Andrei Ghenea
Systems & DevOps Engineer — Cloud · Observability · Security
6+ years building and securing enterprise cloud infrastructure for Tier-1 clients. Specialist in AWS multi-account architectures, OpenTelemetry observability pipelines, GitOps CI/CD, and Kubernetes. AWS Certified Solutions Architect.
About Me
Professional Summary
Systems & DevOps Engineer with 6+ years of hands-on experience designing, automating, and securing cloud and hybrid enterprise infrastructures. I specialize in AWS multi-account environments, GitOps CI/CD pipelines, OpenTelemetry observability, and Linux/networking. Currently consulting for enterprise clients including Ferrari, BNL Group, and Verona Airport.
Quick Info
Education
Bachelor in Computer Science
Università degli Studi di Verona
Informatics Diploma
Finance and Banking College of Chisinau
Languages
Experience
Systems & DevOps Engineer
Digitronica.it
Verona, Italy
2024 – Present
- Architected multi-account AWS environments using AWS Organizations and IAM Identity Center, sustaining 99.9% availability for critical production workloads of Tier-1 clients including Ferrari, BNL Group, and Verona Airport.
- Engineered scalable, reusable Infrastructure as Code (IaC) modules using Terraform to standardize and accelerate environment provisioning across multiple client projects.
- Eliminated 40% of manual operational overhead by deploying custom Python and Bash self-healing automation frameworks for continuous monitoring, backup validation, and infrastructure tasks.
- Designed secure hybrid-cloud networking architectures configuring resilient Site-to-Site IPsec VPNs and SSL VPNs connecting on-premise enterprise systems to AWS.
- Led technical documentation and disaster recovery mapping, drastically reducing Mean Time to Resolution (MTTR) during incident responses.
DevOps & QA Automation Engineer
Samsung Electronics (Akodis)
Verona/Milan, Italy
2023 – 2024
- Bridged Development and Operations by integrating automated regression and data-validation suites directly into Jenkins and GitHub Actions CI/CD pipelines, accelerating release velocity.
- Designed complex backend validation scripts utilizing advanced SQL to audit data integrity, proactively identifying performance bottlenecks and architectural defects before production deployment.
- Containerized testing dependencies with Docker, ensuring environment parity between development, staging, and production environments.
- Collaborated on release readiness frameworks, providing actionable engineering insights that improved overall deployment stability and system reliability.
Functional Analyst & Deployment Specialist
Intesa Sanpaolo (Akodis)
Verona Area, Italy
2019 – 2023
- Orchestrated end-to-end deployment workflows for core banking applications using Jenkins CI/CD pipelines, ensuring strict adherence to banking compliance and zero-downtime release strategies.
- Managed high-availability production database operations (Oracle/SQL), leading critical migrations, data schema updates, and performance tuning for high-transaction banking systems.
- Automated environment provisioning and pre-deployment configuration checks, drastically reducing delivery friction and cutting feature time-to-market.
- Served as technical liaison coordinating between Dev, Operations, and Business stakeholders to manage controlled financial software rollouts and maintain service continuity.
Systems & DevOps Engineer
Digitronica.it
Verona, Italy
2024 – Present
- Architected multi-account AWS environments using AWS Organizations and IAM Identity Center, sustaining 99.9% availability for critical production workloads of Tier-1 clients including Ferrari, BNL Group, and Verona Airport.
- Engineered scalable, reusable Infrastructure as Code (IaC) modules using Terraform to standardize and accelerate environment provisioning across multiple client projects.
- Eliminated 40% of manual operational overhead by deploying custom Python and Bash self-healing automation frameworks for continuous monitoring, backup validation, and infrastructure tasks.
- Designed secure hybrid-cloud networking architectures configuring resilient Site-to-Site IPsec VPNs and SSL VPNs connecting on-premise enterprise systems to AWS.
- Led technical documentation and disaster recovery mapping, drastically reducing Mean Time to Resolution (MTTR) during incident responses.
DevOps & QA Automation Engineer
Samsung Electronics (Akodis)
Verona/Milan, Italy
2023 – 2024
- Bridged Development and Operations by integrating automated regression and data-validation suites directly into Jenkins and GitHub Actions CI/CD pipelines, accelerating release velocity.
- Designed complex backend validation scripts utilizing advanced SQL to audit data integrity, proactively identifying performance bottlenecks and architectural defects before production deployment.
- Containerized testing dependencies with Docker, ensuring environment parity between development, staging, and production environments.
- Collaborated on release readiness frameworks, providing actionable engineering insights that improved overall deployment stability and system reliability.
Functional Analyst & Deployment Specialist
Intesa Sanpaolo (Akodis)
Verona Area, Italy
2019 – 2023
- Orchestrated end-to-end deployment workflows for core banking applications using Jenkins CI/CD pipelines, ensuring strict adherence to banking compliance and zero-downtime release strategies.
- Managed high-availability production database operations (Oracle/SQL), leading critical migrations, data schema updates, and performance tuning for high-transaction banking systems.
- Automated environment provisioning and pre-deployment configuration checks, drastically reducing delivery friction and cutting feature time-to-market.
- Served as technical liaison coordinating between Dev, Operations, and Business stakeholders to manage controlled financial software rollouts and maintain service continuity.
Technical Skills
Observability & Telemetry
Cloud & Infrastructure
DevOps & CI/CD
Systems & Networking
Databases & Storage
Programming
Courses & Certifications
AWS Certified Solutions Architect – Associate
Amazon Web Services
Professional certification validating expertise in designing distributed, highly available systems on AWS.
Kubernetes Fundamentals
Self-Learning / Linux Foundation
Container orchestration, Deployments, Services, Ingress, Helm charts, and cluster management.
Terraform — Infrastructure as Code
Self-Learning
IaC fundamentals, AWS provider, reusable modules, remote state management via Terraform Cloud.
Fundamentals of Database Engineering
Udemy
Deep-dive into database internals, ACID transactions, indexing strategies, partitioning, and replication.
TryHackMe & Hack The Box
Self-Learning
Active self-training in cybersecurity: Linux privilege escalation, container escape techniques, network forensics, and CTF challenges.
Featured Projects
Infrastructure / Sandbox
AWS Multi-Account Infrastructure Lab
Production-grade modular Terraform architecture for a highly available multi-account AWS environment — AWS Organizations, IAM Identity Center SSO, VPC peering mesh, EC2 Auto Scaling with Launch Templates, RDS Multi-AZ with automated failover, S3 lifecycle policies, and least-privilege IAM role management with SCPs. Full IaC state management via Terraform Cloud.
Infrastructure / Sandbox
GitOps CI/CD Pipeline with Security Scanning
End-to-end GitOps pipeline built with GitHub Actions: automated testing, Docker image build & push to ECR, Trivy vulnerability scanning, Helm chart deployment to a local K3s Kubernetes cluster, and ArgoCD-driven continuous delivery with automatic health checks and rollback on failure.
Infrastructure / Sandbox
OpenTelemetry Observability Stack
Full observability pipeline built from scratch: OpenTelemetry Collector ingesting logs, metrics, and traces from containerized workloads, exporting to Prometheus (metrics), Loki (logs), and Jaeger (traces), visualized via Grafana dashboards. Custom alerting rules and automated runbooks for incident response. Deployed on Docker Compose with production-ready retention policies.
NetConnect Pro Console
Enterprise-grade Windows desktop application for unified RDP session management and multi-protocol VPN orchestration (Cisco AnyConnect, FortiClient SSL VPN, Palo Alto GlobalProtect, Citrix, ZyXEL, OpenConnect). Features real-time telemetry graphs (CPU/Memory/latency), DPAPI-encrypted credential vault, smart VPN-to-RDP workflow automation, and Grafana-style session analytics. Built on a Python-JS Bridge (pywebview + React/Vite). v2.1.0
HomeHub — Smart Home Platform
Self-hosted full-stack smart home platform featuring real-time dashboard, Tuya IoT smart device control, live weather integration, calendar & task management, expense tracker, meal planner, and inventory manager. Built with Next.js 14, TypeScript, Tailwind CSS, and server actions. Deployed and live.