Infrastructure as Code
Aktualisiert am 24.07.2026
Profil
Freiberufler / Selbstständiger
Remote-Arbeit
Verfügbar ab: 24.07.2026
Verfügbar zu: 100%
davon vor Ort: 0%
Terraform
Ansible
AWS
cloudera
kubernetes
Apache Hadoop
docker
Linux
cassandra
GCP
kafka
graylog
Microsoft Azure
bash
prometheus
proxmox
Puppet
Datadog
Kubernetes
Solution Architect
Cloud Engineer
German
English
Greek

Einsatzorte

Einsatzorte

Hamburg (+50km)
Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

5 Jahre 8 Monate
2020-12 - heute

Conceptualized and planned a successful cloud migration

Cloud Operations Engineer
Cloud Operations Engineer
  • Conceptualized and planned a successful cloud migration from Amazon Web Services to Google Cloud, ensuring a seamless transition and optimized performance for the client.
  • Designed and implemented a Kubernetes cluster on Google Cloud (GKE), optimized for autoscaling Gitlab runners with focus on cost efficiency, featuring node pools that provide nodes only when required, and leveraging preemptible nodes to minimize costs while maintaining high performance and scalability.
  • Orchestrated a comprehensive logging and application performance monitoring solution on a Kubernetes cluster using Helm Charts, utilizing tools such as Prometheus, Grafana, Graylog, MongoDB, and Elasticsearch on Google Kubernetes Engine, enabling efficient and scalable management of resources.
  • Performed ongoing maintenance and service for Google Cloud resources, regularly updating Helm Charts and importing updates for provided applications, ensuring reliable and up-to-date infrastructure for clients.
webvisum GmbH, Cologne
2 Monate
2025-03 - 2025-04

Onboarded and conducted comprehensive documentation

Senior Data Engineer Consultant
Senior Data Engineer Consultant
  • Onboarded and conducted comprehensive documentation and system analysis to assess the existing data infrastructure, facilitating rapid integration and collaboration across functional data teams (modelling, processing, reporting).
  • Collaboratively defined the architecture and project structure for a central data pipeline repository, including hierarchical standards, knowledge management strategies, and role-specific responsibilities, enhancing maintainability and onboarding speed.
  • Evaluated and validated open-source data routing tools (Airbyte, Apache NiFi, Dragster) for ingest and sync requirements in retail analytics, including local benchmarking and error-state testing.
  • Led the design and deployment of Airbyte in Kubernetes, creating customized Helm charts, securing secrets handling, and configuring Ingress with TLS and internal DNS routing, ensuring full API and UI accessibility.
  • Troubleshot and resolved Ingress controller issues, iterating through multiple stages of debugging and testing, and documented setup and replication steps for scalable reuse.
  • Mapped data models to ARTS standard, supporting schema alignment for ERP and reporting use cases, and coordinated review loops to align future data processing logic.
  • Drafted strategic 1-pagers comparing MinIO, Pub/Sub, and routing architectures, providing technical guidance for architectural decisions and investment planning.
  • Enabled secure access and authentication mechanisms, including initial evaluation for SAML integration, cluster-level configuration reviews, and service annotation improvements.
GOLDNER GmbH, Münchberg
1 Jahr 3 Monate
2023-12 - 2025-02

Designed and led the architecture of a centralized Infrastructure-as-Code (IaC) catalog

Senior Observability Engineering Consultant
Senior Observability Engineering Consultant
  • Designed and led the architecture of a centralized Infrastructure-as-Code (IaC) catalog using Terraform and Terragrunt to enable scalable, secure, and standardized observability infrastructure for over 40 engineering teams, significantly accelerating onboarding and reducing drift.
  • Developed reusable modules for logging pipelines, index policies, monitors, dashboards, API keys, SAML authentication mappings, team roles, and service accounts, ensuring traceability and compliance across multiple business units and cloud environments.
  • Built and rolled out a secure log archiving system using Datadog, Vector, and Azure Blob Storage, integrating dynamic IP whitelisting and lifecycle policies to meet regulatory and performance requirements.
  • Introduced a governance framework aligned with internal standards (Monokel), embedding tagging conventions, naming strategies, and policy inheritance through Terragrunt, and enabling consistent resource hygiene at scale.
  • Automated CI/CD workflows using GitHub and GitLab Actions with advanced matrix strategies, seed jobs, and dynamic JSON/HCL transformations, providing resilience and clarity in multi-environment, multi-team deployments.
  • Championed product-oriented thinking by running enablement workshops, pairing sessions, and offsite planning initiatives to empower teams to treat their monitoring setups as internal products with ownership and accountability.
  • Standardized team onboarding practices, including the creation of a scalable onboarding pipeline, practical training on Datadog, IaC, and logging architecture, and ongoing architectural mentoring to internal SRE and DevOps leads.
  • Collaborated cross-functionally to align observability practices with broader IT and compliance strategies, continuously refining the shared IaC foundation based on team feedback and operational metrics.
Dirk Rossmann GmbH, Hannover
1 Jahr 6 Monate
2023-05 - 2024-10

Analyzed the existing infrastructure and optimized Terraform automation

DevOps Consultant
DevOps Consultant
  • Analyzed the existing infrastructure and optimized Terraform automation by migrating infrastructure repositories to Terraspace, ensuring streamlined deployments and improved modularity.
  • Developed a dynamic GitHub Actions workflow for Terraspace, enabling fully automated deployments across multiple environments, reducing manual intervention and improving CI/CD efficiency.
  • Enhanced monitoring capabilities by implementing Datadog logging pipelines with Grok processors, improving log categorization, and reducing noise by filtering unnecessary debug logs.
  • Led the migration of AWS CloudWatch alerts for microservices, ensuring that monitoring configurations were standardized across testing, staging, and production environments.
  • Optimized Datadog cost structure, refining log exclusion filters and implementing log-based monitoring strategies, reducing unnecessary logs and improving alert precision.
  • Debugged and resolved critical pipeline issues, ensuring smooth application rollouts and troubleshooting AWS Lambda service configurations for scalability and performance improvements.
  • Provided expert guidance on best practices for AWS infrastructure, Datadog monitoring, and Terraform-based automation, empowering internal teams through hands-on workshops and consulting sessions.
The Quality Group, Hamburg
3 Monate
2023-04 - 2023-06

Analyzed the existing on-premise infrastructure

Cloud Engineer & Consultant
Cloud Engineer & Consultant
  • Analyzed the existing on-premise infrastructure and identified Azure services that best matched business needs, ensuring a cost-effective and seamless migration.
  • Developed and automated an Infrastructure-as-Code (IaC) framework in Terraform, allowing for repeatable, scalable, and efficient deployment of Azure resources.
  • Led the migration of an on-premise PostgreSQL database to a fully managed Azure SaaS solution, eliminating maintenance overhead and improving scalability and reliability.
  • Replaced a self-hosted object storage solution with Azure Object Storage, leveraging Azure?s security and redundancy features to enhance data availability and disaster recovery.
  • Designed and deployed a CosmosDB for PostgreSQL cluster, automating provisioning and management through Terraform to optimize database performance and reduce manual intervention.
  • Implemented a Terraform-driven management layer that centralized resource governance and policy enforcement, streamlining operations and ensuring compliance with cloud best practices.
Delicious Data GmbH, Munich
2 Jahre 3 Monate
2021-04 - 2023-06

Developed and implemented a versatile Terraform

Cloud Engineer & Consultant
Cloud Engineer & Consultant
  • Developed and implemented a versatile Terraform base for all product teams, prioritizing ease of use, flexibility, and multi-environment/region support, resulting in a widely adopted skeleton structure that enhances productivity and efficiency across teams.
  • Successfully designed, coordinated, and implemented an enterprise network topology on AWS using the HUB-Spoke strategy for centralized account connectivity, leveraging TransitGateway to manage traffic through route tables and firewall, and establishing seamless cross-regional communication among eu-central-1, us-east-1, and ap-southeast-1 with TransitGateway Global-Peering. Streamlined the entire project with Terragrunt for enhanced efficiency, resulting in a well-connected and automated network topology that meets business needs.
  • Developed and implemented a secure and accessible strategy for product teams to make changes to systems they don?t normally have direct access to, establishing a community organization for firewall, Datadog, account management, and other areas with easy-to-use Terraform projects tailored to meet the needs of the teams without requiring a deep understanding of Terraform. Automated the entire process through Github Actions, and ensured every change was reviewed through a pull request by the Platform team, resulting in a streamlined and efficient system that promotes productivity and collaboration.?
  • Collaborated with the Platform team to identify areas for improvement and provided valuable advisory support in the creation of new organizational processes to enhance collaboration, resulting in a more cohesive team and improved productivity.
  • Successfully developed and implemented a Terraform project that effectively manages AWS firewall rules, overcoming the challenge of the AWS API?s lack of a process to remove a rule group from the AWS firewall policy before deletion. Developed a detach and attach rule group Terraform module that efficiently performs this task, and established the project as a community initiative, enabling product teams to easily adjust firewall rules through pull requests and reducing reliance on the platform engineering team, resulting in a more efficient workflow and enhanced productivity.
  • Played a key role in the successful implementation of a centralized logging and monitoring solution at Statista, leading the planning and coordination efforts in collaboration with Datadog to execute a proof-of-value (PoV) project that prioritized key elements such as terraform automation, single sign-on, logging, application performance monitoring, and tagging concepts. As a result of overseeing the PoV project and skillfully integrating the new solution with the entire Statista infrastructure, operational workflows were significantly streamlined, and monitoring capabilities were vastly improved.
  • Pioneered the development of a robust solution for the centralized provision of vital information required by every terraform or terragrunt project for AWS accounts. Recognizing that the platform team?s terraform/terragrunt projects for deploying the cloud framework required the same information, a comprehensive catalog was created that provides all necessary details such as naming conventions and network CIDR ranges, automatically generated for easy consumption by each terraform/terragrunt project. This solution successfully eliminated the need to manually add critical information to each project as the accounts expand, optimizing the efficiency of the cloud framework deployment process.
Statista, Hamburg
3 Monate
2022-11 - 2023-01

Developed and implemented a log event transmission strategy

DevOps Consultant
DevOps Consultant
  • Developed and implemented a log event transmission strategy for non-standard log files, converting the logs into a contemporary format and sending them to Graylog via fluentd and multiline(RegEx), ensuring effective log management and analysis.
  • Provided guidance to internal staff and collaborated on the development of GROK patterns within Graylog, enabling the mapping of logs processed by fluentd into usable and searchable attributes, facilitating effective log management and analysis.
  • Established Graylog pipelines that extracted values from message blocks based on regex and mapped them into usable and searchable attributes for developers, facilitating streamlined log management and analysis.
e*Message GmbH , Berlin
2 Jahre 7 Monate
2020-03 - 2022-09

Developed a fully automated data center infrastructure architecture

Freelance Information Architect
Freelance Information Architect
  • Developed a fully automated data center infrastructure architecture for various web systems using Ansible, optimizing system efficiency and reducing human errors.
  • Implemented a central monitoring and logging system based on DataDog, enhancing visibility and proactively identifying and addressing issues with custom checks for own developments and setting up notifications at different levels of criticality.
  • Planned and automated the implementation of patch management for Linux servers, enabling quick installation of security updates across all servers, enhancing security and minimizing vulnerabilities.
  • Implemented various security concepts to protect web servers against attacks, ensuring data privacy and system security.
SkillProjects GmbH, Bordesholm
8 Monate
2021-08 - 2022-03

Achieved centralized control of the Azure enterprise landing zone

Azure Specialist
Azure Specialist
  • Achieved centralized control of the Azure enterprise landing zone by implementing a fully automated blue-green deployment strategy for a Terraform project, utilizing Azure DevOps CI pipelines.
  • Successfully planned and executed two major migrations of the Terraform module ?terraform-azurerm-caf-enterprise-scale? which manages the Enterprise Landing Zone, adapting to the new handling procedures introduced in the latest versions, while also performing cleanup work to ensure the codebase was collaborative and dynamic.
  • Developed and implemented over 50 Azure Policies based on Berenberg?s regulatory guidelines, including BaFin, ensuring compliance with banking regulations, and enabling governance and compliance in the Azure Cloud through centralized deployment using Terraform.
Berenberg, Hamburg
1 Jahr 3 Monate
2020-08 - 2021-10

Conducted analysis and evaluation of AWS infrastructure

Freelance DevOps Engineer
Freelance DevOps Engineer
  • Conducted analysis and evaluation of AWS infrastructure and software components to identify areas for cost reduction and potential security risks, implementing strategies to optimize efficiency and security.
  • Identified and addressed weaknesses in an Elasticsearch cluster, proposing immediate changes to improve stability and ensure data integrity, enhancing the overall performance of the system.
  • Presented a more efficient AWS cloud architecture by replacing self-hosted services with cloud services and isolating environments with different AWS organizations, resulting in improved scalability and cost savings.
  • Created guidelines for the use and development of Terraform automation scripts, ensuring consistency and standardization in code development and promoting best practices.
xChange Solutions GmbH, Hamburg
3 Jahre 4 Monate
2016-11 - 2020-02

Converting the infrastructure from a mainly manual maintenance state

Senior Infrastructure Engineer
Senior Infrastructure Engineer
  • Played a key role in the main automation project converting the infrastructure from a mainly manual maintenance state into a completed automated state using Saltstack and GitLab, joining the design sessions and being responsible for a sizeable part of the implementation e?ort, later taking over the responsibility for being the main driver of automation and testing for any expansions using tools like kitchen and InSpec and respecting a git-flow model, ensuring that a machine park with more than 300 hosts is completely managed through an automated and audited interface. 
  • Successful proof-of-concept of a monitoring solution for MySQL databases based on Prometheus, Grafana, and related exporters. This solution enabled developers to find inconsistencies amongst database schemas and Infrastructure engineers to adjust and enhance the database performance.
  • Creation of a new segregated environment standard to run the company's applications, covering di?erent roles such as web servers, backend servers, and batch job servers backed by a set of reusable Ansible deployment scripts.
  • Successful migration of the company hypervisor technology from VMWare to Proxmox, greatly enhancing the automation capabilities of the platform and making it possible to run applications with LXC container technology.
  • Design and implementation of a new load balancing architecture for dynamic request routing based on consul, consul-template, and nginx. This new architecture enabled central log aggregation,  TLS-secured connections and dynamic routes based on service registration information stored from the Consul service catalog.
  • Development of a new set of guidelines for service registration and discovery in the company, together with automation systems for Consul and Consul Template management using SaltStack, including enhancements to the core  states and modules for Consul.
  • Rollout of a new Docker Registry  based on Gitlab EE together with an S3 backend with controlled access and encryption using in-house certificates. Provided documentation and examples for the internal teams to migrate to the new solution.
  • Setup of a new test infrastructure based on Gitlab CI and dynamic build workers on AWS governed by auto scaling runners. The solution enabled all teams working in both infrastructure and application development to have an elastic environment for functional and end-to-end testing whilst greatly reducing the need for on-premise testing infrastructure, resulting in significant cost savings. The rollout of the solution included pair sessions with the development teams in order to adapt the solution to be compatible with semantic versioning and the Java build process used in the company.
  • Successful PoC of infrastructure management on AWS using Terraform and a set of custom scripts, allowing better view on what would be required to migrate all AWS resources to a Terraform-managed setup.
  • Creation of a team vision and moderation of discussion sessions which enabled the team to map pending work in form of a comprehensive roadmap, which is used to guide the Scrum planing process.
  • Rollout of Graylog as the default log aggregator within the company, starting with PoC projects all the way to a fully automated setup backed by SaltStack running in the AWS cloud.
Deposit Solutions GmbH
Hamburg
5 Monate
2016-07 - 2016-11

Improved an existing DataStax Cassandra Cluste

System Administrator / DevOps
System Administrator / DevOps
  • Improved an existing DataStax Cassandra Cluster through a multi phased process of collecting performance data with prometheus, identifying existing bottlenecks  and implementing multiple configuration enhancements, amongst them fixing rack awareness, heap space allocation, number of nodes, data replication level and automation with Ansible. Aer the changes the amount of running transactions per second was increased in around 400%.
  • Automated the installation of Apache Kafka brokers by creating custom Debian packages and an Ansible role to install them, improving provisioning time for new clusters.
  • Deployed a PoC project for Java application tracing based on Dynatrace, enabling development teams to proactively detect performance bottlenecks across services and infrastructure components.
Webtrekk
Berlin
1 Jahr 1 Monat
2015-04 - 2016-04

Planned and migrated a Cloudera cluster

System Engineer
System Engineer
  • Planned and migrated a Cloudera cluster from major release version 4 to 5, including an linux upgrade from CentOS 6 to 7 managed by puppet with all new configurations and components (Hadoop HDFS, YARN, HBase, Hive, ZooKeeper, Kafka, Flume, Spark). The existing data was synchronized by homegrown scripts with zero downtime. 
  • Participated in a true DevOps culture in steadily improving YARN. Worked hand in hand with development teams to determine the best resources for the various workloads to achieve the best possible result, obtaining a performance increase of 50%.
  • Creation of various enrichment scripts for 3rd party data consumed from many data sources saving on-demand changes to Hadoop HDFS.
  • Participation in the construction of a data enrichment pipeline by means of Kafka brokers and flumes in the process of sequential data processing, storing data of a defined file size limit in a HDFS cluster. The system was able to process 2 million synthetic data messages per second.
  • Created a python-based data backup and recovery solution for Cassandra database systems emulating 1 automated recovery per month.
  • Setup a Gitlab CI 8 build pipeline to support development teams in their build and release process.
The ADEX
Hamburg / Berlin
8 Monate
2014-09 - 2015-04

OnApp

System Administrator
System Administrator
  • Migrated workloads running over bare metal to an OnApp KVM based solution with Samba4 acting as a Domain Controller for the environment. Also deployed a unified monitoring and alerting setup for this environment with Nagios.
  • Implemented a centralized configuration management system with puppet (v3.4) and created custom puppet modules for various infrastructure components (MariaDB, Nagios core, vspd, OpenVPN, shorewall, iptables, HAProxy, POSIX users and groups, PowerMTA, ActiveMQ, Apache, MongoDB, sudo, OnApp, NFS, OpenLDAP).
  • Provided consultancy on performance tuning for MariaDB Galera clusters to subsidiaries of the ad pepper holding.
  • Performed migration of Microso SQL Server clusters to version 2014 from  2005 with the following features: DB-Engine, Analysis Services, Integration Services.
ad pepper media Group
Hamburg
11 Monate
2013-10 - 2014-08

Governance of the entire IT infrastructur

System Administrator
System Administrator
  • Administration and governance of the entire IT infrastructure including high availability, security, backup on ubuntu linux servers and ruby application and moving soware business workloads into a soware defined datacenter with VMWare vSphere.
  • Implemented a unified security solution via multiple Sophos UTM  (WAN, LAN, VPN).
UDG United Digital Group
Hamburg

Aus- und Weiterbildung

Aus- und Weiterbildung

3 Jahre 6 Monate
2009-08 - 2013-01

Vocational training

System Engineer, Institut für Berufliche Bildung AG, Hamburg / Buxtehude
System Engineer
Institut für Berufliche Bildung AG, Hamburg / Buxtehude

Kompetenzen

Kompetenzen

Top-Skills

Terraform Ansible AWS cloudera kubernetes Apache Hadoop docker Linux cassandra GCP kafka graylog Microsoft Azure bash prometheus proxmox Puppet Datadog Kubernetes Solution Architect Cloud Engineer

Produkte / Standards / Erfahrungen / Methoden

Amazon AWS
Ansible
Bash
Cassandra
Cloudera
Consul
Consul-Template
Docker
Elasticsearch
Filesystems
Gitlab
Graylog
Hadoop
Kubernetes
KVM
Linux
LXC
Microsoft Azure
Nginx
Prometheus
Proxmox
Saltstack
Terraform

PROFILE

As an IT engineer with a strong focus on infrastructure, I am passionate about automating and standardizing processes to maximize performance and efficiency. With a keen interest in Infrastructure-as-Code and Cloud Solutions Architecture, I am always seeking out new challenges in dynamic environments that allow me to flex my technical skills and drive innovation. If you're looking for a results-driven, detail-oriented engineer with a proven track record of optimizing system performance, look no further.


SKILLS

  • Microsoft Azure
  • Amazon AWS
  • Google Cloud Platform
  • Terraform
  • Datadog
  • CI/CD
  • Linux
  • Ansible
  • Saltstack
  • Consul
  • Gitlab
  • Kubernetes
  • Docker
  • Cloudera
  • Bash
  • Graylog
  • Elasticsearch
  • Prometheus
  • Cassandra
  • Kitchen-CI
  • Cloudflare

Einsatzorte

Einsatzorte

Hamburg (+50km)
Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

5 Jahre 8 Monate
2020-12 - heute

Conceptualized and planned a successful cloud migration

Cloud Operations Engineer
Cloud Operations Engineer
  • Conceptualized and planned a successful cloud migration from Amazon Web Services to Google Cloud, ensuring a seamless transition and optimized performance for the client.
  • Designed and implemented a Kubernetes cluster on Google Cloud (GKE), optimized for autoscaling Gitlab runners with focus on cost efficiency, featuring node pools that provide nodes only when required, and leveraging preemptible nodes to minimize costs while maintaining high performance and scalability.
  • Orchestrated a comprehensive logging and application performance monitoring solution on a Kubernetes cluster using Helm Charts, utilizing tools such as Prometheus, Grafana, Graylog, MongoDB, and Elasticsearch on Google Kubernetes Engine, enabling efficient and scalable management of resources.
  • Performed ongoing maintenance and service for Google Cloud resources, regularly updating Helm Charts and importing updates for provided applications, ensuring reliable and up-to-date infrastructure for clients.
webvisum GmbH, Cologne
2 Monate
2025-03 - 2025-04

Onboarded and conducted comprehensive documentation

Senior Data Engineer Consultant
Senior Data Engineer Consultant
  • Onboarded and conducted comprehensive documentation and system analysis to assess the existing data infrastructure, facilitating rapid integration and collaboration across functional data teams (modelling, processing, reporting).
  • Collaboratively defined the architecture and project structure for a central data pipeline repository, including hierarchical standards, knowledge management strategies, and role-specific responsibilities, enhancing maintainability and onboarding speed.
  • Evaluated and validated open-source data routing tools (Airbyte, Apache NiFi, Dragster) for ingest and sync requirements in retail analytics, including local benchmarking and error-state testing.
  • Led the design and deployment of Airbyte in Kubernetes, creating customized Helm charts, securing secrets handling, and configuring Ingress with TLS and internal DNS routing, ensuring full API and UI accessibility.
  • Troubleshot and resolved Ingress controller issues, iterating through multiple stages of debugging and testing, and documented setup and replication steps for scalable reuse.
  • Mapped data models to ARTS standard, supporting schema alignment for ERP and reporting use cases, and coordinated review loops to align future data processing logic.
  • Drafted strategic 1-pagers comparing MinIO, Pub/Sub, and routing architectures, providing technical guidance for architectural decisions and investment planning.
  • Enabled secure access and authentication mechanisms, including initial evaluation for SAML integration, cluster-level configuration reviews, and service annotation improvements.
GOLDNER GmbH, Münchberg
1 Jahr 3 Monate
2023-12 - 2025-02

Designed and led the architecture of a centralized Infrastructure-as-Code (IaC) catalog

Senior Observability Engineering Consultant
Senior Observability Engineering Consultant
  • Designed and led the architecture of a centralized Infrastructure-as-Code (IaC) catalog using Terraform and Terragrunt to enable scalable, secure, and standardized observability infrastructure for over 40 engineering teams, significantly accelerating onboarding and reducing drift.
  • Developed reusable modules for logging pipelines, index policies, monitors, dashboards, API keys, SAML authentication mappings, team roles, and service accounts, ensuring traceability and compliance across multiple business units and cloud environments.
  • Built and rolled out a secure log archiving system using Datadog, Vector, and Azure Blob Storage, integrating dynamic IP whitelisting and lifecycle policies to meet regulatory and performance requirements.
  • Introduced a governance framework aligned with internal standards (Monokel), embedding tagging conventions, naming strategies, and policy inheritance through Terragrunt, and enabling consistent resource hygiene at scale.
  • Automated CI/CD workflows using GitHub and GitLab Actions with advanced matrix strategies, seed jobs, and dynamic JSON/HCL transformations, providing resilience and clarity in multi-environment, multi-team deployments.
  • Championed product-oriented thinking by running enablement workshops, pairing sessions, and offsite planning initiatives to empower teams to treat their monitoring setups as internal products with ownership and accountability.
  • Standardized team onboarding practices, including the creation of a scalable onboarding pipeline, practical training on Datadog, IaC, and logging architecture, and ongoing architectural mentoring to internal SRE and DevOps leads.
  • Collaborated cross-functionally to align observability practices with broader IT and compliance strategies, continuously refining the shared IaC foundation based on team feedback and operational metrics.
Dirk Rossmann GmbH, Hannover
1 Jahr 6 Monate
2023-05 - 2024-10

Analyzed the existing infrastructure and optimized Terraform automation

DevOps Consultant
DevOps Consultant
  • Analyzed the existing infrastructure and optimized Terraform automation by migrating infrastructure repositories to Terraspace, ensuring streamlined deployments and improved modularity.
  • Developed a dynamic GitHub Actions workflow for Terraspace, enabling fully automated deployments across multiple environments, reducing manual intervention and improving CI/CD efficiency.
  • Enhanced monitoring capabilities by implementing Datadog logging pipelines with Grok processors, improving log categorization, and reducing noise by filtering unnecessary debug logs.
  • Led the migration of AWS CloudWatch alerts for microservices, ensuring that monitoring configurations were standardized across testing, staging, and production environments.
  • Optimized Datadog cost structure, refining log exclusion filters and implementing log-based monitoring strategies, reducing unnecessary logs and improving alert precision.
  • Debugged and resolved critical pipeline issues, ensuring smooth application rollouts and troubleshooting AWS Lambda service configurations for scalability and performance improvements.
  • Provided expert guidance on best practices for AWS infrastructure, Datadog monitoring, and Terraform-based automation, empowering internal teams through hands-on workshops and consulting sessions.
The Quality Group, Hamburg
3 Monate
2023-04 - 2023-06

Analyzed the existing on-premise infrastructure

Cloud Engineer & Consultant
Cloud Engineer & Consultant
  • Analyzed the existing on-premise infrastructure and identified Azure services that best matched business needs, ensuring a cost-effective and seamless migration.
  • Developed and automated an Infrastructure-as-Code (IaC) framework in Terraform, allowing for repeatable, scalable, and efficient deployment of Azure resources.
  • Led the migration of an on-premise PostgreSQL database to a fully managed Azure SaaS solution, eliminating maintenance overhead and improving scalability and reliability.
  • Replaced a self-hosted object storage solution with Azure Object Storage, leveraging Azure?s security and redundancy features to enhance data availability and disaster recovery.
  • Designed and deployed a CosmosDB for PostgreSQL cluster, automating provisioning and management through Terraform to optimize database performance and reduce manual intervention.
  • Implemented a Terraform-driven management layer that centralized resource governance and policy enforcement, streamlining operations and ensuring compliance with cloud best practices.
Delicious Data GmbH, Munich
2 Jahre 3 Monate
2021-04 - 2023-06

Developed and implemented a versatile Terraform

Cloud Engineer & Consultant
Cloud Engineer & Consultant
  • Developed and implemented a versatile Terraform base for all product teams, prioritizing ease of use, flexibility, and multi-environment/region support, resulting in a widely adopted skeleton structure that enhances productivity and efficiency across teams.
  • Successfully designed, coordinated, and implemented an enterprise network topology on AWS using the HUB-Spoke strategy for centralized account connectivity, leveraging TransitGateway to manage traffic through route tables and firewall, and establishing seamless cross-regional communication among eu-central-1, us-east-1, and ap-southeast-1 with TransitGateway Global-Peering. Streamlined the entire project with Terragrunt for enhanced efficiency, resulting in a well-connected and automated network topology that meets business needs.
  • Developed and implemented a secure and accessible strategy for product teams to make changes to systems they don?t normally have direct access to, establishing a community organization for firewall, Datadog, account management, and other areas with easy-to-use Terraform projects tailored to meet the needs of the teams without requiring a deep understanding of Terraform. Automated the entire process through Github Actions, and ensured every change was reviewed through a pull request by the Platform team, resulting in a streamlined and efficient system that promotes productivity and collaboration.?
  • Collaborated with the Platform team to identify areas for improvement and provided valuable advisory support in the creation of new organizational processes to enhance collaboration, resulting in a more cohesive team and improved productivity.
  • Successfully developed and implemented a Terraform project that effectively manages AWS firewall rules, overcoming the challenge of the AWS API?s lack of a process to remove a rule group from the AWS firewall policy before deletion. Developed a detach and attach rule group Terraform module that efficiently performs this task, and established the project as a community initiative, enabling product teams to easily adjust firewall rules through pull requests and reducing reliance on the platform engineering team, resulting in a more efficient workflow and enhanced productivity.
  • Played a key role in the successful implementation of a centralized logging and monitoring solution at Statista, leading the planning and coordination efforts in collaboration with Datadog to execute a proof-of-value (PoV) project that prioritized key elements such as terraform automation, single sign-on, logging, application performance monitoring, and tagging concepts. As a result of overseeing the PoV project and skillfully integrating the new solution with the entire Statista infrastructure, operational workflows were significantly streamlined, and monitoring capabilities were vastly improved.
  • Pioneered the development of a robust solution for the centralized provision of vital information required by every terraform or terragrunt project for AWS accounts. Recognizing that the platform team?s terraform/terragrunt projects for deploying the cloud framework required the same information, a comprehensive catalog was created that provides all necessary details such as naming conventions and network CIDR ranges, automatically generated for easy consumption by each terraform/terragrunt project. This solution successfully eliminated the need to manually add critical information to each project as the accounts expand, optimizing the efficiency of the cloud framework deployment process.
Statista, Hamburg
3 Monate
2022-11 - 2023-01

Developed and implemented a log event transmission strategy

DevOps Consultant
DevOps Consultant
  • Developed and implemented a log event transmission strategy for non-standard log files, converting the logs into a contemporary format and sending them to Graylog via fluentd and multiline(RegEx), ensuring effective log management and analysis.
  • Provided guidance to internal staff and collaborated on the development of GROK patterns within Graylog, enabling the mapping of logs processed by fluentd into usable and searchable attributes, facilitating effective log management and analysis.
  • Established Graylog pipelines that extracted values from message blocks based on regex and mapped them into usable and searchable attributes for developers, facilitating streamlined log management and analysis.
e*Message GmbH , Berlin
2 Jahre 7 Monate
2020-03 - 2022-09

Developed a fully automated data center infrastructure architecture

Freelance Information Architect
Freelance Information Architect
  • Developed a fully automated data center infrastructure architecture for various web systems using Ansible, optimizing system efficiency and reducing human errors.
  • Implemented a central monitoring and logging system based on DataDog, enhancing visibility and proactively identifying and addressing issues with custom checks for own developments and setting up notifications at different levels of criticality.
  • Planned and automated the implementation of patch management for Linux servers, enabling quick installation of security updates across all servers, enhancing security and minimizing vulnerabilities.
  • Implemented various security concepts to protect web servers against attacks, ensuring data privacy and system security.
SkillProjects GmbH, Bordesholm
8 Monate
2021-08 - 2022-03

Achieved centralized control of the Azure enterprise landing zone

Azure Specialist
Azure Specialist
  • Achieved centralized control of the Azure enterprise landing zone by implementing a fully automated blue-green deployment strategy for a Terraform project, utilizing Azure DevOps CI pipelines.
  • Successfully planned and executed two major migrations of the Terraform module ?terraform-azurerm-caf-enterprise-scale? which manages the Enterprise Landing Zone, adapting to the new handling procedures introduced in the latest versions, while also performing cleanup work to ensure the codebase was collaborative and dynamic.
  • Developed and implemented over 50 Azure Policies based on Berenberg?s regulatory guidelines, including BaFin, ensuring compliance with banking regulations, and enabling governance and compliance in the Azure Cloud through centralized deployment using Terraform.
Berenberg, Hamburg
1 Jahr 3 Monate
2020-08 - 2021-10

Conducted analysis and evaluation of AWS infrastructure

Freelance DevOps Engineer
Freelance DevOps Engineer
  • Conducted analysis and evaluation of AWS infrastructure and software components to identify areas for cost reduction and potential security risks, implementing strategies to optimize efficiency and security.
  • Identified and addressed weaknesses in an Elasticsearch cluster, proposing immediate changes to improve stability and ensure data integrity, enhancing the overall performance of the system.
  • Presented a more efficient AWS cloud architecture by replacing self-hosted services with cloud services and isolating environments with different AWS organizations, resulting in improved scalability and cost savings.
  • Created guidelines for the use and development of Terraform automation scripts, ensuring consistency and standardization in code development and promoting best practices.
xChange Solutions GmbH, Hamburg
3 Jahre 4 Monate
2016-11 - 2020-02

Converting the infrastructure from a mainly manual maintenance state

Senior Infrastructure Engineer
Senior Infrastructure Engineer
  • Played a key role in the main automation project converting the infrastructure from a mainly manual maintenance state into a completed automated state using Saltstack and GitLab, joining the design sessions and being responsible for a sizeable part of the implementation e?ort, later taking over the responsibility for being the main driver of automation and testing for any expansions using tools like kitchen and InSpec and respecting a git-flow model, ensuring that a machine park with more than 300 hosts is completely managed through an automated and audited interface. 
  • Successful proof-of-concept of a monitoring solution for MySQL databases based on Prometheus, Grafana, and related exporters. This solution enabled developers to find inconsistencies amongst database schemas and Infrastructure engineers to adjust and enhance the database performance.
  • Creation of a new segregated environment standard to run the company's applications, covering di?erent roles such as web servers, backend servers, and batch job servers backed by a set of reusable Ansible deployment scripts.
  • Successful migration of the company hypervisor technology from VMWare to Proxmox, greatly enhancing the automation capabilities of the platform and making it possible to run applications with LXC container technology.
  • Design and implementation of a new load balancing architecture for dynamic request routing based on consul, consul-template, and nginx. This new architecture enabled central log aggregation,  TLS-secured connections and dynamic routes based on service registration information stored from the Consul service catalog.
  • Development of a new set of guidelines for service registration and discovery in the company, together with automation systems for Consul and Consul Template management using SaltStack, including enhancements to the core  states and modules for Consul.
  • Rollout of a new Docker Registry  based on Gitlab EE together with an S3 backend with controlled access and encryption using in-house certificates. Provided documentation and examples for the internal teams to migrate to the new solution.
  • Setup of a new test infrastructure based on Gitlab CI and dynamic build workers on AWS governed by auto scaling runners. The solution enabled all teams working in both infrastructure and application development to have an elastic environment for functional and end-to-end testing whilst greatly reducing the need for on-premise testing infrastructure, resulting in significant cost savings. The rollout of the solution included pair sessions with the development teams in order to adapt the solution to be compatible with semantic versioning and the Java build process used in the company.
  • Successful PoC of infrastructure management on AWS using Terraform and a set of custom scripts, allowing better view on what would be required to migrate all AWS resources to a Terraform-managed setup.
  • Creation of a team vision and moderation of discussion sessions which enabled the team to map pending work in form of a comprehensive roadmap, which is used to guide the Scrum planing process.
  • Rollout of Graylog as the default log aggregator within the company, starting with PoC projects all the way to a fully automated setup backed by SaltStack running in the AWS cloud.
Deposit Solutions GmbH
Hamburg
5 Monate
2016-07 - 2016-11

Improved an existing DataStax Cassandra Cluste

System Administrator / DevOps
System Administrator / DevOps
  • Improved an existing DataStax Cassandra Cluster through a multi phased process of collecting performance data with prometheus, identifying existing bottlenecks  and implementing multiple configuration enhancements, amongst them fixing rack awareness, heap space allocation, number of nodes, data replication level and automation with Ansible. Aer the changes the amount of running transactions per second was increased in around 400%.
  • Automated the installation of Apache Kafka brokers by creating custom Debian packages and an Ansible role to install them, improving provisioning time for new clusters.
  • Deployed a PoC project for Java application tracing based on Dynatrace, enabling development teams to proactively detect performance bottlenecks across services and infrastructure components.
Webtrekk
Berlin
1 Jahr 1 Monat
2015-04 - 2016-04

Planned and migrated a Cloudera cluster

System Engineer
System Engineer
  • Planned and migrated a Cloudera cluster from major release version 4 to 5, including an linux upgrade from CentOS 6 to 7 managed by puppet with all new configurations and components (Hadoop HDFS, YARN, HBase, Hive, ZooKeeper, Kafka, Flume, Spark). The existing data was synchronized by homegrown scripts with zero downtime. 
  • Participated in a true DevOps culture in steadily improving YARN. Worked hand in hand with development teams to determine the best resources for the various workloads to achieve the best possible result, obtaining a performance increase of 50%.
  • Creation of various enrichment scripts for 3rd party data consumed from many data sources saving on-demand changes to Hadoop HDFS.
  • Participation in the construction of a data enrichment pipeline by means of Kafka brokers and flumes in the process of sequential data processing, storing data of a defined file size limit in a HDFS cluster. The system was able to process 2 million synthetic data messages per second.
  • Created a python-based data backup and recovery solution for Cassandra database systems emulating 1 automated recovery per month.
  • Setup a Gitlab CI 8 build pipeline to support development teams in their build and release process.
The ADEX
Hamburg / Berlin
8 Monate
2014-09 - 2015-04

OnApp

System Administrator
System Administrator
  • Migrated workloads running over bare metal to an OnApp KVM based solution with Samba4 acting as a Domain Controller for the environment. Also deployed a unified monitoring and alerting setup for this environment with Nagios.
  • Implemented a centralized configuration management system with puppet (v3.4) and created custom puppet modules for various infrastructure components (MariaDB, Nagios core, vspd, OpenVPN, shorewall, iptables, HAProxy, POSIX users and groups, PowerMTA, ActiveMQ, Apache, MongoDB, sudo, OnApp, NFS, OpenLDAP).
  • Provided consultancy on performance tuning for MariaDB Galera clusters to subsidiaries of the ad pepper holding.
  • Performed migration of Microso SQL Server clusters to version 2014 from  2005 with the following features: DB-Engine, Analysis Services, Integration Services.
ad pepper media Group
Hamburg
11 Monate
2013-10 - 2014-08

Governance of the entire IT infrastructur

System Administrator
System Administrator
  • Administration and governance of the entire IT infrastructure including high availability, security, backup on ubuntu linux servers and ruby application and moving soware business workloads into a soware defined datacenter with VMWare vSphere.
  • Implemented a unified security solution via multiple Sophos UTM  (WAN, LAN, VPN).
UDG United Digital Group
Hamburg

Aus- und Weiterbildung

Aus- und Weiterbildung

3 Jahre 6 Monate
2009-08 - 2013-01

Vocational training

System Engineer, Institut für Berufliche Bildung AG, Hamburg / Buxtehude
System Engineer
Institut für Berufliche Bildung AG, Hamburg / Buxtehude

Kompetenzen

Kompetenzen

Top-Skills

Terraform Ansible AWS cloudera kubernetes Apache Hadoop docker Linux cassandra GCP kafka graylog Microsoft Azure bash prometheus proxmox Puppet Datadog Kubernetes Solution Architect Cloud Engineer

Produkte / Standards / Erfahrungen / Methoden

Amazon AWS
Ansible
Bash
Cassandra
Cloudera
Consul
Consul-Template
Docker
Elasticsearch
Filesystems
Gitlab
Graylog
Hadoop
Kubernetes
KVM
Linux
LXC
Microsoft Azure
Nginx
Prometheus
Proxmox
Saltstack
Terraform

PROFILE

As an IT engineer with a strong focus on infrastructure, I am passionate about automating and standardizing processes to maximize performance and efficiency. With a keen interest in Infrastructure-as-Code and Cloud Solutions Architecture, I am always seeking out new challenges in dynamic environments that allow me to flex my technical skills and drive innovation. If you're looking for a results-driven, detail-oriented engineer with a proven track record of optimizing system performance, look no further.


SKILLS

  • Microsoft Azure
  • Amazon AWS
  • Google Cloud Platform
  • Terraform
  • Datadog
  • CI/CD
  • Linux
  • Ansible
  • Saltstack
  • Consul
  • Gitlab
  • Kubernetes
  • Docker
  • Cloudera
  • Bash
  • Graylog
  • Elasticsearch
  • Prometheus
  • Cassandra
  • Kitchen-CI
  • Cloudflare

Vertrauen Sie auf Randstad

Im Bereich Freelancing
Im Bereich Arbeitnehmerüberlassung / Personalvermittlung

Fragen?

Rufen Sie uns an +49 89 500316-300 oder schreiben Sie uns:

Das Freelancer-Portal

Direktester geht's nicht! Ganz einfach Freelancer finden und direkt Kontakt aufnehmen.