Andrei Ghenea
Systems & DevOps Engineer — Cloud · Observability · Security
6+ years building and securing enterprise cloud infrastructure for Tier-1 clients. Specialist in AWS multi-account architectures, OpenTelemetry observability pipelines, GitOps CI/CD, and Kubernetes. AWS Certified Solutions Architect.
About Me
Professional Summary
Systems & DevOps Engineer with 6+ years of hands-on experience designing, automating, and securing cloud and hybrid enterprise infrastructures. I specialize in AWS multi-account environments, GitOps CI/CD pipelines, OpenTelemetry observability, and Linux/networking. Currently consulting for enterprise clients including Ferrari, BNL Group, and Verona Airport. Cloud & DevOps Engineer focused on building scalable, secure, and automated infrastructure for enterprise environments. Hands-on with AWS, Linux administration, scripting (Bash/Python), CI/CD pipelines, and database management.
Quick Info
Education
Bachelor in Computer Science
B.Sc. in Computer Science
Università degli Studi di Verona
Informatics Diploma
Finance and Banking College of Chisinau
Languages
Experience
Systems & DevOps Engineer
Digitronica.it
Verona, Italy
2024 – Present
- Architected multi-account AWS environments using AWS Organizations and IAM Identity Center, sustaining 99.9% availability for critical production workloads of Tier-1 clients including Ferrari, BNL Group, and Verona Airport.
- Engineered scalable, reusable Infrastructure as Code (IaC) modules using Terraform to standardize and accelerate environment provisioning across multiple client projects.
- Eliminated 40% of manual operational overhead by deploying custom Python and Bash self-healing automation frameworks for continuous monitoring, backup validation, and infrastructure tasks.
- Designed secure hybrid-cloud networking architectures configuring resilient Site-to-Site IPsec VPNs and SSL VPNs connecting on-premise enterprise systems to AWS.
- Led technical documentation and disaster recovery mapping, drastically reducing Mean Time to Resolution (MTTR) during incident responses.
DevOps & QA Automation Engineer
Samsung Electronics (Akodis)
Verona/Milan, Italy
2023 – 2024
- Bridged Development and Operations by integrating automated regression and data-validation suites directly into Jenkins and GitHub Actions CI/CD pipelines, accelerating release velocity.
- Designed complex backend validation scripts utilizing advanced SQL to audit data integrity, proactively identifying performance bottlenecks and architectural defects before production deployment.
- Containerized testing dependencies with Docker, ensuring environment parity between development, staging, and production environments.
- Collaborated on release readiness frameworks, providing actionable engineering insights that improved overall deployment stability and system reliability.
Functional Analyst & Deployment Specialist
Intesa Sanpaolo (Akodis)
Verona Area, Italy
2019 – 2023
- Orchestrated end-to-end deployment workflows for core banking applications using Jenkins CI/CD pipelines, ensuring strict adherence to banking compliance and zero-downtime release strategies.
- Managed high-availability production database operations (Oracle/SQL), leading critical migrations, data schema updates, and performance tuning for high-transaction banking systems.
- Automated environment provisioning and pre-deployment configuration checks, drastically reducing delivery friction and cutting feature time-to-market.
- Served as technical liaison coordinating between Dev, Operations, and Business stakeholders to manage controlled financial software rollouts and maintain service continuity.
Systems & DevOps Engineer
Digitronica.it
Verona, Italy
2024 – Present
- Architected multi-account AWS environments using AWS Organizations and IAM Identity Center, sustaining 99.9% availability for critical production workloads of Tier-1 clients including Ferrari, BNL Group, and Verona Airport.
- Engineered scalable, reusable Infrastructure as Code (IaC) modules using Terraform to standardize and accelerate environment provisioning across multiple client projects.
- Eliminated 40% of manual operational overhead by deploying custom Python and Bash self-healing automation frameworks for continuous monitoring, backup validation, and infrastructure tasks.
- Designed secure hybrid-cloud networking architectures configuring resilient Site-to-Site IPsec VPNs and SSL VPNs connecting on-premise enterprise systems to AWS.
- Led technical documentation and disaster recovery mapping, drastically reducing Mean Time to Resolution (MTTR) during incident responses.
DevOps & QA Automation Engineer
Samsung Electronics (Akodis)
Verona/Milan, Italy
2023 – 2024
- Bridged Development and Operations by integrating automated regression and data-validation suites directly into Jenkins and GitHub Actions CI/CD pipelines, accelerating release velocity.
- Designed complex backend validation scripts utilizing advanced SQL to audit data integrity, proactively identifying performance bottlenecks and architectural defects before production deployment.
- Containerized testing dependencies with Docker, ensuring environment parity between development, staging, and production environments.
- Collaborated on release readiness frameworks, providing actionable engineering insights that improved overall deployment stability and system reliability.
Functional Analyst & Deployment Specialist
Intesa Sanpaolo (Akodis)
Verona Area, Italy
2019 – 2023
- Orchestrated end-to-end deployment workflows for core banking applications using Jenkins CI/CD pipelines, ensuring strict adherence to banking compliance and zero-downtime release strategies.
- Managed high-availability production database operations (Oracle/SQL), leading critical migrations, data schema updates, and performance tuning for high-transaction banking systems.
- Automated environment provisioning and pre-deployment configuration checks, drastically reducing delivery friction and cutting feature time-to-market.
- Served as technical liaison coordinating between Dev, Operations, and Business stakeholders to manage controlled financial software rollouts and maintain service continuity.
Technical Skills
Observability & Telemetry
Cloud & Infrastructure
DevOps & CI/CD
Cloud & IaC
Systems & Networking
Databases & Storage
Programming & Scripting
Databases
Courses & Certifications
AWS Certified Solutions Architect – Associate
Amazon Web Services
Professional certification validating expertise in designing distributed, highly available systems on AWS.
AWS Certified Solutions Architect - Associate
Amazon Web Services
Professional certification validating expertise in designing distributed systems on AWS.
Fundamentals of Database Engineering
Udemy
Comprehensive course covering database internals, ACID, indexing, partitioning, and replication.
Java Microservices & Spring Boot, Spring Cloud & AWS
Udemy
Advanced microservices architecture with Spring ecosystem and AWS deployment.
Kubernetes Fundamentals
Self-Learning
Container orchestration, deployments, services, and cluster management.
Terraform — Infrastructure as Code
Self-Learning
IaC fundamentals, AWS provider, reusable modules, remote state management via Terraform Cloud.
Fundamentals of Database Engineering
Udemy
Deep-dive into database internals, ACID transactions, indexing strategies, partitioning, and replication.
TryHackMe & Hack The Box
Self-Learning
Infrastructure as Code fundamentals, AWS provider, reusable modules, and state management.
Featured Projects
Infrastructure / Sandbox
AWS Infrastructure Lab
Modular Terraform architecture for a highly available web application on AWS — VPC networking, EC2 provisioning with auto-scaling, RDS Multi-AZ, S3 lifecycle policies, and least-privilege IAM role management.
Infrastructure / Sandbox
CI/CD Pipeline Sandbox
End-to-end CI/CD pipeline built with GitHub Actions that automates testing, builds and pushes container images, and deploys to a local Kubernetes cluster (K3s) with automated security scanning and health checks.
Infrastructure / Sandbox
OpenTelemetry Observability Stack
Full observability pipeline built from scratch: OpenTelemetry Collector ingesting logs, metrics, and traces from containerized workloads, exporting to Prometheus (metrics), Loki (logs), and Jaeger (traces), visualized via Grafana dashboards. Custom alerting rules and automated runbooks for incident response. Deployed on Docker Compose with production-ready retention policies.
NetConnect Pro Console
IT management desktop app for RDP connections, VPN client management, Identity Vault for credential storage, and system health monitoring dashboard.
Home Manager App
Comprehensive home management solution with calendar, task management, expense tracking, weather integration, smart home control (Tuya devices), inventory management, and meal planning.