// software & platform engineer

I build software and the cloud underneath it — applications, MLOps platforms, Kubernetes, observability, and security. Based in Novi Sad, Serbia. The systems here are mine: designed, built, and operated end to end by me — not a company.

Most of my day-to-day code lives on a self-hosted GitLab behind lazarev.cloud; this profile is the public slice.

7+ years building platforms · 50%+ cloud cost cut · 75% faster builds · 150k+ metrics/sec

From work I've built and run — zero to production, and operated end to end.

• lazarev.cloud — self-hosted production platform. My own infrastructure, and my proving ground: a 9-node Proxmox cluster with NVIDIA GPU and Ryzen AI NPU passthrough for local ML workloads, provisioned end to end as code with OpenTofu. Vault-issued internal PKI and SSO across every service, a fully self-hosted CI/CD supply chain (GitLab, Harbor, Nexus, Renovate), Prometheus/Grafana observability, automated 3-2-1 backups.
• Local LLM agent memory stack. A production-grade external memory system for LLM agents — vector storage and retrieval with reranking, persistent agent memory, and a fast cache layer. Built and benchmarked against current research, running entirely on local hardware. Qdrant · Mem0 · Valkey · Qwen3 embeddings + reranker
• Local AI media pipeline. A ComfyUI-based image/video generation pipeline tuned for AMD Ryzen AI hardware (ROCm), with a fully autonomous build/setup flow. Large generative models without a cloud bill. ComfyUI · ROCm · AMD Ryzen AI MAX+ 395
• Edge & IoT. ESP32 environmental monitoring with live dashboards, and a Raspberry Pi security camera with servo control wired into n8n automation. Small systems, fully owned. ESP32 · Raspberry Pi · n8n

7+ years building secure, scalable platforms across bare-metal Linux and AWS. The founding MLOps engineer at a fintech, where the ML platform was built from scratch — multiple ML teams training, versioning, and deploying independently on Kubernetes, with SSO, Vault-managed secrets, and GPU/CPU isolation. Prior infrastructure roles spanned large-scale observability, cloud cost and build-time optimization, and the security plumbing underneath.

Kubernetes (EKS & bare-metal) · Istio · OpenTofu/Terraform · Helm · AWS · Proxmox · HashiCorp Vault (PKI/OIDC) · Kyverno · CrowdSec · GitLab CI / ArgoCD · Prometheus / VictoriaMetrics / Grafana · Python · Cisco networking (CCNA)