OpenStack Experts in Germany

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Team leadership: Prioritization and coordination of four cross-functional teams.
• Platform strategy: Development and implementation of strategies to optimize existing IT platforms.
• Stakeholder management: Active management of expectations and communication with internal and external stakeholders.
• Program and innovation management: Prioritization and coordination of cross-department projects as well as innovation initiatives.
• Product Owner consulting: Advising Product Owners with a focus on product development and continuous product improvement.
• Organizational development: Improving communication and decision-making structures across all organizational levels.
• Change management: Implementing best-practice change management methods to ensure continuous optimization and innovation.
• Quality assurance: Ensuring high quality standards in processes, services, and deliverables.

• Short description: Lead a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations control while preserving the autonomy of decentralized business units within regulatory boundaries.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of an enterprise-wide cloud governance structure (Azure), incl. target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps) incl. decision-making and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework aligned with the Azure Cloud Adoption Framework (CAF), incl. landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), incl. cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts incl. RBAC design and "break glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operational and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance for lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from a hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "break glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Development and introduction of operations processes
• Preparation of complete documentation packages (including incident management and operations support) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Technical consulting for the project security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Hybrid cloud architecture design (on-prem, Hetzner, AWS)
• Analysis and troubleshooting of incidents and system outages
• Network adjustments for firewall rules, gateways, OpenVPN settings, and IPsec tunnels (pfSense)
• Technical consulting on Bitbucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

As project manager for the Odoo implementation at a small company, I was responsible for designing, implementing, and training a fully integrated CRM and accounting system. Through structured requirements analysis, precise data migration, and targeted change management, I was able to complete the rollout in just eight weeks. The project led to a significant reduction in manual tasks, faster business processes, and increased real-time transparency.

Main Responsibilities

Requirements analysis and process mapping Configuration of Odoo modules: CRM, Sales, and Accounting Data migration (Excel/CSV → Odoo) and quality control Creation of workflows, automated email rules, and dashboards Conducting training sessions and providing support after go-live Project coordination (budget, schedule, stakeholder communication)

Key Achievements

Full implementation of the Odoo suite within the set timeframe (8 weeks) 30% reduction in accounting time and 25% acceleration of the lead-to-sale flow 100% customer satisfaction after go-live, based on survey results Successful migration of 100% of existing master data without data loss Establishment of a sustainable support infrastructure (3-month post go-live support)

Impact

Improved decision-making through real-time dashboards and automated reports Increased efficiency and cost savings (≈ €8,000/month) Scalability for future growth (additional modules can be integrated seamlessly) Strengthened sales and finance departments through seamless process integration

This summary highlights how I created concrete and measurable value for the company through structured project work, technical expertise, and targeted training.

Task:

• Design and build a proof of concept (PoC) for a future-proof virtualization platform, taking secure system architectures into account
• Assess the current state of existing infrastructures and develop selection and evaluation criteria for the right OS virtualization platform
• Carry out the requirements analysis and then create and prioritize tickets in the ticket system
• Complete and continuously update a tool evaluation matrix based on PoC results
• Support team knowledge building through clear documentation of the approach and results in Confluence
• Enterprise analysis of existing hardware (creating different BoMs)

Technologies: Vmware, Vmware Aria Operations, Osism, Canonical OpenStack, FishOs, Linux, Terraform, Ansible, Confluence, Alma

• Design and build of a fully isolated AWS offline environment with no outbound internet access for running a browser-based business application
• Design and implementation of a proxy and response service that terminates all external application calls inside the VPC and serves them from locally stored content; identification of the actual communication needs through measurement-based DNS query logging
• Creation of architecture designs and decision papers including a comparison of options (Application Load Balancer with Lambda and S3, reverse proxy on EC2, private API Gateway) assessed by operational effort, cost, and availability
• Transfer of the solution and operations documentation previously available only for Azure to an AWS target architecture, including reassignment of all services and operational processes
• Automated rollout as Infrastructure as Code (Terraform, CloudFormation) with CI deployment via GitHub Actions, plus setup of private DNS zones and an internal certificate chain for operation without internet access
• Creation of architecture, deployment, and operations documentation and handover to the customer
• Build-up of a private cloud platform on OpenStack at provider TelemaxX with Terraform, including FortiGate HA clusters, FortiManager, and Kubernetes
• Introduction of Policy as Code (Open Policy Agent, Conftest) as well as development of MCP servers (Model Context Protocol) to connect AI assistants to operations and project tools

Successes:

• Made the business application fully operable without internet access for the first time; the cause of the loading error was narrowed down systematically to missing CORS headers after the likely certificate issue was ruled out
• Fully transferred an existing Azure concept to AWS and replaced the manually created environment with a reproducible, CI-based rollout

Technology stack: AWS (VPC, Application Load Balancer, Lambda, S3, Route 53 private hosted zones and Resolver query logging, IAM, CloudWatch, EC2, CloudFormation), Infrastructure as Code (Terraform, CloudFormation, Remote State), CI/CD (GitHub Actions with OIDC, Azure DevOps Pipelines), OpenStack, FortiGate, FortiManager, Kubernetes, Policy as Code (Open Policy Agent, Conftest), offline and air-gap architectures, PKI & certificates (internal CA, TLS, CRL/OCSP), DNS, network segmentation, Linux, Windows Server, Python, Bash, PowerShell, YAML, JSON, architecture design & decision papers, documentation (Confluence, Markdown), Generative & Agentic AI (Model Context Protocol, Agentic AI Coding Tools)

• Adaptation, optimization, configuration, and administration of a multi-stage GitLab instance with over 250 users
• Setup, adaptation, expansion, and optimization of infrastructure, configuration, and monitoring
• Provisioning of services and handover to production
• System environment: DependencyTrack, GitLab, Grafana, Hedgedoc, Kubernetes, Oauth2 Proxy, Openstack, Prometheus, Syseleven

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

Predapp is a Sovereign AI and Infrastructure company building AI systems that organisations can own, control, and deploy on their terms, with full data sovereignty. As CTO and investor since 2015, leading the development of the Sovereign AI Platform alongside an advisory practice spanning AI strategy for enterprises, fractional CTO engagements, and technical due diligence for VCs, PE, and family offices.

• Architected the Sovereign AI Platform from zero owning technical vision, infrastructure design, and engineering roadmap; currently deployed at a European hospital, an automotive client in Germany, and two US startups, with active commercial discussions with two leading European hosting providers
• Dubai Health Authority (DHA / Nabidh): Designed and trained AI symptom checker and triage system for national 'Doctor for Every Citizen' initiative under HH Sheikh Mohammed bin Rashid Al Maktoum
• Emirates Airlines: Designed and deployed AI agent for ground personnel accelerating training, improving issue handling, and reducing cost of liquid workforce
• Developed explainable AI triage system piloted at University Hospital Heidelberg and Famagusta Hospital (Cyprus); reduced patient wait times by up to 15% (validation ongoing)
• Built production scheduling engine for US industrial AI startup: RL + Monte Carlo tree search, reducing planning from hours to seconds
• Designed and led the development of semantic search engines using RAG + Knowledge Graphs; developed Agentic Text-to-SQL solution for citizen data scientists
• AI strategy advisory and readiness assessments for enterprise clients, including architecture reviews, maturity assessments, and AI roadmap development

• Built and operate a hybrid Kubernetes platform across bare metal and cloud to validate multi-GPU workloads, security-zone isolation, and disaster recovery.
• Operate self-hosted AI coding agents in the platform's Git workflow, from issue triage to pull-request review; every change is gated by manifest diffs and policy checks in CI.
• Co-developed a sensor-fusion and GPU edge-inference platform selected by the European Defense Tech Hub from 50 solutions for field testing.

• Identification of requirements (legal, organizational, and technical)
• Design of solution architectures
• Evaluation of concepts and technologies
• Preparation of decision templates
• Architectural Decision Records (ADR)
• Coordination of implementation
• Review of implementations
• Documentation

• Analysis of technical and economic feasibility
• Creation of a detailed project plan including time and resource management
• Requesting and evaluating offers, selecting components, and managing suppliers
• Coordination of all involved trades (e.g. electricians, installation companies)
• Monitoring the construction work and ensuring deadlines, budgets, and quality standards are met
• Acceptance and commissioning of the PV system including documentation
• After project completion: optimizing monitoring and supporting grid connection

• Managing complex infrastructure initiatives (digital transformation, cloud migration from OpenStack to MS Azure, BSI C5 compliance) including cost control and optimization across multiple business units.
• Leading a strategic cloud transformation project for an end customer to ensure scalability, compliance, and business impact, including budget, schedule, and scope planning.
• Leading interdisciplinary teams in operational and project environments to deliver innovative, scalable, and secure IT infrastructures.
• Implementing agile processes and ceremonies to foster innovation, continuous improvement, and increase adaptability within the IT organization.
• Strategically planning and managing resources, budgets, and milestones, while actively communicating with clients and stakeholders.