Cloud infrastructure architect · AWS · hands-on

Your AWS, drawn properly — then built the same way.

Migration, Terraform, CI/CD, Kubernetes and compliance for startups and scale-ups. Designed with your team in week one; the drawings, the code and the runbooks stay with you.

20+ yrs infrastructure10 AWS certifications−30–50% AWS spend99.9% uptime, telehealth

reference architecture · scale-up saasrev. 03 · HIPAA controls
Reference AWS architecture drawing CloudFront and WAF in front of an ALB and EKS on Fargate, RDS Multi-AZ, a GitHub Actions and Terraform pipeline, and a HIPAA/PCI controls layer. Annotations: deploy time hours to minutes, bill minus thirty to fifty percent after right-sizing. CloudFront + WAF TLS 1.2+ · headers ALB private subnets EKS · Fargate autoscaled RDS Multi-AZ encrypted · SSM access GitHub Actions plan → apply · OIDC Terraform modules · locking ↑ bill: −30…50% after right-sizing ↑ deploy: hours → minutes HIPAA / PCI controls KMS everywhere · least-privilege IAM · CloudTrail + access logs · DB access via SSM
AWS SA Pro · DevOps Pro · Security+ CKA, Terraform Associate
20+ yearsinfrastructure engineering and consulting
−40% monthly AWShealthcare client, performance improved
US & EU hoursresponse within 4 h · EN · UK · RU
Available nowimmediate start on consulting engagements

How I work

Fixed shape, so you know what happens when

Week one ends with the drawing for your system; I stay reachable after handover.

  1. WEEK 1

    Discovery & drawing

    Architecture review, cost baseline, risks — and the diagram, for your system.

  2. WEEK 2

    Foundations as code

    Terraform modules, environments, CI/CD with plan/apply gates.

  3. WEEK 3

    Platform & data

    EKS/ECS, RDS, networking, right-sizing, monitoring.

  4. WEEK 4+

    Controls & handover

    Security and compliance controls, runbooks, pairing with your team.

Services

Six shapes of the same problem

Infrastructure that slows the company down — and what I do about it.

The situationWhat I doWhat changes
Deploys take hours and someone has to babysit themTerraform + CI/CD, environments as code (GitHub Actions, GitLab CI, Azure DevOps, Jenkins, AWS CodePipeline)hours → minutes · −95% manual steps
Moving to AWS — or out of a mess on AWSLanding zone, migration plan, cut-over with rollbackzero-downtime cut-over
The AWS bill grows faster than the companyRight-sizing, savings plans, architecture fixes, cost governance−30…50% monthly
Healthcare or fintech: auditors are comingHIPAA / PCI-DSS controls: encryption, IAM, logging, accessaudit-ready, documented
Kubernetes that only one person understandsEKS / ECS / Fargate platform, observability, runbooksa platform your team can run
Nobody knows what runs whereInventory, infrastructure as code, monitoring (CloudWatch, Datadog, New Relic, ELK)visibility · alerts that matter

Results

Case notes

Telehealth startup

Head of Infrastructure

Nationwide platform that had to be HIPAA-compliant across regions. Landing zone, encryption and access controls, Terraform, monitoring.

“Exceptional AWS expertise and reliability. Built our HIPAA-compliant infrastructure that scales seamlessly across regions.”

99.9% uptime · audit-ready

Healthcare technology

VP Engineering

DevOps practice had stalled and the bill was out of proportion. Pipeline rebuild, right-sizing, cost governance.

“Transformed our entire DevOps practice. The AWS cost optimization alone saved us 40% monthly while improving performance.”

−40% monthly · faster deploys

E-commerce platform (Spryker Systems)

CTO

Fortune 500 clients and hours-long deploys. Migration cut-over, EKS and CodePipeline automation.

“Delivered our AWS migration with blazing speed. The infrastructure expertise and automation reduced our deployment time from hours to minutes.”

hours → minutes · 300% faster deployments

Also: enterprise manufacturing (aerospace & automotive PLM/CAD, −60% release cycles) · cybersecurity platforms (10,000+ endpoints) · insurance and fintech (cloud-native rebuilds of legacy systems).

Credentials

Certified where it matters, fluent where it counts

  • AWSCertified Solutions Architect – Professional
  • AWSCertified DevOps Engineer – Professional
  • AWSCertified Security – Specialty
  • AWS+7 more AWS certifications
  • CNCFCertified Kubernetes Administrator (CKA)
  • HashiCorpCertified: Terraform Associate
  • EDUComputer-aided Systems · Business Economics
  • LANGEnglish · Ukrainian · Russian

Open source · built by me

ConnectionApp — one click to any private RDS, no bastions to babysit

The tool I wish every client team had: AWS SSM tunnels to RDS — and to VNC, RDP and SSH behind the bastion — credentials on demand, single sign-on. Free, MIT-licensed, macOS · Linux.

See the product →
ConnectionApp on macOS: saved database connections grouped by client, one click to connect
ConnectionApp 3.7.8 · real UI, demo data · brew install --cask yarka-guru/tap/connection-app

FAQ

Frequently asked questions

What services does Iaroslav Pyrogov (Yarka.Guru) provide?

AWS DevOps consulting: migration to AWS, CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins, AWS CodePipeline), Infrastructure as Code with Terraform and CloudFormation, Kubernetes and containers (EKS, ECS, Fargate), monitoring and observability, security and compliance (HIPAA, PCI-DSS), and AWS cost optimization.

What AWS certifications and experience does he have?

20+ years of infrastructure experience and 10 AWS certifications, including AWS Certified Solutions Architect – Professional, AWS Certified DevOps Engineer – Professional and AWS Certified Security – Specialty, plus Certified Kubernetes Administrator (CKA) and HashiCorp Terraform Associate.

Can you build HIPAA-compliant infrastructure on AWS?

Yes. Iaroslav has built HIPAA-compliant AWS infrastructure for nationwide telehealth and digital-health platforms with 99.9% uptime, and PCI-DSS-compliant environments for insurance and fintech companies.

How much can AWS cost optimization save?

Typically 30–50% of monthly AWS spend while improving performance, through right-sizing, cost management and architecture changes. One healthcare client reported 40% lower monthly costs.

Which time zones and languages do you work in?

Clients are served globally with US and EU time-zone coverage. Communication in English, Ukrainian and Russian; typical response time is within 4 hours.

How do I start working with you?

Book a free 30-minute consultation at calendly.com/iaroslavpyrogov/30min or connect on LinkedIn. Available for immediate start on consulting engagements.

Next step

30 minutes. Bring your architecture — or the bill.

A free call: I'll tell you what I'd change and whether it makes sense to work together. Available for immediate start, US & EU hours.