Red Hat Ansible Automation Platform Experts in Germany

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• Build and operate an end-to-end MLOps platform on Azure ML and Kubernetes (Kubeflow) for the automated deployment, monitoring, and scaling of forecasting models (including Temporal Fusion Transformer, Informer, Autoformer).
• Implement CI/CD pipelines in Azure DevOps for the full ML lifecycle – from resource provisioning (Terraform), data transformation (Hugging Face Datasets, Pandas, PyTorch, CUDA cluster) through training and evaluation to model registry and endpoint deployment.
• Integrate MLflow for experiment tracking, model versioning, performance monitoring, and automated registration in the Azure Model Registry.
• Develop and containerize PyTorch training jobs (Azure Notebook, Jupyter Notebooks) for price and time series forecasting (PFC models) with automatic rollout via Azure ML Endpoints and REST/gRPC interfaces, Docker containerization, secured with OAuth 2.0.
• Set up monitoring and alerting mechanisms (Prometheus, MLflow Metrics), log centralization, and cost monitoring.
• Automate infrastructure provisioning and model deployment using Terraform, Helm, and Azure CLI; connect to existing market data systems and event pipelines.
• Migrate existing workloads and databases (IONOS → Azure, MongoDB) with integration into central MLOps workflows and internal networks.
• Extend the platform with LLM-based tools (LangChain, LangServe) to integrate GPT-based analysis modules into existing Spring Boot services for market anomaly detection and automated reports.
• Analyze and architect a software solution to process large volumes of data efficiently (>3000 messages/sec.) (market data store).
• Spring Boot / Java 21 container development with RabbitMQ for distributing stock market data via MongoDB (Kubernetes) with fast storage of data in Redis RMaps, deduplication, forwarding messages to Read Model queues, and building Read Models for UI display in MongoDB.
• Integration of RESTHeart to create a REST API for MongoDB.
• Build an Angular frontend to simplify data queries and master data maintenance.
• Agentic coding with remote and local LLMs (Claude Sonnet, Ollama Qwen) and MCP servers.
• Develop Python scripts for transforming and cleaning incoming stock market data (Pandas, scikit-learn).

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

• Requirements analysis for the enterprise-wide observability platform.
• Creation of playbooks and pipelines for rolling out Envoy, OpenTelemetry Collectors, and OpenTelemetry Agents.
• Conducting load tests for capacity planning of metrics for the observability platform.
• Documentation and implementation of compliance standards for production readiness.
• Creation and design of RED metrics, spanmetrics, JBoss, and Tomcat dashboards for mission-critical applications.
• Setting up alerts for critical applications for proactive incident response.
• Integration of OpenShift applications into the enterprise-wide observability stack.

• Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering (SRE) team.
• Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts.
• Wrote documentation.

AWS Cloud migration:

• Design and implement CI/CD for deploying AWS resources using GitLab CI, Terraform, and GitOps.
• Create and configure DevOps toolchain including Jenkins, Harbor, and Vault.
• Deploy billing application, microservices, and supporting infrastructure services to Nomad clusters.
• Re-designed TLS/mTLS certificate management using Vault and Lambda.

Security (Infrastructure Hardening & Patch Management & Vulnerability Scanning):

• Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts (Harbor, Jenkins, Vault).
• Created hardened AMIs via Packer based on CIS benchmarks for Nomad, Jenkins, Harbor, and Vault; deployed using Terraform.
• Integrated Trivy via Harbor plugin for container image scanning.
• Implemented strict AWS VPC security group rules.
• Developed and maintained patching process across environments using Qualys and Wiz.
• Deployed Qualys Cloud Agent to all EC2 instances, tracked CVEs and tested patches in lower environments before rollout.
• Automated patch deployment across all AWS accounts using Terraform and GitLab CI and verified patch compliance via Qualys/Wiz dashboards.

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Developed and implemented an operating concept

• Created and executed a migration plan

• Automated administrative tasks in on-premises environments

• Provided 3rd-level support

• Created documentation (Confluence) and managed tasks (Jira) using agile Scrum methods

• Implemented and monitored disaster recovery plans and backup strategy in Azure

• Planned and carried out software and system upgrades

• Advised on selecting and implementing new technologies and tools

• Trained employees on new technologies and processes

• Conducted code reviews to ensure quality and adherence to best practices

• Advised the Product Owner and other stakeholders on developing and refining solution approaches and concepts

• Responsible for the stable operation of a hybrid on-premises/Azure environment in a highly regulated setting (critical infrastructure)

• Worked closely with business units, IT security, and external service providers to align operational and migration concepts

• Designed and executed the migration of central on-premises systems to a hybrid Azure environment (including landing zone, network segmentation, backup, and disaster recovery strategy), establishing the technical foundation for future cloud governance in the KRITIS sector

• Introduced Ansible & AWX to fully automate formerly manual operational documentation

• Result: Replaced over 100 operation manuals, reduced operational effort by 80%, and created a sustainable foundation for scalable operational processes

• Developing GitHub Actions/pipelines for automatic application deployment
• Supporting the provisioning of Helm charts for the CI/CD infrastructure
• Rebuilding and migrating a Kubernetes cluster using Rancher
• Creating IaC with Terraform for Kubernetes and additional services (monitoring, databases)
• Deploying a highly available Percona Galera cluster (MySQL)
• Implementing a centralized monitoring and logging infrastructure

• Creating workflows for server orders with different conditions, requirements, and specifications based on an external order portal (connecting Aria Automation via REST API to BMC ITSM Helix) for separate internal customers / teams / tenants
• Mapping workflows for day-2 operations through the front-end portal (snapshots, resizing, disk operations, backups)
• Creating test cases and automated tests to validate the code and stability of the entire ordering process
• Documenting workflows in Confluence / wiki / Jira
• Creating and maintaining blueprints
• Integrating Ansible Tower for further VM customizations

• Planning and documentation of database architecture and integration with other components provided by other teams and vendors
• Extensive documentation for the architecture, security, access control, encryption, roles and user management, backup and restore, disaster recovery and general operations
• Deployment of database clusters over 2 locations with 2 availability zones each
• Automation of deployment and operations including backup using Ansible
• Hardening of the database and operating system
• Migration of existing stand-alone database systems to cluster setup
• Technologies: PostgreSQL, Patroni, etcd, barman, RedHat Enterprise Linux 9 (RHEL), Ansible, Ansible Automation Platform, TLS, Hashicorp Vault, LUKS

• Design and setup of infrastructure concepts for virtualized servers with VMware vSphere and VMware vCenter
• Migration from vCenter 7 environments to vCenter 8
• Automated deployment of virtual machines using Microsoft PowerShell and VMware PowerCLI as well as Ansible Tower
• Prototype setup and test migration of applications in various container environments
• Administration of firewalls and network components (routing and switching)
• Migration of VPN connection for all employees from Sophos UTM to Fortigate IPSec VPN with FortiToken
• Automation of OS installations on Linux with Ansible and GitLab
• VMware vSphere 8 with VMware vCenter 8
• VMware API
• VMware NSX-T
• VMware vSAN
• VMware Tanzu
• Red Hat OpenShift
• Docker
• SLES 15, Red Hat 9 and Microsoft Windows Server
• Microsoft Windows PowerShell
• GitLab
• Ansible Tower (AWX)
• SUSE Manager 4 and 5
• Fortigate Firewalls
• Fortinet Analyzer and Manager
• Juniper and Cisco switches and routers

• Projects in Azure and Google Cloud
• Azure DevOps
• Google GKE and Azure AKS
• Workload Identity Federation
• Creation of all resources with Terraform and Ansible
• Available for projects in DevOps, Kubernetes, Rancher and OpenShift
• High-availability database solutions with Microsoft SQL Server

• Architecting and enhancing the DevOps infrastructure in a regulated environment
• Migration, planning, and development from a monolith to microservices (ASP.NET Core)
• Building and maintaining CI/CD pipelines (GitLab, Jenkins) to support agile development
• Managing artifact repositories with JFrog Artifactory and security scans via Xray
• Migrating and integrating source code repositories (SVN → GitLab)
• Operating and configuring a container platform with OpenShift
• Automating deployments with Ansible, Helm, and the Ansible Automation Platform
• Implementing monitoring and alerting solutions with Prometheus
• Collaborating closely with the frontend development team to optimize build, test, and release processes
• Supporting the establishment of secure and scalable infrastructure processes (Secure SDLC)
• Documenting and sharing knowledge within the team
• Leading refinements and designing the backend architecture