Serge Kulnev

System Administrator · DevOps Engineer · SRE

Building AI-powered SaaS & iOS Apps. DevOps at heart.

Summary

System Administrator & DevOps Engineer with 10+ years of experience across logistics, financial services, construction, and the public sector. I build and maintain hybrid infrastructures on AWS, Azure, and on-prem, bridging Linux and Windows ecosystems, with automation and security built in rather than bolted on.

Over the years: migrated legacy Oracle/WebSphere stack to PostgreSQL/WildFly saving $100K/year, built a platform from scratch on 80+ servers with full CI/CD, and at the height of COVID ensured 100% remote work for the entire company at FODD.

Outside of infrastructure work, I build software products: iOS apps on the App Store and SaaS platforms, which you can explore below.

App Store & Hobby Development

In my free time, I build software across different domains. Recently launched my first native iOS applications.

10 Words: English Daily

Minimalist vocabulary builder for English learners.

2000+ Downloads
App Store

Flick Checkers

Classic checkers with smooth, physics-based flicking.

App Store

Translucid: Speak & Translate

Real-time translation and subtitles

App Store

Trucker Route: 511 Hazard Map

Real-time hazard map for professional drivers: road incidents, severe weather, mountain pass status, wildfires, smoke plumes, and USGS earthquakes, all on one interactive map.

App Store

Web Developments & SaaS

Full-stack web applications and platforms.

Trucker Route logo

Trucker Route: 511 Alerts & Weather

production
View Project ↗

Real-time road conditions and hazard monitoring platform built for commercial truck drivers. Aggregates live data from 40+ state DOT 511 systems, the National Weather Service, NASA FIRMS fire detection, NIFC wildfire perimeters, NOAA smoke plumes, USGS earthquake feeds, and FEMA disaster declarations, all on a single interactive map refreshed every 15 minutes. Includes traffic congestion layers, mountain pass chain requirements, state-by-state trucking statistics from federal sources (NHTSA, FMCSA, FHWA), and aggregated industry news. 100% free, no account required. Over 5,000 unique visitors in the last few months — and still growing.

Real-Time Data 40+ State DOTs Weather & Hazards Trucking Statistics Traffic Map
TimeToWarp logo

Time To Warp: Warp your landing page back to 1998

production
View Project ↗

Tired of cookie-cutter AI-generated websites that all look the same? TimeToWarp takes any modern URL and warps it back to 1998: animated GIFs, marquee tags, visitor counters, and hand-coded HTML. 1,700+ vintage GIFs, 11 GeoCities-style districts, results in ~30 seconds, and 117+ sites warped so far. A love letter to peak personal web culture.

Next.js React AI Retro Web GeoCities
VibeWShield logo

VibeWShield: Security Scanner for AI-Generated Apps

production
View Project ↗

Free black-box security scanner for apps built with AI tools (Lovable, Bolt, Cursor, Replit, v0). Submit a deployed URL, no source code or agent needed, and get results in under 3 minutes. Runs 50+ automated checks covering OWASP Top 10: SQL/NoSQL injection, XSS, SSRF, IDOR, exposed API keys, CSRF, JWT weaknesses, and more. Generates AI-powered fix prompts compatible with Cursor, Claude, and ChatGPT. Ships a PDF report. 100% free, no signup required.

Next.js TypeScript OWASP Top 10 Black-box Scanning AI Fix Prompts
Linuxlab logo

Linuxlab: Interactive IT Course & Audiobooks

pilot
View Project ↗

A pilot project launching a hands-on IT learning course. Terminal-first Linux textbooks with clickable command explanations and an in-browser sandbox, paired with a full IT audiobook library so you can learn away from the keyboard — available in both English and Russian.

Linux IT Education Audiobooks EN / RU
CargoDzen logo

CargoDzen: All-in-One Operations Workspace

local only
View Case Study ↗

A logistics platform (TMS) that automates trucking operations with AI: OCR for documents (BOL, POD, rate cons), real-time tracking, DOT safety inspections, and role-based access control. Currently available on a local deployment only — not publicly hosted yet.

Python/Flask PostgreSQL Google Gemini AI DigitalOcean

Projects

Core Competencies

Containerization & Orchestration

Docker, Docker Swarm, Amazon ECS

Cloud & Virtualization

AWS (EC2, S3, RDS, VPC, Route53, CloudFront, MongoDB, Lambda, API Gateway), Azure (AD, VMs, Storage, Virtual Desktop), Cloud.ru, Yandex.Cloud, VMware ESXi / vCenter, Hyper‑V

IaC & Configuration

Terraform, Ansible

Monitoring & Observability

Zabbix, Grafana, Prometheus, PRTG, AWS CloudWatch

CI/CD & VCS

Jenkins, GitLab CI, Git, PowerShell, Bash, Python, Ansible Playbooks

OS & Server Tools

Linux (CentOS, Debian, Ubuntu, RHEL, FreeBSD), Windows Server (2008–2019), Active Directory (GPO, DNS, DHCP, DFS, PS, FS, WSUS)

Networking & Security

Cisco, MikroTik (RouterOS/SwOS), VPNs, Routing & Switching, pfSense, FortiGate, IP/Subnetting, Firewalls

Databases & Messaging

PostgreSQL, MySQL, MS SQL Server, MongoDB, Oracle 12c/19c, ClickHouse, RabbitMQ, Kafka

Email & Telephony

Microsoft Exchange, Asterisk IP Telephony

Enterprise IT Tools

Squid Proxy, Nexus Repository, Rocket.Chat, Imaging & Deployment Tools, Asset Management Platforms

Experience

System Administrator
TIRUS INC.
Apr 2024 – Present

Administer Windows Server and Ubuntu infrastructure across 60+ endpoints, supporting dispatch teams, developers, and field drivers for a logistics operations company. Manage Active Directory (GPO/DNS/DHCP), VPN and firewall systems, and VMware ESXi environments used for internal software development and testing.

  • Provision and sustain VMware ESXi environments for development and testing of internal software used by truck drivers to track loads and earnings and access logistics tools. Collaborate with the engineering team to deploy stable releases across operational units.
  • Monitor infrastructure performance with Zabbix and Grafana, reducing unplanned downtime by 40% through proactive alerting and regular audits.
  • Migrated internal systems to a hybrid model using AWS EC2 and S3, enabling off-site backups and scalable file access for dispatch ops.
  • Train dispatchers and support staff on IT tools and logistics systems, and document troubleshooting workflows to strengthen onboarding and cut helpdesk tickets by 30%.

Environment: Windows Server, Ubuntu, VMware ESXi, AWS (EC2/S3), Active Directory (GPO/DNS/DHCP), Zabbix, Grafana, VPN/firewall.

DevOps Engineer
SBERBANK
2021 – 2023

Worked within the core banking platform infrastructure team of 50+ (developers, QA, analysts, and engineering leads). Administered a hybrid Linux environment supporting development, testing, and production workloads for internal banking systems.

  • Administered 80+ Ubuntu and Red Hat Enterprise Linux servers across dev, test, and production environments. Hardened systems and streamlined backup processes, reducing recovery time by 60%.
  • Automated 95% of system configuration and CI/CD pipeline deployment using Ansible and Jenkins. Reduced manual setup errors and accelerated test delivery by 50%.
  • Deployed and maintained containerized workloads using Docker and Docker Swarm, standardizing service delivery across environments.
  • Built and maintained observability stack with Zabbix, Grafana, and Prometheus for proactive alerting and infrastructure health visibility.
  • Managed RabbitMQ messaging infrastructure supporting asynchronous communication between banking services.
  • Engineered migration from Oracle Database and IBM WebSphere to PostgreSQL and WildFly, cutting licensing costs by $100K/year and improving system performance.
  • Contributed to infrastructure tooling decisions and procurement planning to support platform scalability and long-term reliability.

Environment: Red Hat Enterprise Linux, Ubuntu, Ansible, Jenkins, Docker, Docker Swarm, RabbitMQ, PostgreSQL, WildFly, Zabbix, Grafana, Prometheus, Oracle 19c, IBM WebSphere (legacy), Bash, Python, Git.

System Administrator
FODD
2020 – 2021

Part of a 7-person IT team at a premium construction and engineering general contractor (high-end residential, hospitality, and commercial real estate in Moscow, founded 1997), supporting 100+ servers and 1,000+ users across corporate offices and construction sites.

  • Led Active Directory upgrade from Windows Server 2008 R2 to 2016 and enforced GPO security standards, improving security posture and reducing login issues by 30%.
  • Deployed centralized Zabbix monitoring across 100+ servers, reducing unplanned downtime and critical incidents by 25%.
  • Administered VMware vSphere / vCenter virtualization environment hosting production and internal services, managing VM provisioning, snapshots, and resource allocation.
  • Built hybrid remote work infrastructure during COVID-19 lockdowns: implemented Azure AD and Azure Virtual Desktop for office staff, combined with site-to-site and client VPN access for on-site workers. Enabled 100% business continuity for 1,000+ users during pandemic shutdowns.
  • Led launch of a new colocated data center: planned rack layout and prepared cost estimates, coordinated installation, migrated production servers into a leased rack at the facility, and integrated Asterisk IP telephony and collaboration tools.
  • Designed and maintained backup infrastructure and VPN access for remote engineers, project managers, and construction site offices.

Environment: Windows Server 2008 R2 / 2016, Active Directory (GPO/DNS/DHCP), VMware vSphere / vCenter, Azure AD, Azure Virtual Desktop, Zabbix, Asterisk IP telephony, VPN infrastructure.

System Administrator
TRANS MANAGEMENT
2015 – 2020

Managed IT infrastructure for an engineering, project management, and energy infrastructure firm — mixed Windows/Linux environments supporting 130+ endpoints through a period of rapid company growth.

  • Scaled IT infrastructure to support rapid company growth: oversaw servers, virtualization, DNS/DHCP, backups, and user account management across Windows/Linux environments.
  • Established site-to-site MikroTik VPN connectivity between offices and deployed Asterisk IP telephony, enabling seamless inter-office communication and reducing telecom costs by $10K/year.
  • Deployed HP/Dell servers with CentOS, Debian, and Windows Server 2012/2019. Introduced 1C/PostgreSQL on Linux, cutting system downtime by 30%.
  • Managed IT procurement, vendor negotiations, and license compliance for 130+ endpoints, improving operational efficiency and reducing delays in equipment provisioning.

Environment: Windows Server 2012 / 2019, Linux (CentOS, Debian), Active Directory (DNS/DHCP), MikroTik RouterOS, Asterisk IP telephony, PostgreSQL, 1C.

Certifications

  • MTCNA: MikroTik Certified Network Associate
  • Automating Administration with Windows PowerShell
  • Advanced Automating Administration with Windows PowerShell
  • Red Hat OpenShift I: Containers
  • Jenkins: Automating Delivery Pipelines
  • Terraform: Automate Provisioning
  • Ansible
  • Linux for Developers

Education

Bachelor of Computer Science and Information Security

Moscow Finance and Law University