Aleksandr Letunov
DevSecOps & Platform Engineering Tech Lead
I built the IaC platform hundreds of repositories run on, and I build Claude Code agents for infrastructure work.
open to relocationMoscow · UTC+3
- 600repos on the platform
- 100+Ansible roles
- ~20CI components
- 12 · 31Claude Code plugins · skills
Selected work
A greenfield IaC platform that became the company standard
Built during my probation period, then adopted as the organisation's standard for service delivery.
An AI plugin marketplace for infrastructure engineers
Claude Code plugins for the team: Terraform modules in days instead of weeks, Ansible roles in a day instead of a week.
Managed Kubernetes on OpenStack
A fully managed Kubernetes service on the internal OpenStack cloud.
Monoliths to highly available Kubernetes
Mission-critical SCM, messaging and corporate SSO re-architected as highly available services.
Go services for platform operations
Load-balancer fleet API: a day-long approval became one API call. Uploader rewrite: 2–3 minutes to 30 seconds.
Granular Vault scope migration
One broad CI Vault token replaced by a least-privilege scope for each Ansible role.
AI & Claude Code
I use Claude Code as an everyday engineering tool, not a chat window. I built and maintain my team's plugin marketplace: skills, agents and MCP integrations that carry our standards for Ansible, Terraform, Go and CI. With them, a Terraform module takes days instead of weeks, and an Ansible role takes a day instead of a week.
12 plugins31 skills6 agentsin the team marketplace
How it fits my day
- Start of a change: clone every repository involved in one step, and agree a plan before any code changes.
- Writing: roles, modules and Go code start from the team templates, so review is about the change, not the layout.
- Before every commit: the same linters as CI run locally and fix what they can.
- Large rollouts: an agent that knows the estate helps design changes across many roles, which then roll out in small batches, with every pipeline run.
- Paperwork: tickets and commit trailers follow the team conventions without a checklist.
Plugins I use most
ansible
dailyCreate, check and test Ansible roles to the team's standard.
New roles start from the standard layout (detect, install, configure, update; prefixed variables; fully qualified modules). Existing roles are checked and auto-fixed before review, and molecule test suites are scaffolded role by role. The agent helps design changes that span many roles and hosts.
role-creatorrole-checkermolecule-scaffolderansible-engineer
pre-commit
dailyInstall and run the team's containerised linters.
Runs ansible-lint, yamllint, terraform fmt, tflint and JSON/YAML checks in the same container image as CI and fixes what it can, so lint failures show up on my machine instead of in a shared pipeline.
pre-commit-installerpre-commit-runner
jira
dailyWrite tickets to the team's conventions.
Turns a piece of work into an epic and tasks with the required structure and content, and links them to commits and merge requests through commit trailers.
jira-tickets
terraform
Scaffold config-driven Terraform modules and providers.
New modules follow the team's YAML-driven layout with input validation, and new providers use the Terraform Plugin Framework. This is where delivering a Terraform module went from weeks to days.
module-creatorprovider-creatorterraform-engineer
golang
Idiomatic, tested Go for services and CLIs.
Scaffolds Go services and CLIs, writes table-driven tests that run under the race detector, reviews code with the standard linters, and proves performance changes with benchmarks and profiles.
golang-patternsgolang-concurrencygolang-optimizationtestreviewscaffoldgolang-architectgolang-performancegolang-pro
glab
GitLab CLI setup and batch cloning.
Sets up the GitLab CLI on a new machine and clones whole groups or lists of repositories at once, the first step of any change that touches many repositories.
glab-installerglab-cloner
Public example: video-summary, a Claude Code plugin that turns a folder of camera footage into a summary video.
Claude Academy certificates
- Claude 101
- Claude Code 101
- Claude Code in Action
- AI Fluency: Framework and foundations
- Introduction to Model Context Protocol
- Model Context Protocol: Advanced topics
Open source
- ansible-openwrt
Ansible collection for automative configuration of OpenWrt devices (without Python).
- terraform-proxmox-compute
Configuration-driven Terraform module for Proxmox VE: QEMU VMs cloned from templates, LXC containers, resource pools and cloud-init snippets, driven by a single terraform.yml. Idempotency verified against PVE 9.2.11.
- video-summary
Claude Code plugin that turns a folder of camera footage into a summary video
- flyoverhead.k3s
Ansible collection for k3s cluster deployment and management
- flyoverhead.docker
Ansible collection for deployment and configuration of Docker services
- flyoverhead.server
Ansible collection for remote server configuration
- flyoverhead.macos
Ansible collection for macOS workstation configuration
- flyoverhead.hosting
Ansible collection for VPS hosting provider APIs
- keenetic
Ansible role for Keenetic (Entware) routers: SSH/dropbear, opkg packages and repos, cron, and an optional xray transparent proxy via TPROXY and an ndm netfilter hook.
Experience
DevOps Tech Lead · Positive Technologies
May 2025 – now · team of 4
Lead a team of 4 engineers on IaC architecture and drive AI adoption in DevOps workflows.
DevOps Engineer · Positive Technologies
Nov 2023 – May 2025
Built the organisation's IaC platform from scratch and moved corporate services from monoliths to Kubernetes.
DevOps Team Lead · RusBITech-Astra
Apr 2023 – Oct 2023 · team of 8
Led and grew a unit of 8 engineers responsible for CI/CD, environments and infrastructure as code.
Senior DevOps Engineer · RusBITech-Astra
Apr 2022 – Apr 2023
Automated the product lifecycle and ran core engineering services.
Before infrastructure
2009 – 2022
Product and project management, presales, five years in AML/CFT compliance, and two businesses of my own.
Tambov State University named after G.R. Derzhavin · Economist, Economics · 2004 – 2009
Stack
- Languages
- GoPythonBash
- Platforms
- KubernetesOpenStackAWSVMwareCephLinuxWindows
- Infrastructure as code
- Terraform / OpenTofuAnsiblePackerFlux
- Delivery & security
- GitLab CIVaultPrometheus / Grafana