DOMINIC POLIZZI
Versatile Engineer // Technical Expert Engineer (Observability)
Living in the Digital Sea
email: dominic@openzephyr.com
web: openzephyr.com // gitlab: @DomPolizzi
github: @AquaOctet // linkedin: dominic-polizzi
aqua@aquaoctet:~$ cat about.txt
Versatile Engineer spanning cloud infrastructure, cybersecurity, networking, and AI/MLOps. I architect production-grade Kubernetes environments, build ephemeral GPU clusters for LLM workloads, and harden everything from the first commit to continuous deployment. Currently based in the Digital Sea, working on enterprise observability at VictoriaMetrics and building privacy-focused AI deployments through OpenZephyr.
Technical Expert Engineer (Observability)
- ▸Audited the VictoriaMetrics Kubernetes operator, identifying and resolving stability issues, and contributing to roadmap decisions.
- ▸Served as front-line technical support for enterprise customers troubleshooting ingestion, query, and infrastructure issues.
- ▸Diagnosed metrics ingestion, retention, and alerting issues in enterprise observability stacks.
Senior DevOps Engineer (LLM-Ops)
- ▸Architected ephemeral CUDA/Ollama Kubernetes infrastructure on AWS; reduced LLM provisioning to <30s via Packer AMIs.
- ▸Migrated 80% of core infrastructure (AWS/Cloudflare) to Terraform, automating networking and certificate lifecycle management.
- ▸Developed Rust microservice to automate isolated GitLab environments with secure service accounts and OAuth tokens.
- ▸Standardized observability using Prometheus/VictoriaMetrics/Grafana; managed vendor relations for monitoring infrastructure.
- ▸Acted as technical liaison, aligning project requirements with C-suite stakeholders for high-impact business initiatives.
DevOps Engineer
- ▸Designed CI/CD pipelines and Celery automation to provision multi-cloud (AWS/Azure/GCP) VMs and containers on-demand.
- ▸Achieved 15% cost savings through infrastructure audits and seamless migration to open-source alternatives.
- ▸Developed Go-based Kubernetes operators, reducing EKS/CI/CD costs by 20% via optimized API and registry integration.
- ▸Accelerated SDLC by consolidating hundreds of redundant pipelines and automating security scans with Jira integration.
- ▸Streamlined container orchestration by migrating legacy Docker Swarm services to Kubernetes.
CloudOps / Compute & Security Engineer
- ▸Managed multi-cloud infrastructure (VMware/AWS) via APIs and IaC, optimizing datastores and network clusters.
- ▸Hardened network security using Snort IDS/IPS and Cisco firewalls; implemented VLAN segmentation and port mirroring.
- ▸Handled Tier-3 security escalations for breaches and ransomware; conducted threat analysis and remediation to harden client posture.
- ▸Led end-to-end cloud migrations (consulting to production) for enterprise clients moving to AWS/Azure.
- ▸Optimized hybrid cloud connectivity (PaaS/IaaS/SaaS) using VPNs, reverse proxies, and Cloudflare Tunnels.
Network & IT Engineer
- ▸Enforced network access control via DHCP, private DNS, and MAC filtering on managed switches/routers.
- ▸Architected hybrid WFH infrastructure, including VPN/RDP access to Hyper-V, databases, and AD/AzureAD.
- ▸Centralized authentication by configuring SSO within Google Workspace, reducing organization-wide security risks.
Earlier roles (3+ years) available on request, or on LinkedIn.
// Cloud Platforms & Services
// Containers & Orchestration
// Infrastructure as Code & Automation
// Programming Languages
// Virtualization
// Observability & Monitoring
// AI, ML Tools
// Security
// Additional Skills
OpenZephyr
[02/2025 - Present]Engineering consultancy for cloud, security, and agentic AI applications
https://openzephyr.comC2Society
[04/2023 - Present]Non-profit cybersecurity organization hosting educational events that foster collaboration among security professionals
Certificate in Cybersecurity
Woz-U (Online Technology University) // 2022
Nanodegree in Full Stack Engineering
Udacity // 2020
Previously held
CompTIA Network+ and Security+ Certificates
*~* leave a transmission via github issues *~*
entries are pulled from github issues labeled 'guestbook'.
sign the guestbook by opening a new issue:
>> SIGN GUESTBOOK ON GITHUB <<[ CONNECTING TO GITHUB... ]
fetching transmissions from the void
loading...