San Jose, California · Open to senior roles

Igor Marchuk

AIOps Support Engineer · L3 Cloud Support · Google Cloud Architect

12+ years delivering enterprise-grade technical support and AI platform operations — keeping mission-critical cloud and AI systems reliable, secure, and fast.

Igor Marchuk — AIOps & L3 Cloud Support Engineer
Available
for new opportunities
12+
Years in tech support
L3
Highest-tier escalations
GCP
Pro Cloud Architect
2×
Google certifications

About

Professional Summary

I lead Level-3 technical support for enterprise cloud and AI platforms, where the hardest escalations land. My background spans Google Cloud architecture, high-stakes financial services environments at Barclays Capital, and the operations behind modern AI services like Gemini, ChatGPT, and Claude.

I'm the person teams call when an incident is ambiguous, time-sensitive, and visible to stakeholders. I pair deep GCP and identity/security expertise with calm, precise communication — turning chaotic outages into clear root-cause stories and lasting fixes.

Core Expertise

What I bring to the table

Cloud & AIOps

GCP — Professional Cloud Architect Kubernetes / GKE Cloud Logging & Operations Cloud IAM Azure (fundamentals) GCP Troubleshooting

AI, LLM & Agents

Google Gemini Enterprise Anthropic Claude & Claude Code Agent Development Kit (ADK) Gemini CLI Model Armor Prompt engineering RAG / MCP-aware

Identity & Security

SSO — SAML 2.0 / OIDC / OAuth 2.0 Okta Entra ID (Azure AD) Google Workspace SSL/TLS Inspection Certificate / PKI 802.1x Google DLP SCIM / JIT provisioning

Support & Operations

L3 Escalation Incident Management Root-Cause Analysis On-call / SRE Runbooks Stakeholder Comms ServiceNow Jira

Automation & IaC

Python Bash PowerShell Terraform Ansible Puppet GitHub Actions / CI-CD C++ TypeScript

Platforms & Tooling

Linux / Unix (expert) Windows macOS ChromeOS Docker / Kubernetes Jamf / Intune / Google MDM Zabbix Wireshark Splunk-class observability

Domains

Financial Services Enterprise AI Platforms Gemini ChatGPT Claude Zero Trust SOC 2 / ISO 27001

Certifications

Credentials & continuous learning

Google Cloud certified — from Professional Cloud Architect to enterprise Gemini AI deployment.

2018

Google Professional Cloud Architect

Google Cloud · Professional certification

Verify on Credly

Gemini Enterprise Deployment

Google Cloud · Certified Partner Specialist

Experience

Where I've made an impact

Lead Application Support Engineer

Current

Google Client · EPAM Systems

Owning L3 escalations for Google's enterprise AI and cloud services — driving incident triage, root-cause analysis, and cross-team resolution for the highest-severity, most ambiguous issues.

Technical Support Engineer

Barclays Capital · Financial Services

Supported mission-critical trading and banking platforms in a regulated, zero-downtime environment — building the rigor and stakeholder discipline that defines high-stakes enterprise support.

Network & Systems Engineer

Bilink ISP

Built the networking, Linux, and infrastructure foundations — managing connectivity, systems, and customer-facing operations end to end.

Personal Projects

Things I build for fun

Self-hosted, from-scratch engineering — security tooling, platform internals, and full-stack products.

Live

Sova — Live Emotional-Support Video Chat

sovatalk.com

A production platform for anonymous, on-demand live video chat and private 1-on-1 sessions with empathetic listeners, with cryptocurrency (Bitcoin / Lightning) payments. Beyond the product, it is a complete cloud-native DevOps implementation — full CI/CD · GitOps · DevOps across multi-node Dev / UAT / Production environments. A Dockerised Next.js application plus background workers run on Kubernetes (k3s) across three separate environments; Argo CD continuously reconciles each from Git (app-of-apps, Sealed Secrets, CloudNativePG); GitHub Actions drives automated SemVer releases, container image builds to GHCR, vulnerability scanning, automatic UAT deployment, and gated promotion to Production; Terraform and Ansible provision and configure the infrastructure. Real-time media runs on LiveKit (WebRTC) behind host nginx + Let's Encrypt, with BTCPay Server for payments. Full-stack observability closes the loop — a self-hosted Sentry instance captures real-time error and performance monitoring across every environment.

Next.js TypeScript Docker / GHCR Kubernetes (k3s) Argo CD Terraform Ansible GitHub Actions LiveKit WebRTC PostgreSQL (CNPG) Sealed Secrets BTCPay Self-hosted Sentry
Visit Private repo
Live

SAML + OIDC SSO Identity Provider

sso.fsmaster.com

A complete SAML 2.0 + OpenID Connect Identity Provider written in pure Python — with no SAML/OIDC libraries. Hand-rolled XML signing, assertions, and token flows to drive single sign-on for Google Workspace.

Python SAML 2.0 OIDC Zero dependencies
Live

track — URL & Screenshot IP Logger

scerenshot.app

Grabify-style short links that capture each visitor's IP, geolocation (country / region / city on a live map), and device details. Supports URL redirects and image serving, with a built-in analytics dashboard.

Node.js Express SQLite Leaflet / Geo-IP
Live

neonmail — Free, Privacy-First Email

neonmail.io

A free, privacy-first webmail service — fast, clean, and self-hosted, with no ads and no tracking. Built on Next.js with a lightweight SQLite backend and shipped through a GitHub Actions CI/CD pipeline behind nginx + Let's Encrypt.

Next.js Node.js SQLite GitHub Actions Self-hosted Privacy-first
Visit Private repo
Live

HAR Fixer — Repair HARs for Google HAR Analyzer

harfixer.com

A support-engineering tool that fixes the customer HAR files Google HAR Analyzer rejects: sanitized bodies still flagged as base64, malformed JSON, truncated exports and missing fields. Built by reverse-engineering the analyzer's loader, which the tool replays to show which request crashes it and why. Runs 100% client-side (CSP connect-src 'none'), with an optional redaction pass and a zero-dependency CLI.

JavaScript Node.js CLI Reverse engineering HAR 1.2 Privacy-first
Live

LeakCheck — What Your Browser Tells Every Website

fsmaster.com/leakcheck

A browser-fingerprint and leak inspector that shows ~200 signals anti-fraud tools like SEON, Castle and FingerprintJS use to recognize a device: IP and WebRTC leaks, TLS cipher list, Client Hints, unmasked GPU, canvas and audio hashes, fonts, time zone and more. It flags the inconsistencies risk engines score, and compares two browsers to show whether they can be linked. No storage, no cookies; the server only echoes the request back.

JavaScript nginx Fingerprinting Fraud prevention Privacy

Contact

Let's build something reliable

Available for senior AIOps and L3 cloud support roles. The fastest way to reach me is email or LinkedIn.

Send a message on Telegram

Telegram: @fsmaster