MATEUSZ OLEKSY
DevOps Engineer | Krakow, Poland
mateusz.oleksy.dev@gmail.com | github.com/mateuszoleksy | linkedin.com/in/mateusz-oleksy-8b1156249

SUMMARY
-------
M.Sc. student in Teleinformatics (ICT) at AGH UST, working in a DevOps
capacity at IBM Software Lab Krakow (Software Developer Intern), now on
the OpenSearch team. On watsonx BI I ran OpenShift fleets, hardened
cluster security and built internal automation, backed by a networking
background in QUIC, WebRTC and TCP/IP. Currently building a
Kubernetes-native QUIC load balancer and firewall with eBPF/XDP.

EXPERIENCE
----------
IBM Software Lab - OpenSearch | Krakow, Poland
Software Developer Intern - DevOps responsibilities (part-time) | Oct 2026 - present

  - Onboarding into the OpenSearch team, taking on its DevOps
    responsibilities.

IBM Software Lab - watsonx BI | Krakow, Poland
Software Developer Intern - DevOps responsibilities (part-time) | Jan 2026 - Oct 2026

  - Operated multi-cluster on-prem OpenShift environments: installs,
    version upgrades, and node-level troubleshooting; deployed platform
    tooling such as Argo CD.
  - Handled incidents during cluster upgrades and monitored cluster
    health with Prometheus and Alertmanager.
  - Enforced 19 custom Kyverno validation policies, rolling out Pod
    Disruption Budgets and read-only root filesystems across services to
    keep them available during cluster updates.
  - Led container vulnerability remediation and image hardening across
    10+ product microservices in under a month.
  - Refactored and fixed bugs in a Go service that automates image and
    configuration sync from SaaS to on-prem deployments.
  - Built a full-stack telemetry tool (Python, Django, Vite, IBM Carbon)
    tracking deployed versions across distributed on-prem and SaaS
    environments.
  - Automated CI/CD pipeline status reporting across the organization's
    repositories with Bash.
  - Developed Ansible playbooks and resilience health checks for custom
    Kubernetes Operators.
  - Conducted performance testing and benchmarking to produce product
    sizing data.
  - Refactored Jenkins build-report analytics and its UI; stabilized
    flaky Selenium E2E suites.

PROJECTS
--------
Adaptive QUIC Load Balancer & Firewall  [M.Sc. thesis | in progress]
stack: eBPF/XDP, Go operator, Python, JavaScript, Kubernetes, QUIC
  A Kubernetes-native QUIC load balancer and firewall. An eBPF/XDP data
  plane runs on every pod alongside an in-pod source of truth; a Go
  operator acts as the control plane, and an intent plane (Python
  backend, JS frontend) lets users declare policies that adapt to live
  traffic telemetry.

Collaborative WebRTC IDE  [B.Sc. thesis]
stack: Node.js, WebRTC, mediasoup, Docker, PostgreSQL
  Real-time collaborative IDE with a custom CRDT engine. P2P
  DataChannels for small groups with automatic fallback to a mediasoup
  SFU; end-to-end encrypted (ECDH, AES-256-GCM, DTLS-SRTP), with code
  executed in a sandboxed Judge0 engine.

Other repos:
  FileServer - multi-threaded C file server over raw sockets
    https://github.com/mateuszoleksy/FileServer
  chess-clock-AVR - bare-metal chess clock, AVR Assembly -> C
    https://github.com/mateuszoleksy/chess-clock-AVR
  HelloCatIot - IoT pet treat dispenser, embedded C++
    https://github.com/mateuszoleksy/HelloCatIot
  3Designs - parametric CAD models and 3D-printed prototypes
    https://github.com/mateuszoleksy/3Designs

EDUCATION
---------
M.Sc. Teleinformatics (ICT) | AGH University of Science and Technology
Feb 2026 - present
  Advanced network security, cloud-native systems, distributed systems.

B.Sc. Electronics and Telecommunications | AGH University of Science and Technology
Oct 2022 - Feb 2026
  Thesis: Design and implementation of an IDE using WebRTC technology.

SKILLS
------
Cloud native: OpenShift, Kubernetes, k3s, Argo CD, Kyverno, Helm,
  Docker, Ansible, Jenkins, GitHub Actions, CP4D, Instana
Linux & systems: eBPF, XDP, RHEL / UBI, Prometheus, Alertmanager, CVE
  patching, Bash
Networking & security: QUIC, WebRTC, mediasoup, TCP/IP, UDP, SDN,
  Wireshark, ECDH / AES-GCM / DTLS-SRTP
Languages: Go, Python, C, C++, Java, TypeScript, Node.js, SQL, ARM/AVR
  Assembly

LANGUAGES
---------
English (C1) | Polish (native) | German (A2)