freiberufler Platform Architect & Automation Consultant | OpenShift, Kubernetes, Ansible & RHEL | RHCA auf freelance.de

Platform Architect & Automation Consultant | OpenShift, Kubernetes, Ansible & RHEL | RHCA

zuletzt online vor 7 Tagen
  • 150€/Stunde
  • Zossen bei Berlin
  • auf Anfrage
  • de  |  en
  • 17.08.2026
  • Contract ready

Kurzvorstellung

Platform Architect and Automation Consultant with 15+ years of hands-on experience designing and operating secure, production-ready platforms. Focus areas include OpenShift, Kubernetes, Ansible Automation Platform, RHEL, Security by Design, GitOps an

Geschäftsdaten

 Gewerbetreibend
 Steuernummer bekannt
 Berufshaftpflichtversicherung aktiv

Qualifikationen

  • Ansible1 J.
  • Artifactory
  • DevOps2 J.
  • Docker
  • Infrastrukturarchitektur
  • Keycloak
  • Kubernetes1 J.
  • Openshift1 J.
  • Red Hat Enterprise Linux (RHEL)2 J.
  • Red Hat Satellite

Projekt‐ & Berufserfahrung

Enterprise RHEL CIS Hardening & Remediation Automation
Kundenname anonymisiert, Munich
6/2026 – 6/2026 (1 Monat)
Finanzdienstleister
Tätigkeitszeitraum

6/2026 – 6/2026

Tätigkeitsbeschreibung

Role: Cybersecurity Hardening Specialist
Scope: Security architecture, CIS hardening, Python-based automation framework and rollout management
Result: Designed a CIS Level 2 Server hardening approach for Red Hat Enterprise Linux 8 and 9 systems.
Defined the target hardening approach based on CIS Level 2 Server requirements for RHEL 8 and RHEL 9.
Developed Python-based automation to support system categorization, hardening assessment and remediation tracking.

Eingesetzte Qualifikationen

Cyber Security, Python, Red Hat Enterprise Linux (RHEL), Ansible

Containerized Ansible Automation Platform on RHEL 9
Kundenname anonymisiert, Bonn
6/2026 – 6/2026 (1 Monat)
Öffentliche Verwaltung
Tätigkeitszeitraum

6/2026 – 6/2026

Tätigkeitsbeschreibung

Role: Architect & DevOps Engineer
Scope: Air-gapped platform architecture, containerized implementation, execution node design and operational enablement
Result: Designed and implemented a containerized Red Hat Ansible Automation Platform deployment for an air-gapped environment on Red Hat Enterprise Linux 9.
Planned the target architecture for a containerized AAP deployment in a disconnected environment.
Designed the Execution Node layout with multiple nodes per zone to support distributed automation execution.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL), Ansible

Containerized Ansible Automation Platform on RHEL 9
Kundenname anonymisiert, Bonn
5/2026 – 6/2026 (2 Monate)
Öffentliche Verwaltung
Tätigkeitszeitraum

5/2026 – 6/2026

Tätigkeitsbeschreibung

Role: Architect & DevOps Engineer
Scope: Air-gapped platform architecture, containerized implementation, Ansible automation and operational enablement
Result: Designed and implemented a containerized Red Hat Ansible Automation Platform deployment for an air-gapped environment on Red Hat Enterprise Linux 9.
Planned the target architecture for a containerized AAP deployment in a disconnected environment.
Automated installation and configuration activities using Ansible to ensure repeatable deployments.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL), Ansible

Containerized Ansible Automation Platform on RHEL 10
Kundenname anonymisiert, Bonn
5/2026 – 5/2026 (1 Monat)
Öffentliche Verwaltung
Tätigkeitszeitraum

5/2026 – 5/2026

Tätigkeitsbeschreibung

Role: Architect & DevOps Engineer
Scope: Air-gapped platform architecture, containerized implementation, Ansible automation and operational enablement
Result: Designed and implemented a containerized Red Hat Ansible Automation Platform deployment for an air-gapped environment on Red Hat Enterprise Linux 10.
Planned the target architecture for a containerized AAP deployment in a disconnected environment.
Automated installation and configuration activities using Ansible to ensure repeatable deployments.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL), Ansible

Containerized Ansible Automation Platform on RHEL 10
Kundenname anonymisiert, Bonn
2/2026 – 4/2026 (3 Monate)
Logistikdienstleister
Tätigkeitszeitraum

2/2026 – 4/2026

Tätigkeitsbeschreibung

Role: Architect & DevOps Engineer
Scope: Air-gapped platform architecture, containerized implementation, Ansible automation and operational enablement
Result: Designed and implemented a containerized Red Hat Ansible Automation Platform deployment for an air-gapped environment on Red Hat Enterprise Linux 10.
Planned the target architecture for a containerized AAP deployment in a disconnected environment.
Automated installation and configuration activities using Ansible to ensure repeatable deployments.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL), Ansible

Rancher Kubernetes Platform on OVH Cloud
Kundenname anonymisiert, Essen
1/2026 – 4/2026 (4 Monate)
IT & Entwicklung
Tätigkeitszeitraum

1/2026 – 4/2026

Tätigkeitsbeschreibung

Role: Architect & DevOps Engineer
Scope: Kubernetes platform implementation, cloud infrastructure setup, GitOps automation and operational enablement
Result: Designed and implemented a Kubernetes platform on OVH Cloud managed through Rancher.
Deployed and configured Rancher for centralized Kubernetes cluster management.
Integrated Argo CD to enable GitOps-based application deployment and configuration management.

Eingesetzte Qualifikationen

DevOps, Ansible, Kubernetes

AIO 2.0 & ModuLix — Platform Automation
Kundenname anonymisiert, Zossen
1/2026 – offen (8 Monate)
IT & Entwicklung
Tätigkeitszeitraum

1/2026 – offen

Tätigkeitsbeschreibung

Role: Product Architect – Platform Automation & Delivery
Scope: Product architecture, modular platform design, blueprint-based delivery and automation standardization
Result: Established reusable, modular platform-delivery patterns and governed automation workflows.
Defined the modular product architecture for platform delivery across infrastructure, automation, security and operations domains.
Designed reusable building blocks for GitOps, Identity and Access Management (IAM), observability, storage, automation, security and platform operations.

Eingesetzte Qualifikationen

DevOps, Red Hat Enterprise Linux (RHEL), Ansible, Openshift

Platform Architect — OpenShift Security
Federal Institute, Bonn
1/2026 – offen (8 Monate)
Öffentliche Verwaltung
Tätigkeitszeitraum

1/2026 – offen

Tätigkeitsbeschreibung

Überführung und Weiterentwicklung einer Enterprise-OpenShift-4-Plattform in einen stabilen Produktionsbetrieb. Betrieb mehrerer Cluster auf VMware vSphere, Integration von ACS und ACM, GitOps mit Argo CD, CI/CD mit GitLab Runner sowie zentralem IAM mit Red Hat Build of Keycloak. Automatisierung, Governance, Lifecycle Management und auditierbare Day-2 Operations standen im Mittelpunkt.

Eingesetzte Qualifikationen

DevOps, Cyber Security, Ansible, Kubernetes, Openshift

OVH Cloud Secure VPN Integration
Kundenname anonymisiert, Essen
9/2025 – 12/2025 (4 Monate)
IT & Entwicklung
Tätigkeitszeitraum

9/2025 – 12/2025

Tätigkeitsbeschreibung

Role: Cybersecurity Specialist and Architect
Scope: Security architecture, network design, VPN integration and cloud connectivity planning
Result: Designed the secure connectivity concept between an OVH Cloud environment and private IT infrastructure.
Designed the target architecture for VPN-based connectivity between OVH Cloud and private IT environments.
Planned the network layout, routing approach and segmentation model for a high-security environment.

Eingesetzte Qualifikationen

Cyber Security, Infrastrukturarchitektur, Kubernetes

Keycloak Workshop & Training Environment
Kundenname anonymisiert, Siegburg
9/2025 – 9/2025 (1 Monat)
IT & Entwicklung
Tätigkeitszeitraum

9/2025 – 9/2025

Tätigkeitsbeschreibung

Role: Corporate Trainer
Scope: Workshop delivery, training material creation and self-service lab enablement
Result: Delivered a compact Keycloak workshop based on a pre-provisioned lab environment.
Prepared a self-contained Keycloak lab environment with Docker Compose.
Created workshop materials, examples and guided exercise documentation.

Eingesetzte Qualifikationen

Docker

Enterprise OpenShift Security & Container Platform
Kundenname anonymisiert, Bonn
1/2025 – 1/2026 (1 Jahr, 1 Monat)
Öffentliche Verwaltung
Tätigkeitszeitraum

1/2025 – 1/2026

Tätigkeitsbeschreibung

Role: Architect & DevOps Engineer
Scope: Secure platform architecture, implementation, automation, governance and production enablement
Result: Designed and implemented an enterprise container platform based on Red Hat OpenShift 4 on VMware vSphere.
Architected and implemented multiple OpenShift 4 clusters on VMware vSphere.
Integrated Red Hat Advanced Cluster Security for Kubernetes to support vulnerability management, compliance checks and runtime security.

Eingesetzte Qualifikationen

DevOps, Cyber Security, Ansible, Kubernetes, Openshift

Red Hat Satellite 6 Migration Workshop
Kundenname anonymisiert, Bern
11/2016 – 11/2016 (1 Monat)
Versicherungen
Tätigkeitszeitraum

11/2016 – 11/2016

Tätigkeitsbeschreibung

Role: Author & Trainer
Scope: Workshop planning, customer-specific training material creation and migration enablement
Result: Planned and delivered a Red Hat Satellite 6 migration workshop.
Planned the workshop structure and migration-related training agenda.
Created customer-specific documentation and training materials.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL)

Satellite 5 to Satellite 6 Migration
Kundenname anonymisiert, Cologne
10/2016 – 11/2016 (2 Monate)
Automobilindustrie
Tätigkeitszeitraum

10/2016 – 11/2016

Tätigkeitsbeschreibung

Role: Solution Architect
Scope: Migration architecture, automated provisioning, configuration management and patch automation
Result: Planned the migration from Satellite 5 to Red Hat Satellite 6.
Designed the target architecture for the Satellite 5 to Satellite 6 migration.
Planned and implemented automated PXE-based installation for physical and virtual systems.

Eingesetzte Qualifikationen

DevOps, Python, Red Hat Enterprise Linux (RHEL)

JBoss Installation Process Harmonization
Kundenname anonymisiert, Stuttgart
5/2016 – 7/2016 (3 Monate)
Automobilindustrie
Tätigkeitszeitraum

5/2016 – 7/2016

Tätigkeitsbeschreibung

Role: Consultant
Scope: Installation process optimization, Puppet automation and application provisioning standardization
Result: Harmonized and optimized existing JBoss installation processes.
Analyzed existing JBoss installation procedures and identified optimization potential.
Implemented a configurable Puppet-based setup process for JBoss deployments.

Eingesetzte Qualifikationen

DevOps, Red Hat Enterprise Linux (RHEL)

Satellite 5 to Satellite 6 Migration
Kundenname anonymisiert, Düsseldorf
3/2016 – 4/2016 (2 Monate)
Großhandel
Tätigkeitszeitraum

3/2016 – 4/2016

Tätigkeitsbeschreibung

Role: Solution Architect
Scope: Migration architecture, automated provisioning, configuration management and identity integration
Result: Planned and implemented the migration from Satellite 5 to Red Hat Satellite 6.
Designed and implemented the target architecture for the Satellite 5 to Satellite 6 migration.
Planned and implemented automated PXE-based installation for physical and virtual systems.

Eingesetzte Qualifikationen

DevOps, Python, Red Hat Enterprise Linux (RHEL)

Fully Automated Deployment Processes
Kundenname anonymisiert, Vienna
3/2016 – 3/2016 (1 Monat)
Öffentliche Verwaltung
Tätigkeitszeitraum

3/2016 – 3/2016

Tätigkeitsbeschreibung

Role: Solution Architect
Scope: Deployment architecture, RPM packaging, Puppet module delivery and Jenkins automation
Result: Planned and implemented fully automated deployment processes for Linux infrastructure environments.
Designed the architecture for automated deployment and software distribution workflows.
Implemented Mock-based RPM packaging for controlled and repeatable package builds.

Eingesetzte Qualifikationen

DevOps, Red Hat Enterprise Linux (RHEL)

SAP NetWeaver High Availability Platform
Kundenname anonymisiert, Stuttgart
2/2016 – 3/2016 (2 Monate)
Automobilindustrie
Tätigkeitszeitraum

2/2016 – 3/2016

Tätigkeitsbeschreibung

Role: Consultant
Scope: HA architecture implementation, cluster setup and business application platform enablement
Result: Implemented several SAP NetWeaver high availability clusters on Red Hat Enterprise Linux 7.
Configured Pacemaker-based cluster resources and failover logic.
Supported high availability requirements for business-critical SAP application workloads.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL)

Satellite 5 to Satellite 6 Migration
Kundenname anonymisiert, Hanover
10/2015 – 11/2015 (2 Monate)
IT & Entwicklung
Tätigkeitszeitraum

10/2015 – 11/2015

Tätigkeitsbeschreibung

Role: Consultant
Scope: Migration implementation, automated provisioning, configuration management and API automation
Result: Implemented the migration from Satellite 5 to Red Hat Satellite 6.
Implemented automated PXE-based provisioning for physical IBM POWER7 systems and virtual machines.
Automated existing installation workflows to improve consistency and reduce manual effort.

Eingesetzte Qualifikationen

Python, Red Hat Enterprise Linux (RHEL)

Red Hat Satellite 6 System Management Platform Extension
Kundenname anonymisiert, Vienna
10/2015 – 10/2015 (1 Monat)
Öffentliche Verwaltung
Tätigkeitszeitraum

10/2015 – 10/2015

Tätigkeitsbeschreibung

Role: Junior Consultant
Scope: Satellite implementation, platform extension and Puppet-based configuration management
Result: Extended an existing Red Hat Satellite 6 system management platform.
Implemented and extended the existing Red Hat Satellite 6 server environment.
Planned the configuration management approach based on Puppet.

Eingesetzte Qualifikationen

DevOps, Red Hat Enterprise Linux (RHEL)

Automated Provisioning Environment Review
Kundenname anonymisiert, Hamburg
9/2015 – 10/2015 (2 Monate)
Versicherungen
Tätigkeitszeitraum

9/2015 – 10/2015

Tätigkeitsbeschreibung

Role: Junior Consultant
Scope: Provisioning review, Satellite optimization and patch management extension
Result: Reviewed an existing automated provisioning environment based on Red Hat Satellite.
Reviewed the existing Satellite-based provisioning workflow and identified optimization potential.
Implemented improvements to the automated provisioning environment.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL)

OpenSCAP Implementation & Audit Log Analysis
Kundenname anonymisiert, Cologne
7/2015 – 8/2015 (2 Monate)
Automobilindustrie
Tätigkeitszeitraum

7/2015 – 8/2015

Tätigkeitsbeschreibung

Role: Junior Consultant
Scope: OpenSCAP implementation, security assessment enablement and audit log analysis automation
Result: Consulted on and implemented OpenSCAP for Linux security assessment and compliance validation.
Supported configuration review and validation of Linux systems.
Developed Bash-based auditd log analysis tools.

Eingesetzte Qualifikationen

Cyber Security, Red Hat Enterprise Linux (RHEL)

SSL VPN Cluster Update & Review
Kundenname anonymisiert, Stuttgart
6/2015 – 7/2015 (2 Monate)
Versicherungen
Tätigkeitszeitraum

6/2015 – 7/2015

Tätigkeitsbeschreibung

Role: Junior Consultant
Scope: SSL VPN cluster update, architecture review and improvement consulting
Result: Updated an existing Juniper SSL VPN cluster environment.
Performed the SSL VPN cluster update.
Reviewed the existing SSL VPN architecture and configuration logic.

Eingesetzte Qualifikationen

Cyber Security

Automated JBoss Installation Process
Kundenname anonymisiert, Stuttgart
2/2015 – 9/2015 (8 Monate)
Finanzdienstleister
Tätigkeitszeitraum

2/2015 – 9/2015

Tätigkeitsbeschreibung

Role: Junior Consultant
Scope: Installation architecture, decentralized deployment automation and application server provisioning
Result: Planned and implemented an automated installation process for JBoss application servers.
Designed the installation process for JBoss application server environments.
Implemented decentralized setup routines for JBoss servers and instances.

Eingesetzte Qualifikationen

Red Hat Enterprise Linux (RHEL)

Check Point Firewall Cluster Administration
Kundenname anonymisiert, Paris
6/2013 – 6/2015 (2 Jahre, 1 Monat)
Automobilindustrie
Tätigkeitszeitraum

6/2013 – 6/2015

Tätigkeitsbeschreibung

Role: Administrator
Scope: Firewall cluster installation, troubleshooting and operational administration
Result: Installed and administered Check Point R75 firewall cluster environments.
Performed cluster debugging and issue analysis.
Supported operational administration of multiple firewall cluster environments.

Eingesetzte Qualifikationen

Cyber Security

Zertifikate

Red Hat Certified Architect(RHCA)
2018

Ausbildung

Fachinformatiker für Systemintegration
Ausbildung
2013
Stuttgart

Über mich

Architecture ownership meets hands-on delivery: I design, automate and transition secure platforms into stable operations—from OpenShift/Kubernetes and RHEL to Ansible Automation Platform, GitOps, Identity & Secrets, observability, hardening and lifecycle management.

As a Red Hat Certified Architect, I combine Linux, container, automation, virtualization, network and security expertise with customer-focused architecture work. Solutions are vendor-neutral and aligned with the required support model, risk profile and operational needs—using enterprise products or open-source and community alternatives.

Automation is the core design principle for deployment, configuration, security controls, lifecycle processes and Day 2 Operations. My work also includes workshops, architecture decisions, technical leadership, documentation and controlled handovers, alongside hands-on implementation.

Experienced in regulated and critical environments, including requirements based on BSI IT-Grundschutz, CIS Benchmarks and customer-specific governance policies.

Weitere Kenntnisse

Certifications: Red Hat Certified Architect (RHCA), RHCE, RHCSA; EX447, EX407, EX405, EX288, EX280, EX180, EX413, EX342, EX403, EX401, EX318, EX300 and EX200.

Platforms: OpenShift, Kubernetes, Rancher, Podman, Docker.
Automation: Ansible, Ansible Automation Platform, Execution Environments, AWX, Semaphore UI, Python.
Linux & Lifecycle: RHEL, Ubuntu, Red Hat Satellite, Foreman, Katello, Incus.
Security & IAM: ACS, CIS/OpenSCAP, JFrog Xray, Keycloak, OAuth 2.0, HashiCorp Vault, Kerberos.
GitOps & Delivery: Argo CD, Helm, GitLab, GitHub, Terraform, Terragrunt, JFrog Artifactory.
Infrastructure & Observability: OpenShift Virtualization, VMware vSphere, Prometheus, Grafana, Zabbix.
Delivery: Platform Architecture, Technical Leadership, Team Mentoring, Scrum, Kanban, Day 2 Operations, Incident and Change Management.

Persönliche Daten

Sprache
  • Deutsch (Muttersprache)
  • Englisch (Fließend)
Reisebereitschaft
auf Anfrage
Arbeitserlaubnis
  • Europäische Union
Home-Office
unbedingt
Profilaufrufe
4299
Berufserfahrung
12 Jahre und 11 Monate (seit 09/2013)
Projektleitung
7 Jahre

Kontaktdaten

Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.

Jetzt Mitglied werden