Skip to content

Ilia Shakeri

DevOps Engineer · Linux · Automation · Observability

Profile

DevOps engineer focused on Linux infrastructure, container delivery, and monitoring. I provision and harden servers, package services with Docker Compose, build CI pipelines with security gates, and route Prometheus alerts to the people who act on them. Recent work includes Dolphin CRM and Nerkhbaan: two complete products I built and deploy with least-privilege databases, scripted rollbacks, and restore-tested backups.

Experience

DevOps Engineer · OTICAMP

Jun 2025 — Present · Tehran, Iran

  • Provisioned and hardened Linux VPS environments; Ansible playbooks keep server setup consistent between development and production.
  • Deployed a Prometheus, Grafana, and Loki stack for system metrics and logs.
  • Built ChatOps automation in n8n that routes Prometheus alerts and Jira events into Matrix rooms and direct messages.
  • Deployed and run Keycloak for centralized sign-in across internal services.

Product & Platform Engineering · Independent projects

2026 — Present · Remote

  • Dolphin CRM: a Django/PostgreSQL CRM shipped as versioned, tagged releases with Compose-based deployment, scripted rollback, and restore-verified backups.
  • Nerkhbaan: a FastAPI, TimescaleDB, and Redis platform with CI covering integration, browser, and image-scan gates, and Prometheus alerting, running on a live host.

Freelance DevOps & Linux Administrator · Self-employed

Dec 2024 — Jun 2025 · Remote

  • Wrote Bash automation for routine maintenance, backups, and log rotation.
  • Audited client servers; configured firewall rules and TLS certificates.
  • Tuned Nginx and Apache configurations, including reverse proxying and load balancing.

Selected projects

A Persian-first CRM/ERP for sales, billing, inventory, telephony, and after-sales. I built the application and the delivery around it: each installation runs as an isolated Compose stack whose features are switched by a signed manifest, behind an Nginx edge, with least-privilege PostgreSQL roles.

Feature availability comes from a manifest signed with an Ed25519 key that never leaves the platform owner. Production refuses to start if the manifest is missing, tampered with, or signed by an unknown key.

Django · PostgreSQL · Docker Compose · Nginx · Ed25519

A live gold, currency, and crypto price platform: FastAPI, PostgreSQL with TimescaleDB, and Redis behind an Nginx ingress, with web, admin, and desktop clients. Prices carry their source time and expire rather than going quietly stale.

CI on every push: locked Node builds, Python unit tests, a Go sidecar, Compose validation, browser end-to-end tests, repository security scans, and per-image Trivy scans.

FastAPI · TimescaleDB · Redis · GitHub Actions · Trivy · Prometheus

Prometheus & Jira → Matrix bridges

github.com/Ilia-Shakeri/n8n-prometheus-matrix-bridge

Two n8n workflows from my ChatOps work: one turns Alertmanager webhooks into readable HTML alerts in Matrix rooms, the other routes Jira assignments and @mentions to the right person’s Matrix direct messages.

Alertmanager posts to an n8n webhook; labels and annotations become a colour-coded firing/resolved message with a link back to the Prometheus graph.

n8n · Prometheus · Alertmanager · Matrix · Jira

Also: Stackplore (Go), Matrix User Manager (Bash), LinSecGuard (Bash), EasyCert (Bash), CipherCert (Python), SysTrack (Bash).

Technical skills

Linux & infrastructure
Linux, Ubuntu, CentOS, Alpine Linux, systemd, LVM, NFS, Terraform, Ansible
Containers & orchestration
Docker, Docker Compose, Docker Swarm, Kubernetes, Helm
Delivery & automation
GitHub Actions, GitLab CI/CD, Git, GitHub, n8n, GNU Bash, Make
Monitoring & observability
Prometheus, Alertmanager, Grafana, Loki, Elasticsearch, Logstash, Kibana
Web, network & security
Nginx, Apache, Traefik, Caddy, OpenSSL, Let's Encrypt, Keycloak, Trivy, UFW / iptables, Active Directory
Data & messaging
PostgreSQL, TimescaleDB, MySQL, MariaDB, Galera Cluster, Redis, SQLite, RabbitMQ, MinIO
Languages & frameworks
Python, Go, TypeScript, JavaScript, SQL, FastAPI, Django, Flask, SQLAlchemy, Pydantic, Gunicorn, React, Next.js, Node.js, Vite, Tailwind CSS, Electron, OpenAPI, pytest, Playwright, Selenium
Collaboration & ChatOps
Matrix, Element, Jira, Telegram Bot API, Asterisk / FreePBX

Education

B.Sc. Computer Science

In progress · since Oct 2026

Languages

Persian (native) · English (professional working)

Training

  • DevOps for Intermediates · CanDo IT Academy, Feb 2026 · ID 04/30289
  • DevOps for Beginners · CanDo IT Academy, Jul 2025 · ID 02/20889
  • LPIC-2 training course · TOSINSO, Jun 2025
  • LPIC-1 training course · CanDo IT Academy, Jan 2025 · ID 03/17758