At PE Lomakin, I lead security architecture for FinTech, SaaS, and ML startups, embedding automated SAST, DAST, and SCA checks into CI/CD. This work reduced critical vulnerabilities by 70% across production environments.
I’ve implemented Zero Trust network policies and RBAC for Kubernetes clusters, and introduced HashiCorp Vault for secrets management across multi-cloud environments. I also built unified monitoring with Prometheus, Grafana, Loki, and Wazuh, reducing MTTR from 60 to 5 minutes.
At Acurateco, I worked on its PCI-DSS Level 1 certification and introduced a FluxCD GitOps security workflow across Kubernetes clusters. I also deployed a Redis multi-master architecture and migrated Elasticsearch to OpenSearch with security hardening.
Earlier, I worked across cloud, enterprise, and infrastructure environments, from securing Kubernetes and CI/CD to hardening databases and virtualization platforms. I’ve also mentored engineering teams and contributed to open-source security tools and Kubernetes SIGs.
