DevOps Engineer

Sole responsibility for the design, development and deployment of the bilingual Qwik platform eventvideo.at. Responsible for frontend performance optimization (PageSpeed 97/100/100/100), SEO engineering with Schema.org, integration of Google Search Console and IndexNow, and building the GitHub Actions CI/CD pipeline. Requirements gathering and technical implementation.

• Performance Engineering: Google PageSpeed Score 97/100/100/100 (Performance / Accessibility / Best Practices / SEO) through frontend optimization (lazy loading, thumbnail-first, lightweight media integration)
• Full-Stack Web Development: Sole responsibility for development with the Qwik.js framework from frontend to deployment for the bilingual (DE/EN) platform eventvideo.at, marketing personalized, fully automated participant videos for sports events
• Qwik.js Resumability Architecture: Server-side rendering with minimal JavaScript hydration overhead; the page remains immediately interactive even with extensive video and event content, without a full-page load.
• API Integration: Google Search Console API and IndexNow API for automated indexing and SEO monitoring
• SEO Engineering: Schema.org Structured Data implementation for rich snippets and improved search engine visibility
• Mobile-First with minimal bundle size: CSS3 layout without UI framework overhead, consistently lean use of resources for excellent PageSpeed on desktop and mobile.
• GitHub Actions CI/CD: Automated build, test and deployment pipeline for continuous integration

Technologies: Qwik.js Framework, TypeScript, JavaScript, Internationalization (i18n DE/EN), GitHub Actions CI/CD, Google Search Console API, IndexNow API, Schema.org, Google PageSpeed Insights, Lazy Loading, CSS3, Responsive Design

• Interface role with the SOC team; improved incident response time by 45% through structured escalation processes and proactive security monitoring.
• Defined technical standards for a multi-tenant enterprise platform (10+ services), resulting in a 30% shorter onboarding time for new clients in the public sector.
• Active knowledge transfer and mentoring of a 6-person team; increased team autonomy and established a sustainable engineering culture.
• Reduced time to market by 50% by optimizing CI/CD pipelines and establishing self-service deployments.
• Stack: GitLab CI/CD, Kubernetes, Nexus, Harbor, ArgoCD, HashiCorp Vault, Grafana, Python, PostgreSQL, Java, Spring Boot, Flyway, Quarkus, JBoss, Loki, Go, Kafka, Kustomize, MongoDB

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

Refactoring and improving core APIs; implementing client change requests. Setting up metrics, traces, and logs monitoring infrastructure to support operations. Designing GitOps deployment and infrastructure as code. Applications and systems configuration in ArgoCD and Openshift. Confluence documentation of design, approach, and solution. Tech Stack: Java 8 & 21, Spring framework, JSP, JavaScript, Bash scripts, SQL, Grafana Stack, OpenTelemetry, Docker, DB2, Maven, Kubernetes Kompose.

• Main cloud solution architect on a banking SaaS offering hosted in Azure.
• Fully automated the Azure infrastructure in Terraform.
• Reduced cloud costs by 50%.
• Responded to incidents, found root-causes and closed with post-mortems.

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

Project goal: Introduce OpenShift as the run-time platform and migrate all applications to OpenShift.

My contribution: Make sure logging and monitoring for the applications were in place. Set up and put into operation the OpenShift components for logging and monitoring (Elasticsearch, Prometheus, and Grafana). Develop and implement the security concept for OpenShift. Work with developers to define and carry out the application changes needed for the OpenShift migration. Integrate monitoring into the applications.

Technical environment: Java, WebSphere Liberty, OpenShift components, Elasticsearch (ELK stack), Prometheus, Grafana.

• ZHAW CAS Secure Software Design and Development
• German C1 and Goethe Certificate C1
• ETH CAS Cloud and Mobile Computing at ETH Zurich
• Linux Foundation Linux System Administration LFS307
• Linux Foundation Kubernetes Fundamentals LFS258
• Linux Foundation Kubernetes for Application Developers LFD459
• Linux Foundation Kubernetes Security Fundamentals LFS460

Development and further development of an internal platform for managing and providing technical resources, virtual machines, and infrastructure services. The platform supports self-service processes and covers functions that are conceptually comparable to cloud management solutions like Azure or AWS.

• Responsible involvement in the design, development, and implementation of new backend and frontend features
• Hands-on development with Java, Spring Boot, Python, and Angular
• Implementation of REST interfaces, business logic, validations, and integrations into existing system landscapes
• Further development of modern web interfaces with Angular, including connection to backend services
• Participation in architecture and design decisions within the team, especially with regard to scalability, maintainability, and clean interfaces
• Containerization and deployment of applications with Docker, Kubernetes, and Helm
• Support with CI/CD processes and deployment to Kubernetes-based environments
• Work in the environment of vSphere, Broadcom, GitLab CI/CD, ArgoCD, Maven, npm, and NuGet
• Close collaboration with developers, business teams, DevOps, and other technical stakeholders
• Analysis of technical requirements, deriving suitable solutions, and independent implementation in an agile team
• Use of GitHub Copilot to support code generation, refactoring, test case creation, and technical documentation

Methods/ tools/ technologies: Languages & frameworks: Java (21), Spring Boot (4.x), Python, Angular, Robot Framework, Kubernetes, Helm Persistence: PostgreSQL, MongoDB, Hibernate, Liquibase Architecture & communication: REST, gRPC, GraphQL, Apache Kafka, OpenAPI, Microservices, Event Driven, Domain Driven Design Cloud & infrastructure: Terraform, Docker, Rancher, Helm, Ansible Security: OAuth2, MS (Entra ID), web security, Keycloak (extensions for detailed group rights) DevOps: GitLab CI/CD, Ansible, Maven, Gradle, Grafana, Prometheus, Git, GitHub Copilot Testing & QM: JUnit, Robot Framework, automated component and integration tests, E2E tests with Playwright, Testcontainers, EasyMock Methodology & approach: Kanban, JIRA, Confluence, Clean Code

• Architected and deployed a highly available, multi-tenant Kubernetes platform on Google Kubernetes Engine (GKE) for business-critical microservices.
• Designed and implemented a comprehensive Infrastructure-as-Code strategy using Terraform for managing GKE clusters, networking (VPCs, Subnets), and IAM policies.
• Engineered optimized storage solutions for stateful workloads (MongoDB) using GKE PersistentVolumes, enhancing performance and data resiliency.
• Established a full-stack observability framework using Google Cloud Monitoring, Logging, Prometheus, and Grafana.

• PoC for various platform integration functionalities using Backstage and Crossplane
• Implementation of improvements of developer experience with Azure AVD and DevSpace
• Manage application deployment infrastructure on Kubernetes clusters
• Manage CI/CD platform
• Manage deployments into Kubernetes (Rancher and AKS) and into Azure
• Act as security champion of the DevOps team
• Manage vulnerabilities and support dev teams to manage third-party vulnerabilities using JFrog Xray
• Support building the platform team
• Manage infrastructure as code using Terraform and Atlantis
• Build and integrate a platform and IDP using Crossplane

• Kubernetes: EKS management, cluster upgrades and stability improvements, Infrastructure-as-Code reviews and updates, AWS support, and cost optimization.

• Planning and implementation of IT infrastructures for clients
• Automating deployments with AWS CloudFormation and AWS CDK
• Monitoring and optimizing cloud environments and the entire IT infrastructure
• Providing technical support and troubleshooting infrastructure issues
• Collaborating with development teams on CI/CD processes

• Implementation and maintenance of highly critical IAM solutions for B2B clients (SSO, MFA, SAML/OIDC, Entra ID, PIM/PAM)
• Security administration of Linux systems (CentOS, Red Hat) in Docker and Kubernetes environments
• Migration from Docker Swarm to Kubernetes
• Infrastructure automation with Terraform
• Planning and execution of risk assessments, threat modeling, and compliance reports
• Development and management of B2B applications (Java, REST/SOAP, Angular) and CI/CD pipelines (Python, Ansible, Jenkins, GitLab)
• Leading integration tests and UAT (Cucumber, Selenium, Katalon)
• Implementing monitoring and observability strategies with Grafana, Prometheus, and Splunk
• Integrating SAST tools like Snyk and SonarQube
• Release management and project coordination according to Scrum and SAFe
• Mentoring and technical support of junior team members