Find the perfect DevOps Consultants in Germany in minutes from over 15,000 CVs with the power of AI.

Short description: Lead of a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations management, while maintaining the autonomy of decentralized business units within regulatory frameworks.

Tasks and activities:

Overall responsibility for the design, setup, and implementation of a company-wide cloud governance structure (Azure), including target picture, roadmap, and operating model.

Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps), including decision and escalation management.

Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

Building a cloud governance framework based on the Azure Cloud Adoption Framework (CAF), including landing zone and guardrail concepts.

Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), including cost management strategies, reporting, and guardrails.

Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

Implementation of access concepts including RBAC design and "breaking glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

Achievements:

Created a consistent, auditable governance and control set for Azure (policies, standards, compliance mapping), laying the foundation for scalable cloud usage in a regulated environment.

Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

Improved operating and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and corporate rules).

Significantly increased workload compliance during lift-and-shift migrations.

Technologies used:

Microsoft Azure Policy, custom policies.

Terraform, OpenTofu, Terragrunt.

step-ca (ACME).

Entra ID.

Azure Firewall.

Azure networking, hub-and-spoke architecture.

Azure vWAN (evaluation).

Azure Front Door, Azure Application Gateway.

Azure ExpressRoute.

Azure Key Vault.

NetBox.

GitLab (on-premises).

Infrastructure, concepts used:

Cloud Shared Responsibility Model.

Hub-and-spoke connectivity / central shared services (from hub-spoke context).

Central governance with decentralized delivery (business unit autonomy with guardrails).

Methods used:

Scrum.

Stakeholder management (C-level to engineering).

Cloud governance, Azure Cloud Adoption Framework (CAF).

DevOps, CI/CD.

Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

RBAC, "breaking glass" concepts.

ACME / certificate automation.

GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

Automation of the database major / minor releases for the TKeasy project

Concept for database major / minor release automation

As-is analysis

Evaluation of Redgate Flyway functionality

Concept creation

Products: Redgate Flyway, GitHub, Quest, Erwin Data Modeller, Oracle, Atlassian Jira, Atlassian Confluence

Skills: Docker, Continuous Delivery, Continuous Integration, Redgate Flyway, Major Releases, Minor Releases

Manage the development release and update process for a digitized nationwide trade register project "AuRegis".

Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.

Oversee system release of microservice architecture.

Craft the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.

Automate deployment onto OpenShift using Kustomize.

Establish infrastructure components for development, code review, and code quality analysis including SonarQube.

Integrate GitOps tools such as Kustomize and ArgoCD, leveraging both Azure and private cloud for sensitive data handling.

Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.

Automate delivery to customers and deployment on test systems.

Craft Kustomize manifests for microservices and develop accompanying automation, treating documentation as code for clarity and reproducibility.

Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.

Bootstrapping a CloudOps team and building a multi-cloud provider backend for a low-code Internal Developer Platform (IDP) with env zero

Introducing user story mapping, ADRs, milestones, and backlog management

Designing and developing core APIs, setting up CI/CD pipelines, OpenTofu/Terraform scripts

Representing and communicating the team with third-party stakeholders (e.g. env zero)

(Cross-)team coaching on DevOps, software design, Terraform, Golang, and agile practices