Andrii Kh. — System Engineer

Vetted expert in NetOps and SysOps (13.0 yr.), DevOps, Security Operations (SecOps).

Last verified on December, 2025

Senior

Upper-Intermediate English

Core Skills

Terraform

Linux

PowerShell

Monitoring systems

Bio Summary

• 13 years managing IT infrastructures across Windows and Linux environments.
• Automation (Ansible, Terraform), Сloud administration (Azure, AWS, GCP), and security hardening with OPNsense, PFsense, and Sophos.
• SaaS administration and automation (Microsoft 365, Entra ID/Azure AD, SharePoint, Power Automate), including Identity and access management services with SSO.
• Ability to design and maintain scalable systems, implement SIEM solutions, and optimize performance while reducing operational costs.

Technical Skills

.NET Platform	Azure
AI & Machine Learning	CNN
Security	ClamAV, Fail2Ban, Firewalld, GPO (Group Policy Object), NGFW (Next-Gen Firewall), OPNsense, RKhunter, Sentinel, Sentinel (Microsoft Sentinel), SIEM, Sophos, Suricata
Data Analysis and Visualization Technologies	Kibana
Databases & Management Systems / ORM	AWS ElasticSearch, MS SQL Server Management Studio
Cloud Platforms, Services & Computing	AWS, Azure, DigitalOcean, GCP, Veeam
Amazon Web Services	AWS API Gateway, AWS ElasticSearch
Azure Cloud Services	Azure VM, Entra ID, Hyper-V
Deployment, CI/CD & Administration	Active Directory, Ansible, Helm
Web/App Servers, Middleware	Apache HTTP Server, Nginx, Windows Server
Third Party Tools / IDEs / SDK / Services	asterisk PBX, Office 365
SDK / API and Integrations	AWS API Gateway, Keycloak
Scripting and Command Line Interfaces	Bash, PowerShell
Operating Systems	Debian, Linux, RHEL (Red Hat Enterprise Linux), Windows
Virtualization, Containers and Orchestration	Docker, ESXi, IPSec VPN, Kubernetes, Podman, Proxmox, Terraform, VmWare, VMware vSphere, vSphere
Mail / Network Protocols / Data transfer	EIGRP, Firewalls, Guacamole, IPSec VPN, PfSense, RDP, VLAN, VPN, Zimbra
Logging and Monitoring	Grafana, Logstash, Prometheus, Zabbix
File Systems, Storage	NAS (Network-attached storage)
Hosting, Control Panels	OVH
Platforms	Power Automate, SharePoint
QA, Test Automation, Security	SSO
Other Technical Skills	Elastic Stack, IDS/IPS

Work Experience

System Administrator, Ameria AG (Touchfree Interactive Experiences)

Duration: Jan 2023 - Sep 2025

Summary:Administration and automation of enterprise IT infrastructure across Windows and Linux environments with a strong focus on cloud, security, and monitoring systems.

Key Responsibilities:

Maintained Microsoft 365, Azure, Entra ID, Sentinel, SharePoint, and Power Automate environments;
Managed on-premises Windows Server infrastructure (2022–2025), including GPO, user management, backup, and security;
Deployed and maintained Linux servers (RHEL, Debian) using Ansible and Terraform on AWS and GCP;
Designed and integrated ELK Stack (Elasticsearch, Kibana) with Grafana and Prometheus for SIEM monitoring;
Built and managed firewalls using OPNsense, Sophos, and PFsense;
Implemented a secure SSO-based remote access gateway.

Key Achievements:

Reduced operational costs by approximately $600 by implementing in-house NGFW and SIEM solutions.
Achieved full automation for Linux environments with Ansible and Terraform;
Developed a secure web-based remote gateway, improving remote access efficiency.

Technologies:Microsoft 365, Azure, Entra ID, Sentinel, SharePoint, Power Automate, Windows Server 2022–2025, Active Directory, GPO, RHEL, Debian, Ansible, Terraform, AWS, GCP, Elasticsearch, Kibana, Grafana, Prometheus, OPNsense, Sophos, PFsense, SSO.

Support System Administrator, Eiktel (Network architecture, design, implementation, 24/7 monitoring and support, VoiP business class solutions)

Duration: Aug 2021 - Aug 2022

Summary:Provided IT infrastructure support, server administration, virtualization, backup, and telephony system management.

Key Responsibilities:

Provided IT support and troubleshooting for Windows Server environments (2012–2021);
Configured and maintained Active Directory, GPO, RDP;
Implemented Veeam Backup for centralized data protection;
Managed virtual infrastructure using Hyper-V, ESXi, and OVH Cloud;
Administered Asterisk PBX systems.

Key Achievements:

Improved client communication and issue resolution under pressure;
Gained advanced experience with Microsoft 365, Veeam, and cloud platforms (GCP, AWS).

Technologies:Windows Server 2012–2021, Active Directory, GPO, RDP, Veeam Backup, Hyper-V, ESXi, OVH Cloud, Asterisk PBX, Microsoft 365, AWS, GCP.

System Administrator, IT Consultant

Duration: Jan 2019 - 2024

Summary:Provided system administration and IT consulting services for multiple clients and educational institutions.

Key Responsibilities:

Delivered IT consulting and system administration services for various clients;
Deployed and configured firewalls (OPNsense, PFsense);
Configured Debian-based mail servers;
Managed virtualization environments;
Provided mentorship to junior administrators on automation and cloud infrastructure best practices.

Technologies:OPNsense, PFsense, Debian, virtualization platforms, automation and cloud infrastructure tools.

Education

Specialist in International Information
Institute of International Relations
Network Security Administrator
STEP Computer Academy
Bachelor in French Philology
National University

Cartifications

Cyber Security: Understand Threats and Prevent Attacks
Linux Network Administrator
Microsoft Azure Administrator (AZ-104)
Office 365 SharePoint for End Users
Computer Networking - Digital Network Security

How to hire with Upstaff

Talk to Our Talent Expert

Our journey starts with a 30-min discovery call to explore your project challenges, technical needs and team diversity.

Meet Carefully Matched Talents

Within 1-3 days, we’ll share profiles and connect you with the right talents for your project. Schedule a call to meet engineers in person.

Validate Your Choice

Bring new talent on board with a trial period to confirm you hire the right one. There are no termination fees or hidden costs.

Why Upstaff

Upstaff is a technology partner with expertise in AI, Web3, Software, and Data. We help businesses gain competitive edge by optimizing existing systems and utilizing modern technology to fuel business growth.

Real-time project team launch

<24h

Interview First Engineers

Upstaff's network enables clients to access specialists within hours & days, streamlining the hiring process to 24-48 hours, start ASAP.

x10

Faster Talent Acquisition

Upstaff's network & platform enables clients to scale up and down blazing fast. Every hire typically is 10x faster comparing to regular recruitement workflow.

Vetted and Trusted Engineers

100%

Security And Vetting-First

AI tools and expert human reviewers in the vetting process is combined with track record & historically collected feedbacks from clients and teammates.

~50h

Save Time For Deep Vetting

In average, we save over 50 hours of client team to interview candidates for each job position. We are fueled by a passion for tech expertise, drawn from our deep understanding of the industry.

Flexible Engagement Models

Custom Engagement Models

Flexible staffing solutions, accommodating both short-term projects and longer-term engagements, full-time & part-time

Unique Talent Ecosystem

Candidate Staffing Platform stores data about past and present candidates, enables fast work and scalability, providing clients with valuable insights into their talent pipeline.

Transparent

No Hidden Costs

Price quoted is the total price to you. No hidden or unexpected cost for for candidate placement.

One Consolidated Invoice

No matter how many engineers you employ, there is only one monthly consolidated invoice.

Ready to hire Andrii Kh.
or someone with similar Skills?

Book a call with Andrii Kh.

Start Hiring