Stefan Raducan

Staff Cloud Infrastructure Engineer @Axonius

London, GB

On-demand terraform enterprise private runners with least-privilege permissions for each workload & bespoke network access (ECS, IAM, Lambda(nodeJs), API GW)- IAM & Identity Center implementation (terraform, GitOps, Okta, auditing & traceability, private fork of synfinatic/aws-sso-cli)- Design and implementation of the base images CI flow (Github actions, Packer, Ansible, Python, EKS, security - reduce attack surface (OS hardening, minimizing components, libraries, external consumables, network security, CVEs, TODO - signing, SBoM). Workflows can be reused to build internal customer images (on top of our base images) with specific approval (github environments) and share lists (image repo - ECR policies)- Terraform Cloud moved to Terraform Enterprise via various bash based automation (hosted in kubernetes - EKS), high availability, secret management, audit logging, multi region disaster recovery- Zero trust access to Vnets (AWS, on-prem) or specific services via Cloudflare (terraform) in GitOps fashion (tunnels, decentralized config routes but, agents, access policies)- Python app that queries the Github API, generates configs (for teams and repo modules) and terraform resources Github organization- AWS account creation and configuration system (Typescript CDKTF to generate terraform code programmatically, Typescript CLI helper for customers, security, networking - peering, private endpoints, private DNS, cloudflare agents)- terraform workspaces (Python CDKTF, Terraform, static code analysis)- terraform bespoke modules (VPC, keys, secrets, endpoints)- many security posture improvements as we work directly with the Security team & CISO- improved core service architecture (resilience, promotion workflows)- Work with the Axonius Gov team on any requests / compliance issues they might have

National College of Computer Science Tudor Vianu

High School, Computer Science

University of Bucharest

Bachelor's Degree, Applied Mathematics