Experience
Selected projects from recent years, from landing zones to data center migrations.
Projects
06/2026 – 07/2026
Kubernetes as a service with OpenStack Magnum and Cluster API
Public sector IT provider · DevOps engineer
Proof of concept for Magnum with Cluster API in a Kolla Ansible environment, test clusters provisioned from cluster templates, training for the client team and a decision paper on choosing the right CAPI provider.
- OpenStack
- Magnum
- Cluster API
- Kolla Ansible
- Kubernetes
- Helm
- Calico
06/2026 – 07/2026
Data center migration from VMware to a sovereign cloud
Public association, construction · DevOps engineer
Replacement of a VMware data center with more than 100 VMs, nine networks and about 65 applications. Infrastructure as reusable OpenTofu modules, configuration and hardening with Ansible, CI/CD for provisioning, plus operations manuals and migration concepts.
- OpenStack
- OpenTofu
- Ansible
- GitLab CI
- vSphere
- Python
03/2026 – 08/2026
Data analytics platform on Kubernetes following BSI IT-Grundschutz
Federal agency · DevOps engineer
Fully Ansible-automated deployment of a KNIME Hub platform including Velero backups, AD federation through Keycloak and mail delivery. Security concept following BSI IT-Grundschutz with network segmentation, encryption, RBAC and security contexts.
- Kubernetes
- Ansible
- Keycloak
- Velero
- MinIO
- Vault
- Istio
01/2026 – 05/2026
AWS landing zone for a data center exit
FUNKE Mediengruppe · Solution architect, DevOps engineer
Design and build of a landing zone following the AWS Security Reference Architecture, with identity and access management, a security concept and highly available infrastructure for digital production. Started as a proof of concept, then led the DevOps team while scaling it to several teams.
- AWS
- Terraform
- Ansible
- IAM
- CloudWatch
- Prometheus
09/2025 – 01/2026
Site reliability engineering for a private cloud
Broadcom · DevSecOps engineer, Kubernetes consultant
Operation and stabilization of a platform based on vSphere and Kubernetes (VKS), root cause analysis down to the infrastructure, Kubernetes consulting for several teams, and design and build of GPU-accelerated clusters.
- Kubernetes
- vSphere VKS
- NVIDIA vGPU
- Helm
- Velero
09/2025 – 11/2025
Compliance as code with InSpec
Broadcom · DevSecOps engineer
Development of InSpec profiles that automatically check system configurations against security policies, complemented by Java components with automated tests and a test lab with Active Directory.
- InSpec
- Java
- PowerShell
- Windows Server
- Azure
11/2024 – 08/2025
Monitoring and reporting in a BSI-regulated environment
Telecommunications group · DevOps engineer
Python middleware that turns ticket data into quality and management reports, Grafana dashboards, monitoring with Checkmk and InfluxDB, and Ansible roles for highly available services.
- Python
- PostgreSQL
- Grafana
- Checkmk
- InfluxDB
- Ansible
11/2023 – 11/2024
Kubernetes platform with GitOps and 24/7 alerting
FUNKE Mediengruppe · DevOps engineer
Migration and operation of a container platform, GitOps with ArgoCD, alerting for on-call duty, IAM and RBAC concepts, CVE scanning with NeuVector, and integration with AWS services and CloudFront.
- Kubernetes
- ArgoCD
- AWS
- Prometheus
- Grafana
- NeuVector
- Cilium
since 09/2023
Migration of an online shop from ECS to EKS
Cosmetics manufacturer · DevOps engineer, cloud engineer
Build of a Kubernetes cluster on AWS, GitOps with ArgoCD and the move of the online shop and further services, including an IAM concept, monitoring, load balancing and CloudFront.
- AWS EKS
- ArgoCD
- Helm
- RDS
- Prometheus
- Grafana
since 09/2023
Azure infrastructure as code
Agency · DevOps engineer, cloud engineer
Moving an organically grown Azure environment into Terraform, role and access management with Microsoft Entra ID, and a security concept for running AKS.
- Azure
- Terraform
- AKS
- Entra ID
- GitHub Actions
01/2023 – 06/2023
Platform for an operation support system
Telecommunications provider · DevOps engineer, full-stack developer
Kubernetes on AWS with GitOps through ArgoCD, CI/CD pipelines in GitLab, backend APIs with Java Spring, automated tests, container scanning with Trivy and backups with Velero.
- AWS
- Kubernetes
- ArgoCD
- GitLab CI
- Java Spring
- Trivy
05/2022 – 12/2022
Support platform and cloud infrastructure on Azure
Tech agency · DevOps engineer, full-stack developer
CMS and ticketing platform with Next.js and React, plus the matching infrastructure on Azure with Kubernetes, ArgoCD, GitLab pipelines and monitoring.
- Azure
- Kubernetes
- ArgoCD
- Next.js
- TypeScript
04/2020 – 05/2022
IT lecturer for system integration
Vocational education · Teacher, Microsoft Certified Trainer
Training of IT specialists in system integration and corporate courses on system administration, cloud, automation and cyber security, focusing on IAM, monitoring, and backup and recovery.
- Azure
- Microsoft 365
- Windows Server
- Linux
- Sentinel
Tools
- Cloud
- AWS, Azure, OpenStack, GCP, vSphere
- Containers
- Kubernetes, Docker, Helm, ArgoCD, Cluster API
- Infrastructure as code
- OpenTofu, Terraform, Ansible, Pulumi, AWS CDK
- CI/CD
- GitLab CI, GitHub Actions, Azure DevOps, Jenkins
- Security
- Keycloak, OIDC, Vault, Kyverno, NeuVector, Trivy, InSpec
- Observability
- Prometheus, Grafana, CloudWatch, Checkmk
- Development
- Python, Java (Spring), TypeScript, React