MATEUSZ
KURZYŃSKI — Senior Cloud Infrastructure & Security Engineer

• ▪ Engineered comprehensive Cloud Observability frameworks using Azure Monitor, Resource Graph, and Log Analytics. Designed proactive Python-based alerting pipelines that transform raw telemetry into actionable system-health and patch-compliance insights.
• ▪ Designed and implemented an enterprise-scale Azure Key Vault certificate monitoring solution, automating certificate discovery across 35 subscriptions and 70+ vaults — combining Azure Automation, Managed Identity, custom Log Analytics ingestion (DCR/DCE), KQL correlation, dynamic firewall rule handling, and proactive expiration alerting to improve security visibility and operational resilience.
• ▪ Automated Azure Update Manager patch orchestration for on-premises systems connected through Azure Arc, engineering PowerShell-based remediation and lifecycle-cleanup workflows — standardizing maintenance scheduling, enforcing policy-driven compliance, and streamlining large-scale update operations across hybrid infrastructure.
• ▪ Partnered with cross-functional DevOps, Data, and Platform teams in Agile environments. Led technical reviews to validate system architecture, drive continuous improvement in cloud observability, and align technical deliverables with strategic business KPIs.

Served as a key technical driver for over two years on a high-scale, Multi-Client Platform Team, delivering standardized Cloud-Native architectures and robust engineering solutions across diverse enterprise environments.

• ▪ Architected and optimized complex Azure DevOps CI/CD (YAML) pipelines built on Infrastructure as Code principles, automating software delivery and accelerating time-to-market while ensuring cross-client consistency.
• ▪ Embedded automated SAST/DAST vulnerability scanning directly into build pipelines, enforcing strict Cloud Security Posture Management (CSPM) without slowing development cycles.
• ▪ Designed and implemented scalable cloud infrastructure and container orchestration, including a Global Traffic Manager (GTM) solution across dual, geographically distinct Azure Kubernetes Service (AKS) clusters for seamless failover and low-latency routing.
• ▪ Streamlined multi-tenant operations through advanced system telemetry and proactive monitoring, applying SRE practices that laid the technical foundation for scalable platform engineering and future AI-driven automation.

• ▪ Enforced Zero Trust security principles and granular Role-Based Access Control (RBAC) across the organization using Microsoft Entra ID — securing privileged access, service connections, and enterprise source code.
• ▪ Engineered and optimized scalable Pipeline-as-Code (YAML) CI/CD workflows, streamlining build, testing, and release cycles and significantly accelerating developer velocity.
• ▪ Standardized GitOps practices and Application Lifecycle Management (ALM) across multiple enterprise projects, ensuring alignment with internal compliance, security, and strict auditing requirements.
• ▪ Acted as the core technical SME for platform architecture and Developer Experience (DevEx), resolving complex deployment bottlenecks and implementing scalable automation that reduced manual overhead for distributed teams.

• ▪ Monitored critical system health and application performance, analyzing telemetry data to ensure high availability and proactively identify system bottlenecks.
• ▪ Diagnosed and resolved foundational hardware and software issues, ensuring rapid restoration of services and adherence to strict Service Level Agreements (SLAs).

• ▪ Analyzed complex regulatory frameworks and financial data, ensuring strict enterprise compliance and mitigating risk for international clients.
• ▪ Leveraged multilingual communication skills to advise global stakeholders, establishing a strong professional foundation in corporate governance and analytical problem-solving.