Freelancer | Kubernetes Expert (Kubestronaut) | Cloud Engineer

2/2025 – offen

- Setup Google Foundation (GCP) with Terraform (Bootstrap, Organization, Environments, Networks, Projects) , OPA Gateway and Github Actions
- Cloud Architect: Build up a Hub-and-Spoke network environment (Firewall, SVPC, private DNS, NAT Gateway, NextHop VMs, etc.)
- Connect OnPremise-Systems via Cloud VPN with internal Cloud components
- Implement a private GKE cluster in spoke SVPC with network tags to be compatible with Hub-and-Spoke
- Setup a developer platform via GKE (Kubernetes cluster) with ArgoCD, Prometheus, Grafana, CloudNativePG, Jaeger Tracing (with Cassandra Operator) / OpenTelemetry, Cilium, Dependency Track, KeyCloak (IAM), Falco, Kyverno, Velero, Sealed Secrets, SonarQube, and Trivy
- Postgres provisioning via CloudnativePG - backup and restore postgres clusters with Cloud Buckets
- Google Certifications: Google Cloud Certified Digital Leader, Google Cloud Certified
Associate Cloud Engineer

Network Architect, Google Cloud, Enterprise Architect, Kubernetes

8/2024 – 7/2025

- DevOps-Transformation von OnPremise-Applikationen in die Azure Cloud mittels IaC (Terraform), Helm Charts, GitOps (ArgoCD) und Manifesten
- Arbeit mit Linux Server Distributionen
- Provisionierung Wartung von AKS (Kubernetes) Clustern
- Volle Provisionierung von Grafana Manifesten (Dashboards, Alerts, usw) mittels IaC und Helm Charts
- Berater bei Architekturentscheidungen bzgl. Azure Komponenten und Kubernetes
- Handeln als Azure-Architekt und verantwortlich für die Implementierung
- Verwendete Azure Cloud Komponenten: Azure Application Gateway, AKS (Kubernetes), Azure Storage Accounts (Container), Azure Firewall, Web Application Firewall (WAF), Azure KeyVault, and Bastionhost
- Erstellung einer Hub-And-Spoke VNET Architektur
- Postgres-Migration von OnPremise-Umgebungen in die Azure Cloud mittels Active-Standby Prinzipien (Crunchy Operator)
- Implementierung von Cloud Logging durch Datenerfassung, die in einen Cloud-Speicher gestreamt werden, und Scrapen dieser Daten über Fluentbit und Visualisierung über OpenSearch (+ Operator)

Cloud Spezialist, Database Manager, Kubernetes, Microsoft Azure

11/2022 – 7/2024

- Management, further development, optimization and maintenance of Kubernetes clusters with over 1200 applications (Rancher), improving deployment efficiency by 30% and reducing downtime by 15%
- DevOps transformation from on-premise applications to Kubernetes using IaC, Helm Charts, GitOps and manifests
- Working with Linux server distributions
- Automated integration and deployment with GitLab CI/CD (.NetCore, Java, Golang, NodeJS), using jobs such as builds, tests, vulnerability scans, integration tests, deployment and notifications
- Introduction of GitOps using ArgoCD and Gitlab runners
- Integration of logging, tracing and monitoring using Grafana, Prometheus, Grafana Mimir, Jaeger, Opentelemetry, Opensearch, InfluxDB, and Sentry
- Integration of endpoints with Prometheus metrics in applications (.NetCore, Java, Golang, NodeJS), as well as sidecar tracing using OpenTelemetry Operator
- Full provisioning of Grafana manifests (dashboards, alerts, etc.) using IaC and Helm Charts
- Introduction of a decoupled IAM system using Keycloak (Operator) and OAuth2-Proxy
- Education and training of developers and system administrators in Kubernetes, observability and SRE approaches
- Consultant for architecture decisions regarding microservices in Kubernetes and tools, as well as databases
- Introduction of DevSecOps in CI/CD pipelines and Kubernetes - with tools such as HashiCorp Vault, Kyverno and Trivy
- Evaluation of the Confluent Kafka Operator in Kubernetes
- Deploy and maintain Strimzi Kafka Operator, Strimzi Kafka Clusters, Kafka-Rest-Proxy, Kafka Bridge, KSQL, AKHQ, Schema-Registry, and Kafka Connect
- Setting up K3s clusters in VPN
- Working with 5 teams according to agile principles; leading retrospectives and other agile ceremonies
- Introduction of integration tests with K6 Grafana
- Implementation of a notification system with Angular, NestJs, GraphQL, Postgres, VerneMQ and Golang
- Web development with Angular and NestJs
- Postgres cluster provisioning via CloudnativePG
- Provisioning and maintenance of MinIO to backup and restore postgres clusters
- Implement an API-Gateway via NgINX Fabric, OAuthProxy2 and Emissary Ingress

Access Management, Advanced Message Queuing Protocol, Angular, Continuous Integration, Docker, Golang, Graphql, Kubernetes, Postgresql