Skip to content
ST IT – home

Dmitry

SECURITY ARCHITECT, COMPLIANCE, BACKEND DEVELOPER

Back to listHire this specialist
Commercial experience:
2 years
Education:
higher
English proficiency:
B1

Specialization

  • Python (Backend Development). Development and support of server applications and microservices
  • Computer Vision (CV). Development of scripts for image and video stream processing using OpenCV. Integration of models for object detection and recognition
  • PostgreSQL. Database design, writing and optimizing queries
  • Docker. Application containerization for development and testing
  • API Development. REST API design and development using FastAPI
  • Audit and certification of information assets. Conducting certification of information systems, security analysis of assets, development of certification and project documentation
  • Implementation and administration of information security controls
  • Protection of critical information infrastructure. Participation in projects to protect GIS, PDIS, CII, and industrial control systems of various scales
  • Network security. Design and drawing of structural-topological diagrams and interaction schemes of security system components
  • System administration. Installation and administration of domestic Linux-based operating systems (Astra Linux, Red OS) and classic distributions (Ubuntu, CentOS, Debian, RHEL)
  • Security analysis. Conducting security analysis using vulnerability scanners, MaxPatrol, ScanOva
  • Personal data security: Conducting personal data processing audits
  • Prometheus
  • Grafana

Backend Key Skills

  • REST / gRPC API design and development using FastAPI and Go
  • Microservice architecture design
  • Reliable message delivery implementation (Outbox, idempotency)
  • LLM integration, multi-agent orchestration, STT/TTS
  • Integration with blockchain platforms (Web3, TronPy, Bitcoinlib)
  • Database schema design and query optimization (PostgreSQL, MongoDB, Redis
  • Working with WebSocket and real-time subsystems
  • Asynchronous task processing (asyncio, goroutines, queues)
  • Monitoring and observability (Prometheus, Grafana, OpenTelemetry)
  • CI/CD setup and containerization (Docker, GitHub Actions)
  • API security: JWT, OAuth2, rate limiting, idempotent webhooks

Backend Basic Skills

  • Git, GitHub. Version control, collaborative work on projects
  • CI/CD (GitHub Actions): Basic pipeline setup for automated building and testing
  • Monitoring & Logging. Basic monitoring setup using Prometheus and Grafan
  • Linux: Confident command-line usage, writing shell scripts
  • PyTorch & Scikit-learn. Experience with frameworks for creating and training machine learning models
  • PEMIN measurement
  • IT infrastructure management
  • Documentation development
  • Technical support
  • SQL query optimization, indexes, window functions
  • i18n setup (internationalization, content localization)
  • SSR (Server-Side Rendering), SSG (Static Site Generation) and ISR (Incremental Static Regeneration) setup
  • Rendering and data optimization with React Suspense and Streaming
  • Metadata and Open Graph tags setup
  • 3D graphics: Three.js
  • Animations: GSAP

Information Security Key Skills

  • Conducting certification of information systems of various scales
  • On-site inspections of facilities, security analysis
  • Implementation of information security controls and cryptographic information security controls into the client's infrastructure
  • Development of certification, project, and operational documentation
  • Design of security systems, drawing of structural-topological diagrams and interaction schemes of security system components
  • Technical support for clients on issues related to both information security controls and information security in general
  • Working with WebSocket and real-time subsystems
  • Asynchronous task processing (asyncio, goroutines, queues)
  • Monitoring and observability (Prometheus, Grafana, OpenTelemetry)
  • CI/CD setup and containerization (Docker, GitHub Actions)
  • API security: JWT, OAuth2, rate limiting, idempotent webhooks

Information Security Basic Skills

  • Participation in projects for the protection of GIS, PDIS, CII, automated security systems, and various scales of automated systems
  • Implementation and administration of security controls such as: KES (Win/Lin), Dr.Web (Win/Lin), Dallas Lock (Win/Lin/SDZ/Security Server/Virtual Infrastructure Security), Secret Net (Win/Lin), Vipnet Client (Win/Lin), ViPNet Prime, ViPNet Coordinator, Indeed PAM, CryptoPro
  • Deploying information security and cryptographic protection tools in the client's infrastructure
  • Installation and administration of domestic Linux-based operating systems (Astra Linux, Red OS) and classic Linux distributions (Ubuntu, CentOS, Debian, RHEL)
  • Security analysis using Vulnerability Scanner, MaxPatrol, ScanOval
  • Personal data processing audits
  • Working with spectrum analyzers and antennas for PEMIN measurement. In addition to manual measurements, working with Navigator software
  • Administration and audit of the ALPHA DOC system, and related technical support
  • Educational workshops and lectures on information security for students and schoolchildren. Organizer of black box pentest competitions
  • CI/CD setup and containerization (Docker, GitHub Actions)
  • API security: JWT, OAuth2, rate limiting, idempotent webhooks

Tools and Technologies

  • Python
  • FastAPI
  • PostgreSQL
  • Docker
  • PyTorch
  • TensorFlow
  • Nmap
  • Information security audit
  • System administration (Linux/Windows)

Also have experience with:

Information security solutions such as CyberBackup, Komrad Enterprise SIEM, Continent APKSH, Continent AP, MagPRO crypto package, Ideco products, PTAF, Akkord, Sonata, MaxPatrol SIEM, and Phisman. Tools such as: Putty, Visio, Adobe Photoshop, Cisco Packet Tracer, Zabbix, Gitlab, PostgreSQL, Linux bash, Bitrix24, SBIS, and Assistant I also have a second group clearance in electrical safety

Additional

  • Familiar to varying degrees with information security solutions such as: CyberBackup, Komrad Enterprise SIEM, Continent APKSH, Continent AP, Mag PRO crypto package, Ideco products, PTAF, Akkord, Sonata, MaxPatrol SIEM, Phisman
  • Had experience working with Putty, Visio, Adobe Photoshop, Cisco Packet Tracer, Zabbix, Gitlab, PostgreSQL, Linux bash, Bitrix24, SBIS, Assistant
  • Deploying information security and cryptographic protection tools in the client's infrastructure
  • Second group clearance in electrical safety
  • 30+ closed projects covered by NDAs
  • Personal data processing audits
  • Working with spectrum analyzers and antennas to measure side electromagnetic emissions and interference. Besides manual measurements, working with the Navigator software
  • Administration and usage audits of the ALFA DOK system, and related technical support
  • Information security intensives and lectures for university and school students. Organizer of black-box pentest competitions
  • CI/CD setup and containerization (Docker, GitHub Actions)
  • API security: JWT, OAuth2, rate limiting, idempotent webhooks

Projects

  1. 10.2025 – PRESENT

    AI‑assistant system (voice robot) for outbound calling

    • BACKEND DEVELOPER
    • 6 sPECIALISTS ON THE PROJECT
    • – development of the AI‑assistant core based on FastAPI for managing voice calls
    • – integration with the telephony provider’s REST API for making outbound calls
    • – implementation of a dialogue system using LLM and speech synthesizers to conduct scenario‑based conversations
    • – creation of an answer analysis module to determine the relevance of offers and extract key parameters
    • – development of integration with amoCRM for automatic object status updates and task creation for managers
    • – configuration of call monitoring and logging using Prometheus and Grafana

  2. 05.2025 – 10.2025

    Development of a RAG system for a question‑answering chatbot

    • BACKEND DEVELOPER
    • 5 SPECIALISTS ON THE PROJECT
    • – creation of an ETL pipeline for loading, chunking, and vectorizing text data using sentence‑transformers models
    • – implementation of semantic search on a vector database (using pgvector)
    • – development of a RESTful API in FastAPI for receiving questions and returning answers generated by an LLM (based on Hugging Face)
    • – integration of a context management and dialogue history mechanism to improve answer relevance

  3. 01.2025 – 04.2025

    Development of an application for assessing the quality of document photos based on neural networks

    • ML DEVELOPER
    • 3 SPECIALISTS ON THE PROJECT
    • – training a convolutional neural network (CNN) to classify photo defects for documents (glare, blur, incorrect angle)
    • – collecting and labeling a dataset for model training
    • – creating a microservice in FastAPI for model inference
    • – implementing image preprocessing algorithms in OpenCV (cropping, aspect ratio verification, brightness and contrast analysis)

  4. 09.2024 – 01.2025

    Client‑server application for collaborative text editing

    • FULLSTACK DEVELOPER (PYTHON) Stack: Python, FastAPI, WebSockets, SQLAlchemy, PostgreSQL, React (basic level), Docker. - backend development with FastAPI using WebSockets for real‑time collaboration - implementation of business logic for document management, access rights, and change synchronization between clients - design and deployment of a PostgreSQL database for storing documents and revision history - application containerization using Docker and Docker Compose to simplify deployment
    • 1 specialist on the project

Education

  • 2024 South Ural State University, Information Security (Bachelor's degree)
  • 2026 South Ural State University, Software Engineering (Master's degree)
  • 2022 Stepik course: Python for advanced learners
  • 2 months of STEPIK professional development courses: test automation with Selenium and Python

Submit a request for a specialist