sannikov.tech

INDEPENDENT DEVSECOPS ENGINEERING

Ship confidently.
Build securely.

Security and reliability for the systems your business runs on. I find the weak links in your cloud, pipelines, and Kubernetes—and fix them at the root.

Discuss your infrastructure Explore services
Sergey Sannikov10+ years in production engineering
Production experienceAWSKubernetesCI/CDLinuxIdentityObservability

01 / SERVICES

Less exposure.
More control.

Focused engineering engagements with clear deliverables. Scope and price are agreed before work begins.

DELIVERY

CI/CD security audit

Find secrets in logs, risky triggers, excessive permissions, and weak links in the release pipeline.

  • GitHub Actions, GitLab, TeamCity, Jenkins
  • Prioritized findings and practical fixes
From $990Discuss
CLOUD IDENTITY

Cloud keys & IAM

Replace permanent credentials, restrict overbroad roles, and close unintended paths into your cloud.

  • Key exposure and permission review
  • Scoped roles and short-lived credentials
From $1,500Discuss
PLATFORM

Kubernetes hardening

Understand your cluster’s real exposure, then reduce it without losing sight of production workloads.

  • RBAC, network policies, pod security
  • Secrets, images, and workload isolation
From $2,000Discuss
EMAIL & DNS

Mail your customers trust

Reduce domain spoofing and fix authentication and transport policies that affect mail delivery.

  • SPF, DKIM, DMARC, MTA-STS, TLS-RPT
  • Written report and a verification pass
$290 + $29/mo monitoringDiscuss
ONGOING SUPPORT

Fractional DevSecOps

A senior engineer working directly with your team on the risks and reliability work that need an owner.

  • Architecture and incident follow-up
  • Reviews, automation, and mentoring
Monthly engagementDiscuss
START WITH THE PROBLEM

You don’t need
the perfect brief.

Tell me what you run, what concerns you, and what’s at stake. I’ll suggest a practical next step.

Start a conversation Usually within one business day

02 / PROVEN IN PRODUCTION

The work behind
the confidence.

Real problems, investigated and fixed. Case details are generalized to protect client confidentiality.

RESILIENCE / MAIL INFRASTRUCTURE

Back online after a datacenter outage.

Rebuilt a mail server from an idempotent setup, preserved critical keys, hardened access, and verified the service from outside the network.

OUTCOMEMail restored the same day.

No open relay. Clean blacklist checks.

CLOUD SECURITY / IDENTITY

Permanent cloud keys, replaced.

Traced an exposed key’s access, contained the risk, and moved CI agents to short-lived certificates and scoped roles.

OUTCOMENo long-lived keys on build agents.

Credentials with a defined lifetime.

DELIVERY / INCIDENT RESPONSE

Thirty pipelines, unblocked.

Found a silent parameter change introduced by a CI upgrade, corrected affected configurations, and reported the regression upstream.

OUTCOMEReleases resumed across teams.

Root cause identified and documented.

03 / SECURITY BY DESIGN

A small footprint.
Deliberate protection.

The same care starts here. This site keeps its architecture simple and lets the browser enforce clear boundaries.

Report a security concern

Encrypted connections

TLS 1.3 is supported. HTTP redirects to HTTPS, with HSTS instructing browsers to keep using secure connections.

HTTPS

Strict browser policy

Content Security Policy restricts executable code and resource origins. The site cannot be embedded in another page.

CSP

Locally served assets

Scripts, styles, and graphics come from this site. No third-party scripts, font services, or embedded widgets.

SELF

No tracking cookies

No accounts or tracking cookies. The optional domain check queries public DNS through Cloudflare directly from your browser.

MINIMAL

04 / TRY IT YOURSELF

Your domain.
A clearer picture.

Check public mail and DNS records for SPF, DKIM, DMARC, TLS policy, DNSSEC, and more. No sign-up. The queried domain is not sent to this site.

DOMAIN SECURITY CHECKPUBLIC DNS
Ready to inspect public DNS records.

Cloudflare DNS-over-HTTPS · An automated starting point, not a full audit.

05 / THE ENGINEER BEHIND THE WORK

Deep experience.
Hands on.

I’m Sergey Sannikov, a senior infrastructure engineer with 10+ years building and operating production systems.

I work across Linux, AWS, Kubernetes, delivery pipelines, and observability. I read source code, reproduce failures, and follow the problem through to a verified fix.

Explore my GitHub
PUBLIC, REVIEWED WORK

Fixes that go upstream.

Merged contributions to the tools engineers rely on in production.

KubernetesArgoSymfonyGoReleaser
Inspect the work

06 / LET’S BUILD SOMETHING RESILIENT

Make your next move
a secure one.

Share your stack, the problem, and your timeline. I’ll reply with a practical next step.

Let’s talk sergey@sannikov.tech