2025 - today: Independent Kubernetes and Cloud Native consultancy ? sovereign, secure, open-source infrastructureCustomer: (on request), Eisenberg (Germany)
Role: Founder & Cloud Native Consultant
Tasks:Architected and delivered a greenfield production Kubernetes platform for an international SaaS client on AWS/EKS, owning the end-to-end design across GitOps delivery (ArgoCD), identity (Keycloak), secure networking (WireGuard) and observability (Prometheus/Grafana), with infrastructure-as-code in OpenTofu and Ansible, and took the client from zero to production-ready
2021 - 2025: variousCustomer: CLARK SE, Frankfurt (Germany)
Tasks:- 2023 - 2025 - Senior Platform Engineer
- Drove the internal EKS platform as a product, running weekly open consulting hours, demos and change announcements that scaled adoption to ~100 engineers across a dozen international teams
- Designed and extended the platform with custom operators, CRDs and Crossplane, enabling self-service infrastructure provisioning for application teams and standardizing GitOps delivery across GitHub Actions, Jenkins and CircleCI
- Hardened the software supply chain with External Secrets, Trivy, Cosign, Renovate and Dependabot, and cut CI/CD pipeline times by over 30% through build-cache optimization and Rails deployment changes
- Designed an automated lifecycle and cost-optimization system for preview environments (configurable TTLs, automatic cleanup, off-hours scaledown), replacing a manual process and meaningfully reducing non-production cloud spend
- 2021 - 2022 - Senior Software Engineer, Enablement Team
- Maintained and evolved core shared services for stream-aligned product teams, and defined the microservice blueprints that standardized how new services were scaffolded, with CI, deployment and observability built in
- Redesigned the local development environment around containerized, reproducible workflows, replacing a brittle machine-dependent setup with consistent onboarding across teams
2019 - 2021: Development and integration of a GDPR-compliant anonymization libraryCustomer: Hüttig & Rompf AG, Frankfurt (Germany)
Role: Software Engineer
Tasks:- Designed and integrated a GDPR anonymization library into a large legacy Rails system covering personal, financial, and regulated customer data, and built internal API abstractions that normalized and aggregated data from bank, creditor, and financial service APIs for financing recommendation logic
- Introduced automated CI/CD pipelines on GitLab and a standardized Vagrant-based developer environment, improving deployment consistency and local onboarding across the engineering team
2015 - 2019: P2PE-validated environment for cardholder dataCustomer: EveryPay, Tallinn (Estonia)
Role: DevOps & Backend Engineer
Tasks:- Operated within a P2PE-validated cardholder data environment and worked with compliance specialists to implement and improve the transaction risk scoring engine enforcing fraud detection rules in production
- Owned the Chef-based infrastructure-as-code layer for production AWS infrastructure (EC2, RDS, VPC, IAM, S3, CloudFormation, ELB, Route 53 and CloudWatch), ran Rails deployments with Capistrano and maintained the Vagrant-based local development environment used across the engineering team
2011 - 2015: Earlier Experience- Linux Systems Consultant, GBG Holding (Tehran, 2013?2015): Migrated physical infrastructure to virtualized environments, administered firewall, caching and VoIP/telecom systems, and mentored internal teams on Linux administration and security
- Linux Engineer, Parspooyesh Fanavar (Tehran, 2011?2013): Contributed to Xamin, a custom Linux distribution for virtualization infrastructure, and deployed Linux servers for national telecom clients integrating FreeRadius, Kerberos, OpenLDAP and PostgreSQL