Marks Pakeltis

Key Responsibilities

• Developed and integrated new infrastructure and application solutions
• Built and maintained CI/CD workflows for development and production environments
• Implemented scalable AWS-native mobile core network components
• Maintained and supported existing systems and infrastructure solutions
• Troubleshot incidents, identified root causes, applied fixes, and implemented preventive measures
• Coordinated infrastructure changes and ensured clear documentation of implementations
• Utilized GitLab pipelines extensively for testing and deployment automation

Technical Highlights

• AWS Cloud EC2, VPC (all components), IAM, Auto Scaling Groups, ELB, Lambda, CloudWatch, Transit Gateway, Direct Connect Gateway, S3, ECR, ElastiCache, Step Functions, SSM, AMI, and more
• Containers & Orchestration Docker (build and deployment), Kubernetes (kubectl, Helm, Kustomize), ArgoCD
• Infrastructure as Code Terraform (module development and AWS provisioning), CloudFormation with Serverless Framework
• Programming & Scripting Go, Python (Lambdas and automation), Bash (Linux automation)
• CI/CD Tools GitLab CI for automated infrastructure deployments
• API Management Kong API Gateway for routing, load balancing, and securing microservices
• Monitoring Prometheus/Thanos integrated with Grafana
• Operating Systems Linux system administration

Key Responsibilities

• Delivered DevOps and cloud engineering services across a variety of short- to mid-term client projects in multicloud environments (AWS, Azure, GCP, Linode)
• Migrated and modernized legacy Docker-based applications to orchestrated Kubernetes platforms (EKS, ECS, AKS)
• Designed and provisioned modular, secure infrastructure using Terraform to support multiple isolated environments (dev, staging, prod, DR)
• Set up and optimized NGINX reverse proxies and load balancers within containerized and VM-based workloads
• Improved cloud infrastructure cost-efficiency through detailed analysis and strategic cost optimization, achieving up to 50% savings in some environments
• Hardened system and network security through IAM/RBAC policies, WAF configuration, Linux hardening, encrypted storage, and secure CI/CD practices
• Implemented and maintained GitLab CI, GitHub Actions, and Bitbucket Pipelines (with OIDC), automating infrastructure provisioning and deployments
• Provided DevSecOps support to development teams, promoting secure coding, efficient workflows, and infrastructure-as-code adoption

Technical Highlights

• Multicloud Experience
• AWS Services VPC, Transit Gateway, Direct Connect, EC2, S3, IAM, Lambda, EventBridge, Step Functions, API Gateway, Route 53, CloudFront, CloudFormation, CloudTrail, Kinesis Firehose, ECS, EKS, CloudWatch, Systems Manager (SSM), ElastiCache, RDS (PostgreSQL), ECR, WAF, Macie, AWS Config, Security Hub, Secrets Manager, KMS, Backup, MQ (RabbitMQ), SNS, SQS, Certificate Manager, Identity Center (SSO), Auto Scaling Groups, AMI, Elastic Load Balancer (ELB)
• GCP VPC Networks, Compute Engine (VMs), Cloud Functions, Cloud Storage, Cloud SQL, Cloud Pub/Sub, Cloud Monitoring, Secret Manager, Cloud Build, Cloud Run, Transfer Jobs and more
• Microsoft Azure
  Virtual Network (VNet), Subnets, Network Security Groups (NSG), VPN Gateway, Azure Kubernetes Service (AKS), Virtual Machines (VMs), Azure App Services (Web Apps, API Apps), Azure DevOps (Pipelines, Repos), Azure Container Registry (ACR), Azure Blob Storage, Azure SQL Database, Azure Monitor, Log Analytics, Azure Active Directory (AAD), Role-Based Access Control (RBAC), Azure Resource Manager (ARM), Azure DNS, Azure Front Door, Azure Load Balancer, Traffic Manager, Azure Backup
• Infrastructure as Code Terraform (modular architecture), CloudFormation, Serverless Framework
• CI/CD & Automation GitLab CI, Bitbucket Pipelines (OIDC), GitHub Actions, Docker, GitOps
• Linux & Scripting Advanced Linux administration, Bash, Python, Go (for Lambdas, automation tooling)
• Security & Compliance IAM Identity Center, RBAC, CIS AWS Benchmark, Secrets Manager, WAF integration, SSH/key management
• Cost Optimization Detailed usage analysis, resource right-sizing, autoscaling policies, storage tiering, reserved instance strategies
• Networking & Load Balancing NGINX configuration for reverse proxying, load balancing, SSL termination
• Containerization & Orchestration Kubernetes (EKS, AKS, Linode Kubernetes), Docker, ArgoCD
• Monitoring & Logging Grafana, Prometheus, Loki, CloudWatch, Zabbix
• Collaboration Advised developers on CI/CD, containerization, cloud security, and infrastructure efficiency

Key Responsibilities

• Optimized an existing multi-environment Dockerized application deployed on Amazon EKS
• Implemented cost-reduction strategies, achieving over 50% savings without impacting performance
• Rebuilt CI/CD pipelines using GitLab CI, improving build, test, and deployment workflows
• Refined Docker image processes using GitLab tag-based versioning for multi-environment support
• Enhanced infrastructure monitoring and logging via Prometheus, Grafana, and Loki
• Integrated AWS WAF and security best practices across infrastructure and codebase
• Provided continuous support to developers, including troubleshooting, code reviews, and knowledge sharing on Kubernetes and security

Technical Highlights

• Cloud & Infrastructure AWS (EKS, VPC, CloudFront, S3, ECR, RDS, Route 53, WAF)
• CI/CD GitLab CI for automated builds and deployments
• Containerization & Orchestration Docker, Kubernetes (EKS)
• Monitoring & Logging Grafana, Prometheus, Loki
• Security IAM policy reviews, WAF integration, secret management best practices
• Collaboration Developer enablement through DevOps support and secure CI/CD practices

Key Responsibilities

• Designed, deployed, and maintained LAN, WAN, and wireless network infrastructure, including routers, firewalls, switches, and access points
• Diagnosed and resolved complex hardware, software, and network issues to ensure system availability and reliability
• Replaced and upgraded network hardware components as needed to maintain performance and reduce downtime
• Monitored and optimized network performance using custom and third-party tools
• Implemented and enforced network security tools, policies, and procedures in collaboration with the information security team
• Automated operational tasks and monitored effectiveness using scripting and orchestration tools
• Built and maintained centralized monitoring systems and dashboards for real-time network metrics and alerts
• Created and maintained detailed technical documentation for network infrastructure, processes, and configurations

Technical Highlights

• Firewalls & Security Cisco ASA, Cisco Firepower, Palo Alto, FortiGate, Sophos VPN appliances
• Enterprise Networking Cisco Nexus (5k/3k/9k/FEX), Cisco Catalyst, CSR, ASR, ISR, 6800, 6500
• Wireless Networking HP Aruba, HP H3C, Ruckus, Ubiquiti
• Cloud Platforms AWS (primary), Azure, Google Cloud
• Infrastructure as Code (IaC) Terraform
• Scripting & Automation Python (including best practices, testing, pipelines, containers), Bash, JavaScript
• Configuration Management Ansible, Nornir
• Monitoring & Visualization Grafana with Prometheus, Zabbix with external scripting, NetFlow
• Security & DDoS Protection Corero, Neustar Cloud, Imperva Cloud DDoS solutions
• Access & Control Opengear console servers, TACACS
• DevOps & Tooling NetBox (IPAM/DCIM), GitLab, Jenkins, Rundeck

Key Responsibilities

• Delivered 1st and 2nd level technical support for business customers, ensuring timely resolution of technical issues
• Provided support and guidance to Helpdesk engineers for escalated issues
• Configured and maintained CPE equipment for enterprise clients
• Diagnosed and resolved complex computer network problems across multiple environments
• Configured and administered email systems and FortiMail spam filtering solutions
• Managed hosting platforms including Parallels Plesk for web and email services
• Administered DNS domain zones on authoritative name servers
• Maintained and administered enterprise web fax systems
• Investigated and mitigated security threats and ABUSE reports, including DDoS (NTP, DNS amplification), phishing, botnets, and unauthorized access attempts
• Monitored email flow, mitigated spam sources, and handled compromised mailboxes

Technical Highlights

• Hands-on experience with high-end Cisco equipment: ASR 9000, CRS-8/S, Nexus series, 4948 SW, 4900 SW, and various access routers and switches
• Worked with networking hardware from Siemens, Alcatel OmniSwitch, and Juniper (SRX, EX series)
• Administered ISAM Alcatel and Siemens EDA DSLAMs
• Managed and configured HP network switches
• Supported enterprise data center solutions, including VoIP, PBX, and Cisco HCS deployments
• Designed and reviewed network architectures for corporate environments
• Gained experience with cloud technologies and infrastructure
• Configured and maintained Linux-based systems and services
• Administered Plesk Parallels control panels and DNS zones
• Managed FortiMail anti-spam systems and Axigen email services
• Configured Cisco IP phones and supported Hosted Unified Communications Solutions (HUCS)

• Provided Tier 1 and Tier 2 technical support for corporate customers, ensuring timely issue resolution
• Diagnosed and resolved a wide range of computer network issues, both remotely and on-site
• Configured Customer Premises Equipment (CPE) including routers, modems, and firewalls
• Registered, tracked, and updated incidents using a ticketing system to ensure service level compliance
• Monitored customer network devices to detect faults, performance issues, and ensure system availability

• Provided Tier 1 and Tier 2 technical support for corporate customers, ensuring timely issue resolution
• Diagnosed and resolved a wide range of computer network issues, both remotely and on-site
• Configured Customer Premises Equipment (CPE) including routers, modems, and firewalls
• Registered, tracked, and updated incidents using a ticketing system to ensure service level compliance
• Monitored customer network devices to detect faults, performance issues, and ensure system availability

• Configured and administered network devices including Cisco, IronPort, Juniper SRX240/EX4200, SA2500, 3Com, and MikroTik
• Monitored network infrastructure and resolved connectivity and performance issues
• Installed and maintained Windows Server 2003, 2008 R2, and 2012, including Active Directory, DNS, DHCP, Domain Controllers, and Hyper-V virtualization
• Managed data backup solutions using Microsoft Windows Backup and Symantec Backup Exec
• Administered HP ProLiant DL380 G6 servers and HP disk array storage systems
• Configured and maintained Linux-based web servers
• Administered Alcatel PBX systems for enterprise telephony
• Developed and maintained shell scripts for automation and system management
• Handled structured cabling tasks including Ethernet cable termination and patch panel management

• Provided technical support to end users, resolving hardware, software, and network issues
• Configured and administered Windows Server 2003 and 2008 R2, including Active Directory, DNS, and DHCP
• Diagnosed and resolved computer network issues; monitored network performance and reliability
• Installed and configured Windows operating systems and various software applications
• Performed maintenance and replacement of peripheral devices (printers, scanners, etc.)