Paweł Piwowar
Cloud DevOps Engineer · Poland
Cloud DevOps Engineer specializing in resilient hybrid-cloud infrastructure (Azure, IONOS, VMware) for mission-critical, regulated environments. Automated 70% of provisioning across 80+ subscriptions and 1,000+ VMs; co-led one vCenter-to-cloud migration and drive a second with 15+ cross-functional teams. Designed and run a code-managed observability platform. Focus: reliability, security hardening, high availability and AI-assisted engineering.
PTV Group
May 2024 — present · Full-time
Junior SysAdmin → SysAdmin → DevOps
DevOps Engineer
January 2026 — present
Operations Team · DEV/STAGE/PROD K8s · SAFe · ITSM/ITIL
Multi-Cloud IaC & FinOps. Co-led one production vCenter-to-Azure/IONOS migration; driving a second, larger DC migration. Automated 70% of provisioning with Terraform, Ansible and Bicep; reduced IONOS costs by ~20% through rightsizing and run Azure cost reviews with Azure Advisor.
Observability as Code. Primary engineer: designed, built, and operate an observability and automation platform combining Grafana, Prometheus, Alloy, VictoriaLogs, and custom collectors. It delivers 50 advanced dashboards managed as code and processes ~15M log lines/day, bringing together infrastructure diagnostics, deployment traceability, DNS risk detection and DNS hardening monitoring, backup health, credential expiry, Azure/IONOS monitoring, licence monitoring, cloud-cost analysis, CheckMK integration, and incident history. Terraform, Ansible, and Azure DevOps automate core deployment, while n8n connects multiple workflows with PagerDuty, Intune, Jira, and Teams.
AI-Assisted Engineering. Use ChatGPT Enterprise and Claude Code for prototyping (Terraform, Ansible, Python) and documentation; built AI agents automating recurring operational workflows, code review, and security checks. Co-own the internal AI platform (OpenRouter, Open WebUI, n8n) as Entra ID administrator: access management, cost control, and further development.
Critical Infrastructure. Operate and maintain deployments for public-sector transport authorities across UAE/MENA, UK, and EU, spanning client-hosted, company-hosted, and hybrid models, including high-security client environments.
Incident Response & On-Call. PagerDuty first responder, Kubernetes diagnostics and initial triage. Extended Python tooling integrating PagerDuty, Kubernetes and Azure DevOps APIs.
System Administrator
November 2024 — December 2025
Administered on-premise vSphere/vCenter (ESXi) clusters: VM lifecycle, performance diagnostics and troubleshooting, alongside Azure workloads.
Prepared workloads for migration: dependency mapping, inventory and pre-migration validation; deployed and maintained CheckMK across hybrid infrastructure.
Maintained OPNsense/Sophos network security and DNS/DHCP; participated in 24/7 on-call for mission-critical infrastructure.
Junior System Administrator
May 2024 — October 2024
Joined the 24/7 on-call rotation early, detecting and helping resolve infrastructure alerts outside business hours.
Provided international L1/L2 support and maintained technical documentation. Supported Azure and on-premise vSphere (ESXi) operations.
Earlier experience
Internal IT Support & Sales Specialist · Dystrybucja Net
November 2018 — April 2024 · Part-time
Solely managed small internal IT: Windows Server, Active Directory, networking, ERP/SQL Server and backups; technical sales and client relations.
E-commerce Administrator & Technical Founder · Dystrybucja AP
March 2020 — November 2022 · Freelance
Storefront setup, supplier feeds, payment/shipping integrations, domains and workflow automation.
PC Hardware Technician & IT Support · Markomps
January 2006 — December 2009 · Internship
PC builds, hardware diagnostics, Windows installs, upgrades and first-line support.
Technical skills & toolset
Core / Proficient
Azure · IONOS Cloud; Terraform · Ansible (roles, Jinja2); Azure DevOps; Linux: Debian/Ubuntu, RHEL/CentOS, Oracle Linux; Grafana · Prometheus · PromQL; VictoriaMetrics · VictoriaLogs; Alloy · Loki · Tempo · Checkmk; OpenTelemetry / OTLP; Claude · ChatGPT · Copilot
Working knowledge / Hands-on
Azure Bicep · Entra ID / IAM; VMware vSphere / vCenter; Kubernetes workload operations; Docker · Git · Bash · PowerShell; Python (operations tooling & APIs); Windows Server / Active Directory; OPNsense · PagerDuty; Jira / JSM · n8n
Familiar / Developing
Open WebUI · OpenRouter; Local LLMs · LangGraph · Qdrant; Argo CD · Jenkins · Site24x7; PostgreSQL · MySQL · MariaDB; Sophos · Cisco networking
Certifications & training
Azure Administrator Associate · Microsoft · AZ-104 · 2026 · Certified
Support Technician Networking · Cisco · CCST · 2024 · Certified
AI Skills of Tomorrow 3.0 · Google · 2026 · Training
Sekurak Academy 2023/2024 · Sekurak · IT security training · Training
EC-Council Essentials series
Learning next
AZ-400 · DevOps Engineer Expert path · In progress
AZ-305 · Azure architecture · In progress
CKA · Kubernetes administration · On the roadmap
Terraform Associate · HashiCorp infrastructure as code · On the roadmap
Education
Secondary education · LO ŻAK, Adult Education Center · In progress alongside work
Electrical engineering coursework · Technikum Elektrotechniczne · Electrical and systems fundamentals
Languages
English · C1; Polish · native; German · A1, actively learning
Soft skills
- Technical research & innovation
- Analytical problem-solving
- Active listening & communication
- Collaborative team mindset
- Resilient & positive attitude
- Technical writing & knowledge governance
Selected projects
HomeLab 3.0
Building a VMware Workstation Pro lab to practise the full path from a reviewed change to a running, observable service.
- Platform: Azure DevOps with self-hosted Linux agents; Terraform, Bicep and Ansible in Git; k3s with Argo CD for GitOps, drift and rollback practice.
- Visibility: Prometheus, VictoriaLogs, Alloy, Grafana and OpenTelemetry.
- Local AI: Local LLMs with LangGraph, Qdrant for RAG and Neo4j for system context; automation runs after a dry-run and human approval.
- VR/voice: Meta Quest 3, WebXR/FastAPI, Whisper and Kokoro TTS.
Personal website · code to production
Bilingual EN/PL Astro site on Cloudflare, released like a production service.
- CI: Azure Repos PRs with required validation; Azure Pipelines builds and verifies preview and production artifacts without deployment secrets.
- Release: STAGE Worker with smoke checks, then owner approval before PROD.
- Checks: Links, EN/PL, UI, security headers and this code-generated CV.
Interests
- Photography: Lumix S9 for landscapes, portraits and wildlife; Adobe Portfolio.
- Books: Fantasy, horror, spy and political thrillers, techno-thrillers, self-development and technical books.
- Music: Jazz & blues, electronic, synthpop and chill playlists.
- Games: Strategy (Transport Tycoon, Age of Empires), RPGs and VR; board games such as The Witcher, Terraforming Mars and Catan.
- Also: 3D printing (practical parts and board-game pieces) and good coffee.