Yuriy Medvedev

Principal Cloud & DevSecOps Engineer. AI/ML infrastructure, Wazuh SIEM, AWS security. Dubai, open to remote.

Available now
Golden Visa, no sponsorship needed
Dubai, Abu Dhabi, remote
English fluent, Russian B2

Open to Senior or Principal engineer, Head of Infrastructure, SRE Manager. Office or hybrid in Dubai and Abu Dhabi, or remote worldwide. Any employment type, quick start.

What I do

I have worked in infrastructure and security since 2008, starting with network security assessments and Red Team work at Corbina Telecom. The platforms changed from private OpenStack to AWS and Azure, but the order of questions stayed the same: who can reach what, what happens when a node fails, and what an auditor will see as evidence. At Emirates Airlines that meant running 340+ production services against a 99.95 percent availability target with a team of 10 SREs, while the same work produced the company ML platform on Azure and the multi-account landing zone on AWS.

Each card below lists results with the numbers my CV states. GPU experience is limited to what is written here: GPU node pools in AKS behind the Dataiku platform, not training clusters.

Cloud & Platform

Multi-account AWS landing zone with Control Tower, Organizations and Terraform modules: a new environment in a few hours instead of roughly three weeks
23 services moved to Amazon EKS with a GitOps workflow, rollback under 90 seconds
340+ production services run against a 99.95 percent availability target
Private OpenStack cloud of about 1200 VMs at MTS, hybrid with AWS and Azure, serving about five million subscribers

DevSecOps & Compliance

Wazuh SIEM at 12000+ events per second from about 600 agents, with custom decoders, Splunk forwarding and PagerDuty routing
HashiCorp Vault rotating 2400+ credentials, with automatic secret injection into CI/CD
CIS Level 2 at 94.3 percent across 280 EC2 instances, every exception backed by a documented compensating control
37 control narratives and automated evidence collection for SOC 2 Type II; PCI DSS segmentation and evidence for payment systems

AI/ML Infrastructure

Dataiku ML platform on AKS with GPU nodes for 20 data scientists and about 40 production projects, built in 2019 and still in service
Wazuh and Amazon Bedrock RAG over a SOC corpus, measured in Indexer and S3 Vectors
Open-source Wazuh tooling: agent image, Prometheus exporter, rule and decoder linter

Leadership

Team of 10 SREs at Emirates Airlines, 2017 to 2026
Department of about 50 as Head of Infrastructure at MTS
Mean incident response time cut from 47 to 11 minutes
Junior engineering course at EPAM, five cohorts, part of hiring about 100 people

Proof

Wazuh + AWS Bedrock MCP series, parts 1 to 4Wazuh with Amazon Bedrock and an MCP server, from a Docker stand to SOC knowledge in S3 Vectors
Wazuh 4.14.7 vs 5.0 Beta 5: a migration, not an upgradetwo stands side by side, an indexer outage run and what happens to XML rules
docker-wazuh-agentWazuh agent image for monitoring a Kubernetes cluster
wazuh-prometheus-exporterWazuh metrics for Prometheus
wazuh-linterstatic checks for Wazuh rules and decoders
dss-on-gcpTerraform and Ansible for Dataiku DSS on GKE with GCS integration
Joining the Wazuh Ambassador Programthe announcement of December 2025
From Wazuh Ambassador to AWS Community BuilderSecurity category, 2026

Experience

OpenNix SRE & Security Consultant
Feb 2026 - present, Dubai
Cloud and security consultancy for a HealthTech platform under HIPAA and an AI resume screening platform: SOC 2 Type II narratives, Zero Trust access in AWS, shared Terraform modules.
Emirates Airlines Senior SRE Manager
Nov 2017 - Jan 2026, Dubai
Booking, loyalty and payment systems: the Wazuh platform, the EKS migration, the AWS landing zone, the ML platform on Azure, Vault and CIS hardening, an OpenShift etcd recovery.
EPAM Systems Senior Systems Engineer, DevOps Lead
Jul 2016 - Nov 2017, Moscow
Packer images and Terraform modules for AWS and Azure; Terragrunt removed roughly 4000 lines of duplicated HCL.
IPONWEB DevOps Technical Lead
Oct 2015 - Jul 2016, Moscow
A four-person operations team, on-call and incident management for BidSwitch, Puppet delivery across US, EU and Asia.
MTS Head of Infrastructure
Jun 2013 - Sep 2015, Moscow
A department of about 50 people and a private OpenStack cloud connected to AWS and Azure.
Synterra Media Lead System Engineer
Nov 2010 - May 2013, Moscow
A streaming platform for about 12000 concurrent users and a CDN for sports broadcasts peaking around 2.5 million streams.
Corbina Telecom / Beeline Senior Network Security Engineer (Red Team)
Jul 2008 - Oct 2010, Moscow
Authorized network security assessments; access control, VPN, DMZ and incident-response policies during a corporate merger.

Credentials and education

HashiCorp Certified: Terraform Associate, 2020
AWS Community Builder, Security, 2026
Wazuh Ambassador, since 2025
MSc, Physics, Mathematics and Computer Science, Tula State Pedagogical University, 2008

Contact

Email is the direct route, and LinkedIn messages reach me as well. The employers, dates and figures on this page match my CV line by line, and the experience list above carries the dates of every role.

ping@pytoshka.me LinkedIn