Roman Tsyrenzhapov
Roman Tsyrenzhapov

Roman Tsyrenzhapov

Senior DevOps / SRE

High-load edge & CDN infrastructure · bare metal at scale · ClickHouse

Pattaya, Thailand (UTC+7) · Remote · Open to relocation

Infrastructure engineer with 10+ years running high-traffic ad-tech infrastructure on bare metal: a 120+ server fleet, a self-built nginx CDN with GeoDNS, a 65-node Go edge layer and a 33-node ClickHouse cluster. Ansible expert, Kubernetes/GitOps practitioner; Python, Go and PHP for services, automation and tooling.

Open to full-time remote roles and long-term contracts.

Email me Download CV (PDF) GitHub
10+ years in production ops
120+ bare-metal servers under Ansible
3B+ ad impressions/day on the platform I run
65 Go edge nodes + 7 CDN nodes
33 ClickHouse nodes (11 shards × 3)

Experience

ASG — ad-tech platform (ad rotation & mediation, OpenRTB)

DevOps Engineer · Sep 2015 — present

  • Own the company’s Ansible codebase (top contributor, 42% of commits) managing 120+ bare-metal servers across Hetzner and OVH.
  • Run the edge layer: 65 Go ad-server nodes behind nginx, serving a platform with 3B+ ad impressions per day.
  • Built and operate a self-hosted CDN on nginx (7 nodes) with GeoDNS on AWS Route 53 and ClouDNS: health checks, geo-routing, IPv4/IPv6; delivers ad creatives including video (VAST).
  • Tuned Linux and nginx for high load: BBR + fq, backlogs, conntrack, TIME_WAIT and buffers; reuseport, HTTP/2, HTTP/3/QUIC, TLS.
  • Operate a 33-node ClickHouse cluster (11 shards × 3 replicas, ZooKeeper) for ad-event data.
  • Object storage: moved from MinIO to Garage, with Backblaze B2 and Cloudflare R2 as external tiers; migrated media storage to B2.
  • Migrated edge storage from SSDB to Kvrocks; built tooling for the PostgreSQL 16 → 17 upgrade.
  • Moved DNS zones to code with DNSControl (Route 53 + Cloudflare); added gosec/govulncheck gates to the Go service CI.
  • Also develop the product’s billing domain (payouts via PayPal/Revolut, invoices, transactions, reporting) and ship my own releases through GitLab CI → Argo CD.

Independent DevOps practice — contract work for product teams and agencies

DevOps Engineer (contract) · 2017 — present

  • Built an HA k3s cluster across three Hetzner locations (3 control planes + 4 agents) with Terraform, Argo CD and Helm; ~25 production apps.
  • Run a 60+ server fleet with Ansible (23 roles); Zabbix monitoring for 67 hosts; VictoriaMetrics/Logs, Grafana, Alertmanager.
  • Self-hosted GitLab with Container Registry; CI/CD for 10+ projects; DNS as code for 69+ zones (OctoDNS → Cloudflare).
  • Containerized legacy systems (Bitrix24 On-Prem, PHP/Laravel) and moved databases to dedicated hosts.

Automation engineering — own products, Python / Go

Developer · 2017 — present

  • Built a commercial Telegram (MTProto) automation product: account pools, proxy rotation, auto-replies.
  • Maintain opentele-ng on PyPI; wrote a Telegram anti-spam bot in Go; scrapers with anti-bot handling (Playwright).
  • Built MCP servers for LLM agents: Yandex APIs (91 tools), Zabbix (Go), Aviasales.

Open source

telegram-antispam

Self-hosted Telegram anti-spam and moderation bot: detection cascade, CAS/LOLS blocklists, Bayesian filter, optional LLM. Single static binary, Docker/Helm.

Go · SQLite · Docker · Helm

zabbix-ai-cli-mcp

AI-first CLI and MCP server for Zabbix: current problems, host investigation, alert triage, maintenance windows. Bounded output; no change without human approval.

Go · Zabbix API · MCP

yandex-mcp

MCP servers for Yandex Search, Wordstat, Webmaster, Metrika and Direct — 91 tools, Claude Code plugin included.

Python · MCP

opentele-ng

Maintained fork of opentele: converts Telegram Desktop tdata ↔ Telethon/Pyrogram sessions. Published on PyPI.

Python · PyPI

gpt-web-gateway

OpenAI-compatible API on top of the ChatGPT web UI: chat completions, thinking modes, image generation. Runs in my k3s cluster.

Node.js · Playwright · Kubernetes

Merged upstream contributions

Skills

Linux & networking
Debian/Ubuntu, bare metal, Proxmox, systemd, sysctl/TCP tuning, BGP, nginx, Traefik, Caddy
CDN & DNS
nginx CDN, GeoDNS (Route 53, ClouDNS), Cloudflare, DNSControl, OctoDNS, HTTP/3
IaC & GitOps
Ansible (expert), Terraform, Argo CD, Helm
Containers
Docker, Kubernetes (kubeadm, k3s), Cilium, Velero, Vault
Data & storage
ClickHouse, PostgreSQL, MySQL, Redis, Kvrocks, Garage/MinIO, Backblaze B2, Cloudflare R2
Observability
Prometheus, VictoriaMetrics/Logs, Grafana, Alertmanager, Zabbix, Sentry
CI/CD
GitLab CI, GitHub Actions, gosec, govulncheck
Languages
Python, Go, PHP, Bash
Spoken languages
Russian — native · English — B2+

Contact

The fastest way to reach me is e-mail or Telegram. I reply within 24 hours, Bangkok time (UTC+7).

Email
stufently@gmail.com
Telegram
@stufently
GitHub
github.com/stufently
Location
Pattaya, Thailand · remote