Türkiye · 10+ years in IT

Barış Erenkara

Infrastructure & Platform Engineer

I run production infrastructure for a multi-tenant e-commerce platform serving international retail brands, and I own the full path from edge to application — pfSense and HAProxy at the perimeter, Kubernetes and VMware underneath, Zabbix and Elastic on top. AWS-certified, with a penetration-testing background and a record of turning noisy alerting into signal.

01 Technical skills

Cloud & virtualization

  • AWS (EKS, EC2, VPC, Route 53)
  • GCP
  • Hetzner
  • Netcup
  • VMware vSphere

Containers & orchestration

  • Kubernetes
  • kubeadm
  • k3s
  • Rancher
  • Docker
  • Compose
  • Helm
  • Coolify

Network & edge

  • pfSense
  • HAProxy (L4/L7)
  • stick-tables
  • Cloudflare WAF & CDN
  • IPsec VPN
  • split-horizon DNS
  • pfBlockerNG
  • BGP fundamentals

Observability

  • Zabbix
  • Elastic Stack & APM
  • Kibana
  • New Relic (NRQL, NerdGraph)
  • Grafana
  • Pingdom
  • ElastAlert2

CI/CD & automation

  • Azure DevOps
  • Azure Artifacts
  • Octopus Deploy
  • Jenkins
  • GitHub Actions
  • n8n
  • Git

Programming

  • Python (FastAPI, asyncio)
  • Bash
  • PowerShell
  • SQL
  • YAML/JSON

Data & messaging

  • MSSQL
  • PostgreSQL
  • MariaDB
  • MongoDB
  • Redis
  • Elasticsearch
  • RabbitMQ

Security

  • Penetration testing (OWASP Top 10)
  • WAF rule tuning
  • TLS/PKI
  • rate limiting
  • bot mitigation
  • hardening
  • PAM/access auditing

02 Experience

  1. Senior System Administrator / DevOps Engineer

    Inveon

    2022 — Present · Digital commerce & e-commerce platform provider

    • Own end-to-end infrastructure for a multi-tenant e-commerce platform serving international retail brands — pfSense/HAProxy edge, multiple Kubernetes clusters, on-premise VMware and AWS/GCP.
    • Designed and operate the HAProxy L7 layer: routing, TLS termination, CDN zones and stick-table rate limiting that cut abusive bot traffic without affecting checkout.
    • Cut false-positive incident alerts with a FastAPI service that correlates Zabbix and Pingdom signals before paging.
    • Own the observability stack: Zabbix 5.0 → 7.0 migration, Elastic APM, New Relic NRQL alerting, and automated weekly performance reporting via n8n.
    • Lead root-cause analysis on recurring production incidents across NopCommerce, Redis, MongoDB, HAProxy and payment gateways.
    • Hardened the Cloudflare WAF perimeter and ran a full penetration test of a UK storefront, producing 28 confirmed findings.
    • Unblocked daily releases by migrating the NuGet feed to Azure Artifacts and fixing chronic Azure DevOps pipeline failures.
    • Mentor junior engineers and act as the infrastructure counterpart for cross-functional delivery teams.

  2. System Specialist

    MNS Bilişim

    2020 — 2022 · Managed IT services

    • Installed, configured and troubleshot server, storage and networking equipment for enterprise clients.
    • Monitored production servers, managed backup and restore cycles, and ensured data integrity across client environments.
    • Escalation point for complex infrastructure incidents raised by first-line support.

  3. IT Specialist

    MNS Bilişim

    2011 — 2014 · Managed IT services

    • Delivered day-to-day IT support, managing service requests and resolving hardware, software and network problems.

03 Projects

Scully — agentic incident investigation

An AI agent that pulls context from monitoring platforms, correlates signals across them and produces draft root-cause analyses for on-call engineers.

  • Python
  • FastAPI
  • Claude API

Home lab — k3s behind pfSense

Self-managed k3s cluster on VPS, used to prototype ingress, split-horizon DNS and firewall topologies before they reach production.

  • k3s
  • pfSense
  • DNS
  • Ingress

Automation & data tooling

Python services and n8n workflows for reporting and API integrations, plus a Cloudflare Workers/D1 web project.

  • Python
  • n8n
  • Workers
  • D1

04 Certifications & education

Certifications

  • AWS Certified Cloud Practitioner Amazon Web Services · Jun 2023 – Jun 2026
  • Cisco CyberOps Associate Cisco
  • Cisco Certified Network Associate (CCNA) Cisco · Mar 2021 – Mar 2024

Education

  • B.Sc. Computer Engineering Eskişehir Osmangazi University · 2015 – 2020
  • Associate Degree, Computer Programming Istanbul Gelişim University · 2010 – 2012

Languages

  • Turkish Native
  • English Fluent (C1)

05 Get in touch

Open to conversations about platform engineering, reliability work and interesting infrastructure problems.

Email me LinkedIn Download CV