Ioan Tătaru

I build and run the infrastructure that carries voice and SMS traffic between carriers, from the SIP signalling layer down to the servers and network under it.

For three years I’ve worked in wholesale telecom, where a dropped call can’t be retried. Failover has to work while the calls are up.

What I’ve built

• A carrier session border controller on Kamailio and RTPengine, with VRRP failover, kernel media forwarding, live reconfiguration with no restarts, and a Next.js control plane.
• Call-control and routing engines on Asterisk (AGI/ARI) and FreeSWITCH (mod_lua), plus a G.729 codec module in C.
• The move off a legacy SS7 hardware estate onto Proxmox VE and VMware ESXi, and from Cisco Catalyst to Arista switching, both on live traffic.
• Kubernetes (k3s, Ceph/Rook, Rancher) with GitOps delivery through Argo CD from GitHub and Gitea, and Bunnyshell for ephemeral preview environments.
• Monitoring in Prometheus, Grafana and Alertmanager, paged through PagerDuty, with per-trunk ASR, ACD and PDD, so a regression shows up on a dashboard before a partner reports it.
• Central audit logging into VictoriaLogs and Wazuh.
• Fleet automation with Ansible: EOL migrations (Gentoo, CentOS 7, Debian 6-8) to Debian 12, key-only SSH baselines, and NetBox as the single IPAM/DCIM source of truth.
• Keycloak SSO across internal platforms and per-user TACACS+/RADIUS on network devices.
• Python FastMCP servers that give AI assistants read-only, least-privilege access to infrastructure data.