Yurii Serhiichuk

Own Travelshift's infrastructure end-to-end — platform, reliability, security, and developer experience.

• Cut multi-cloud spend ~65% — through cost-center tagging for cost visibility, right-sizing over-provisioned databases, Redis, and Kubernetes workloads, and consolidating databases into a single cloud.
• Led a four-years-stalled migration of a legacy monolith and microservices from AWS to GCP (GKE Autopilot), delivered in under 8 months with zero downtime — gradual 1%→100% traffic shifting and AWS DMS bidirectional database cutover.
• Lead the DevOps team and act as the company's go-to architect for new initiatives — driving cross-team solution design, architecture decisions, and code review across engineering teams.
• Operate a production multi-cloud platform end-to-end — AWS (EC2, VPC, load balancing, VPN/private links, S3, Route 53, IAM, RDS, ElastiCache, Fargate, Lambda, DMS) and GCP (GKE Autopilot across ~3 clusters of 60–120 nodes, Pub/Sub, Cloud Tasks, Workflows, Cloud SQL, BigQuery, Memorystore) — with Istio, KEDA, and cert-manager on Kubernetes, managed-Prometheus observability, and all infrastructure-as-code in Pulumi (TypeScript, migrated from Terraform) so any engineer can adjust infrastructure safely.
• Own the Fastly CDN and edge platform — reconfigured it end-to-end in VCL (console, CLI, and Pulumi/Terraform), with edge rate-limiting and routing, and ran Fastly as the single control plane for the zero-downtime AWS→GCP migration's cross-cloud traffic split.
• Rebuilt incident management on PagerDuty — from 2 high-priority services to full per-service, database, and cache coverage with automated alerting, escalation routing, and post-mortem workflows.
• Own the secure SDLC — automated security scanning (gitleaks, AI-assisted review) in CI and centralized secrets management across Doppler, Google Secret Manager, and AWS Secrets Manager.
• Drove org-wide adoption of AI-assisted engineering — standardized on Claude Code, rolled out automated AI code review, and built MCP integrations for internal systems.

• Built the company's first AI assistant — an interactive AI travel guide combining pre-processed itinerary data with LLM APIs.
• Replaced the Google Maps routing API with a self-hosted OSRM service (car, train, and foot routing across Iceland and Europe), later adopted company-wide for significant cost savings.
• Architected the AI/data-generation platform for tight cost control — every subsystem scales to zero or runs fully serverless (Cloud Run, Cloud Functions, GCP Workflows) on reusable Pulumi (Python) components.

Select client engagements alongside full-time roles — consulting on application development and cloud migration.

• AgencyEZ (US insurance platform) — ongoing architecture lead on AWS (Elastic Beanstalk, RDS, SQS, ElastiCache): Java/MySQL modernization, a from-scratch public API (OpenAPI), AI-powered document processing, an EDI-based carrier-reporting framework, and an offline encrypted enrollment app for restricted, no-internet environments.
• Built and operated a multi-year national serverless quiz platform for Università Bocconi (Cloud Run, Firestore, Flask, Angular) at near-zero idle cost.
• Led a team of 5 remote developers.

Lead developer for an image-processing cloud-based system.

• Lead engineer for a contract-only image-processing cloud platform — customer-facing, onboarding teams, and managing up to 5 engineers; architected on domain-driven design, event sourcing, and CQRS.
• Improved system architecture and infrastructure, leading to a 40% infrastructure cost decrease.
• Led the company through the GCP advantage-partnership journey, achieving Service and Build partnership.

Built and maintained billing and ordering systems for A1 Telekom Austria.

• Built and maintained A1 Telekom Austria's ordering & billing system (Java 7→8) on Tomcat/EJB with Apache Camel and Spring, integrating the Amdocs process manager.

• Co-built a Django/Python platform for automated mobile-app security assessment — pulling apps from connected devices, disassembling them, and running static threat-analysis tooling for the security team.