Network Automation & Cloud Engineer | DevOps, Kubernetes, Terraform
- Verfügbarkeit einsehen
- 0 Referenzen
- 50‐70€/Stunde
- 160 Muscat
- auf Anfrage
- fa | en
- 12.10.2026
Kurzvorstellung
Qualifikationen
Projekt‐ & Berufserfahrung
9/2026 – offen
Tätigkeitsbeschreibung
Own project, in progress: ClosOps, an open datacentre fabric controller and assurance platform for EVPN/VXLAN leaf-spine (Clos) fabrics.
- Goal: discover the fabric over gNMI/OpenConfig, model it, stream telemetry, continuously compare intended vs. observed state, and only then provision tenants (VRF/VNI) through a validated, human-approved intent pipeline.
- Milestone 1 (current): a reproducible multi-vendor lab in Containerlab - 2 SONiC spines, 4 Nokia SR Linux leaves and 4 hosts - with eBGP underlay, BGP EVPN control plane, VXLAN data plane, L2VNI/L3VNI, tenant VRF, anycast gateway and symmetric IRB. The known-good fabric doubles as the integration-test environment.
- Roadmap: FastAPI + PostgreSQL read-only API, fabric discovery, React topology UI, gNMI streaming telemetry, assurance engine, intent-based provisioning with pre/post checks, drift detection, and Cisco NX-OS as a third NOS behind a vendor-neutral driver interface.
- My role: network architect - fabric design, addressing/ASN/EVPN plans, lab build and verification - with AI-assisted development under my review. I also wrote the ClosOps Handbook, a long-form guide to modern datacentre networking (Clos, BGP, EVPN/VXLAN, gNMI, RoCEv2).
Container Management, Docker, Git, Python, TCP / IP
1/2022 – 7/2026
Tätigkeitsbeschreibung
Cloud and network engineering for a US hosting provider (full-time, remote).
- Operated multi-region network backbones on Cisco Nexus and Juniper MX with security segmentation and DDoS-resilient design; Cloudflare at the edge (DNS, WAF, CDN, Spectrum, DDoS L7, Turnstile).
- Ran a hybrid multi-cloud platform across on-prem datacentres in the USA, Europe and Asia: AWS for the compute control plane and CI/CD, Microsoft Azure for security and identity.
- Built and maintained CI/CD and GitOps pipelines (GitHub Actions, GitLab CI, Helm, ArgoCD); operated Kubernetes on-prem and on AWS EKS with Prometheus, Grafana, New Relic, Elasticsearch and Zabbix monitoring, SLO tracking, on-call and incident response.
- Designed a cross-cloud Active Directory with two forests joined by a two-way forest trust (AWS Managed Microsoft AD and Azure); administered Windows Server; ran Entra ID SSO, MFA and conditional access, Defender for Cloud and Sentinel SIEM.
- Built an internal IPAM/DCIM service extending NetBox (Python/Flask, Redis-backed sessions, rate limiting, REST API for device automation).
- Built Helix Control Plane, an LLM-assisted operations platform (FastAPI, LangGraph, Ansible/Nornir, OpenProject) for chat-driven, policy-gated network and infrastructure change management.
- Designed SD-WAN overlays with traffic policies and IPsec tunnels, built and tested in an EVE-NG/GNS3 lab.
Cisco (allg.), Active Directory, Amazon Web Services (AWS), Ansible, Cisco Router, Cisco Switch, Cloud Computing, Continuous Delivery, Continuous Integration, DevOps, DNS, Docker, Elasticsearch, Git, Incident-Management, Ipsec, Juniper, Kubernetes, Microsoft Azure, Netzwerk-Sicherheit, Python, Server-Monitoring, WAN, Windows Server (allg.)
1/2015 – 12/2021
Tätigkeitsbeschreibung
Client-facing infrastructure engineering consultant (full-time) for seven years, designing and running infrastructure across client estates.
- Refactored legacy networks into high-performance leaf-spine architectures on Cisco Nexus across multi-region datacentres (Hetzner DE, OVH FR, Quapra NL).
- Built and operated Proxmox VE hypervisor clusters with Open vSwitch and multi-cluster Kubernetes on-prem; hosted PHP/Laravel backends (PHP-FPM, Nginx) packaged with Helm.
- Ran Cloud SQL for MySQL (HA, read replicas) and RabbitMQ on Google Cloud (GKE).
- Implemented end-to-end monitoring with Zabbix, PRTG, Nagios, Prometheus and Grafana, logs on the Elastic stack and centralised logging on Google Cloud Logging.
- Hardened production with OpenVAS, Trivy, Falco, kube-bench, Lynis and ModSecurity WAF; built disaster recovery with Veeam and NAS across regional sites.
- Supported VoIP telephony across client networks, troubleshooting call quality and LAN/WAN connectivity.
Kubernetes, Cisco (allg.), Cisco Switch, Elasticsearch, Google Cloud, KVM (Kernel-based Virtual Machine), Mysql, Nagios, Netzwerk-Sicherheit, Nginx, SAN / NAS, Server-Monitoring, Systemadministration (allg.), Virtualisierung (Allg.), VoIP
Ausbildung
KodeKloud
KodeKloud
iCollege
KodeKloud
KodeKloud
KodeKloud
KodeKloud
StackSkills
Skill Success
Islamic Azad University, Bojnourd Branch
Bojnourd
Über mich
Good starting projects
- Automate device inventory and configuration backups with Python, Ansible or NetBox.
- Review a network or cloud setup and deliver prioritized findings and a practical change plan.
- Set up a maintainable Terraform, Kubernetes or monitoring workflow with documentation and handover.
What I deliver
- Network engineering: multi-region backbones on Cisco Nexus and Juniper MX, BGP and OSPF, leaf-spine datacentre design, VLANs and segmentation, DDoS-resilient design; Cloudflare edge (DNS, WAF, CDN, Spectrum, Turnstile).
- Network automation: Python (Nornir, Netmiko, NETCONF/gNMI), Ansible and NetBox as source of truth; policy-gated change pipelines instead of manual CLI work.
- Cloud: AWS (VPC, IAM, EKS, RDS, S3), Microsoft Azure (Entra ID, Defender for Cloud, Sentinel) and Google Cloud (GKE, Cloud SQL); hybrid and multi-cloud designs.
- Kubernetes and DevOps: on-prem clusters and AWS EKS, Helm, ArgoCD GitOps, CI/CD with GitHub Actions, GitLab CI and Jenkins.
- Infrastructure as Code: Terraform modules and Ansible playbooks that your team can maintain.
- Monitoring and operations: Prometheus, Grafana, Zabbix, PRTG, Elastic stack, New Relic; SLOs, on-call, incident response and runbooks.
- Systems: Linux and Windows Server, Active Directory, VMware vSphere, Proxmox VE, KVM; backup and disaster recovery with Veeam.
Experience in brief
- 2022-2026: cloud and network engineer for a US hosting provider (remote, full-time): multi-region backbones, hybrid AWS/Azure platform, Kubernetes, CI/CD, identity and security.
- 2015-2021: infrastructure engineering consultant: leaf-spine refactoring, Kubernetes and Proxmox platforms, GCP managed services, monitoring and hardening for client estates.
- Own project (2026): ClosOps, an open EVPN/VXLAN fabric controller and assurance platform (gNMI/OpenConfig; multi-vendor lab with SONiC and Nokia SR Linux in Containerlab).
How I work
- Remote only, from Muscat, Oman (UTC+4): European business-hour overlap can be agreed for the project.
- Project language: English (C1). I do not speak German.
- Fixed-scope work with clear deliverables, or hourly with milestone updates. Code, configuration and documentation are delivered into your repository.
- Fast replies and honest advice: if an approach will not work, I say so and propose a better one.
Completed training courses: CCNP Enterprise (ENCOR/ENARSI), JNCIA-Junos, Kubernetes administration (CKA preparation), Docker administration, Terraform, Azure architecture, Linux administration (RHCSA preparation), GitOps and cloud security (CCSP preparation). Providers include KodeKloud, iCollege, Skill Success and StackSkills. These are course completions; official vendor certifications are not claimed.
Weitere Kenntnisse
Network security: firewall rules and security groups, DDoS-resilient design, Cloudflare (DNS, WAF, CDN, Spectrum, DDoS L7, Turnstile), TLS/mTLS, least-privilege access, Microsoft Entra ID (SSO, MFA, conditional access), Defender for Cloud, Microsoft Sentinel, OpenVAS, ModSecurity, Falco, Lynis, Trivy, kube-bench.
Cloud and containers: AWS (VPC, EKS, IAM, RDS, S3), Microsoft Azure, Google Cloud (GKE, Cloud SQL, Cloud Logging), Kubernetes, Docker, Helm.
CI/CD and GitOps: GitHub Actions, GitLab CI, Jenkins, ArgoCD, Git.
Automation: Python (Nornir, Netmiko, Paramiko, pyATS, FastAPI, Flask), Ansible, AWX, Terraform, NetBox (IPAM/DCIM), gNMI/OpenConfig, Containerlab.
Monitoring: Zabbix, PRTG, Nagios, Prometheus, Grafana, New Relic, Elasticsearch / Elastic stack.
Systems and virtualisation: Linux (RHEL, Ubuntu, Debian), Windows Server, Active Directory (multi-forest trusts), VMware vSphere, Proxmox VE, KVM, Open vSwitch, Veeam backup and disaster recovery.
Ways of working: SLOs, on-call, incident response, root-cause analysis, runbooks and technical documentation.
German search terms: Netzwerkautomatisierung, Cloud-Infrastruktur, Netzwerkadministration, Linux-Administration, IT-Sicherheit. Project language: English.
Persönliche Daten
- Englisch (Fließend)
- Persisch (Muttersprache)
Kontaktdaten
Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.
Jetzt Mitglied werden