<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Home on Arian Svirsky | DevOps Engineer</title><link>https://ariansvi.com/</link><description>Recent content in Home on Arian Svirsky | DevOps Engineer</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sat, 01 Jun 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://ariansvi.com/index.xml" rel="self" type="application/rss+xml"/><item><title>Descope — DevOps Engineer</title><link>https://ariansvi.com/experience/descope/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://ariansvi.com/experience/descope/</guid><description>&lt;p>&lt;strong>Sep 2024 – Present&lt;/strong> | DevOps Engineer | Israel (Hybrid)&lt;/p>
&lt;p>Multi-cloud Kubernetes infrastructure for an identity and authentication platform.&lt;/p>
&lt;h3 id="responsibilities">Responsibilities&lt;/h3>
&lt;ul>
&lt;li>Manage &lt;strong>25+ microservices&lt;/strong> across AWS EKS, GCP GKE, and Azure AKS using &lt;strong>Pulumi (TypeScript)&lt;/strong>&lt;/li>
&lt;li>Production deployments across &lt;strong>4 global regions&lt;/strong> (US, EU, APAC, Canada)&lt;/li>
&lt;li>&lt;strong>CI/CD pipelines&lt;/strong> with GitHub Actions — automated version cuts, staging promotion, production rollouts&lt;/li>
&lt;li>&lt;strong>Observability&lt;/strong> with Datadog — APM, logs, custom dashboards, alerting&lt;/li>
&lt;li>Manage Temporal workflows, RabbitMQ, Elasticsearch, Redis clusters&lt;/li>
&lt;li>&lt;strong>Cloudflare&lt;/strong> CDN, tunneling, DDoS protection, WAF rules&lt;/li>
&lt;/ul>
&lt;h3 id="key-achievements">Key Achievements&lt;/h3>
&lt;ul>
&lt;li>Built automated promotion flow: Sandbox → RC (twice weekly) → Production (weekly)&lt;/li>
&lt;li>Designed multi-region failover strategy&lt;/li>
&lt;li>Reduced deployment time by 60% through pipeline optimization&lt;/li>
&lt;/ul></description></item><item><title>Palo Alto Networks — DevOps Engineer → Principal</title><link>https://ariansvi.com/experience/paloalto/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://ariansvi.com/experience/paloalto/</guid><description>&lt;p>&lt;strong>Aug 2018 – Sep 2024&lt;/strong> | 6 years | Tel Aviv, Israel&lt;/p>
&lt;p>Progressed from DevOps Engineer to Principal DevOps Engineer over 6 years, working on the Demisto/Cortex XSOAR platform — a security orchestration, automation, and response (SOAR) product.&lt;/p>
&lt;h3 id="devops-engineer-aug-2018--apr-2019">DevOps Engineer (Aug 2018 – Apr 2019)&lt;/h3>
&lt;ul>
&lt;li>Joined Demisto (acquired by Palo Alto Networks during this period)&lt;/li>
&lt;li>Built and maintained CI/CD pipelines for the SOAR platform&lt;/li>
&lt;li>Managed AWS infrastructure for development and staging environments&lt;/li>
&lt;/ul>
&lt;h3 id="sr-devops-engineer-apr-2019--nov-2023">Sr DevOps Engineer (Apr 2019 – Nov 2023)&lt;/h3>
&lt;ul>
&lt;li>&lt;strong>Led the transformation from AWS EC2 VMs to Kubernetes&lt;/strong>, migrating the entire platform to containerized workloads&lt;/li>
&lt;li>Solved complex &lt;strong>Docker-in-Docker (DIND) security challenges&lt;/strong> — critical for a security product that runs customer automation playbooks in isolated containers&lt;/li>
&lt;li>Integrated Demisto into the broader &lt;strong>Palo Alto Networks ecosystem&lt;/strong> (Cortex XSOAR)&lt;/li>
&lt;li>Built and maintained Jenkins pipelines, GitLab CI/CD, and deployment automation&lt;/li>
&lt;li>Managed large-scale AWS infrastructure with Terraform&lt;/li>
&lt;/ul>
&lt;h3 id="principal-devops-engineer-nov-2023--sep-2024">Principal DevOps Engineer (Nov 2023 – Sep 2024)&lt;/h3>
&lt;ul>
&lt;li>Technical leadership across DevOps practices for the Cortex XSOAR team&lt;/li>
&lt;li>Architecture decisions for infrastructure scalability and security&lt;/li>
&lt;li>Mentored junior DevOps engineers&lt;/li>
&lt;li>Drove adoption of GitOps and infrastructure-as-code best practices&lt;/li>
&lt;/ul></description></item><item><title>Earlier Career — Linux &amp; Infrastructure</title><link>https://ariansvi.com/experience/previous/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://ariansvi.com/experience/previous/</guid><description>&lt;h3 id="inmanage--linux-system-administrator">inManage — Linux System Administrator&lt;/h3>
&lt;p>&lt;strong>Nov 2016 – Aug 2018&lt;/strong> | 1 year 10 months | Tel Aviv, Israel&lt;/p>
&lt;ul>
&lt;li>Linux system administration for eCommerce platform infrastructure&lt;/li>
&lt;li>Server provisioning, monitoring, and troubleshooting&lt;/li>
&lt;li>Managed production environments supporting online retail operations&lt;/li>
&lt;li>Automation with Bash scripting, configuration management&lt;/li>
&lt;/ul>
&lt;h3 id="interhost-networks-ltd--linux-administrator">Interhost Networks Ltd — Linux Administrator&lt;/h3>
&lt;p>&lt;strong>Feb 2015 – Sep 2016&lt;/strong> | 1 year 8 months&lt;/p>
&lt;ul>
&lt;li>Web hosting infrastructure administration&lt;/li>
&lt;li>Managed Linux servers (CentOS, Ubuntu) for hosting customers&lt;/li>
&lt;li>DNS management, SSL certificates, Apache/Nginx configuration&lt;/li>
&lt;li>Network troubleshooting, firewall rules, server hardening&lt;/li>
&lt;/ul>
&lt;h3 id="calanit--technical-support">Calanit — Technical Support&lt;/h3>
&lt;p>&lt;strong>Jan 2014 – Feb 2015&lt;/strong> | 1 year 2 months&lt;/p></description></item><item><title>This Website — A DevOps Showcase</title><link>https://ariansvi.com/projects/this-site/</link><pubDate>Sat, 01 Jun 2024 00:00:00 +0000</pubDate><guid>https://ariansvi.com/projects/this-site/</guid><description>&lt;p>This resume website is a living DevOps project that demonstrates production-grade infrastructure practices.&lt;/p>
&lt;h2 id="architecture">Architecture&lt;/h2>
&lt;pre tabindex="0">&lt;code> ┌──────────────┐
 │ GoDaddy │
 │ ariansvi.com│
 └──────┬───────┘
 │ NS delegation
 ┌──────▼───────┐
 │ Cloud DNS │
 └──────┬───────┘
 │
 ┌──────▼───────┐
 │ Ingress-NGINX│
 │ + cert-mgr │
 │ (Let&amp;#39;s Encrypt)
 └──┬────────┬──┘
 │ │
 ┌────────▼──┐ ┌──▼────────┐
 │ Frontend │ │ Backend │
 │ (Hugo + │ │ (FastAPI + │
 │ Nginx) │ │ SQLite) │
 └────────────┘ └────────────┘
&lt;/code>&lt;/pre>&lt;h2 id="tech-stack">Tech Stack&lt;/h2>
&lt;table>
 &lt;thead>
 &lt;tr>
 &lt;th>Layer&lt;/th>
 &lt;th>Technology&lt;/th>
 &lt;/tr>
 &lt;/thead>
 &lt;tbody>
 &lt;tr>
 &lt;td>IaC&lt;/td>
 &lt;td>Terraform (GKE, VPC, DNS, IAM)&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Container&lt;/td>
 &lt;td>Docker multi-stage builds&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Orchestration&lt;/td>
 &lt;td>GKE Autopilot&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Deployment&lt;/td>
 &lt;td>ArgoCD (GitOps, app-of-apps)&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>CI/CD&lt;/td>
 &lt;td>GitHub Actions (lint, test, build, deploy)&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Frontend&lt;/td>
 &lt;td>Hugo static site + Nginx&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Backend&lt;/td>
 &lt;td>Python FastAPI + SQLite&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Ingress&lt;/td>
 &lt;td>Ingress-NGINX + cert-manager&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Monitoring&lt;/td>
 &lt;td>Prometheus + Grafana&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Manifests&lt;/td>
 &lt;td>Kustomize (base + overlays)&lt;/td>
 &lt;/tr>
 &lt;/tbody>
&lt;/table>
&lt;h2 id="source-code">Source Code&lt;/h2>
&lt;p>Everything is open source: &lt;a href="https://github.com/ariansvi/ariansvi-resume-v2">github.com/ariansvi/ariansvi-resume-v2&lt;/a>&lt;/p></description></item><item><title>About Me</title><link>https://ariansvi.com/about/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://ariansvi.com/about/</guid><description>&lt;p>&lt;img alt="Arian Svirsky" src="https://ariansvi.com/images/arian.jpg">&lt;/p>
&lt;h1 id="arian-svirsky">Arian Svirsky&lt;/h1>
&lt;p>&lt;strong>Senior DevOps Engineer&lt;/strong> — Building production infrastructure since 2014.&lt;/p>
&lt;hr>
&lt;h2 id="background">Background&lt;/h2>
&lt;p>I&amp;rsquo;m a DevOps engineer with deep expertise across the entire infrastructure stack — from Linux kernel tuning to Kubernetes cluster architecture, from CI/CD pipeline design to cloud cost optimization.&lt;/p>
&lt;p>Over the past decade, I&amp;rsquo;ve worked across startups and scale-ups, building systems that handle millions of requests and maintain high availability. My approach combines automation-first thinking with practical engineering — every system I build is designed to be reproducible, observable, and self-healing.&lt;/p></description></item><item><title>Contact</title><link>https://ariansvi.com/contact/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://ariansvi.com/contact/</guid><description>&lt;h2 id="get-in-touch">Get In Touch&lt;/h2>
&lt;p>Interested in working together or have a question? Reach out through any of these channels.&lt;/p>
&lt;ul>
&lt;li>&lt;strong>Email:&lt;/strong> &lt;a href="mailto:ariansvirsky@gmail.com">ariansvirsky@gmail.com&lt;/a>&lt;/li>
&lt;li>&lt;strong>GitHub:&lt;/strong> &lt;a href="https://github.com/ariansvi">ariansvi&lt;/a>&lt;/li>
&lt;li>&lt;strong>LinkedIn:&lt;/strong> &lt;a href="https://www.linkedin.com/in/arian-svirsky-a0832057/">Arian Svirsky&lt;/a>&lt;/li>
&lt;/ul>
&lt;hr>
&lt;p>&lt;em>This site also has a &lt;a href="https://ariansvi.com/api/docs">backend API&lt;/a> built with FastAPI — because even the contact page should demonstrate engineering.&lt;/em>&lt;/p></description></item><item><title>Technical Skills</title><link>https://ariansvi.com/skills/overview/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://ariansvi.com/skills/overview/</guid><description>&lt;h2 id="container-orchestration">Container Orchestration&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>Kubernetes&lt;/strong> — EKS, GKE, AKS, k3s | Helm, Kustomize, Operators&lt;/li>
&lt;li>&lt;strong>Docker&lt;/strong> — Multi-stage builds, Compose, image optimization, security scanning&lt;/li>
&lt;li>&lt;strong>Service Mesh&lt;/strong> — Istio, Linkerd&lt;/li>
&lt;/ul>
&lt;h2 id="infrastructure-as-code">Infrastructure as Code&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>Terraform&lt;/strong> — Modules, workspaces, remote state, Atlantis&lt;/li>
&lt;li>&lt;strong>Pulumi&lt;/strong> — TypeScript, stack management, custom providers&lt;/li>
&lt;li>&lt;strong>CloudFormation&lt;/strong> — Nested stacks, drift detection&lt;/li>
&lt;/ul>
&lt;h2 id="cicd--gitops">CI/CD &amp;amp; GitOps&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>GitHub Actions&lt;/strong> — Custom actions, matrix builds, OIDC, reusable workflows&lt;/li>
&lt;li>&lt;strong>GitLab CI/CD&lt;/strong> — Runners, DAG pipelines, environments, review apps&lt;/li>
&lt;li>&lt;strong>Jenkins&lt;/strong> — Pipeline-as-code, shared libraries, Blue Ocean&lt;/li>
&lt;li>&lt;strong>ArgoCD&lt;/strong> — App-of-apps, sync waves, progressive delivery&lt;/li>
&lt;li>&lt;strong>Argo Rollouts&lt;/strong> — Canary, blue-green, analysis templates&lt;/li>
&lt;/ul>
&lt;h2 id="cloud-platforms">Cloud Platforms&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>AWS&lt;/strong> — EKS, EC2, RDS, S3, Lambda, CloudFront, Route53, IAM, VPC&lt;/li>
&lt;li>&lt;strong>GCP&lt;/strong> — GKE, Cloud DNS, Artifact Registry, Cloud SQL, GCS&lt;/li>
&lt;/ul>
&lt;h2 id="monitoring--observability">Monitoring &amp;amp; Observability&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>Datadog&lt;/strong> — APM, logs, dashboards, monitors, SLOs&lt;/li>
&lt;li>&lt;strong>Prometheus&lt;/strong> — PromQL, recording rules, alerting rules&lt;/li>
&lt;li>&lt;strong>Grafana&lt;/strong> — Custom dashboards, alerting, data sources&lt;/li>
&lt;li>&lt;strong>ELK Stack&lt;/strong> — Elasticsearch, Logstash/Fluentd, Kibana&lt;/li>
&lt;/ul>
&lt;h2 id="databases">Databases&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>MySQL&lt;/strong> — Replication, backup/restore, performance tuning&lt;/li>
&lt;li>&lt;strong>Elasticsearch&lt;/strong> — Cluster management, index lifecycle, mappings&lt;/li>
&lt;li>&lt;strong>Redis&lt;/strong> — Clustering, sentinel, caching patterns&lt;/li>
&lt;li>&lt;strong>PostgreSQL&lt;/strong> — Administration, extensions&lt;/li>
&lt;/ul>
&lt;h2 id="scripting--programming">Scripting &amp;amp; Programming&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>Bash&lt;/strong> — Production automation, system tooling&lt;/li>
&lt;li>&lt;strong>Python&lt;/strong> — FastAPI, automation scripts, boto3, SDK integrations&lt;/li>
&lt;li>&lt;strong>TypeScript&lt;/strong> — Pulumi IaC, tooling&lt;/li>
&lt;li>&lt;strong>Go&lt;/strong> — CLI tools, basic services&lt;/li>
&lt;/ul>
&lt;h2 id="linux--networking">Linux &amp;amp; Networking&lt;/h2>
&lt;ul>
&lt;li>&lt;strong>Linux&lt;/strong> — RHEL, Ubuntu, Alpine | systemd, kernel tuning, troubleshooting&lt;/li>
&lt;li>&lt;strong>Networking&lt;/strong> — TCP/IP, DNS, load balancing, VPN, firewall, SSL/TLS&lt;/li>
&lt;li>&lt;strong>Security&lt;/strong> — RBAC, network policies, sealed secrets, OPA, pod security&lt;/li>
&lt;/ul></description></item></channel></rss>