Skip to content
View leoleiden's full-sized avatar
💭
trying to premise
💭
trying to premise

Block or report leoleiden

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
leoleiden/README.md

Leonid Lachmann 👋

Building reliable infrastructure ☁️ | From scientific R&D to cloud-native systems 🧬


✉️ Connect with me:

LinkedIn Djinni DOU Email


🚀 About Me

Leonid Lachmann

I bring a 15-year foundation in scientific R&D automation. Since 2016, my work has centered on Drug Discovery—leading technical automation and managing massive datasets. This evolved into 5 years in the IT sector, including 3 years explicitly focused on DevOps engineering. Today, I apply this scientific rigor to build resilient, cloud-native systems—fully focused on DevOps and Platform engineering

🌐 Current Focus: Infrastructure reliability, Kubernetes optimization, scalable multi-cloud provisioning, and secure monitoring stacks.

🧪 Domain Expertise: High-throughput screening pipelines, large-scale database management, and research workflows.

💬 Ask me about: Multi-stage Docker environments, Helm templating, and automated ETL pipelines.

🔍 Looking For: Open to challenging engineering roles across all industries, with a particular interest in high-load systems, BioPharma, MedTech, and MilTech.



🛠️ Technical Stack

Category Technologies
Cloud & PaaS AWS Azure GCP Render
Containers & IaC Docker Kubernetes Helm Terraform
CI/CD GitHub Actions GitLab CI Jenkins
DataOps & ETL/ELT Apache Airflow Airbyte Apache Kafka KNIME
Monitoring Prometheus Grafana VictoriaMetrics
Linux Ubuntu Debian Red Hat Oracle
R&D & Scientific CDD Vault Instant JChem MATLAB Wolfram
Languages & DBs Python Bash PostgreSQL MySQL

🏗️ Highlighted Projects & Lab Contributions

  • AWS Scalable ECS Cluster via Terraform — Provisioned a highly available, serverless web infrastructure on AWS utilizing a modular Terraform architecture. Orchestrated zero-management container execution via Amazon ECS (Fargate), integrated encrypted Amazon EFS for persistent shared storage across tasks, and configured an Application Load Balancer (ALB) to ensure dynamic, cross-AZ traffic distribution for Nginx workloads.

  • Azure Infrastructure-as-Code: Django Deployment — Architected a modular Terraform Infrastructure-as-Code (IaC) solution to provision a secure Azure cloud environment for a Django application. Configured a remote state backend via Azure Blob Storage for collaborative workflows and automated zero-touch server bootstrapping using the Azure CustomScript VM Extension, enforcing strict network security with dedicated VNets and dynamic NSGs.

  • On-Premise Monitoring Stack (PoC) — Built a secure, scalable monitoring system using VictoriaMetrics, Grafana, and Node Exporter to monitor remote Oracle Linux instances. Integrated with system firewalls (firewalld) and enforced metric-scraping security with SELinux.

  • Event-Driven Extension Architecture — Executed a complete migration of the SelectionSK project to Google's Manifest V3 standard. Refactored persistent background logic into an event-driven model using modern Service Workers, ensuring high reliability and strict CSP compliance.

  • Production-Ready CI/CD & Kubernetes Deployment — Engineered an enterprise-grade GitHub Actions pipeline featuring dynamic matrix testing, concurrency control, and manual staging approvals for a Django application. Packaged the workloads and a stateful MySQL database into custom Helm charts for scalable Kubernetes orchestration, integrating ephemeral clusters for CI dry-runs and configuring HPA for automated resource scaling.

  • Production-Ready Django Dockerization — Containerized a monolithic Django application utilizing multi-stage Docker builds to significantly reduce final image size and enhance security. Configured dynamic Python base images, isolated dependency compilation, and executed build-time SQLite migrations to ensure the container is completely ready to serve traffic immediately upon startup.

  • Azure Container Deployment — Architected a cost-effective PaaS hosting solution. Built and pushed Docker images to Azure Container Registry (ACR), deployed the app to Azure Web Apps for Containers, and performed infrastructure QA via PowerShell scripts. Approved with Strong Mentor Feedback.

  • Terraform Remote State (Azure & OIDC) — Migrated local Terraform state to a secure remote backend on Azure Blob Storage. Implemented passwordless OIDC authentication via GitHub Actions for safe, collaborative Infrastructure as Code (IaC) management. Approved with Strong Mentor Feedback.

  • Advanced CI/CD Pipeline — Engineered a robust GitHub Actions workflow for a Django web app. Implemented Docker integration, Matrix testing (OS/Python), concurrency control, environment-specific secrets, and manual deployment approvals. Approved with Strong Mentor Feedback.

  • K8s Observability Stack: Prometheus & Grafana — Instrumented a web application to expose custom metrics and deployed the kube-prometheus-stack via Helm. Configured K8s ServiceMonitors for dynamic scraping and built custom Grafana dashboards using PromQL. Approved with Strong Mentor Feedback.

  • Kubernetes Helm Deployment — Packaged a Python web application into a custom Helm chart to enable modular, repeatable, and easily configurable Kubernetes deployments. Approved with Strong Mentor Feedback.

  • Kubernetes RBAC Security — Enforced least-privilege security in K8s workloads. Configured custom ServiceAccounts, Roles, and RoleBindings, successfully validating restricted API access from within the pod. Approved with Strong Mentor Feedback.


🔥 Always shipping code
⚙️ Automating everything
🧬 Science + DevOps brain combo

Pinned Loading

  1. production-ready-cicd-django production-ready-cicd-django Public

    Production-ready CI/CD pipeline & Kubernetes deployment (Helm) for a Django app via GitHub Actions. Features matrix testing, Dockerization, and environment gating.

    Python

  2. production-ready-django-docker production-ready-django-docker Public

    Containerized Django application demonstrating Docker best practices, multi-stage builds, and GitHub Actions CI integration.

    Python

  3. azure-terraform-django-deployment azure-terraform-django-deployment Public

    A professional IaC portfolio project demonstrating modular Terraform architecture, secure remote state management, and automated VM provisioning in Azure.

    Python

  4. aws-terraform-ecs-cluster aws-terraform-ecs-cluster Public

    A production-grade IaC portfolio project demonstrating a modular Terraform architecture to deploy a scalable, serverless containerized web application on AWS ECS Fargate, featuring persistent share…

    HCL

  5. aws_devops_task_6_deploy_storage aws_devops_task_6_deploy_storage Public

    Forked from mate-academy/aws_devops_task_6_deploy_storage

    PowerShell

  6. aws_devops_task_5_use_iam_roles aws_devops_task_5_use_iam_roles Public

    Forked from mate-academy/aws_devops_task_5_use_iam_roles

    PowerShell