Portrait of Shayan Gholami

Shayan Gholami

Senior DevOps / SRE Engineer

I run production platforms for telecom, banking and payments, and I've done it hands-on for 12 years in IT, 7+ of them in DevOps. That means bare-metal Kubernetes, CI/CD, and logging pipelines that take 10 TB+ an hour.

When something breaks, I can follow it all the way down: Kubernetes, Linux, Java application servers, Oracle and the network. These days I lead the Mobile Financial Services team at SAEI Group.

Experience

– now

MFS Team Lead · SAEI GroupCurrent

  • Lead day-to-day production support for Mobile Financial Services and payment platforms, covering application, database, infrastructure and integration issues.
  • Coordinate releases and high-risk changes with engineering, database, infrastructure and vendor teams, from pre-checks through execution, validation and follow-up.
  • Own root-cause analysis for critical incidents involving Java applications, Oracle, integrations, networking and dependent services.
  • Stay hands-on with database upgrades, environment migrations, automation, monitoring and platform changes.

Linux · Oracle · Java · Tomcat · WildFly · Kubernetes · GitLab CI/CD · Ansible · Bash · HAProxy · NGINX · Zabbix

–

DevOps Engineer · AZMA Espadana

  • Built and ran a Kubernetes platform with 5 VM-based control-plane nodes and 20 bare-metal workers, plus 2 spare servers for capacity and recovery.
  • Set up Ceph with RBD, CephFS and S3, giving stateful workloads block, shared-file and object storage on one platform.
  • Used Kafka as the buffer and replay layer for a logging pipeline peaking at 10 TB+ per hour, absorbing spikes and ending the log loss of the previous setup.
  • Tuned Elasticsearch with hot/cold tiers and ILM, and moved worker capacity from VMware vSphere to bare metal for better performance and stability.

Kubernetes · Cilium · Ceph · Kafka · Elasticsearch · Logstash · Zabbix · MongoDB

–

DevOps Engineer · Asre Danesh

  • Migrated production from Docker Swarm to Kubernetes for a mobile banking platform with 10M users.
  • Operated active/passive DR Kubernetes environments and simplified shared GitLab CI/CD logic, cutting deployment time by 40%.
  • Reworked centralized logging with Fluentd DaemonSets and Elasticsearch to handle 1 TB+ per day, with cleaner retention through ILM and index management.
  • Replaced NGINX Ingress with Kong, set up Velero/MinIO backups and namespace migration for DR, and hardened Linux and Kubernetes to pass an internal CIS-aligned audit.

Kubernetes · Docker Swarm · Helm · GitLab CI/CD · SonarQube · Fluentd · Elasticsearch · Kong · HAProxy · Velero · MinIO

–

DevOps Engineer · Irancell Labs (MTN Irancell)

  • Ran Kubernetes operations and production delivery for MyIrancell, serving 20M+ users on a 23-node cluster (3 control-plane, 20 workers).
  • Built and maintained GitLab CI/CD pipelines, including an air-gapped deployment flow through Nexus Repository for restricted environments.
  • Deployed WSO2 API Manager on Kubernetes with Helm and supported its upgrades, ELK logging, troubleshooting and on-call incidents.

Kubernetes · NGINX Ingress · GitLab CI/CD · Helm · Nexus Repository · WSO2 API Manager · ELK · Python

–

DevOps Engineer & Application Support · 6D Technologies

  • During Log4Shell, applied WAF mitigation first, then automated Java and Tomcat upgrades with Ansible; full remediation was done in under a week.
  • Automated recurring patch, upgrade and migration work, standardized application-server configuration and applied Tomcat CIS hardening.
  • L3 engineer for payment-gateway production: Tomcat/WildFly administration, deployments, infrastructure troubleshooting, database coordination and incidents.

Linux · Ansible · Java · Tomcat · WildFly · Oracle · WAF

–

Linux Administrator · SAEI Group (Echarge)

  • Operated Linux infrastructure for Irancell Mobile Financial Services, the payment gateway and merchant-facing API platforms.
  • Wrote Bash tooling for monitoring, log rotation, alerting and release checks, and handled L2 on-call for Tomcat applications backed by Oracle.

Linux · Bash · SQL · Tomcat · Zabbix · Oracle

Earlier

–

Linux Administrator · Telc (VoIP)

Ran a 24/7 MCI VoIP platform on fewer than 20 servers under a 98% SLA; monitored with Zabbix and debugged packet and service issues with tcpdump and Bash.

–

Linux Administrator / L3 Support · ZTE-Soft (RighTel CRM)

L3 production support, component updates, Oracle SQL*Plus maintenance, monitoring and incident response.

–

NOC Operator · Sahand Parsian Group (for RighTel)

Watched telecom network and site alarms in a 24/7 NOC with Zabbix and PRTG; investigated and escalated infrastructure incidents.

Expertise

Platform
Kubernetes, Docker, Docker Swarm, Helm, Cilium, Calico, Ceph, VMware vSphere, Linux
CI/CD & automation
GitLab CI/CD, Ansible, Bash, Python, Nexus Repository
Observability & data
Elasticsearch, Kafka, Logstash, Fluentd, Zabbix, MongoDB, Oracle
Networking & APIs
TCP/IP, DNS, HAProxy, NGINX, Kong, WSO2 API Manager
Reliability & security
Disaster recovery, incident response, on-call, Kubernetes RBAC, CIS hardening, performance tuning

Education

B.S. Electrical Power Engineering
Islamic Azad University, Damavand · 2009⁠–⁠2015
LPIC-1
Litec-Sharif · 2014
Network+, CCNA, CCNP
Kahkeshan-Noor

Languages

Farsi
Native
English
Proficient