Prepared weekly cost reports and wired AWS Budgets, Cost Anomaly Monitor, and Cost Categories, with zero unexpected cost spikes • Defined an SLO programme as code in Terraform

• Led DevOps team supporting ~100 AWS accounts and ~$90K/month cloud spend across the full engineering organisation. • Established Production Readiness Review and company-wide post-mortem practice • Pushed for formal FinOps adoption; purchased AWS Savings Plans to trim cloud run-rate • Automated CrowdStrike Falcon cloud security enrolment via AWS Organizations • Chose ECS/Fargate over Kubernetes for the green-field platform, on cost and operational complexity

Managed 3 engineers. Owned execution of cloud security, observability, and DevOps outcomes. • Built security hardening process toward CIS Controls v8 IG2 compliance • Ran internal application security assessments ahead of major releases • Integrated Cloudflare Zero Trust (WARP) for secure access to internal applications and networks • Rolled out New Relic One and PagerDuty across 3 engineering orgs • Supported data-science workloads on on-prem NVIDIA DGX servers and built GPU monitoring in New Relic

• Grew AWS from a single account to a governed Organizations structure with dedicated Security and Archive accounts, IAM Identity Center, SCPs, GuardDuty, and org-wide CloudTrail • Took over BEN platform from an external contractor and brought it in-house: migrated Azure to AWS, expanded containerisation, set up PostgreSQL streaming replication, improved security and availability • Authored CIS Benchmark Level 2 hardening cookbook, used as default on all Linux servers across on-prem, AWS, and Azure

Operated infrastructure for Demotix, a photojournalism platform with 6,500+ photographers and ~50,000 images/month. • Expanded configuration management from a webserver stub to cover load balancers, app servers, and databases • Set up automatic failover between Varnish cache/load balancer nodes with Keepalived • Built cloud infrastructure for a new unified Corbis API, migrating from Azure to AWS for better storage performance and operational fit

IT operations for a Raiffeisen Bank International group company during a card processing platform transition. • Managed lower implementation environments (creation, configuration, maintenance) • Collaborated on deployments to higher environments in PCI-DSS scope with infrastructure providers • Supported card processing platform vendor during on-site installations • Resolved operational incidents following ITIL

Migrated the company's tracking and user identification system to AWS with horizontal scalability. • Set up and maintained RabbitMQ, Cassandra, and Couchbase clusters on CentOS • Created system to handle tracking traffic using HAProxy, stunnel, and nginx • Configuration management with Puppet • Monitoring with Icinga, a Nagios fork • Ran Redmine for issue tracking and Mercurial for source control • Administered the on-premise DNS, firewall, and KVM-hosted developer servers

Administered Linux (SUSE, openSUSE, CentOS) infrastructure and ad-tech tracking platform. • Managed F5 BIG-IP and Keepalived load balancing • Administered MySQL databases, Apache and nginx web servers • Set up network services (BIND, dnsmasq, DHCPD, Kerberos, Samba, OpenVPN) • Administered the in-office development infrastructure on Xen virtualisation • Built, racked, and configured servers on-site • Administered servers across Frankfurt, Vienna, and the Zilina office