Cloud Support · Infrastructure Operations

I build reliable cloud systemsand make them easier to operate.

I am Vasil Khairutdinov, a bilingual infrastructure and operations professional based in Washington. I deploy, secure, document, and troubleshoot Linux services across GCP and Cloudflare.

See selected work Current availability

500+pages migrated to Cloudflare

~$0monthly static hosting cost

Nightlyverified off-site backups

Selected work

Infrastructure work with a clear operational result.

Three real projects covering deployment, migration, and security.

Production cloud deployment

A containerized service built to stay recoverable.

Deployed and operated a live web application on Google Cloud Platform with a Linux VM, Docker, PostgreSQL, and Caddy handling TLS at the edge.

Moved database credentials into GCP Secret Manager.
Automated nightly backups to Cloud Storage with MD5 integrity verification.
Documented operations and recovery steps in practical runbooks.

Stack

GCP · Linux · Docker · PostgreSQL · Caddy

Result

Reliable production service with managed secrets and verifiable backups.

Cloud migration and delivery

500+ pages moved to Cloudflare without carrying the old server bill.

Rebuilt a large website as a static Astro deployment, migrated its domain across registrars, and consolidated delivery through Cloudflare Pages, DNS, and CDN.

Configured DNS, TLS, and 301 redirects for a clean transition.
Validated propagation, HTTPS, and preservation of search-facing URLs.
Decommissioned the legacy VM only after off-site backups were verified.

Stack

Cloudflare Pages · DNS · Registrar · CDN · Astro

Result

Faster delivery and near-zero recurring hosting cost.

Infrastructure security hardening

Common bypass paths closed with fail-closed controls.

Hardened a production stack across host access, secret storage, proxy behavior, and inbound webhook authentication.

Locked down SSH and removed plaintext credential handling.
Corrected client-IP handling behind a trusted proxy for effective rate limiting.
Added RS256/JWKS verification for inbound OIDC webhooks.

Stack

SSH · Secret Manager · Rate limiting · OIDC

Result

Reduced credential, spoofing, and unauthenticated webhook risk.

Experience

Hands-on ownership from deployment to recovery.

Current role

Director & Technical Operations

American Russian Relief Center · Washington

Present

Deployed and operated a Dockerized Next.js and PostgreSQL service on GCP Compute Engine behind a Caddy TLS reverse proxy.
Implemented nightly off-site backups, integrity verification, centralized secrets, and documented recovery procedures.
Managed DNS and domain migration through Cloudflare and maintained a 500+ page static site on Cloudflare Pages.
Troubleshot production incidents across application, storage, networking, and security layers.
Reduced recurring cloud spend by safely decommissioning unused infrastructure after verification.

Capabilities

A practical infrastructure toolkit.

Cloud

Google Cloud Platform
Cloudflare Pages
Cloudflare DNS
Cloud Storage

Systems

Linux / Ubuntu
SSH administration
Docker
PostgreSQL

Networking

DNS
TLS / SSL
HTTP
Reverse proxy
Rate limiting

Operations

Incident response
Backup verification
Runbooks
Git
Bash

Education

Learning that connects systems and operations.

Edmonds CollegeCloud Computing / IT coursework · In progress

Institute of Social and Humanitarian KnowledgeBachelor of Jurisprudence · 2015

Next credentials

Focused certification path.

AWS Certified Cloud PractitionerIn progress

CompTIA Network+Planned

Availability

Open to Cloud Support, Data Center, and IT Operations opportunities.

A dedicated contact channel is being prepared for this portfolio. The project history and capabilities above are ready to review now.

Review selected work