SENIOR DEVOPS ENGINEER · ISRAEL

I build reliable infrastructure and the automation behind it.

Thirteen years across enterprise IT, Linux, cloud operations, and automation. I focus on reliable delivery, infrastructure automation, and developer productivity, with hands-on projects in AI and agent tooling.

Explore my experience Contact on LinkedIn
Platform engineering Secure automation CI/CD & observability
PROFESSIONAL EXPERIENCE

From operating systems to improving how teams deliver.

My background spans enterprise IT, Linux administration, cloud operations, and platform engineering.

APRIL 2022 — PRESENT

Senior DevOps Engineer

CyberArk

I work across cloud infrastructure, infrastructure as code, CI/CD, and internal developer platforms. My practical toolkit includes AWS, Terraform, Jenkins, GitHub, Datadog, and Grafana.

Infrastructure automationReliable deliveryObservability

  1. CloudOps / Automation Engineer · Imperva

    February 2020 — April 2022

  2. Linux System Administrator · SQream Technologies

    October 2018 — February 2020

  3. QA Engineer · Imperva

    February 2018 — October 2018

  4. IT Engineer / System & Technical Support · Elbit Systems

    May 2013 — February 2018

SELECTED INDEPENDENT PROJECTS

Engineering beyond the day job.

Personal study and own-use projects exploring security boundaries, automation, and maintainable systems. Maturity is stated per project; employer work is separate.

01

MCPatch

Experimental · pre-alpha

A capability broker that lets agents use authenticated browser sessions through named, typed, origin-bound tools—instead of unrestricted browser automation.

RustTypeScriptMV3Policy
CORE PROOF Permission ceilings, single-use approvals, lifecycle revocation, and audit-safe logging.
02

Kimi Chart

Personal-use system

A human-in-the-loop trading platform coordinating market data, strategy checks, Telegram workflows, and approved paper orders.

PythonFastAPIPostgresNext.js
CORE PROOF Immutable decision data, freshness checks, automated validation, and one order-authority writer.
03

portctl

Prototype · scope under review

A developer-tooling exploration of versioned Port.io configuration and reviewable changes from a terminal or CI workflow.

PythonPydanticTyperCI
CORE PROOF Desired-state configuration and change previews are the focus. Feature completeness and a public release are not established.
04

Namlog

Historical TestFlight beta

Food and hydration logging with wearable context and an AI-assisted coach. Nutrition calculations stay deterministic, with catalogue facts distinguished from AI estimates.

iOSPostgresWHOOPApple Health
CORE PROOF TestFlight beta releases in August 2026 and deterministic nutrition calculations. Current availability is unverified.
ENGINEERING CASE STUDIES

The decisions behind the systems.

Two examples of how I define boundaries, handle failure, and balance automation with control.

MCPatch

Give agents useful access with explicit authority.

Problem
An authenticated browser session gives an agent access to far more than a single task requires. The engineering problem is to expose useful actions while keeping permissions inspectable.
Constraints
Work with existing sessions; bind actions to the intended origin; keep consequential actions subject to approval.
Decision
Separate the Rust bridge from the TypeScript browser runtime. Expose named, typed capabilities with schema validation, permission ceilings, single-use approvals, and lifecycle revocation.
Result & scope
An experimental capability broker with explicit permission boundaries and a documented threat model. This is personal engineering work; production adoption and an independent security audit are not claimed.
Tradeoff
Capability definitions and adapters require maintenance, but make authority narrower and easier to review than unrestricted browser control.
Kimi Chart

Keep data, decisions, and order authority separate.

Problem
A workflow joining market data, scheduled analysis, messaging, and order submission needs clear behavior when inputs are stale or services fail.
Constraints
Self-hosted operation, asynchronous updates, freshness requirements, and human approval for paper-order execution.
Decision
Use explicit service boundaries and immutable decision data. Validate freshness before acting, keep order authority with one writer, and separate analysis from human-approved paper orders.
Result & scope
A personal-use decision platform connecting data, validation, and approval workflows. It demonstrates integration and operational control; investment performance and commercial adoption are not claimed.
Tradeoff
More explicit state and service boundaries add coordination work, while making retries and authority easier to reason about.
HOW I WORK

From vague need to operated system.

I start with the operational constraint, make ownership clear, and keep the first delivery small enough to inspect and maintain.

  1. 01

    Find the real constraint

    Start with the operational pain, actors, authority boundaries, and failure cost.

  2. 02

    Make the contract explicit

    Turn hidden assumptions into typed tools, schemas, state transitions, and permissions that can be inspected.

  3. 03

    Ship the narrow path

    Deliver one useful end-to-end path, instrument it, then expand from observed behavior rather than speculation.

  4. 04

    Own the production loop

    Deployment, observability, backups, approvals, and recovery are part of the product.

FOR RECRUITERS, HUMANS & AGENTS

One identity. Multiple readable formats.

Use the rendered profile if you are browsing. Use the structured endpoints if you are evaluating fit, collecting evidence, or building a shortlist.

/cv.mdConcise Markdown CV /cv.jsonStructured identity and evidence /llms.txtSite map for language models /cv.pdfDesigned two-page CV
role-fit.preview evidence based

Engineering focus

  • CoreDevOps & infrastructure automation
  • CoreCloud / platform operations
  • CoreCI/CD & developer tooling
  • ProjectsAI integrations & MCP
Honest limitation This profile separates demonstrated evidence from areas of interest. It does not invent a match.
Contact me
CONTACT ME

Let’s talk infrastructure.

Have a Senior DevOps or platform engineering opportunity, or a technical question about my projects? Reach me on LinkedIn.

Nir Vaknin · Senior DevOps Engineer · Israel

Message me on LinkedIn Read my CV
PROFILE ONLY

Ask Nir's profile

Profile assistant
Ask how Nir builds projects, approaches architecture, and weighs tradeoffs—or explore his experience and role fit. I use curated professional evidence and say when something is an interpretation.
Profile evidence only · no tools · no actions