Asaph Efrati

S

Head of DevOps

Surf AI

Feb 2025 - Current (1 year 9 months)

Founding DevOps engineer building Surf AI's infrastructure from zero to production. Leading cloud platform engineering, AWS multi-account architecture. Kubernetes (EKS), Terraform IaC, and CI/CD, supporting 10+ microservices and enterprise multi-tenant deployments. Hands-on across the stack: Python and TypeScript tooling (MCP servers, automation scripts, backup systems), Terraform modules, CI/CD pipelines in GitHub Actions, and ClickHouse/RDS operations. Architected the multi-tenant provisioning system that took customer onboarding from days to minutes. Security, observability, cost optimization, and developer experience. if it touches infrastructure, it's on my team. Ensuring engineers ship fast without compromising reliability or security

Senior DevOps Engineer

Proofpoint

Jan 2021 - May 2024 (3 years 5 months)

At Proofpoint, I've played a key role in transforming the CASB DevOps team’s infrastructure, leading projects to enhance, refactor, and secure our systems. My efforts have improved our cloud infrastructure's efficiency, security, and reliability, maintaining system integrity through on-call support. Key Contributions - Spearheaded our effort to collaborate and share our Terraform codebase with other teams. wrote extensive technical documentation and style guides in order to facilitate better coding standards. - Upgrading our entire Terraform codebase from 12.5 to 1.0 and by introducing tools such as TFENV allowing for easier upgrades and working with multiple versions (Locally and from CI). today most of our codes is at least 1.5. - Refacto

Riskified

Terasky

Jun 2020 - Jul 2020 (2 months)

At Riskified, I embarked on a project to benchmark Apache Kafka, guided by parameters established alongside the data team. This intriguing endeavor involved evaluating solutions like Confluent Kafka to determine the optimal design and necessary resources for running Apache Kafka at the required scale and volume. For infrastructure setup, I employed Terraform for AWS and Ansible to configure the machines according to their designated roles. Docker was utilized to streamline deployments without the need for individual instance configuration. The project was strategically designed to facilitate iterations, allowing for adjustable parameters to efficiently test various scenarios. Key Features and Strategies: - High Availability (HA) Setup: We e

Skybox

Terasky

May 2020

This project centered on enhancing AWS Cloud security, compliance, and adherence to best practices. I engaged in detailed discussions with team members at the customer's site and conducted a thorough review of their infrastructure. Utilizing the AWS Well-Architected Framework, CIS AWS Foundations Benchmark, and our accumulated experience, I provided a comprehensive assessment that included cost-saving insights and broad recommendations for improvement. To achieve our objectives, I employed a variety of tools: - Aqua Security Cloud and Scanner: These tools were instrumental in identifying vulnerabilities and securing the cloud environment. - Prowler: Utilized for its in-depth security scanning capabilities, Prowler helped us assess complianc

Verint

Terasky

Feb 2020 - Apr 2020 (3 months)

In this project, I utilized the Google Cloud Platform (GCP) to implement a highly available (HA) configuration of HashiCorp Vault, with a Google Cloud Storage (GCS) bucket serving as the backend storage solution. The deployment process was meticulously planned and executed using Terraform to configure essential cloud resources, including a dedicated subnetwork, a Google Kubernetes Engine (GKE) cluster for orchestrating the Vault instances, and the GCS bucket for secure, resilient storage. Additionally, a dedicated Service Account was created to manage access and permissions securely. To streamline the Vault setup and its integration with a Cloud SQL Postgres database, I developed helper scripts. These scripts not only facilitated a swift in

Harel

Terasky

Jan 2020 - Feb 2020 (2 months)

This project was aimed at enhancing our client's security and operational efficiency through the implementation of HashiCorp Vault with a Consul backend. Recognizing the critical need for high availability (HA) and seamless management, I developed a sophisticated automation framework using Ansible. This automation was meticulously crafted to deploy a secure, HA configuration of both Vault and Consul, addressing key operational challenges such as the unsealing process for Vault and the management of Access Control Lists (ACLs) for Consul. With the foundational elements of Vault and Consul successfully deployed, I turned my attention to demonstrating the robust capabilities of this setup. I initiated a series of proof-of-concept (POC) deploym

Technical Lead & DevOps Evangelist

Terasky

Nov 2019 - Aug 2020 (10 months)

TeraSky Group is a professional services company which operates in various market segments. As a technical lead my responsibilities included supervising other engineers, providing guidance and training, code-reviews, developing general resources and ways to improve the group, planning & leading projects while also completing hands-on tasks in various projects I was involved in.

Armis Cyber Security

Tikal

Aug 2019 - Oct 2019 (3 months)

My primary mission was to deploy Airflow on Kubernetes clusters, accomplished through two distinct setups: KOPS and EKS. This initiative aimed to enable Airflow deployment across various environments and cluster types, underlining the project's innovative and flexible approach. Technology Stack and Methodologies: - Bazel: Utilized for its tool encapsulation and process streamlining capabilities. - Terraform: Leveraged to provision critical resources such as Load Balancers (LB), S3 buckets, Elastic File Systems (EFS), and IAM roles necessary for Airflow's distributed and resilient operation. Notably, Terraform was instrumental in deploying a DataSync Appliance, facilitating synchronization between an S3 bucket and EFS, which was crucially mo

Avanan

Tikal

May 2019 - Sep 2019 (5 months)

At Avanan, I took the helm as the project lead for establishing the company's first (ever) DevOps repository. My initial focus was on managing Elasticsearch deployed on an EKS cluster, aiming to enhance its stability and performance. This involved intensive monitoring, analysis, and adjustments to both Elasticsearch and the underlying EKS infrastructure. Faced with tight timeframes and business requirements, I quickly pivoted to deploy a managed Elasticsearch cluster using AWS ES. Through strategic Kubernetes optimizations and the creation of dedicated node groups, I successfully stabilized the cluster, showcasing my ability to adapt under pressure. Avanan's strategic decision to transition from EKS to AWS ECS presented a new challenge. I l

VIM

Tikal

Apr 2018 - Mar 2019 (1 year)

During my tenure at VIM, I significantly enhanced their DevOps capabilities, focusing on Terraform for infrastructure as code, optimizing Docker Swarm deployments, and refining the CI/CD pipeline with Jenkins and CircleCI. Operating predominantly on AWS, I leveraged a suite of tools to advance the company's technology stack and operational efficiencies. Key Contributions Managing AWS resources, employing Terraform and Ansible for resource provisioning and configuration. My role involved developing and maintaining sophisticated Terraform modules and Ansible roles, ensuring scalable and maintainable infrastructure. Empowering the SecOps team by deploying critical security tools, including Netflix's Security Monkey, ThreatStack agents, and Lyn

Angelsense

Tikal

Jan 2018 - Mar 2018 (3 months)

In a focused project aimed at ongoing maintenance and process optimization, I played a pivotal role in reducing the backlog and enhancing operational workflows. A key aspect of this initiative was to augment the existing monitoring framework by integrating Prometheus with Alert Manager, thereby significantly improving system observability and alerting mechanisms. Key Contributions Development of AWS CloudFormation templates, facilitating the automated provisioning and management of AWS resources. This effort streamlined infrastructure setup and configuration, promoting more efficient and error-free deployments. Expansion of the monitoring capabilities by implementing Grafana and Prometheus, coupled with Alertmanager. This setup enabled more

Evercompliant

Tikal

Sep 2017 - Dec 2017 (4 months)

Assigned to bring a company's infrastructure in line with ISO regulations, enhance the organization's development workflow. This comprehensive project involved a blend of technological integration and process optimization aimed at securing operations and automating them efficiently. Key Contributions - Implemented HashiCorp Vault and Consul for robust SSH key management, ensuring secure storage and automation of sensitive credentials. - Developed a JumpCloud API wrapper using Python, Bash, and Ansible, which streamlined user and resource management across the company's infrastructure. - Enhanced operational efficiency through JumpCloud automations with Ansible, automating routine administrative tasks to improve system security and user mana

Carlson Wagonlit Travel (Worldmate)

Tikal

Jan 2017 - Sep 2017 (9 months)

At CWT, within the DevOps team, my specific contributions were pivotal in enhancing our infrastructure and operational efficiencies. I focused on several key areas, leveraging a blend of technologies and methodologies to elevate our systems and processes. Key Contributions - Architecting and maintaining a Hybrid BI Data Lake, utilizing AWS alongside a remote data center. My work involved integrating Ansible for automation, employing Logstash and Kafka for data ingestion and processing, deploying Kinesis for real-time data streaming, leveraging AWS EMR for big data processing frameworks, and managing MongoDB for our NoSQL database needs. This hybrid setup facilitated robust data analysis and management capabilities. - Streamlining AWS accoun

DevOps Engineer & Solutions Architect

Tikal

Nov 2016 - Nov 2019 (3 years 1 month)

At Tikal, a leading professional services firm, I was immersed in a vibrant community of DevOps evangelists and engineers. Our mission was to collaboratively engage with diverse clients, sometimes leading projects and at other times contributing as an outsourced DevOps Engineer. This role offered me a dynamic platform to not only apply my technical skills across a wide range of projects but also to evolve and expand my expertise. My tenure at Tikal has been a period of significant personal and professional growth. The company's project-based and outsourcing model provided me with the unique opportunity to work on varied initiatives, each presenting its own set of challenges and learning opportunities. This experience has profoundly enriched

DevOps Engineer

Ness Technologies | נס טכנולוגיות

Jan 2016 - Nov 2016 (11 months)

In my role as a DevOps Professional Services consultant, I collaborated closely with diverse clientele, helping them to achieve their strategic goals and optimize their DevOps practices. My journey involved significant contributions to several high-profile projects across various industries. - Bank Leumi (Digital Bank): Supporting the digital transformation initiatives of Bank Leumi, one of Israel's leading banks. My efforts were focused on implementing modern DevOps methodologies to streamline their operations and enhance service delivery. - SanDisk: At SanDisk, I conducted a comprehensive performance evaluation of their Jenkins environment. Based on my analysis, I proposed and implemented solutions that significantly improved their CI/CD

Senior IT Engineer

BlueSnap

Jan 2015 - Oct 2015 (10 months)

Managing Production & Office systems 24x7, Technical focal point for the team. Implementing new technologies while maintaining the current system. ●NIX: RedHat, CentOS Microsoft: Servers (2003+), Exchange, Active Directory Storage: NetApp Virtualization: VMWare Monitoring: Pingdom, Site 24x7 Network: Checkpoint FW, Cisco ASA FW, f5 big-ip LB Projects: Migrating from Exchange on-premise to Office 365, Integrating #Slack

DevOps Engineer

Aol

Feb 2014 - Sep 2014 (8 months)

Managing Production systems 24x7 availability. Automation of IT tasks, Investigating issues and resolving them. (Outsource for Yael software) ●NIX: CentOS Microsoft: Servers 2003+ Web Servers: Apache, IIS Scripting: Batch, PowerShell Monitoring: Nagios, Pingdom Network: Citrix LB Projects: Integrating #Slack with the current systems (Nagios, Pingdom etc,.), Automation of various time consuming tasks such IIS installation & reconfiguration, Adding Monitors and buillding Nagios Templates for hosts.

Senior IT Engineer

Babylon

Sep 2012 - Dec 2013 (1 year 4 months)

Managing Production & Office systems, serving as tier 2 escalation for helpdesk techs. Designing systems and upgrade paths, writing technical documentation for the IT Team. It was a small team that handled any technical needs the company had. we've setup infrastructure, worked on networking and storage etc,. ●NIX: CentOS, RedHat Microsoft: Servers (2003+), Exchange, Active Directory, Lync, etc,. Web Servers: MS IIS, Apache httpd Virtualization: Xen, VMWare Storage: NetApp Network: Juniper FW/VPN, Cisco FW, HP, 3com Projects: IT documentation project, SOX documentation. Upgrading Exchange & Active Directory. Implementing two-factor authentication (VPN).

Online Services SE

Microsoft

Nov 2011 - Sep 2012 (11 months)

Working for Microsoft has been a unique experience, a position I’ve taken while under contract for Yside solutions (Outsource). It was a position predefined for about a year. Get a team going and support it while in the initial stages of becoming a team. While there I’ve prepared and written training materials for the team, handled escalation and deep dives.

N

Team Leader

NSGroup

Jun 2010 - Nov 2011 (1 year 6 months)

NSGroup was a small company experienced in two main areas, professional services for business and SOHO/Private high-end computing. While at NSG I oversaw the professional side of the business, handling customers and the team. A Challenging and fun position where I had to teach as well as learn and develop new skills. We worked with various technologies in order to meet our customer needs.(Frankly too many to list) ●NIX: CentOS, Ubuntu, RedHat Microsoft: Servers (All Versions), Exchange, Active Directory, Lync Storage: NetApp, Openfiler Network: Checkpoint, Cisco, Juniper, Untangle, HP, 3com, Senao Cloud Solutions: Google Apps for Domains, Office 365 Projects: Creating a clear on-boarding process for customers, relevant documentation and pro

IT Engineer

eToro

Jun 2008 - Jul 2009 (1 year 2 months)

My first position in the high-tech industry where I learned valuable skills as a systems administrator. We were a two-man team doing everything from networking to production. It was a challenging position as eToro was at its initial stages as a startup, late night calls and into the night deployments were part of the routine.

About

Detail

Timeline

Résumé

Asaph Efrati

About

Detail

Behavioral traits