David Berkoh

DevOps Engineer at Submittable (2024-08 – 2026-04)

Owned platform operations as DevOps/SRE lead, responsible for team growth, coaching, and OKR alignment.
Created reusable Terraform modules for GKE, AKS, OpenShift, IAM, networking, Cloud CDN, and Azure Front Door, reducing environment provisioning from days to under 60 minutes.
Migrated monolithic applications to microservices on GKE/AKS, implementing Istio service mesh, Apigee gateway, and Helm-driven blue/green and canary deployments.
Architected event-streaming infrastructure using Confluent Kafka and GCP Pub/Sub, with DLQ, retry logic, and Schema Registry governance.
Standardized CI/CD with Jenkins Groovy shared libraries and GitHub Actions, embedding SAST/DAST via SonarQube and Checkmarx.
Improved MTTR through Prometheus, Grafana, and Elasticsearch/ELK observability stacks.
Maintained cloud-hosted infrastructure and application services supporting business-critical workloads across Azure and GCP environments.
Automated deployment, configuration, and operational support processes using Python, Bash, Terraform, and Azure DevOps pipelines.
Developed operational documentation, deployment procedures, and support runbooks for infrastructure and application services.
Participated in disaster recovery validation exercises and infrastructure resilience testing to ensure business continuity.

Cloud Engineer at Apex Alliance Technologies (2022-06 – 2024-08)

Maintained Jenkins pipelines using declarative syntax and Groovy shared libraries for Java, Python, and Go services, with automated security gates via SonarQube and Snyk.
Containerized applications and managed Helm releases, enforcing image governance through Artifactory and image scanning in CI.
Monitored and maintained cloud infrastructure services, ensuring platform availability, performance, and security compliance.
Supported backup validation, disaster recovery testing, and operational readiness activities for production systems.
Automated operational workflows and deployment activities through scripting and infrastructure-as-code practices.
Collaborated with development, QA, and operations teams to improve software delivery and platform reliability.
Implemented Apache Kafka producers/consumers for async inter-service communication, using Schema Registry for data contract enforcement.
Hardened production with patch automation, backup/DR testing, and Ansible-driven configuration management.
Deployed Prometheus, Grafana, and Elasticsearch/ELK stacks to establish end-to-end observability, set up SLOs/SLIs, and reduce MTTR for production incidents.
Managed Kubernetes clusters on AWS EKS, applying Helm-based GitOps workflows with ArgoCD for consistent, auditable deployments.

Linux System Administrator at Chromehive (2020-09 – 2022-05)

Managed Linux servers on Ubuntu and CentOS, handling OS installation, patching, upgrades, and performance tuning with Bash and Python scripts to reduce manual admin time.
Automated infrastructure provisioning and configuration using Terraform and Ansible, ensuring repeatable environments and consistent security baselines.
Implemented security hardening with UFW/firewalld, SSH key authentication, fail2ban, and centralized patch management to meet compliance standards.
Built monitoring and alerting with Prometheus, Grafana, and CloudWatch to track system health, catch performance issues early, and improve incident response.
Supported CI/CD pipelines in Jenkins and GitLab CI, automating builds, tests, and deployments for internal tooling and infrastructure code stored in Git.
Collaborated on infrastructure upgrades and cloud migrations, documenting changes in Confluence and tracking work through JIRA/ServiceNow while resolving complex system issues with the team.

About