Sergei Naumov
Senior Backend / Security Platform Engineer

Security platforms for secrets, certificates, and service identity.

I build security platforms and backend systems in Go, focused on secrets management, PKI/TLS automation, and Kubernetes service identity.

View selected workView resume
engineering · profile
current
Avito · Security Platform / PKI
scale
Tens of thousands of certificates · Thousands Kubernetes services in <100 clusters
impact
Reliable certificates lifecycle
§ 02Selected Work

Selected engineering work

Production PKI/TLS platform

Built a shared certificate platform that replaced direct, service-by-service CA integrations with policy-controlled issuance, renewal, and migration.

Production scope

~2,000 TLS certificates

Kubernetes · internal platforms · databases · legacy infrastructure

My ownership

  • Designed the service-facing platform and certificate lifecycle.
  • Built Go-based ACME/PKI automation and migration tooling.
  • Supported production rollout, operation, and CA migration.

Operating model

BeforeAfter

  1. Services integrated with internal CAs directly

    One shared service-facing platform

  2. Renewal logic varied between environments

    Automated renewal before expiry

  3. Access and exceptions required manual coordination

    Central policy, audit, observability, and CA routing

Private keys remain on service hosts.

Production effect

Reduced expiry-related incidents and repetitive certificate operations.

Go · step-ca · Vault · Kubernetes · cert-manager · PostgreSQL

Mactician

TFT PBE on Apple Silicon

A native macOS launcher that makes TFT PBE playable on Apple Silicon by setting up and running the required Android environment.

  • Designed and built independently.
  • Automated environment setup and application launch.
  • Released the source code and documented the engineering process.

macOS app → Android environment → game installation → TFT PBE

SwiftUI · Android Emulator · QEMU · macOS

§ 03Experience

Production engineering experience

  1. Avito

    Senior Software Engineer · Security Platform / PKI

    Builds and operates security platform systems for certificate and secret lifecycle automation.

    Apr 2023 — present
  2. Garage Eight

    Back End Developer

    Jun 2022 — Apr 2023
  3. Lamoda Group

    Back End Developer

    Nov 2020 — Jun 2022
  4. Badoo

    Backend Infrastructure Developer

    Jun 2020 — Oct 2020
  5. Earlier product teams

    Backend / Full-stack Engineering

    2017 — 2020
View full resume (opens in a new tab)
§ 04Writing

Technical writing

From Manual Processes to Resilient Infrastructure

How to automate TLS certificate management across thousands of services, reduce operational risk, and make PKI part of service lifecycle management.

IT-WorldMay 8, 2026

Why Kubernetes Secrets Are Not Enough for Enterprise Infrastructure

Why Kubernetes Secrets alone are not enough for enterprise secrets and certificate management, and how ownership, Vault, PKI automation, and least privilege reduce operational risk.

ComNewsMay 29, 2026

The Cost of Change: How System Complexity Becomes a Reliability Risk

Why growing dependencies, manual certificate operations, and unclear ownership turn routine change into outage risk—and how platform automation reduces it.

AIFJuly 24, 2026
§ 05Contact

Let’s connect.

Open to relevant senior engineering roles.

LinkedIn/in/sergei-naumov-devGitHub@tweet9raEmail[email protected]