Yuri (IURII) Trukhin

Director of Infrastructure at CloudLinux, reporting to the CEO · Amsterdam · @trukhinyuri

I build and scale cloud, GPU and AI platforms end to end, from architecture, code and multi-datacenter operations to full P&L and autonomous AI agent systems.

Yuri (IURII) Trukhin

As a hands-on Director of Infrastructure at CloudLinux, reporting to the CEO, I direct global infrastructure, cloud economics, platform reliability and software supply chain security across CloudLinux and TuxCare, and led the company-wide move to AI coding agents. Previously, as Head of Cloud Platform at MTS Web Services (#CloudMTS) and the first employee in MTS's cloud engineering department, I turned an internal hobby project into the Cloud Hub platform and Cloud Billing engine, authored Open Cloud Standard v1 and v2 for first-class multi-tenant cloud services, built the provider's entire engineering vertical and 14 cloud services end to end, scaled the business to more than €40M in annual recurring revenue (#2 in regional IaaS), launched and ran a commercial NVIDIA V100 GPU cloud from 1 to 4 petaflops, and led a 140+ person organization with full P&L ownership; I also served as CTO of InfoboxCloud and drove Cloud, AI and DevOps product direction on the IntelliJ Platform at JetBrains for 15M+ developers. Today I also build TRUKHIN #CloudRING on OCSv3, run autonomous multi-agent engineering harnesses across 300M+ daily tokens, and ship upstream code across the Linux kernel, open-source AI agent, Kubernetes GPU scheduling, cloud storage and supply-chain security platforms.

LinkedIn · GitHub · X · yuri@trukhin.com

Selected outcomes

Experience

  1. to now

    CloudLinux · Director of Infrastructure

    Executive scope and organization

    I report to the CloudLinux CEO and direct the global infrastructure organization serving CloudLinux and TuxCare: hybrid data centers and cloud platforms, global networks, CI/CD and developer platforms, observability, infrastructure security and incident response. I authored the 2026 infrastructure strategy, restructured the department into service-aligned platform, storage, IaaS and automation teams, established transparent incident and postmortem governance, and scaled engineering leadership across networking, databases and Kubernetes.

    Enterprise AI transformation

    I proposed and led the company-wide engineering move to Claude Code as its standard AI coding tool, establishing the governance, security rules and budget controls for AI subscriptions, API keys and agent-assisted software delivery, alongside read-only-by-default agentic verification across our infrastructure and observability estate.

    Cloud economics and platform architecture

    I own the multi-year capacity and spend architecture with the CEO and product leaders: annual capacity planning, 12-month financial forecasting, investment governance for material purchases, one-year cloud commitments and department-level FinOps attribution. Architecturally, I drive the evolution of our compute, storage and network footprint: piloting bare-metal KubeVirt as our next virtualization platform, re-architecting high-throughput build and storage tiers across Ceph and NVMe, unifying observability on Grafana, Loki, Mimir and Tempo with service SLOs, and operating redundant multi-site BGP and IPsec fabrics with automated disaster recovery validation across our OpenNebula estate.

    Interim CSO and supply chain security

    In autumn 2025 I also covered the chief security officer role for CloudLinux and TuxCare on an interim basis, alongside my infrastructure mandate, until the permanent CSO joined in November after I redesigned the role profile, led the executive interviews and recommended the hire. I directed security operations and incident response, defined our code-enforced zero-trust access architecture with automated drift detection, delivered infrastructure's part of the SOC 2 Type II audit, aligned incident governance with NIS2, the EU Cyber Resilience Act, GDPR and ISO 27001, and architected SLSA Build Level 3 software supply chain security with isolated ephemeral runners and cryptographically signed daily provenance audits.

  2. –

    JetBrains · Lead Product (IntelliJ Platform)

    Cloud, AI and DevOps product direction

    I set product direction for cloud, AI and DevOps on the IntelliJ Platform, which most JetBrains IDEs are built on. More than 15 million developers use JetBrains tools. I led the launch of Docker, Kubernetes and AI workflow features: their adoption grew 3x and NPS rose by 25 points. I owned the roadmap and priorities and worked with engineering, design and go-to-market teams to ship features that solved real customer problems, basing those calls on user research, feedback and usage data. My area also covered developer environments: WSL, Docker and Dev Containers, including an upstream contribution merged into the Dev Containers specification in January 2024. For the terminal, I analyzed user feedback and where the legacy engine broke POSIX and terminal standards, and led the product case for a standards-compliant core capable of running modern native CLI tools and AI coding agents; JetBrains rebuilt it and made it the default in JetBrains IDEs in 2025.2.

  3. –

    MTS · Head of Cloud Platform, MTS Web Services

    Employee #1 to hyperscaler: Cloud Hub, Cloud Billing, Open Cloud Standard v1/v2 and 14 cloud services

    MTS is the largest telecom operator in the CIS, with more than 90 million customers. I joined as the first employee in MTS's cloud engineering department and built the #CloudMTS (MTS Web Services, MWS) hyperscaler end to end, from initial idea and strategy to architecture, implementation and live service operation. Starting from an internal hobby project, I created Cloud Hub and Cloud Billing — the core cloud platform and billing engine — and built the provider's entire engineering vertical and operating processes across sales, customer onboarding, service provisioning, billing and support. I authored Open Cloud Standard v1 and v2, which enabled third-party companies and developers to build first-class multi-tenant cloud services extending #CloudMTS, and launched 14 cloud services across compute, storage, Kubernetes, IoT and AI/ML.

    €40M+ ARR (#2 in regional IaaS), 1 → 4 PFLOPS GPU SuperCloud and 140+ organization

    In 30 months I built and scaled the cloud business from a startup to more than €40M in annual recurring revenue; by MTS's 2020 annual report it was number two in regional IaaS by revenue. One of our flagship services was the GPU cloud: launched in July 2019 on NVIDIA DGX-1 with Tesla V100 GPUs at 1 petaflop, it grew to 4 petaflops by November 2020. In 2019–2020 I ran it as a product, with V100 and vGPU configurations, pricing and customer scenarios for AI training and inference, and presented it at AI Journey. I led more than 140 people in product, platform engineering and operations, headed the cloud development center and platform and services engineering at MTS Web Services (MWS), owned the full P&L, beat our revenue and EBITDA targets year after year, and built the go-to-market plans and partner channels that brought customers in faster and kept them with us longer.

  4. –

    Infobox · Cloud strategist and evangelist, CTO from 2017

    Cloud strategy, CTO mandate and European multi-DC expansion

    Infobox was one of the first hosting providers in the CIS and the region's first cloud provider, now part of Astra Group. I ran cloud strategy and product development for InfoboxCloud, owned its P&L and EBITDA, and became CTO in 2017. I launched its first IaaS, PaaS and SaaS products, which brought in more customers and kept more of them, opened data centers in Amsterdam and across three regional availability zones, and made InfoboxCloud the fourth-largest Jelastic PaaS provider in the world. Cloud revenue tripled in 18 months. In 2015 we won the hosting category of Microsoft's partner solutions competition with Office24, our sovereign-hosted alternative to Office 365, and we won it again in 2016.

  5. –

    CNIP GIS, Tver · Researcher, then lead software engineer and architect

    Distributed data systems and scientific computing

    I built systems to store, process and analyze geological data for oil and gas, and they made reserve calculations much faster and more accurate. In 2008 I designed a corporate geological data bank for the company. I built plugins and analysis tools that made geologists and engineers more productive.

Outside my day job

Open-source cloud platform: TRUKHIN #CloudRING and OCSv3

I founded TRUKHIN #CloudRING, an open-source cloud platform for independent and sovereign cloud providers, and I'm its lead maintainer. At its core is OCSv3 — the third generation of the Open Cloud Standard I originated in production — an open contract between a provider's platform and the services it offers, with hexagonal provider ports and zero-dependency Go and Rust SDKs designed so that a service built once runs at any provider that adopts it. I build it in the open as an AI-native software factory: coordinated fleets of AI agents write, review and test the code under my architectural direction, I decide what merges, and a goal counts as done only when verified on a live deployment. Releases carry Sigstore-signed SLSA Build Level 3 provenance and CycloneDX SBOMs, and every release bundle is built twice from source to match byte for byte before attestation.

Autonomous multi-agent harness: 300M+ daily tokens across 60+ systems

For the past two years I have spent thousands of hours designing and running autonomous multi-agent systems across more than 300M tokens of daily production and R&D workloads. My open-source and executive engineering harness orchestrates frontier models (OpenAI Codex, Anthropic Claude and Google Gemini) across 60+ cloud, observability and developer systems: agents dynamically select the model and reasoning depth for each step, execute read-only discovery and live-state verification autonomously, and halt at cryptographic approval boundaries before any external write. I publish the methodology and open-source building blocks on GitHub and in my BYTEBURST engineering series: my Codex plugins break a large goal into outcomes and experiments (Recursive Outcome Delivery), delegate tasks to other agent CLIs across vendor boundaries, and forecast usage budgets across multi-agent fleets.

Upstream open-source contributions: Linux kernel, Rook Ceph, OpenClaw and cloud infrastructure

I also contribute upstream across the Linux kernel and open-source AI agent, GPU cluster, cloud storage, FinOps and supply-chain security platforms. In OpenClaw (390k+ GitHub stars), I shipped a merged fix for headless browser passkey automation, alongside upstream pull requests for code-aware FTS5 memory search, browser viewport scaling, multi-session tab eviction, inter-session reply policies and macOS HDR clipboard handling. Across the AI and cloud infrastructure stack, I shipped merged upstream contributions to Rook Ceph operators, ChromeDevTools/chrome-devtools-mcp, the Development Containers specification (devcontainers/spec) and aigentive/RalphX, and authored upstream patches and pull requests for the Linux kernel (arm64 mmap ASLR entropy reviewed by Kees Cook, ACPICA AML parser and checkpatch), puppeteer/puppeteer, Kubernetes SIGs Kueue, Nebius Soperator for Slurm on Kubernetes, NVIDIA NVSentinel GPU fault remediation, vLLM AIBrix inference control plane, Ceph BlueStore and RGW, Ceph CSI and Kubernetes CSI-Addons, Kata Containers, OpenNebula hypervisor and scheduler, Apache MINA SSHD, Jenkins Pipeline and Prometheus plugins, CNCF OpenCost, Chainguard apko SLSA builders, Sigstore Cosign verification and Grafana Mimir prometheus analyzer.

Talks and writing

More talks and articles

From the blog

All posts · RSS

Elsewhere

Music, outside work

I write and release music as a hobby, as IURII TRUKHIN.