Oleksii Korotich
Technical Lead | Senior DevOps & Software Engineer
PROFILE
- Technical lead, senior DevOps and software engineer with deep hands-on experience building GitOps-based Kubernetes platforms, agentic AI tooling, and multi-cloud infrastructure (AWS, Azure, GCP, and on-prem).
- Hands-on in Python (FastAPI, async), CI/CD pipelines, testing, and performance work; comfortable owning systems end to end, from cloud substrate to AI layer.
- Analytical, a strong presenter, and calm and composed under pressure; runs Agile/Scrum delivery with tools like Jira.
HIGHLIGHTS
- Founded ClusterCraft and led it from a 2023 prototype to a multi-repo Kubernetes lifecycle and AIOps platform, shown at MWC 2024 and 2025 and demoed to prospective customers.
- Built the platform’s agentic AI layer (MCP servers, an OAuth2-secured gateway, and multi-agent orchestration), and advised on bringing AI agents into the SDLC.
- Spanned cloud and platform engineering from EPAM’s multi-cloud Maestro (AWS, Azure, GCP, OpenStack, VMware) to founding ClusterCraft and leading a 5-6 person DevOps team.
EXPERIENCE
GlobalLogic Ukraine,
Automation Engineer → Software Engineer → Technical Lead
AI Consulting,
AI Engineering Consultant (AI Agents & SDLC)
- Consulted on embedding AI agents and MCP-based tooling into the SDLC, translating agentic-platform experience (ClusterCraft) into the foundation for AI-enabling an active enterprise platform.
- Full-time one-month secondment from the ClusterCraft lead role.
ClusterCraft,
Technical Lead
- Founding engineer and technical lead of ClusterCraft, an internal GitOps-based, cloud-agnostic Kubernetes lifecycle-management and AIOps platform — my primary project since early 2024, leading architecture and implementation across its repositories and a 5-6 person DevOps team augmented by AI coding agents.
- Redesigned the platform for its Mobile World Congress 2025 showcase, growing a single GitOps demo monorepo into a multi-repo platform: a lifecycle-management core, GitOps fleet automation, a Helm chart suite, an AI gateway, and a distributed test framework.
- Designed the FastAPI lifecycle-management core on a hexagonal (ports/adapters) architecture: a FluxCD GitOps agent (apply and commit), a Kubernetes manager with port-forwarding, async task scheduling with retry semantics, and structured logging with secret filtering.
- Shipped the platform’s agentic-AI integration: custom Model Context Protocol (MCP) servers exposing cluster lifecycle-management and testing capabilities to agents, a centralized AI gateway secured by an OAuth2-based service, and a multi-agent orchestration model (routing, planning, and functional agents).
- Built a workload catalog of reusable “blueprint” meta-charts for arbitrary workloads — including a 5G suite (Open5GS 5G Core, UERANSIM RAN/UE simulation, free5gc) — plus a CNF-verification pipeline that provisions clean-room clusters, runs test batteries, and produces AI-analyzed reports, capable of standing up a full 5G Core with RAN and UE simulation.
- Built the platform auth stack on the Ory suite (Kratos, Hydra, Oathkeeper) behind a Backend-for-Frontend OAuth2 proxy, including a machine-to-machine OAuth2 broker implementing OIDC token exchange (RFC 8693).
- Delivered a distributed test-execution system on a control-plane-and-worker architecture, built out Azure provisioning (CCM/CSI, Key Vault, Container Registry, OIDC federated credentials) on a cloud-agnostic substrate portable to other major providers, and standardized CI across the project.
5G Lab,
Software Engineer
- Built and operated GlobalLogic’s internal 5G lab: Kubespray/FluxCD/Terraform cluster provisioning on Proxmox and Azure for 5G core/RAN workloads (Open5GS, UERANSIM, CBRS).
- Iterated the lab into the GitOps demo showcased at Mobile World Congress 2024, after which it was named and spun out as ClusterCraft (above).
PLM,
Software Engineer
- Backported features, bug fixes, and security updates to already-released product versions, delivered as diff-based, Ansible-driven automated update packages (concurrent with the 5G Lab role above).
Automation Engineer
- Developed Jenkins pipelines and application/integration Helm charts; researched and implemented a Helmfile-based alternative to integration charts.
- Supported the CI flow environment, built Docker images, and assisted application developers.
EPAM Systems, Inc.,
System Engineer / Build Engineer
Maestro (EPAM Cloud),
System Engineer, L3 Support Engineer
- Engineer on Maestro, EPAM’s hybrid and multi-cloud management platform that gives enterprises a unified entry point to public clouds (AWS, Azure, GCP) and private datacenters (OpenStack, VMware).
- Upgraded, reworked, and extended platform services, focused on the Auto-Configuration Service built on Chef Infra (Server and Client) for provisioning and configuring cloud and on-prem resources; extended provider integrations for AWS, Azure, GCP, and OpenStack.
- Performed L3 application support and incident handling under ITSM/ITIL processes, and contributed to presale activity.
Virtual Desktop Infrastructure,
Build Engineer
- Developed and supported a VDI solution based on Windows and Chef Infra (Server/Client), with PowerShell/Bash automation on OpenStack.
OpenShift Delivery Platform,
Build Engineer
- Deployed applications and performed platform updates on an OpenShift-based delivery platform; fixed issues across Gerrit, Jenkins, and OpenShift, and wrote and reviewed technical documentation.
ADDITIONAL EXPERIENCE
Dev.Pro,
Technical Support Engineer (part-time, on-call)
- Part-time member of a 24/7 on-duty engineering team keeping multiple client projects operational: incident response, root-cause identification, and service restoration (AWS, DigitalOcean, Prometheus, Grafana, Nagios, Windows Server, Linux).
Company under NDA,
System Administrator
- Sole system administrator for a 30-person company: workstations, networks, and telephony support, plus equipment purchasing and modernization.
Independent Consultant,
System Engineer (freelance)
- Occasional freelance engagements: remote data recovery from damaged servers, Microsoft RDS remote-desktop deployments, restoration and support of a library accounting system, and corporate networks built on UniFi and Mikrotik.
EDUCATION
PhD in Telecommunications and Radio Engineering (in progress),
Kharkiv National University of Radio Electronics
Master's degree in Telecommunications and Radio Engineering,
Kharkiv National University of Radio Electronics
Bachelor's degree in Telecommunications and Radio Engineering,
Kharkiv National University of Radio Electronics
Poltava Polytechnic College National Technical University "Kharkiv Polytechnic Institute",
Junior Bachelor's degree in Administration of Computer Systems and Networks
SKILLS
Cloud & infrastructure
- Kubernetes, cloud-agnostic architecture (ports/adapters; swappable cloud, GitOps, auth & observability components), multi-cloud (AWS, Azure, GCP) and hybrid/private cloud (OpenStack, VMware) management, Azure (Key Vault, Container Registry, Static Web Apps, CCM/CSI, OIDC federated credentials), Proxmox, Red Hat OpenShift
AI / agentic systems
- Custom Model Context Protocol (MCP) server development, MCP and AI gateways, multi-agent orchestration (routing + planner + functional agents), AIOps, agentic development & debugging workflows, AI coding assistants & AI code review (Claude, GitHub Copilot), intent-driven automation, self-healing systems
GitOps & IaC
- FluxCD (Flux operator + Kustomizations), Terraform, Ansible, Kubespray, Helm (chart authoring & release management), declarative infrastructure, drift detection, continuous reconciliation
Backend
- Python (FastAPI, SQLAlchemy async, Pydantic), PostgreSQL, Redis, async task scheduling & retry, hexagonal (ports/adapters) architecture
Auth & security
- OAuth2 / OIDC (RFC 8693 token exchange, dynamic client registration), Ory stack (Kratos, Hydra, Oathkeeper), BFF pattern, machine-to-machine auth
Observability & testing
- Grafana, Prometheus, Loki, ELK (Elasticsearch/Logstash/Kibana), distributed test frameworks, conformance/load/acceptance testing
5G / telco
- Open5GS, UERANSIM, free5gc, 5G Core (AMF/SMF/UPF/PCF/UDM/UDR), RAN simulation, CNF/VNF lifecycle & verification, OSS/BSS concepts
Frontend
- React, Vite, Ant Design, Figma-to-code, BFF integration, JWT/OAuth flows
Ways of working
- Technical leadership, Agile/Scrum delivery, issue tracking (Jira and similar), multi-repo platform architecture, release management, CI/CD automation (GitHub Actions), small-team delivery, AI-augmented engineering