Portrait of Oleksandr Ivanitskyy
Available for opportunities

Oleksandr Ivanitskyy

Senior Software Engineer | Cloud Architecture | Event-Driven Systems | Ex-Amazon Ex-Nexthink | AWS certified

Madrid, Spain

Backend, infra, and everything between commit and production.

Main Stack

AWSJavaKafkaKubernetesTypeScript

About Me

I'm a full-cycle software engineer: I write the feature and the pipeline that gets it to production. On product teams the job doesn't stop at the PR. You also own the infra, the deploys, and how the team builds.

I've worked with event-driven architectures (Kafka) and large-scale data import/export pipelines: converting formats and shipping them to S3, Azure Blob Storage, SFTP, and similar. Not analytics or data science. Just moving data correctly, on time, without losses.

Lately I've done a lot of identity and access work: OIDC and OAuth, RBAC/IAM permissions, and integrations with Okta, Auth0, and Cognito (SSO, social login, federation with Google or Microsoft).

Day to day I work with AWS, Kubernetes, GitOps, and CI/CD, and I try to prioritize what actually moves the product.

Freelance services

Freelance backend, cloud, and identity contracts in Madrid or remote. Identity, AWS, Kubernetes, and event-driven systems, taken from work that is already in production.

  • 01

    Identity and access

    SSO consulting with OIDC, SAML, and OAuth 2.0. Auth0, Okta, Cognito, and Keycloak, plus RBAC and IAM, access policies, and user provisioning.

    In practice Access Right Management at Nexthink: customer identity providers, SSO, and federation.

    • Auth0
    • Okta
    • Cognito
    • Keycloak
  • 02

    AWS cloud architecture

    Architecture and delivery on AWS, including IAM, from the design through to what runs in production. AWS Certified Solutions Architect – Associate.

    In practice Production AWS at Nexthink and at Amazon, including Lambda and DynamoDB.

    • AWS
    • AWS IAM
  • 03

    Kubernetes, GitOps, and CI/CD

    Kubernetes and DevOps contract work: GitOps and Argo CD delivery, and CI/CD migrations off legacy Jenkins pipelines.

    In practice Migrated more than 30 microservices from Jenkins to Argo CD, and set the team's CI/CD practice.

    • Kubernetes
    • Argo CD
    • Jenkins
  • 04

    Event-driven backends and data pipelines

    Services that move data with Kafka and SQS, including large exports to S3, Azure, and SFTP. Delivered on time and intact.

    In practice Data Export at Nexthink: Kafka, SQS, and delivery to customer S3, Azure Data Lake, and SFTP.

    • Kafka
    • Amazon SQS
  • 05

    Java, Spring, and TypeScript backends

    Product APIs in Java and Spring, and backend services in TypeScript, from the endpoint through to the pipeline.

    In practice Glovo: a Spring and GraphQL catalog API, and the move from a monolith to microservices. TypeScript is part of the same main stack as Java.

    • Java
    • Spring
    • TypeScript

Discuss a contract

Experience

  1. Nexthink logo

    Software Engineer IV - ARM team

    Present

    Nexthink

    Jan 2025 – Present

    Part of the Access Right Management (ARM) team, designing, implementing, and maintaining the platform's authentication and authorization systems.

    • Integration with customer IDPs via SAML, OAuth 2.0, and OpenID Connect
    • Hands-on with Auth0, AWS Cognito, Keycloak, and Okta for identity federation and SSO
    • Identity lifecycle management, access policies, and secure user provisioning
    • Infrastructure on AWS with Kubernetes and GitOps practices
    AWS IAMAuth0Kubernetes
  2. Nexthink logo

    Software Engineer IV - Data Export team

    Nexthink

    Sep 2023 – Jan 2025

    Part of the Data Export team, designing and implementing solutions in a microservices architecture.

    • Migrated 30+ microservices from Jenkins to ArgoCD, defining the team's CI/CD practices
    • Large-scale data export to customer storage (SFTP, HTTP, S3, Azure Data Lake)
    • Used Apache Kafka and SQS for efficient data flow between services
    • Built and integrated services on AWS in a microservices setup
    Amazon SQSArgo CDKafkaKubernetes
  3. Glovo logo

    Software Engineer II

    Glovo

    Oct 2021 – Sep 2023

    Part of the Product Enrichment team in the Content cluster, focused on enriching product information to help customers make better purchase decisions.

    • Migrated from a monolith to microservices, improving scalability and maintainability
    • Added support for multi-image products, expanding the visual info available to customers
    • Unified Glovo's catalog and products behind a single API, cutting latency
    • Collected and integrated extra product data (additional images, nutrition info) for partners
    Github ActionsGraphQLSpringTerraform
  4. Amazon logo

    Software Development Engineer I

    Amazon

    Jul 2020 – Oct 2021

    Part of the Amazon Business - Guided Buying team, building features for B2B customers so they can create preferred catalogs and apply restrictions on Amazon's catalog.

    • Migrated storage to Apache Parquet, cutting compute costs by 90%
    • Built a recommendation engine from past purchases to generate baskets of recurring items
    • Implemented seller, category, and brand restrictions to steer buyers toward policy-compliant products
    AWSAWS LambdaDynamoDBSpark
  5. Ericsson logo

    Software engineer (DevOps area)

    Ericsson

    Sep 2019 – Jun 2020

    Part of the Continuous Integration team, automating and improving development and delivery workflows.

    • Designed and configured Jenkins pipelines for build, test, and deploy flows
    • Wrote Python scripts for automation, testing, and deployment tasks
    • Created Dockerfiles to containerize apps and keep environments consistent across development, test, and production
    • Operated Kubernetes clusters for stability, scalability, and security for engineering teams
    DockerHelmJenkinsTerraform
  6. Telcaria Ideas SL logo

    Research intern in telematics engineering

    Telcaria Ideas SL

    Jul 2017 – Jun 2019

    Internship focused on Software-Defined Networking (SDN) and Network Functions Virtualization (NFV).

    • Built applications on the ONOS (Open Network Operating System) framework for network resource orchestration and automation
    • Designed and implemented features to improve network performance, scalability, and reliability
    • Worked with senior engineers on network service orchestration projects

Technical Skills

AWS
Docker
Git
Google Cloud
Java
Jenkins
Kafka
Kubernetes
Linux
NodeJS
React
Spring
Terraform
TypeScript

Soft Skills

  • Adaptability to change
  • Continuous learning
  • Analytical thinking

Education

download.jpeg

Master's in Computer Engineering

Universitat Oberta de Catalunya

Feb 2021 – Jun 2024

Logo_UC3M.svg

Bachelor's in Telecommunication Technologies Engineering (Bilingual ES/EN)

Universidad Carlos III de Madrid

Jan 2014 – Jan 2019

banner-horizontal-default-en-1-768x250.png

Bachelor's in Telecommunication Technologies

Aristotle University of Thessaloniki (AUTH)

ERASMUS stay

Sep 2016 – Jan 2017

Certifications

HashiCorp logo

HashiCorp Certified: Terraform Associate (004)

HashiCorp

Oct 2026 – Oct 2028

Terraform
Meta-Logo.png

Advanced React

Meta

Apr 2025 – Present

React
images.jpeg

Programming with Google Go

University of California, Irvine

Nov 2024 – Present

Golang

Languages

English

5/5

Native or bilingual proficiency

Spanish

5/5

Native or bilingual proficiency

Ukrainian

3/5

Professional working proficiency

Good Practices

Day to day I use hexagonal architecture and Domain-Driven Design, keeping code in isolated contexts so business logic stays free of external dependencies. Contexts talk only through message buses (Query Bus, Command Bus), with no direct coupling.

For errors I prefer the Result Type pattern over exceptions.

On testing I use three layers: unit tests on use cases with infrastructure mocks, integration tests against real services without mocking, and acceptance tests that cover E2E behavior. My rule is only tests that earn their keep. High coverage alone won't save you from bugs.

Contact

I take freelance contracts for backend, identity, and cloud work. Madrid or remote.