AWS Architect / DevSecOps Engineer

1/2024 – offen

• Migration of workloads from on-premise to Google Cloud
• Created Terraform templates to deploy Google Cloud resources (GKE, Buckets, Cloud Functions)
• Consulting and planning of the cloud migration
• Creating CI/CD pipelines to deploy resources to Google Cloud

Toolstack: Google Cloud (GCP), GKE, Docker, Kubernetes, Terraform, Git, GitLab CI, Bash

Continuous Delivery, Continuous Integration, DevOps, Bash Shell, Docker, Git, Cloud Computing, Google Cloud, Kubernetes

11/2023 – 6/2024

• Architected end-to-end solution for train fleet management, incorporating Kubernetes setup via Terraform within train infrastructure
• Implemented GitOps methodology (FluxCD) for seamless service deployment and updates
• Integrated DevOps tools such as OpenTelemetry for comprehensive metric monitoring
• Configured Keycloak as the authentication provider for secure access control
• Established Ingress and API Gateway (Kong) for efficient communication within the fleet
• Implemented Cert-Manager for managing TLS certificates
• Established a centralized EKS cluster on AWS for global fleet management, facilitating monitoring and updates
• Greenfield project development with an agile methodology, employing Scrum and DevOps practices
• Setup of VPC network, subnets, security groups, IGW for the EKS cluster

Toolstack: AWS (EC2, EKS, VPC, Route53, S3), Kubernetes, Docker, Git, Terraform, Helm, Ansible, KICS, FluxCD, GitLab CI, Prometheus, Grafana, OpenTelemetry, Keycloak, Kong, Proxmox VE, Bash, Ubuntu, Amazon Linux, SSL, DNS, TCP/IP, PXE, DHCP, OAuth 2.0, SNMP

Continuous Delivery, Continuous Integration, DevOps, Agile Methodologie, Scrum, Bash Shell, Docker, Git, Cloud Computing, Ubuntu, Ansible, DNS, TCP / IP, Amazon Web Services (AWS), Kubernetes

2/2023 – offen

• Consulting for the cloud strategy during the merger of Hella and Faurecia to Forvia based on the Cloud Adoption Framework (CAF)
• Designing Cloud Governance, Cloud Security, Cloud Architecture, Cloud Operations and Cloud Network concepts
• Network design (SD-WAN, Hub and Spoke)
• Landing zone concept with naming conventions, tagging standard and shared services

Toolstack: Microsoft Azure, AWS, Kubernetes, Architecture Design, Security and Identity Management, Cloud Migration, Cloud Governance and Compliance, DevOps and CI/CD, Stakeholder Management

DevOps, Informationssicherheit, Netzwerk-Sicherheit, Cloud Computing, Digitale Transformation, Microsoft Azure, Amazon Web Services (AWS), Kubernetes

11/2020 – 10/2023

• DevOps consulting – microservice architecture, CI/CD, Infrastructure as Code (Helm)
• Operational service for OpenShift, microservices in OpenShift v3/v4, ForgeRock
• Monitoring configuration, alerts and dashboards (Grafana, Prometheus, Graylog, Dynatrace)
• Developing setup and configuration scripts for ForgeRock
• CI/CD (Bitbucket, OpenShift Templates, Helm, Jenkins)
• Scrum approach (sprints, plannings, reviews, retrospectives)
• SRE for ForgeRock services (DS, AM) in Docker containers
• Kubernetes (OpenShift) configuration, persistent storage, StatefulSets, ConfigMaps, Helm charts

Toolstack: AWS, OpenStack, RHEL, OpenShift, Python, Groovy, Bash, Jenkins, Helm, Terraform, Git, Grafana, Prometheus, Dynatrace, Graylog

Continuous Delivery, Continuous Integration, DevOps, Scrum, Bash Shell, Docker, Git, Jenkins, Python, Red Hat Enterprise Linux (RHEL), Amazon Web Services (AWS), Kubernetes, Openshift

5/2020 – 5/2023

• Designed and developed a serverless application (AWS Amplify) to manage consultant profiles, knowledge and skills search
• Frontend deployed via Amplify to an S3 bucket with CloudFront (CDN) in front
• API Gateway, AppSync, DynamoDB and Lambda functions used for business logic and database
• AWS Cognito (federated Google OAuth) for authentication and authorization
• Implemented AI tool for match ranking between profiles and project descriptions

Toolstack: AWS (Amplify, DynamoDB, S3, Lambda, API Gateway, Route53, CloudFront, AppSync/GraphQL, Cognito), Google Cloud, Git, JavaScript, Node.js, Python, HTML, CSS, React.js

DevOps, Git, Node.Js, Python, Cloud Computing, Google Cloud, Amazon Web Services (AWS), CSS (Cascading Style Sheet), HTML, JavaScript, React (JavaScript library)

3/2019 – 10/2020

• AWS cloud architecture consulting (global services like AWS Organizations, GuardDuty, CloudFormation StackSets, IAM, etc.)
• Building AWS cloud frameworks, e.g. account creation via Step Functions
• Creation of AWS solution architecture – standard setup in new accounts (CloudTrail, GuardDuty, SCPs)
• AWS consulting and support for other internal project DevOps teams
• Expansion of existing customer platforms and their automation – IaC with company-aligned setups
• Creation of qualitative and quantitative reports about work progress (sprint reports)
• Documentation of the implemented solutions in Confluence

Toolstack: AWS (DynamoDB, Lambda, S3, Route53, VPC, EC2, SNS, SQS, API Gateway, Organizations, GuardDuty, Step Functions), Splunk, Terraform, AWS CDK, CloudFormation, Git, Jenkins, Bash, Groovy, Python, JavaScript

Continuous Integration, DevOps, Confluence, Projektleitung / Teamleitung (IT), Bash Shell, Git, Jenkins, Python, Cloud Computing, Amazon Web Services (AWS), JavaScript

10/2018 – 3/2019

• Leading a DevOps team implementing a Kubernetes cluster on AWS as infrastructure
• Kops to set up Kubernetes on AWS
• Elasticsearch/Kibana for logging
• Helm for provisioning services
• Bitbucket, Jenkins, CodeBuild, CodePipeline, Prometheus/Grafana
• Helping to migrate to an agile DevOps culture (Scrum)

Toolstack: AWS (S3, Lambda, VPC, EC2, GuardDuty, AWS Config, DynamoDB, API Gateway), Kubernetes, Terraform, Helm, Git, Bitbucket Pipelines, Prometheus, Grafana, Elasticsearch

Continuous Delivery, Continuous Integration, DevOps, Agile Methodologie, Projektleitung / Teamleitung (IT), Scrum, Git, Jenkins, Amazon Web Services (AWS), Elasticsearch, Kubernetes

9/2017 – 9/2018

• Support in creating an architecture strategy for deployments and operations on a microservice infrastructure in AWS ECS / Kubernetes
• Takeover of DevOps lead
• Establishment of the deployment pipeline (Jenkins, AWS CodePipeline, CodeBuild)
• Building a deployment strategy and environment strategy
• Coaching and introduction of the developer teams to DevOps
• Infrastructure as Code (AWS CloudFormation)
• Evaluated cloud monitoring / logging (Datadog)

Continuous Delivery, Continuous Integration, DevOps, Docker, Jenkins, Amazon Web Services (AWS), Kubernetes

3/2017 – 8/2017

• Amazon Web Services (EC2, ECS, S3, VPC, CloudWatch, Lambda, Autoscaling, etc.)
• Infrastructure as Code with Terraform
• Jenkins CI/CD pipeline
• Logging (ELK)
• Docker, Ansible, Bash, Node.js
• Graphite, Grafana
• Couchbase
• Bitbucket
• Confluence, Jira, Scrum

Continuous Integration, DevOps, Confluence, Scrum, Bash Shell, Docker, Jenkins, Jira, Node.Js, Ansible, Amazon Web Services (AWS), Elasticsearch

7/2016 – 2/2017

• Amazon Web Services (EC2, ECS, S3, VPC, CloudWatch, CloudFront, RDS, Lambda, Autoscaling, etc.)
• Infrastructure as Code with Terraform
• Logging (CloudWatch, Kinesis, ELK)
• Docker, Ansible, Bash, Python
• Prometheus, Consul, Grafana
• GitHub
• Confluence, Jira, Scrum

Toolstack: Amazon Linux, AWS (Route53, VPC, EC2, S3, Lambda, CloudFront), DNS, TCP/IP, Prometheus, Grafana, InfluxDB, Bash, Ruby, Python, Groovy, Jenkins, Git, Terraform, PostgreSQL

Postgresql, DevOps, Confluence, Scrum, Bash Shell, Docker, Git, Jenkins, Jira, Python, Ruby, Ansible, DNS, TCP / IP, Amazon Web Services (AWS), Elasticsearch

5/2014 – 6/2016

• Infrastructure planning (server, network, storage, etc.)
• Automation and standardization of systems (Puppet, Ansible)
• Creation of a CMDB (Oracle APEX)
• RESTful services (ORDS)
• Defining standards
• Development of Python scripts
• RabbitMQ for queueing tasks triggered from the CMDB
• Node.js as RESTful API, consumer and producer for RabbitMQ

Toolstack: RHEL, Oracle Linux, CentOS, DNS, TCP/IP, Switching/Routing, VMware vSphere, Python, Groovy, JavaScript, Node.js, Bash, Jenkins, Bitbucket Pipelines, InfluxDB, Oracle, Puppet, Ansible, RabbitMQ

Oracle Database, SQL, DevOps, Bash Shell, Jenkins, Node.Js, PL/SQL, Python, Red Hat Enterprise Linux (RHEL), Ansible, Puppet, DNS, TCP / IP, Vmware Vsphere, JavaScript

5/2014 – offen

• Since September 2016 CEO of ventx GmbH; shareholder since July 2013
• Creation of architecture designs for cloud infrastructures in AWS
• Designed and developed serverless applications in AWS with Amplify and React
• Cloud services (AWS, Google, OpenStack, Owncloud, etc.)
• Deployed an OpenVPN solution in AWS for a customer
• Deployed a newsletter system with AWS SES for a customer
• Moved a testbed infrastructure from an on-premise datacenter to AWS Tokyo for a demonstration in Tokyo (latency requirements)
• Maintenance of the IT infrastructure for customers
• DevOps tools: Ansible, Puppet, Docker, Jenkins
• Automatic OpenStack deployments with OpenStack Fuel; automatic OS deployments (MAAS) on Bladecenter for OpenStack
• Designed and deployed a cloud platform (React frontend) to create AWS accounts and Azure subscriptions, manage permissions and deploy company-compliant infrastructure modules (OpenTofu) to these landing zones
• Started the ventx partnership with StackIT; deployed managed Kubernetes on StackIT with Terraform

Toolstack: AWS (S3, Lambda, Comprehend, DynamoDB, Amplify, API Gateway, Route53, VPC, EC2, CloudFront, Step Functions, AWS Config, GuardDuty, SNS, SQS), Proxmox VE, Google Cloud, StackIT, OpenStack, Node.js, Go, JavaScript, Python, Git, GitLab CI, GitHub, Helm, Terraform, KICS, FluxCD, React.js, Grafana, Prometheus, Rapid7, Wazuh, Checkov, Mimecast, SAST, PostgreSQL, MongoDB Atlas, Kubernetes, Ubuntu, CentOS, Amazon Linux

Amazon Web Services (AWS), Ansible, Cloud Computing, Cyber Security, DevOps, Docker, Git, Golang, Google Cloud, JavaScript, Jenkins, Kubernetes, Microsoft Azure, Mongodb, Node.Js, Postgresql, Projektleitung / Teamleitung (IT), Puppet, Python, React (JavaScript library), Ubuntu

5/2010 – 12/2013

• Installed and configured Wireless LAN over two floors
• Defined system standards and processes
• Developed scripts for unattended installations (Red Hat Kickstart, Active Directory policies, start scripts, etc.)
• Linux authentication via Active Directory
• Network infrastructure renewal (Cisco)
• Renewal of server infrastructure (HP Bladecenter, VMware vSphere, NetApp)
• Budget planning
• MATLAB/Condor cluster installed and configured with 192 cores
• Team and project management
• Virtualization of all systems (VMware vSphere)
• Responsible for purchasing (HP Bladecenter, NetApp, Cisco routers, etc.)
• Datacenter design (network, UPS, air conditioning, etc.)

Netzwerk-Sicherheit, Projektleitung / Teamleitung (IT), Active Directory, Red Hat Enterprise Linux (RHEL), Windows Server (allg.), Cisco (allg.), Cisco Router, DNS, TCP / IP, Vmware Vsphere, Projektmanagement

10/2007 – 4/2010

• Creating workflows to optimise processes (improving switch fabric tests)
• Cluster turn-ups (planning and building Google data centers)
• Project and sub-project management (data center expansion, PoP deployments)
• PoP deployments (Point of Presence)
• Management of several switch fabric deployments (Netherlands, Bulgaria, Kuala Lumpur, Munich, etc.)
• Certificate of Excellence for switched fabric deployments (Project: Watchtower)
• Maintenance of very large data centers with tens of thousands of servers
• Implementation of projects (bandwidth optimisation, data center expansion, etc.)
• International projects (expansion of the network infrastructure, PoPs and data centers)

Cisco (allg.), DNS, TCP / IP, Projektmanagement

2/2004 – 9/2007

• Standardization of server services
• Creation and documentation of workflows to hand over regular work to an external provider
• Wrote detailed documentation
• Standardization and automation of server installation
• Virtualization of servers
• Server monitoring (local/decentralized servers)
• Administration of Linux and Windows servers
• Migration from NT to Windows Server 2003
• Installation and administration of the gift card services (MediaMarkt/Saturn Giftcard)
• Maintenance of databases and web servers for mediamarkt.de, mediamarkt.pl, mediamarkt.es, saturn.de, etc.
• Administration of intranet applications

Mysql, SQL, Apache, Windows Server (allg.), Windows Server 2003, DNS, TCP / IP, Vmware