Platform Engineer | DevOps Engineer

Iurie Plesu

AWS · Kubernetes · Terraform · GitOps · Agentic AI

Download PDF
Chicago, IL plesu.iurie@gmail.com 708-549-5383 linkedin.com/in/iurie-plesu iurie-plesu.com U.S. Citizen · No sponsorship required

Summary

Platform Engineer with 5+ years building and owning production AWS platforms. Takes infrastructure changes from design through implementation and ongoing operation, with responsibility for Kubernetes reliability, delivery controls, and cloud cost. Builds shared Terraform and GitOps foundations that give developers self-service while preserving clear production ownership across CloudOps and SRE teams.

Experience

Platform Engineer - Kensium · Chicago, IL

May 2023 - Present

AWS platform engineering, Kubernetes operations and production delivery.

  • Own AWS and Kubernetes platform operations across eight Terraform-managed EKS clusters (4 production, 2 staging, 1 development, and 1 sandbox), maintaining runtime reliability for services backed by RDS PostgreSQL and ElastiCache Redis.
  • Reduced compute costs by approximately $360,000 annually, based on team AWS billing results, by replacing Cluster Autoscaler with Karpenter and using Spot for eligible non-production workloads while retaining On-Demand for critical services. Reduced storage costs 20-30% with S3 lifecycle policies moving data to IA and Glacier tiers.
  • Decoupled application delivery from infrastructure provisioning by replacing Terraform-driven releases with GitHub Actions and Argo CD, enabling developer self-service in lower environments while retaining CloudOps and SRE controls for production.
  • Built durable order and inventory streaming between storefronts and ERP systems with Strimzi-managed Kafka in KRaft mode; added Kafka Exporter and Prometheus monitoring for visibility into streaming health.
  • Migrated application traffic from ingress-nginx to Gateway API through parallel validation and incremental cutover, consolidating routing and TLS ownership while reducing dedicated load balancers and preserving availability.

DevOps Engineer - Mindsight · Downers Grove, IL

Oct 2020 - May 2023

AWS infrastructure, automation and reliability across production environments.

  • Cut production AWS provisioning from approximately one day to three hours by standardizing VPC, IAM, EC2, S3, Route 53, load balancing, and remote state with reusable Terraform modules.
  • Replaced manual application releases with GitHub Actions CI/CD pipelines for AWS ECR and ECS/Fargate, enabling tested, repeatable deployments multiple times per week.
  • Improved production incident detection and diagnosis for ECS/Fargate services through CloudWatch dashboards and alarms that surfaced service failures earlier.
  • Replaced recurring manual Linux administration and operational checks with Bash automation, standardizing maintenance across production hosts.

Skills

Cloud

AWS, EC2, VPC/IPv6, S3, ECS/Fargate, ECR, RDS, Route 53, CloudFront, ACM, Lambda, DynamoDB, SQS, SNS, EventBridge.

Infrastructure as Code (IaC)

Terraform (modules, remote state), CloudFormation.

Kubernetes & Containers

Kubernetes, EKS, Karpenter, Helm, Docker, Gateway API, Kustomize, Cluster Autoscaler, HPA, VPA, Docker Compose.

CI/CD & GitOps

GitHub Actions, Argo CD, GitOps, Git, app-of-apps, sync waves, environment-specific deployments.

Observability & Reliability

Prometheus, Grafana, CloudWatch, Kafka Exporter, incident response, Alertmanager, PagerDuty, SLOs/SLAs, OpenTelemetry, distributed tracing, Prometheus Operator, kube-state-metrics, Node Exporter.

Logging & Search

Elasticsearch, Kibana, CloudWatch Logs, Fluentd, Loki.

Security

AWS IAM (least privilege), IRSA, Kubernetes RBAC, AWS Secrets Manager, TLS, cert-manager, network policies, mTLS, Kyverno, HashiCorp Vault, Secrets Store CSI Driver.

Networking

NGINX Ingress, AWS Load Balancer Controller, ExternalDNS, CoreDNS, VPC endpoints, EBS CSI Driver.

Data & Streaming

Kafka, Strimzi, KRaft, PostgreSQL, Redis, ElastiCache, MySQL, Kinesis, Aurora, DocumentDB.

Systems & Automation

Linux, Bash, Python, Ansible.

Agentic Engineering

Claude Code, Codex, Cursor, Model Context Protocol (MCP), custom agent skills, AGENTS.md/CLAUDE.md, plan-and-review gates, human-in-the-loop validation, context engineering, GitHub Copilot.

Certifications

Certified Kubernetes Administrator (CKA)

The Linux Foundation · Credential verified through Credly.

View credential

Certified Kubernetes Application Developer (CKAD)

The Linux Foundation · Credential verified through Credly.

View credential

AWS Certified Solutions Architect - Associate

Amazon Web Services Training and Certification · Credential verified through Credly.

View credential

Education

Academy of Economic Studies of Moldova (ASEM)Chișinău, Moldova | Bachelor’s Degree in Business Administration

Contact