AMIR KHANI

Tadvin Farayand Co.

• Infrastructure Migration: Architected the migration of a microservices ERP (50+ services) from 15 resource-heavy VMs to a 2-node Kubernetes Cluster, reducing infrastructure costs by 75%.
• CI/CD Engineering: Built an end-to-end GitOps pipeline using GitLab CI and ArgoCD, reducing deployment time from days to minutes for both backend and multi-repo frontend applications.
• Observability & Monitoring: Designed a robust observability pipeline utilizing Prometheus, Loki, and Grafana. Built custom dashboards for real-time resource and traffic visualization, while implementing proactive alerting rules with automated routing to Telegram Bot and internal issue trackers (Jira) to accelerate incident response.
• Security & Traffic Management: Standardized external traffic routing via Nginx Ingress and automated SSL issuance with cert-manager. Enhanced security posture by migrating hard-coded credentials to encrypted Kubernetes Secrets.
• Documentation: Created a comprehensive knowledge base in Confluence outlining disaster recovery procedures, architectural standards, and deployment workflows.

• Hardware & Virtualization: Managed on-premise data center infrastructure. Configured VMware ESXi to optimize resource allocation, directly enabling the deprecation of legacy VMs.
• Network Security & Architecture: Designed and secured internal networks using MikroTik and pfSense. Implemented VLAN isolation to segregate production traffic from Veeam-to-Synology backup pipelines.
• Enterprise IT & Remote Access: Administered Windows Server infrastructure (Active Directory, Domain Controller, internal DNS) for 40+ local endpoints. Established secure remote access for distributed developers utilizing WireGuard VPN and RustDesk.

• ERP Front-End Development: Engineered and maintained the frontend architecture for the company's core microservices ERP using Angular and TypeScript.
• Cross-Functional Insight: Leveraged deep understanding of the ERP's application logic to architect its eventual migration to a Cloud-Native infrastructure, acting as a crucial bridge between software constraints and DevOps operations.

Self-Employed

• Server Optimization: Managed dedicated Linux servers for multiple commercial clients, optimizing Apache, Nginx, and PHP-FPM configurations to sustain 99.9% uptime.
• Resource Consolidation: Strategically migrated scattered shared-hosting clients into centralized, high-availability dedicated instances, maximizing I/O throughput and reducing collective hosting costs.
• Full-Stack Implementation: Developed and deployed custom PHP websites, gaining deep, hands-on expertise in Web Server Administration and Linux environment troubleshooting.