Cloud Engineer · Bydgoszcz
Dawid Bembnista
Senior IT Infrastructure & Cloud Engineer with 10+ years of enterprise experience. Production work is private cloud on VMware Cloud Foundation, delivered with Ansible and Aria Automation. My current focus has shifted to AWS architectures with Terraform, containerized workloads (CKAD Certified), and GitOps.
Cloud portfolio
Each project links to its own repository.
GitOps platform for a multi-service banking app on a shared Amazon EKS cluster.
github.com/dbembnista1/bank-of-anthos
- Platform built with Terraform: custom VPC, EKS, RDS PostgreSQL per environment, ECR, and add-ons (ALB Controller, ExternalDNS, External Secrets).
- GitOps delivery: only Argo CD deploys the application (App-of-Apps, Helm umbrella chart, dedicated RDS — not in-cluster Postgres).
- App CI: GitHub Actions with OIDC to ECR. Workflows never talk to the cluster, so a leaked job cannot kubectl the cluster.
- Environments: shared EKS cluster, separate namespaces and dedicated RDS per env (dev/prod). App-of-Apps keeps the two environments isolated; prod is not auto-synced.
AWS EKSTerraformArgo CDHelmKustomizeGitHub ActionsExternal Secrets
Org-wide FinOps and SecOps: daily cost visibility down to the resource, plus tag and security guardrails.
github.com/dbembnista1/cost-and-security-auditor
- Daily FinOps report: Lambda queries Athena on CUR 2.0, then sends HTML + CSV via SES (MTD, previous month, by account / Project tag, per-resource costs).
- Daily compliance: Cloud Custodian (c7n-org) pull-mode scans from GitHub Actions across accounts — missing tags, S3 public access (auto-remediate), open security-group ingress (detect-only).
- Everything is Infrastructure as Code with GitHub Actions OIDC; production changes are not applied from a laptop after bootstrap.
TerraformPythonCloud CustodianAWS AthenaCUR 2.0LambdaSES
Event-driven AWS app that scrapes, stores, and charts car prices — evolved from EC2 to ECS Fargate.
github.com/dbembnista1/aws-car-prices-tracker-containers
- Replaced EC2 with ECS Fargate behind CloudFront and an ALB, with CPU-based autoscaling (2–4 tasks) across availability zones.
- Separated dev and prod with distinct AWS accounts, remote Terraform state, and GitHub Environments using per-account OIDC roles.
- CI/CD on GitHub Actions: Terraform plan on PR, image build to ECR, Lambda deploys, and ECS rollouts — no long-lived AWS keys.
TerraformAWS ECS FargatePythonAmazon CognitoDynamoDBCloudFrontALB
Earlier EC2 + Lambda version of the same product: github.com/dbembnista1/aws-car-prices-tracker
Experience
Atos Global Delivery Center Polska
Bydgoszcz
Cloud System Architect / Lead Engineer
2022 — Present
- Lead technical execution and automated deployment of the Digital Hybrid Cloud (DHC) offering — architectural blueprints turned into private cloud environments on VMware Cloud Foundation (VCF).
- Roll out Infrastructure as Code with customized Ansible playbooks for the VMware ecosystem and OS-level (Linux/Ubuntu, Windows) provisioning, cutting deployment time and configuration drift.
- Integrate with Network, Backup, ServiceNow (ITSM), and Security & Compliance so delivery matches enterprise policy.
- Deploy IaaS with VMware Aria Automation, bridging on-prem infrastructure with self-service cloud models.
- Act as SME during deployment: hypervisor, networking, and OS troubleshooting through handover to operations.
Cloud System Engineer (Deployment / Operations)
2017 — 2022
- Deployed private cloud on VMware / Dell EMC hardware.
- Incident management and troubleshooting for vCenter and ESXi; administered Linux and Windows Server instances.
IT.expert Sp. z o.o.
Bydgoszcz
Junior IT Infrastructure System Engineer
Nov 2015 — Oct 2017
- Supported deployment of IT infrastructure (servers, storage) for Dell and HPE solutions.
Skills
- Cloud & platforms
- AWS (EKS, ECS, EC2, S3, VPC, Lambda, DynamoDB, Athena)VMware Cloud Foundation (VCF)vSphereAria Automation
- Automation & IaC
- TerraformAnsiblePythonBashCloud Custodian
- Containers & DevOps
- KubernetesDockerArgo CD (GitOps)GitHub ActionsHelm
- OS & networking
- Red Hat Enterprise LinuxUbuntuWindows ServerCisco R&SNSX-T
Certifications & education
Cloud & DevOps
- CKAD — Certified Kubernetes Application Developer
- AWS Certified Solutions Architect — Associate
- AWS Certified Developer — Associate
- HashiCorp Certified: Terraform Associate (003)
Systems & network
- RHCE & RHCSA (Red Hat)
- CCNA Routing and Switching
- Dell PowerProtect Cyber Recovery
VMware
VCP-DCV 2023 · VCP-CMA 2023 · VCP6-NV
M.Sc. in Civil Engineering, University of Technology and Life Sciences, Bydgoszcz (2009–2015).