Sina Ebrahimi

Iranian CAPTCHA and bot-detection provider. Customers include Iran Khodro, Divar, and ArvanCloud.

• Migrated core infrastructure services (Databases, MinIO, Nexus, Metabase, Locust, n8n, and related tools) from standalone servers to Kubernetes
• Managed Kubernetes clusters with 15+ nodes and 400+ pods
• Moved GitLab Runners onto Kubernetes and automated runner provisioning plus Docker image security scanning with Ansible
• Automated node pool scaling via the cloud provider API for traffic spikes and campaigns — CAPTCHA peaks of 7k RPS (30k in campaigns) within a 150 ms latency budget
• Set up Prometheus and Grafana with dashboards and alerts for outages, reducing response time on customer-facing incidents
• Implemented a public status page (Cachet) with automated downtime alerts from monitoring metrics
• Built an Ansible tool to discover, scan, and apply changes across large Git repo groups (repo-orchestrator)
• Automated HA PostgreSQL, MongoDB, and Redis clusters on VMs with Ansible and Docker Compose
• Automated Locust load-testing infrastructure on Kubernetes with Ansible
• Implemented TLS between apps and databases using Kubernetes cert-manager
• Implemented backup retention policies to control disk usage and cloud storage costs
• Provisioned a mail server for migrated services and automation jobs for CRM follow-up on stalled payment flows

On-site via Saba System Sadra · 2 years 6 months

• Founding member of a new SOC team; helped build its initial monitoring structure
• Built 20+ production Splunk (SPL) searches and dashboards used daily by SOC and IR teams
• Organized monitoring across Windows/Linux, Sysmon, and WAF sources
• Deployed real-time dashboards and worked with SIEM engineers on log onboarding
• Standardized incident docs, shift workflows, and onboarding for new analysts

• Assisted in monitoring security alerts and log analysis
• Studied SOC processes, incident handling, and SIEM concepts