Resume

System administrator with 8+ years of experience building and running enterprise IT infrastructure. Focused on designing resilient environments on Active Directory/ADFS, PKI, and Exchange, and on hardening infrastructure security (defense-in-depth, attack-surface reduction, SIEM readiness).

Experienced in running a company’s IT function end-to-end — from procurement and infrastructure design to user support and collaboration with international colleagues. Currently looking for Senior/Lead-level roles in system administration and IT infrastructure, and interested in large, technically challenging projects.

Skill IQ (Pluralsight profile)

#

Certificates, trainings, certifications

#

Experience

#

Citadel LLC — System Administrator (2024–present)

#

Software development, systems integration — hardware/software complexes for lawful-intercept (ТС ОРМ) systems. ~1,200 users.

• Work in a team of system administrators reporting to the IT director; involved in hiring and training new team members.
• Designed and maintain a high-load AD DS/ADFS infrastructure. Implemented a defense-in-depth strategy: brought systems up to CIS/Microsoft Baseline standards, disabled legacy protocols (SMBv1, NTLM), enforced strict audit policies, and built a nested AD-group-based access role model.
• Built and operate a PKI (AD CS), including smart card/PKINIT strong authentication integrated with Active Directory/Kerberos. Automated the SSL certificate lifecycle (ACME, EAP-TLS) across the Linux/Windows estate — cut deployment time-to-market and eliminated manual certificate errors. Automated patch management and antivirus protection (WSUS/KMS) company-wide.
• Set up centralized security event collection and analysis via Windows Event Collector (WEC), laying the groundwork for SIEM.
• Administer Proxmox VE and Hyper-V: VM diagnostics and recovery, and troubleshooting remote administration of standalone (non-domain-joined) Hyper-V hosts (WinRM, RPC, CredSSP, WMI).
• Consolidated 3 Jira and 3 Confluence instances into unified systems; migrated departments from legacy tools (including Redmine) into Jira with business-process redesign; rolled out Atlassian Assets (Insight) for IT asset, license, and configuration management (CMDB); implemented and continue to develop Jira Service Desk under ITIL practices; authored Confluence macros.
• Built and maintain Jira integrations with ERP/CRM systems (Microsoft Dynamics, 1C) and the corporate Mattermost messenger (notifications, bots, incident management); extend Jira functionality via Groovy/ScriptRunner with direct use of the Jira Java API, plus PowerShell scripts for AD and access-rights administration.
• Run Exchange Server in a high-availability configuration, administer DNS and remote access (TS/RDS, 2FA), and support PostgreSQL and Nginx.

Nikoliers / Colliers International — Senior Specialist (2018–2024)

#

Real estate consulting, valuation, and development. ~400 employees, 2 offices (Moscow, St. Petersburg).

• Grew from junior specialist to independently running the company’s IT function, combining the roles of IT department head, system administrator, and 2nd-line support across two offices.
• Administered AD, ADFS, Azure AD, Office 365, internal/external DNS, TS/RDS, WSUS, KMS; kept high-availability mail running on Exchange Server 2016–2019 and led the migration from Office 365 to Exchange 2016 as the company exited its international structure.
• Administered servers and endpoints: Windows Server 2008 R2–2022, Windows 7–11; virtualization on VMware/Hyper-V.
• Deployed and maintained security and resilience tooling: Kaspersky Security Center, Zabbix monitoring, Veeam Backup & Replication, PKI infrastructure, 2FA (Multifactor).
• Configured and maintained network equipment (Cisco ASA, Mikrotik, CheckPoint Firewall) and wireless bridges (Ubiquiti, Cisco).
• Deployed and supported adjacent services: on-premise Atlassian (Jira, Confluence), Yealink video conferencing, MS SQL/PostgreSQL, 1C, Nginx, MS Teams.
• Managed equipment procurement: specifications, receiving, and closing documentation.

Summer jobs — 1C-Rarus, Fazotron-NIIR (2013, 2016)

#

• Backups, updates, and recovery of 1C databases; brought databases in line with business needs.

Key Skills

#

• Directory & Identity: Active Directory, ADFS, Azure Active Directory, Group Policy (GPO), DNS, DHCP
• Security: PKI/AD CS, Smart Card/PKINIT, SSL/TLS (ACME), Kaspersky Security Center, CIS/Microsoft Baseline, security hardening, WEC (Windows Event Collector), 2FA/Multifactor
• Servers & Virtualization: Windows Server 2008 R2–2022, Windows 7–11, VMware, Hyper-V (incl. non-domain-joined), Proxmox VE
• Messaging & Collaboration: Exchange Server (high availability), Office 365, MS Teams, Mattermost
• Monitoring & Backup: Zabbix, Veeam Backup & Replication, WSUS/KMS
• Networking: Cisco ASA, Mikrotik, CheckPoint Firewall, Ubiquiti, VPN, network configuration
• Atlassian & Automation: Jira, Jira Service Desk, Jira Assets/Insight (CMDB), Confluence, ScriptRunner (Groovy), Jira Java API, REST API, integrations with MS Dynamics/1C/Mattermost, Confluence macros, PowerShell
• Databases & Services: PostgreSQL (administration, WAL, clustering), MS SQL, 1C, Nginx
• Process & Leadership: ITIL, 2nd–3rd line support, procurement & specifications, mentoring & onboarding, technical documentation, working with international teams
• Languages: Russian — native; English — B2 (upper-intermediate)