Debian Experts in Austria

Sole responsibility for the design, development and deployment of the bilingual Qwik platform eventvideo.at. Responsible for frontend performance optimization (PageSpeed 97/100/100/100), SEO engineering with Schema.org, integration of Google Search Console and IndexNow, and building the GitHub Actions CI/CD pipeline. Requirements gathering and technical implementation.

• Performance Engineering: Google PageSpeed Score 97/100/100/100 (Performance / Accessibility / Best Practices / SEO) through frontend optimization (lazy loading, thumbnail-first, lightweight media integration)
• Full-Stack Web Development: Sole responsibility for development with the Qwik.js framework from frontend to deployment for the bilingual (DE/EN) platform eventvideo.at, marketing personalized, fully automated participant videos for sports events
• Qwik.js Resumability Architecture: Server-side rendering with minimal JavaScript hydration overhead; the page remains immediately interactive even with extensive video and event content, without a full-page load.
• API Integration: Google Search Console API and IndexNow API for automated indexing and SEO monitoring
• SEO Engineering: Schema.org Structured Data implementation for rich snippets and improved search engine visibility
• Mobile-First with minimal bundle size: CSS3 layout without UI framework overhead, consistently lean use of resources for excellent PageSpeed on desktop and mobile.
• GitHub Actions CI/CD: Automated build, test and deployment pipeline for continuous integration

Technologies: Qwik.js Framework, TypeScript, JavaScript, Internationalization (i18n DE/EN), GitHub Actions CI/CD, Google Search Console API, IndexNow API, Schema.org, Google PageSpeed Insights, Lazy Loading, CSS3, Responsive Design

• Planning and implementation of IT infrastructures for customers
• Automation of provisioning with AWS CloudFormation and AWS CDK
• Monitoring and optimization of cloud environments and the entire IT infrastructure
• Technical support and troubleshooting for infrastructure issues
• Collaboration with development teams on CI/CD processes

• Owned day-to-day IT operations for Service Desk, Field Service, and on-call support, ensuring business continuity for a multi-site environment
• Led the transition from Lotus Notes incident tracking to ServiceNow, defining process design, workflows, roles, and reporting
• Implemented a modern telephony system with integrated reporting, enabling real-time visibility of volumes, wait times, and SLA adherence
• Launched a customer self-service portal and on-site walk-in support model to improve first-contact resolution and user experience
• Designed, documented, and rolled out SLAs, delivering targeted training for engineers and stakeholders to drive adoption and compliance
• Acted as process owner for service operations, establishing operating procedures, request/change/incident interfaces, and quality controls
• Partnered with business and IS/OT stakeholders to prioritize demand, reduce operational risk, and improve service reliability

• Replacement of original Dopix documents and modules into the Quadient document environment
• Extension of document logic

• Developed Taranis AI, an advanced open-source intelligence (OSINT) tool, leveraging artificial intelligence to revolutionize information gathering and situational analysis.
• Created cybersecurity trainings and a cyber range to provide hands-on learning experiences for SOC teams and IT management.
• Designed and implemented a hybrid cloud infrastructure using OpenStack, Terraform, and Ansible, improving the scalability and performance of the infrastructure and led the migration from an on-site only infrastructure to the hybrid cloud environment.
• Some of my current work can be found on GitHub.

• Development of a Custom Jenkins Shared Library (Groovy)

• Integration of security checks in CI/CD pipeline (Shift-Left Approach)

• Automated vulnerability scanning and remediation workflows

• GitOps-based deployments with ArgoCD

• Semantic versioning automation with Git integration

• Container lifecycle management (Build/Scan/Tag/Push)

• ArgoCD webhook integration for event-driven deployments

• Complete cluster automation with Ansible

• Bare-metal Kubernetes installation from scratch

• High-availability control plane setup

• Unified deployment system for multi-application orchestration

• Configuration management according to NIST SP 800-128

• Host security: Linux hardening, SELinux/AppArmor

• Network security: NetworkPolicies, micro-segmentation

• Application security: RBAC, Pod Security Standards

• Data security: Encryption at rest and in transit

• Defense-in-depth principles

• Certificate management with cert-manager

• Secrets management with External Secrets Operator connected to Vault

• Infrastructure monitoring with Checkmk

• Prometheus/Grafana monitoring stack

• Security event detection and logging

• Automated health checks and incident response procedures

• MetalLB load balancing for bare-metal

• Nginx ingress controller with SSL passthrough

• NetworkPolicies for security zones

• Rook-Ceph distributed storage, CNI configuration (Weave Net)

• Container & orchestration: Kubernetes (bare-metal), Docker, Helm

• CI/CD & GitOps: Jenkins (Custom Shared Library), ArgoCD, Groovy

• Automation: Ansible, Bash, Python

• Security: nftables, RBAC, NetworkPolicies, cert-manager, Vault, Sealed Secrets

• Monitoring: Checkmk, Prometheus, Grafana

• Storage & networking: Rook-Ceph, MetalLB, Nginx Ingress, Calico

• Collaboration: Jira, Confluence

• OS: Debian, Ubuntu

• I offer project-based short and long-term freelance services for Linux and open source projects
• DevOps/SecOps/Sysadmin for Linux operating systems with a strong focus on idempotent automation and high availability
• Migration projects: on-site to cloud (and vice versa) and cloud-to-cloud migrations between providers
• Development environments: standardizing customers' development and sysadmin workstations/clients
• Digital sovereignty solutions (independent of hyperscalers): Linux desktop (Ubuntu/SUSE), mail and communications (groupware mail/calendar/contacts), file sharing and collaboration (Nextcloud)

• Infrastructure automation with Ansible, AWX, Docker/DockerCompose/Kubernetes, GitLab, Bash, Python (Ubuntu)
• Infrastructure monitoring with Icinga2
• Software development in Python
• Qemu, KVM, libvirt