Summary
Ali Yousefian
SRE/DevOps Engineer
Innovative SRE/DevOps Engineer with hands-on experience designing, implementing, and managing Infrastructure, DevOps model, and Cloud services. I’ve been working in multiple organizations and startups. My main characteristics include hard-working, accuracy, responsibility, integrity. Also, eager to learn and use new technologies and take on new challenges.
Gender: Male
Birthplace: Tehran, Iran
Languages: English, Persian
Skills
- DevOps implementation from scratch includes modernizing legacy applications, speeding up, and automating deployment. Also, configure the software to run smoothly, at scale, and with no downtime (High available) and failures.
- Design, build and maintain secure, resilient, and scalable cloud infrastructure. Also, I help you to migrate and manage your business across public, private, and hybrid cloud environments.
- Build well-architected infrastructures including servers, networks, software with operational excellence, security, reliability, performance efficiency, and cost optimization.
Technologies
HPE: BladeSystem, ProLiant Server
Virtualization/Containerization: VMware ESXi/vCenter, Docker, OpenStack, KVM
Router: VyOS
Switch: Cisco IOS, Cisco NX-OS
Firewall/IDS/IPS: pfSense, Kerio Control, Netfilter(iptables, CSF, firewalld, UFW), Snort
Operating system: Linux, Windows Server
Storage platform: Ceph, FreeNAS/TrueNAS, MinIO
Automation/Orchestration: Ansible, Jenkins, Kubernetes, Helm, Terraform, Ansible Tower
DNS: PowerDNS, Bind
Load balancer/Reverse proxy/Web server: HAProxy, Nginx, Apache, Squid
Database/Key-Value: MySQL, MariaDB, PostgreSQL, Redis, Apache Cassandra
Service mesh: Istio
Public cloud: AWS
Message broker: RabbitMQ, Kafka
Monitoring: Prometheus/Grafana/Alertmanager, Zabbix, PRTG
Log management: ELK Stack(Elasticsearch, Logstash, Kibana), Fluentd
Programing language: PHP, C++, Python, Bash
Backup: Veeam Backup & Replication
Email solution: iRedMail, Mailcow
Web hosting control panel: cPanel/WHM, Directadmin, Plesk, CWP
LDAP: OpenLDAP, Active Directory
Identity and access management: Keycloak
File sharing: Nextcloud
CMS: WordPress
Conferencing/Collaboration/Meeting: BigBlueButton, Jitsi Meet
Instant messaging/VOIP: Issabel, Matrix Synapse, Mattermost
Database management/analytics: Metabase
Networking level: CCNA
Plus: NetBox, Harbor, GitLab
Note: I may not be professional and deep in some of the technologies, I only use them partially in projects.
Experiences
- Site Reliability Engineering at ArvanCloudJanuary 2022 – Present
ArvanCloud is a Cloud Services Provider, offering a wide range of incorporated cloud services including CDN, DDoS mitigation, Cloud DNS, Cloud Security, VoD Platform, Live Streaming, PaaS, Cloud Server, and Cloud Storage.
Work in the IaaS (Infrastructure as a Service) team.
- Develop Infrastructure as a Code (Ansible, Terraform)
- Setup and maintain Kubernetes, Openstack, and Ceph clusters
- Setup and maintain monitoring and logging stack (Prometheus, Grafana, Alertmanager, Elasticsearch, Kibana, Fluentd)
- SRE/DevOps Engineer at AlmaFanavaran LtdMay 2018 – December 2021
AlmaHost | YavinCloud
AlmaFanavaran provides private cloud and DevOps as a service to enterprise companies, Also helps the companies to reduce their infrastructure costs, automate their software deployment and configure the companies’ software to run smoothly and highly available.
- HPE ProLiant servers, HPE Blade servers, Cisco switches were setup and installed
- VMware ESXi/vCenter and OpenStack were run as a virtualization solution
- Management, data, storage, and out-of-band networks were designed
- Ceph cluster was run as a storage solution to provide S3 and block storage on OpenStack
- Terraform and Ansible were used to automate infrastructure
- Legacy applications were migrated into Docker containers
- High available Kubernetes cluster was implemented
- ELK stack was implemented to collect logs
- PRTG, Prometheus, and Grafana were setup to monitor and collect metrics
- Database cluster was implemented
- Point to point VPN was setup between data centers
- High available HAProxy servers were setup and configured
- An email system was setup
- Intra-organizational instant messaging, VOIP, and meeting systems were setup
- Veeam was setup and bash scripts were written to backup data
- Directory access and a single sign-on system were implemented using OpenLDAP
- SRE/DevOps Engineer at Ghabouli LtdSeptember 2019 – January 2021
Ghabouli is an educational platform that transforms textbooks and question banks needed for any exam taker and examiner into an interactive format allowing individual and class assessments.
- Dell PowerEdge servers and Cisco Catalyst switches were installed
- VMware ESXi and vCenter were run as a virtualization solution
- Management and data networks were designed
- High available HAProxy servers were setup and configured
- Master/Slave Postgresql database servers were setup
- Point to point VPN was setup between offices & data centers
- ELK stack was implemented to collect logs
- GeoDNS was implemented using PowerDNS
- CI/CD was implemented using Jenkins
- Directory access and a single sign-on system were implemented using OpenLDAP
- Issue & Project tracking system was implemented using Jira
- PRTG, Prometheus, and Grafana were setup to monitor and collect metrics
- Veeam was setup and bash scripts were written to backup data
- An email system was setup
- Intra-organizational instant messaging, VOIP, and meeting systems were setup
- An intra-organizational file-sharing system was implemented
- Live streaming and online classes infrastructure were implemented
- System Administrator | Self-employedJanuary 2014 – January 2018
- Setup and configure web hosting control panels like cPanel, DirectAdmin, Plesk, Kloxo
- Setup and configure web servers, database servers on CentOS, Ubuntu
- etc.
- PHP Developer | Self-employedJanuary 2012 – January 2018
- Develop WHMCS modules
- Develop WordPress plugins
- Develop and design websites
- Write PHP scripts
- etc.
