Michal Kozák

DevOps guy

Curriculum vitæ

I have production experience with all three major clouds, running workloads almost exclusively on their Kubernetes distributions. These are packaged as Helm charts and deployed via Argo CD using GitOps.

Most of my time is spent writing Terraform or OpenTofu.

I know GitHub Actions best — its powers and limitations — but I've also spent a long time with GitLab.

I'm most comfortable in Python and currently working on my Go. I've dabbled with Rust, but it's still a bit over my head. Of course, I know Bash.

I leverage LLMs as a tool that lets me focus on finding the best solution rather than hunting for syntax. I identify with this post on Zed's Blog.

Certifications

Writing

Career

Keboola :(){:|:&};: s.r.o.

Cloud Infrastructure Engineer 11/2023 - present

Spearheading the transition to GitOps-based deployments using Argo CD, developing Helm charts, owning GCP (governance, cost management, improvements, etc.), providing expertise in GitHub Actions pipelines (infrastructure automation, build workflows, monitoring, etc.), working across all three major cloud providers, maintaining Azure DevOps pipelines, and prototyping a Kubernetes operator with a custom runtime for AI agents.

Career break

8/2023 - 10/2023

Taking some time off to refresh and spend with my family. Managed to get myself an AWS cert and help out on a small engineering project along the way.

Ataccama Software, s.r.o.

Cloud Platform Engineer 11/2020 - 7/2023

Developing and maintaining IDP stack in Azure, incl. self-hosted GitLab, Artifactory or Harbor. Go-to guy regarding CI/CD pipelines, build and release processes. Helm chart pipelines and development. Automation scripts in Python/Bash/Groovy, Docker image optimization, monitoring with Grafana and Prometheus/VictoriaMetrics, configuration as code using Terraform/Terragrunt, simple Gradle plugins.

GRIP Digital, s.r.o.

IT/System Administrator, DevOps 5/2019 - 11/2020

Do-it-all role, from desk-support to DevOps.

I've deployed backend for an unannounced project to Azure AKS, including NGINX Ingress or ELK. Later moving the same project to AWS EKS, utilizing AWS's NLB, CloudWatch, S3, and more. This includes setting up a CI/CD pipeline from TeamCity using Docker images.

I was also managing company's on-premise infrastructure, keeping inventory using Snipe-IT, and servicing a multitude of internal tools (Plastic SCM server, YouTrack, Upsource and other).

2media.cz, s.r.o.

IT Administrator 9/2012 - 11/2020

Point of contact for all employees. Mostly remote tech support on Windows and macOS machines.

Being PR agency and relying heavily on emails, I was managing an Ubuntu VPS with custom Postfix server, Let's Encrypt and OpenDKIM for them.

Universal Music, s.r.o.

IT Administrator, Digital Releases Manager 4/2010 - 4/2019

Provided tech support role for both Czech and Slovak branches. Also managed on-premise Windows server, with having a little to do with SCCM and AD.

Slowly moved into a digital releases manager, and being responsible for distributing everything digital incoming from any signed artist to services such as Spotify, Apple Music, YouTube, and more.

I also made lots of short Instagram or YouTube video spots using VEGAS Pro and Sony Sound Forge.