Alex Zirka

As a leading retail company, FoodTech shifts both security and compliance earlier in the development process with automated scanning and policies.

Responsibilities:
• Integrated GitLab Ultimate security scans into the software development process.
• Designed and implemented automation tools for vulnerability auto-remediation, integration between GitLab and Jira, and automated configurations of security scans.
• Did application security testing and remediation.
• Performed project security audits using manual code analysis and tools.

As a hosting provider for enterprise-level clients, we built a system that regularly collects information about vulnerable packages, state of applied Magento security patches, hardening checks, malware scans, weak Magento admin passwords, etc., for more than 1,500 servers.

Responsibilities:
• Designed and implemented the extendable tool using Python, including a malware scanner, server hardening checks, security patch checker, Magecart attack detector, stored credit card information discovery, and more.
• Created the database structure that included the results of all scans and hardening checks.
• Implemented the database visualization (charts, graphs, alerts) based on Metabase and Apache Superset.
• Designed and deployed a centralized log management system based on Sumo Logic for both VPS and Kubernetes infrastructures.
• Implemented a tool to detect weak Magento admin passwords.
• Developed and conducted security training and workshops for back-end developers, DevOps, and QA engineers.
• Improved the security level of Kubernetes infrastructure using GateKeeper, Falco, and Anchore.
• Performed project security audits using manual code analysis and tools, including Nessus, Arachni, ZAP, and Metasploit.

Laroche Posay, official web store for a well-known French brand of cosmetics, Magento 2.

Responsibilities:
• Implemented a custom Magento checkout, catalog customizations, CRM integration, and import functionality.
• Introduced acceptance tests platform based on Ghost Inspector that was reused on other projects.
• Designed a fully automated and scalable infrastructure based on the Google Cloud Platform.
• Introduced and implemented the project infrastructure in Terraform.

Tele2 is a major telephone operator in the Nordic and Baltic countries. All country-specific websites are fully independent and have a custom business logic; however, they are based on common modules.

Responsibilities:
• Provided guidance to team members to encourage work productivity.
• Designed and planned a strategy to converge multiple European Magento platforms into a single codebase.
• Designed and implemented integrations of Magento with ERP, CRM, and OMS.
• Built a highly available, fault-tolerant, scalable, secure IT architecture using Ansible configuration management.
• Introduced a platform for acceptance tests automation based on Codeception and integrated it into the deployment pipeline.