# Nir Vaknin

Senior DevOps Engineer

Israel · [LinkedIn](https://www.linkedin.com/in/nir-vaknin-85736289) · [GitHub](https://github.com/vaknir)

## Profile

Senior DevOps Engineer with 13 years of progression from enterprise IT and Linux operations into cloud automation, developer platforms, and independent AI tooling. Currently a Senior DevOps Engineer at CyberArk. Builds the connective layer between an unclear operational need and a reliable system: discovery, architecture, integrations, guardrails, deployment, observability, and iteration.

## Experience

- **Senior DevOps Engineer, CyberArk** — April 2022 to present
- **CloudOps / Automation Engineer, Imperva** — February 2020 to April 2022
- **Linux System Administrator, SQream Technologies** — October 2018 to February 2020
- **QA Engineer, Imperva** — February 2018 to October 2018
- **IT Engineer / System & Technical Support, Elbit Systems** — May 2013 to February 2018

## Selected systems

### MCPatch — Safe capability broker for AI agents

- Built a capability broker that exposes authenticated browser sessions through named, typed, and origin-bound tools instead of unrestricted browser automation.
- Implemented schema validation, permission ceilings, risk classes, single-use approvals, lifecycle revocation, and audit-safe logging.
- Rust bridge with a TypeScript/MV3 runtime and adapters for Jira, TradingView, Reddit, X, and Google Flights.

### Kimi Chart — Human-in-the-loop trading decision platform

- Self-hosted platform scanning market data and coordinating market data, validation, Telegram workflows, and human-approved IBKR paper orders.
- Uses explicit services, immutable data models, freshness checks, and safety gates with one order-authority writer.
- Python, FastAPI, SQLAlchemy/Postgres, APScheduler, Next.js/React, Docker.

### portctl — GitOps developer-tooling prototype

- Explores Git-based desired state for Port.io configuration and reviewable changes.
- Feature completeness and public release are unverified; planned features are not presented as shipped.

### Namlog — iOS nutrition and recovery-context app

- Built an iOS app combining food and hydration logging with WHOOP and Apple Health context, deterministic nutrition calculations, and an AI-assisted coach.
- Separates catalogue nutrition from AI estimates.
- Distributed beta builds through TestFlight in August 2026. Current availability, commercial adoption, and health outcomes are not established.

## Capabilities

- AWS, Terraform, Jenkins, GitHub CI/CD, Datadog, Grafana, internal developer platforms
- Independent project work: AI agents, MCP, typed tool contracts, human-in-the-loop design
- Python, FastAPI, SQLAlchemy, Postgres, Docker, AWS, GCP, Linux, CI/CD
- Observability, Grafana, network security, permission design, schema validation, backups

## Engineering approach

Nir has explicitly prioritized architecture before large implementation, small functions and files, test-driven development, security checks, documentation, and versioning. Across the selected projects, a recurring pattern is explicit ownership, validated inputs, and controlled state changes. This is a synthesis of professional preferences and project evidence. Exact project origin stories and private motivations are not established.

[Professional approach and project Q&A](/approach.json) includes specific examples and their evidence limits.

## Education and languages

- Software Engineering, ORT Rehovot College, 2008–2010
- Hebrew and English

Last updated: 2026-10-15

[Engineering case studies](/case-studies.json): MCPatch permission boundaries and Kimi Chart service and order-authority separation.