Kubernetes Experts in Switzerland

• Led architecture and end-to-end engineering delivery for community-driven SaaS platforms serving 2M+ monthly active users.
• Architected and led the migration of a monolithic Python/FastAPI and PostgreSQL database and LangChain with codebase to an event-driven microservices architecture on AWS EKS, sustaining 10x traffic growth from ~150 RPS to 1,500+ RPS with zero re-architecture cycles.
• Defined and enforced engineering standards across services including API contracts, observability baselines, and deployment topology, reducing production incidents by 55% and MTTR from 2 hours to under 25 minutes within 9 months.
• Redesigned the caching and query layer using multi-tier Redis caching and database indexing/partitioning, cutting p95 API latency from 850ms to 180ms (78% reduction) and database CPU load by 45%.
• Built CI/CD platform on GitHub Actions, Terraform, and Kubernetes (EKS) with blue-green and canary rollouts, increasing deployment frequency from ~2/month to 8-12/day and reducing lead time from 10 days to under 6 hours.
• Implemented contract testing, automated load testing, and observability SLOs using Prometheus, Grafana, and OpenTelemetry, raising platform availability from 99.5% to 99.95% (10x reduction in error budget burn).
• Led and grew a cross-functional team of 8 engineers across backend, frontend, and DevOps, scaling headcount from 4 to 8 with 85% retention; owned hiring, onboarding, performance reviews, and career development.
• Partnered with Product, Design, and Client Success leadership as primary technical decision-maker; translated business goals into technical roadmaps and drove build-vs-buy decisions on authentication, search, and AI tooling.
• Introduced AI-assisted development workflows including automated code review and a RAG-based internal knowledge assistant using Graph (GraphRAG, Neo4J), increasing sprint throughput by 30% across two quarters.
• Owned incident command and production support rotation; established runbooks, postmortem culture, and on-call SLOs, reducing weekend paging incidents by 70%.
• Developed and optimized Algorithms using python libraries like Numpy and Pandas.

• Interface role with the SOC team; improved incident response time by 45% through structured escalation processes and proactive security monitoring.
• Defined technical standards for a multi-tenant enterprise platform (10+ services), resulting in a 30% shorter onboarding time for new clients in the public sector.
• Active knowledge transfer and mentoring of a 6-person team; increased team autonomy and established a sustainable engineering culture.
• Reduced time to market by 50% by optimizing CI/CD pipelines and establishing self-service deployments.
• Stack: GitLab CI/CD, Kubernetes, Nexus, Harbor, ArgoCD, HashiCorp Vault, Grafana, Python, PostgreSQL, Java, Spring Boot, Flyway, Quarkus, JBoss, Loki, Go, Kafka, Kustomize, MongoDB

• Main cloud solution architect on a banking SaaS offering hosted in Azure.
• Fully automated the Azure infrastructure in Terraform.
• Reduced cloud costs by 50%.
• Responded to incidents, found root-causes and closed with post-mortems.

Responsibility for the design, migration, and integration of a security- and audit-critical HashiCorp Vault platform in the trust center of a nationwide authority with system-critical importance.

• Analysis and realignment of the existing HashiCorp Vault landscape, including production and planned use cases

• Design, proof-of-concept, migration, and integration of HashiCorp Vault Enterprise, taking into account the authority's PKI and operational processes

• Design and implementation of an automated certificate and secrets management system for 300 Kubernetes clusters and several thousand certificates in the trust center

• Securing the Vault platform using hardware security modules (HSM)

The solution enables a highly available, audit-compliant, and automated operation of certificate and secrets use cases in a highly regulated environment.

Technologies used: HashiCorp Vault Enterprise, Terraform, Ansible, OpenSSL, PKI, HSM

• ZHAW CAS Secure Software Design and Development
• German C1 and Goethe Certificate C1
• ETH CAS Cloud and Mobile Computing at ETH Zurich
• Linux Foundation Linux System Administration LFS307
• Linux Foundation Kubernetes Fundamentals LFS258
• Linux Foundation Kubernetes for Application Developers LFD459
• Linux Foundation Kubernetes Security Fundamentals LFS460

• Build prototypes, expand AI skills, and practical application in a startup context.
• Transition phase: further training in prompt engineering, APIs, AI, working on independent prototype projects, and collaborating at a friend's startup.
• Technologies: LangChain, REST, Python, Java, JS, TS, Node.

• Mentor female students and professionals in advancing their careers, particularly as aspiring tech entrepreneurs.

• PoC for various platform integration functionalities using Backstage and Crossplane
• Implementation of improvements of developer experience with Azure AVD and DevSpace
• Manage application deployment infrastructure on Kubernetes clusters
• Manage CI/CD platform
• Manage deployments into Kubernetes (Rancher and AKS) and into Azure
• Act as security champion of the DevOps team
• Manage vulnerabilities and support dev teams to manage third-party vulnerabilities using JFrog Xray
• Support building the platform team
• Manage infrastructure as code using Terraform and Atlantis
• Build and integrate a platform and IDP using Crossplane

• Business analysis, architecture, and implementation of a telemedicine platform for pet owners.
• Leading the development team as Product Owner and Tech Lead.
• Introducing agile processes, setting up development guidelines and system documentation.
• Planning and implementing features like video calls, live chat, and marketing automation.
• Implementing AI-based features such as automated tagging of information (missing pet reports, marketplace entries, etc.), preparation of social media content, and processing of conversation transcripts.
• Skills: Angular, NGXS, Tailwind, Java, Spring Boot, Kubernetes, Docker, CI/CD, MySQL, LLMs, RAG, MCP, Redis, OpenSearch.
• Industry: Veterinary medicine.

• Many years of experience in application development, ICT infrastructures, systems management, hardware and software, telecommunications, ICT strategies, business models, database management, data center consolidations, support and call center setup

• Since 1999 independent consultant and project manager: ICT strategies and governance, processes, audits, security, infrastructure (including cloud, DevOps and tools), data and output management, organizational restructurings, business project management and consulting in various industries

• Generalist with analytical skills, strong communicator at all hierarchy levels, deployable as manager, coach, project manager or consultant

Technologies: Confluence, PlantUML, BPMN

• As part of the modernization of ING DiBa, the master data management system is also being renewed. As the Domain Architect for this topic, I had to find a way to combine global solution approaches from the headquarters in Amsterdam with local requirements from the German branch in Frankfurt.

• Implementation and maintenance of highly critical IAM solutions for B2B clients (SSO, MFA, SAML/OIDC, Entra ID, PIM/PAM)
• Security administration of Linux systems (CentOS, Red Hat) in Docker and Kubernetes environments
• Migration from Docker Swarm to Kubernetes
• Infrastructure automation with Terraform
• Planning and execution of risk assessments, threat modeling, and compliance reports
• Development and management of B2B applications (Java, REST/SOAP, Angular) and CI/CD pipelines (Python, Ansible, Jenkins, GitLab)
• Leading integration tests and UAT (Cucumber, Selenium, Katalon)
• Implementing monitoring and observability strategies with Grafana, Prometheus, and Splunk
• Integrating SAST tools like Snyk and SonarQube
• Release management and project coordination according to Scrum and SAFe
• Mentoring and technical support of junior team members

• Designed large-scale systems and APIs serving thousands of concurrent users.
• Refactored a 650k-LOC monolith and led full AWS migration for stable performance.
• Introduced SLO-based observability, improving reliability and recovery flow.
• Optimised cloud and databases, achieving significant cost and latency reduction.
• Delivered LLM, RAG, and document-automation pipelines adopted in production.

• Worked in mixed teams with several clients
• Performed requirement engineering, proposal and time estimation
• Developed ACLs, business rules, flows, workflows, catalog items, various scripts, UI actions, policies, scoped applications
• Customized mobile apps: Now Agent and Now Mobile
• Implemented integrations using the Integration Hub
• Coordinated continuously with clients during development
• Performed testing and helped clients with testing
• Deployed to production and applied main version upgrades and patches
• Managed CMDB, domain separation and asset management
• Integrated between instances at different clients
• Developed GlideScript: business rules, scripted REST endpoints, extension points, fix scripts, background scripts