HashiCorp Packer Experts in Germany

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Complete greenfield rebuild across the whole stack — built AI-native: backend in Go and NestJS, PostgreSQL (CNPG) on K3s with GitOps/Terraform; frontend on Angular 22, zoneless.
• Orchestrated coding agents (e.g. Claude Code, Cursor) across the entire lifecycle — architecture, implementation, testing, reviews, documentation — driven by Specification-Driven Development (SDD).
• “Bruno” — LLM commentator persona backed by RAG and MCP for a personality that stays consistent across all generations (match previews, post-match reports, his own virtual bets).

Angular 22 (zoneless, without Zone.js), Claude Code, Claude Code Skills, CNPG, Cursor, Design Tokens (Spec for Code), Docker, Gherkin, Git, GitLab, GitOps, Go, Google Gemini, Grafana, Hetzner Cloud, K3s, Keycloak, Kubernetes, Lighthouse, LLM Integration, Model Context Protocol (MCP), NestJS, Node.js, NPM, Playwright, PostgreSQL, Prometheus, RAG, REST, Specification-Driven Development (SDD), Structured Outputs, Terraform, TypeScript, Vitest

• Fixing issues in the program logic

• Covering the changes with unit tests

• Analyzing and documenting the data structure of the various applications

• Analyzing and documenting the parameters for configuring the applications

• Analyzing and documenting the measures required to ensure the operation of the applications

• Analyzing and designing the separation of the individual database structures

• Analyzing and estimating the effort for planned extensions

• Analyzing, maintaining and documenting a heterogeneous legacy system landscape for a print media service provider

• Technology: C#, VB.NET, C, Python, Microsoft SQL Server, Visual Studio 2010, JetBrains Rider, Visual Studio Code, arc42, Draw.io, Jira, GitLab

• Building an independent enterprise IT setup — cloud strategy, network, AWS landing zone, security requirements, contract negotiations.
• Migration of all applications; avoiding high contractual penalties for the client.
• Onboarding and coordination o...

• Setup and operation of a multi-cluster AWS EKS platform for banking workloads with a unified network and security architecture across 45 AWS accounts.
• Developed and standardized a unified AWS network and security architecture for 45 AWS accounts, enabling consistent governance, connectivity, and compliance for enterprise customer environments.
• Developed and operated a multi-cluster AWS EKS platform to support production workloads, significantly improving scalability, availability, and operational reliability.
• Implemented a GitOps deployment model using ArgoCD and Helm, enabling fully automated, auditable deployments and reducing manual release errors.
• Automated infrastructure provisioning using Terraform and Terragrunt at scale, reducing environment setup time by up to 70% and eliminating configuration drift.
• Established enterprise-grade backup and disaster recovery strategies using Velero and AWS Backup, ensuring reliable multi-cluster recovery and business continuity.
• Introduced Rancher as a self-service Kubernetes platform, accelerating developer onboarding while maintaining centralized security and governance.
• Designed and implemented detailed AWS IAM concepts (roles, policies, trust relationships) to enforce the principle of least privilege for access to accounts, workloads, and CI/CD pipelines.
• Developed AWS Lambda-based pre-provisioning workflows for databases, automating initialization, configuration, and access setup to support secure and consistent application integration.
• Delivered consistent, high-quality results as part of a 5-person AWS Solutions Architecture team, resulting in three consecutive contract renewals.

• Analysis of legacy codebase and identification of architectural issues, implementing improvements in coordination with the Product Owner.
• Development of clean, efficient, and fully documented code following established software engineering practices and standards.
• Analysis of Erlang components in backend and device layers to provide recommendations for ensuring stable system operation.
• Setup and optimization of CI/CD pipelines on client infrastructure, including testing, debugging, and certificate management quality assurance.
• Participation in planning, design, and implementation of epics and stories according to Product Owner specifications.
• Technical consultation for Product Owner regarding Erlang codebase management and best practices.
• Collaboration with Product Owner, Scrum Master, and development team to ensure timely delivery of features.
• Elixir & Phoenix + PostgreSQL
• Erlang
• IoT
• CI/CD
• Git
• Agile/Scrum
• Docker
• Kubernetes
• Frontend (VueJS)
• Embedded Devices

• Responsible for software engineering and DevOps in the Data & AI Platform - Intake and PubSub projects at STACKIT, the cloud provider of the Schwarz Group.
• Technologies: Golang, Kubernetes, Kubernetes operators, OpenAPI v3, REST API, Azure DevOps, CI/CD, k6, Kafka, Strimzi, Apache Iceberg, RBAC, IAM, Terraform, Helm, Infrastructure automation, Load balancing, Traefik, ArgoCD, kuttl, Kyverno chainsaw, Kustomize, Velero, Prometheus, Grafana, Checkly / Playwright (TypeScript), NATS/Jetstream, WebSockets, gRPC, SSE

• Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering (SRE) team.
• Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts.
• Wrote documentation.

AWS Cloud migration:

• Design and implement CI/CD for deploying AWS resources using GitLab CI, Terraform, and GitOps.
• Create and configure DevOps toolchain including Jenkins, Harbor, and Vault.
• Deploy billing application, microservices, and supporting infrastructure services to Nomad clusters.
• Re-designed TLS/mTLS certificate management using Vault and Lambda.

Security (Infrastructure Hardening & Patch Management & Vulnerability Scanning):

• Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts (Harbor, Jenkins, Vault).
• Created hardened AMIs via Packer based on CIS benchmarks for Nomad, Jenkins, Harbor, and Vault; deployed using Terraform.
• Integrated Trivy via Harbor plugin for container image scanning.
• Implemented strict AWS VPC security group rules.
• Developed and maintained patching process across environments using Qualys and Wiz.
• Deployed Qualys Cloud Agent to all EC2 instances, tracked CVEs and tested patches in lower environments before rollout.
• Automated patch deployment across all AWS accounts using Terraform and GitLab CI and verified patch compliance via Qualys/Wiz dashboards.

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Implementation of complex Azure resources using Terraform IaC and Azure DevSecOps pipelines with network security and zero-trust governance policies

• Optimization of the existing network design, firewall and database migration

• Implementation of governance and network policies as Policy as Code (PaC)

• Establishment of company-wide Azure connectivity using Azure VPN as an IPSec tunnel

• Implementation of hybrid on-premises multi-cloud connectivity (GCP, Azure) using Terraform

• Development of Azure Functions for scheduled cron jobs and Service Bus message queuing with topics

• Optimization of messaging with Service Bus premium features and IP whitelisting

• Stakeholder management, customer communication and creation of Architectural Decision Records (ADR)

• Responsible for cost-efficient quick wins in Azure and on-premises systems

• Planning and documentation of database architecture and integration with other components provided by other teams and vendors
• Extensive documentation for the architecture, security, access control, encryption, roles and user management, backup and restore, disaster recovery and general operations
• Deployment of database clusters over 2 locations with 2 availability zones each
• Automation of deployment and operations including backup using Ansible
• Hardening of the database and operating system
• Migration of existing stand-alone database systems to cluster setup
• Technologies: PostgreSQL, Patroni, etcd, barman, RedHat Enterprise Linux 9 (RHEL), Ansible, Ansible Automation Platform, TLS, Hashicorp Vault, LUKS

• Migration of Oracle databases from on-premise to the AWS Cloud
• Support for technical Oracle solutions and cloud database infrastructures (IaaS and PaaS) RDS vs. EC2, sizing for performance
• Creation and maintenance of DR/HA (Disaster Recovery/High Availability) and backup and recovery policies and procedures (multi-region backup)
• Support for Oracle license selection, Enterprise → Standard migration
• Monitoring database instances
• Implementation and maintenance of database security (wallet, SSL)
• Patch management and version control
• Automated installation and configuration of Oracle databases using Terraform and Ansible

• Migration of a mainframe application (PL/1, zOS) to the cloud (Azure)
• Data transfer from z/OS (USS) to Azure storage (blob containers, file shares)
• Implementation of the mainframe job control in Java
• Mapping of job network dependencies in Control-M
• Performance analysis and optimization measures
• DB2 (z/OS) migration to Postgres (Azure)
• Technologies: Azure (storage, VM, VMSS, Postgres), z/OS (USS), DB2, Postgres, Packer, Terraform, Docker, Jenkins, GitHub Actions, Control-M
• Tools: Eclipse, Visual Studio Code, IntelliJ

• Agile software development in an interdisciplinary environment

• Cross-team collaboration to achieve important milestones

• Independently developing new and improving existing features

• Estimation, refinement, implementation, and presentation

• Finding solution ideas, analyzing problems, rolling out bug fixes

• Writing automated tests, manual testing, log and error analysis

• Ensuring high availability, fault tolerance, and scalability of the production environment

• Rolling out releases and multi-stage infrastructure

• Setting up alerts and monitoring

• Pair programming, code reviews, documentation

• On-call duty, 3rd level support

• Event-Driven Architecture, Clean Code, Hexagonal Architecture

• Microservices based on Go (Gin), Java 21 (Spring Boot 3), Python (FastAPI)

• Terraform/OpenTofu, KQL, SQL, JSON, REST, Helm, ArgoCD, AzureCLI, K9s, OAuth2

• Postgres, Redis, Kafka, Azure EventHub, Kubernetes, nginx, Ingress

• AppInsights, LogAnalytics, OpenTelemetry, Datadog, OpenAPI 3, Swagger

• Azure DataExplorer, Storage, KeyVault, Container Registry, Azure Functions,…

• Junit5/Jupiter, testify, RestAssured, Docker Compose, Wiremock

• IntelliJ, Scrum, Kanban, Teams, Confluence, OpsGenie, Arc42

• GitHub CI/CD, GitLab CI/CD, Azure DevOps

• EV charging protocols (EVSE, OCPP, V1G, V2G)