Solution Architect | IAM/PAM for Swiss Banking | C#/.NET, Azure, Kubernetes
Aktualisiert am 22.09.2026
Profil
Freiberufler / Selbstständiger
Remote-Arbeit
Verfügbar ab: 21.09.2026
Verfügbar zu: 100%
davon vor Ort: 20%
Solution Architect
Azure
.NET
HashiCorp Vault
Role-Based Access Control (RBAC)
Attribute-Based Access Control (ABAC)
Privileged Access management (PAM)
Microsoft Entra ID
OpenID Connect
Python
TypeScript
React
Microsoft AI Foundry
Microsoft Agent Framework
Agentic Engineering
Claude Code
OpenAI Codex
English
C1 (professional working)
German
A2 (actively learning)
Romanian
C2 (native)
Russian
C2 (fluent)

Einsatzorte

Einsatzorte

Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

2 years 6 months
2024-04 - now

Home Lab - Self-Hosted Virtualization, Kubernetes & Secrets Platform

  • Infrastructure as code: a 4-node Proxmox cluster running two single-node K3s clusters (DEV/PROD), managed with OpenTofu/Terraform for VM provisioning, Packer golden images, Ansible (~20 roles) and Flux CD GitOps - with SOPS/ageencrypted secrets in Git and HashiCorp Vault for runtime secrets.
  • Self-hosted workloads: 15+ applications (CRM, project management, media and analytics stacks) behind Traefik ingress with cert-manager TLS and Blocky DNS, backed by CloudNativePG/MariaDB operators and KEDA.
  • CI/CD: ~20 GitHub Actions workflows on self-hosted runners, with enforced dev-first promotion.
4 years 8 months
2022-02 - now

Design and deployment of enterprise platforms

Solution Architect (Co-founder)
Solution Architect (Co-founder)
Design and delivery of enterprise platforms for major Swiss banks in compliance with FINMA regulations; the projects listed below for Credit Suisse and UBS were executed through Ozius. Since February 2026, the focus has been on internal platform and tooling development.
  • Earned HashiCorp Certified: Vault Associate (003), extending PAM architecture into secrets management.
  • Built a proof-of-concept Microsoft Teams bot for a client on Azure AI Foundry, answering questions about theirapplication with retrieval-augmented generation over its PDF documentation.
  • Built the firm's internal tooling with agentic coding workflows in Claude Code and OpenAI Codex: a CRM for clientacquisition (Blazor), exposed to AI agents through its own MCP server, and an invoicing app that closes the month foraccounting, both on Microsoft Agent Framework.
  • Built the company website and internal tools in React and TypeScript over a GraphQL API built with HotChocolate.
  • Own Ozius Solutions' Entra ID and Microsoft 365 tenant end to end, with fully passwordless sign-in on FIDO2 security keysand the joiner-mover-leaver identity lifecycle.
on request
Timisoara (Romania)
1 year 9 months
2024-06 - 2026-02

Conception and development of a strategic platform

Solution Architect
Solution Architect
  • Architected a strategic privileged access management (PAM) platform from scratch, modelled with domain-driven design,taking it from blank page to production across Linux, Windows, and database estates covering 30,000+ endpoints, withuser sign-in federated to Entra ID (OIDC).
  • Designed a high-availability architecture for Docker workloads on AKS, with an active-active setup across two Azureregions, backed by PostgreSQL Flexible Server with zone-redundant HA and cross-region active-passive replication.
  • Owned and authored the Solution Architecture Document, modelled in UML, ArchiMate and BPMN, which consistentlypassed architecture and SDLC reviews.
  • Designed and built integrations with authoritative source systems (CMDB, Application Catalog, Entra ID via Graph API) to ingest master data into the platform.
  • Designed real-time secret retrieval from HashiCorp Vault with an Azure Key Vault cache as failover, sourcing secrets from Azure if Vault was unavailable to keep the platform available.
  • Governed the fully Terraform-based Infrastructure-as-Code, reviewing developers' Terraform to ensure alignment with the target architecture and standards.
  • Built the load and performance test suite for the platform's APIs in Python with Locust.
  • Mastered UBS internal SDLC and Access Management policies, guiding the team on application lifecycle management and compliance.
UBS Switzerland AG
Zurich (Switzerland (remote))
2 years 5 months
2022-02 - 2024-06

strategic access governance platform

PAM Solution Architect
PAM Solution Architect
  • Took over as lead architect of the bank's strategic access governance platform, covering privileged access management (PAM) and non-privileged access, with user sign-in on SSO over OIDC / OAuth 2.0; extended it to 80+ integrated platforms and 250,000+ endpoints.
  • Architected the migration of the application from a legacy Java runtime to Docker containers on OpenShift, with an activeactive setup across two data centers.
  • Designed integrations onboarding critical platforms including Active Directory (LDAP/ADSI) group management, Entra ID roles, Delinea Server Suite, Delinea Cloud Suite, storage and network devices, data virtualization (Denodo), databases (MS SQL, Oracle, MongoDB), and mainframe (LDAP), across 15+ system integrations.
  • Designed a Data Lake ETL integration for audit reporting, built on a medallion-style layered architecture (raw, cleansed and application zones), supporting internal and external banking audits against FINMA-driven controls.
  • Designed a Kafka based event-driven integration to enable asynchronous processing between the platform and a downstream application.
  • Architected the platform's authorisation model on RBAC with attribute-based decisions: application-scoped roles, delegated administration, and IT Owner definitions that let application teams govern their own access.
  • Replaced legacy standing access with an automated just-in-time (JIT) workflow, applying least-privilege and Zero Trust principles, and cutting provisioning time from hours to under three minutes against a 3-minute SLA.
  • Unblocked and delivered a platform integration that had stalled for over six months, shortly after taking over the architecture.
  • Partnered with the CMDB, Identity Governance, Access Approval, and Application Management teams to design and adjust integrations that ensured compliance.
Credit Suisse Switzerland AG
Zurich (Switzerland (remote))
1 year
2021-02 - 2022-01

Provision of technical expertise

Director of Technology
Director of Technology
UK-headquartered software consultancy; helped grow the Timisoara office from 15 to 95 employees
  • Owned technical architecture across my tower's projects and drove technical excellence standards.
  • Partnered closely with the sales team - providing technical expertise, delivering project estimations, and defining optimal team compositions for new engagements.
  • Designed and delivered a serverless integration between an HR system and a project management system in under a month, on Azure Functions provisioned with Bicep.
  • Designed the technical solution for migrating a legacy PHP/MySQL e-learning system to Java/ MongoDB on AWS, including team composition, risk analysis, and high-level estimates.
  • Conducted 70+ technical interviews per year while mentoring architects and leads across several projects.
Amdaris Romania
Timisoara (Romania)
1 year 10 months
2019-05 - 2021-02

Warehouse management platform (oil and gas industry)

Technical Software Architect
Technical Software Architect
  • Stock management platform (oil & gas): architected a multi-tenant solution with offline mobile synchronisation over REST APIs I designed and customer identity on Azure AD B2C (OIDC), and led the team of 9 (.NET Core, Xamarin Forms, Angular, MS SQL, Azure, ARM templates).
  • E-learning content delivery platform: architect for a 30+ engineer team, converting functional requirements into technical specifications and holding architectural consistency across the group (Java, Spring Boot, React, AWS).
  • Greenfield apprenticeship e-learning platform: designed the microservices architecture on Azure that the client approved and that won the contract.
Amdaris Romania
Timisoara (Romania)
2 years 8 months
2016-10 - 2019-05

Electronic signature platform

Senior Software Engineer/ Tech Lead
Senior Software Engineer/ Tech Lead
  • E-signing platform for major UK banks: tech lead for 3 teams (15 engineers) on a multi-tenant SaaS for mortgage and credit contracts, with strict tenant isolation, RBAC, audit trails for non-repudiation, and a weekly production release cadence on Azure DevOps Pipelines (ASP.NET, C#, Azure).
  • E-learning platform for UK private schools: led a team of 10+ on a multi-tenant SaaS, platform modernisation, and new feature design under continuous deployment (ASP.NET MVC, jQuery, MS SQL).
  • Designed and helped implement a serverless file parsing and ingestion solution for an AI project on Azure Functions.
  • Trainer in the internship program and active in recruitment as the office scaled.
Amdaris Romania
Timisoara (Romania)
3 years 7 months
2013-04 - 2016-10

E-learning platform for an educational company

Software Engineer
Software Engineer
  • E-Learning platform for one of the world's largest educational companies; built desktop tools (WPF, MVVM) and web applications (ASP.NET MVC) in a team of 10+
  • Took the initiative to automate build and deployment pipelines with TeamCity and TFS Deployment
  • Developed WiX Toolset installers for the WPF applications
  • Co-founded internship program
Amdaris Moldova
Chisinau (Moldova)
10 months
2012-07 - 2013-04

Self-Employed

Software Developer & Entrepreneur
Software Developer & Entrepreneur
Windows Phone apps for proprietary products and freelance client projects, covering the entire lifecycle from concept to monetization in the Marketplace; "Ice Piano" achieved the top rating in its category (MVVM).
1 year 1 month
2011-07 - 2012-07

Early Distributed Systems Work - High-Load Portals

Software Developer
Software Developer
  • Distributed architecture: early adopter of microservices (2011), working with senior developers on multiple services
  • High-load systems: worked on one of Moldova's most visited news portals and a public advertising platform similar to Google Ads for Moldova's market
  • Implemented SSO using OAuth and OpenID for Moldova's largest web portals (100K-500K users)
Simpals
Chisinau (Moldova)

Aus- und Weiterbildung

Aus- und Weiterbildung

1 year 10 months
2016-10 - 2018-07

Artificial Intelligence and Distributed Computing

Master, West University of Timisoara
Master
West University of Timisoara
Thesis: on request
3 years 11 months
2007-09 - 2011-07

Computer Science

Bachelor, Technical University of Moldova
Bachelor
Technical University of Moldova

Position

Position

Solution Architect | IAM/PAM for Swiss Banking | C#/.NET, Azure, Kubernetes

Kompetenzen

Kompetenzen

Top-Skills

Solution Architect Azure .NET HashiCorp Vault Role-Based Access Control (RBAC) Attribute-Based Access Control (ABAC) Privileged Access management (PAM) Microsoft Entra ID OpenID Connect Python TypeScript React Microsoft AI Foundry Microsoft Agent Framework Agentic Engineering Claude Code OpenAI Codex

Produkte / Standards / Erfahrungen / Methoden

PROFILE
Solution Architect with 15+ years in enterprise software, designing cloud-native platforms and leading engineering teams of up to 30 across banking, e-learning, and oil & gas. Core stack is C#/.NET on Azure andKubernetes. 7+ years in architecture roles, the last four on strategic PAM platforms for Credit Suisse and UBS covering 250,000+ endpoints and 80+ integrated systems. Master's in Artificial Intelligence and runs a self-hosted Proxmox,Kubernetes, HashiCorp Vault and Terraform lab.
  • Key figures: 15+ Years in Software · 30+ Engineers in Largest Team · 250K+ Endpoints in Production · 3 Industries Delivered

CORE SKILLS
  • Architecture:
    • Solution Architecture, Microservices, Event-Driven, Domain-Driven Design (DDD), Java/Spring Boot (architecturelevel), Multi-Tenant SaaS, High Availability, Offline Sync, ETL, UML, ArchiMate, BPMN
  • Backend:
    • C#/.NET (15+ yrs), ASP.NET Core, Python, REST, GraphQL, Kafka
  • Frontend & Mobile:
    • React/TypeScript (5 yrs), Angular, Xamarin, WPF
  • Data:
    • PostgreSQL, MS SQL Server, MongoDB, Data Lake (medallion)
  • Cloud & DevOps:
    • Azure (Expert), AWS, Kubernetes/AKS, Docker, Terraform, Bicep/ARM, Azure Functions, Azure DevOpsPipelines, GitHub Actions, Flux CD, Proxmox
  • Security & Identity:
    • IAM/PAM, Entra ID, OAuth 2.0, OIDC, SSO, FIDO2 / Passwordless, RBAC/ABAC, HashiCorp Vault, Zero Trust
  • AI Engineering:
    • Microsoft Agent Framework, MCP servers, Azure AI Foundry, Retrieval-Augmented Generation (RAG)
  • AI-Assisted Development:
    • Claude Code (advanced, daily), OpenAI Codex, agentic coding workflows
  • Leadership:
    • Team leadership (9-30 engineers), pre-sales and estimation, technical mentoring, hiring
  • Compliance:
    • ?FINMA-driven controls, Banking Audit

Einsatzorte

Einsatzorte

Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

2 years 6 months
2024-04 - now

Home Lab - Self-Hosted Virtualization, Kubernetes & Secrets Platform

  • Infrastructure as code: a 4-node Proxmox cluster running two single-node K3s clusters (DEV/PROD), managed with OpenTofu/Terraform for VM provisioning, Packer golden images, Ansible (~20 roles) and Flux CD GitOps - with SOPS/ageencrypted secrets in Git and HashiCorp Vault for runtime secrets.
  • Self-hosted workloads: 15+ applications (CRM, project management, media and analytics stacks) behind Traefik ingress with cert-manager TLS and Blocky DNS, backed by CloudNativePG/MariaDB operators and KEDA.
  • CI/CD: ~20 GitHub Actions workflows on self-hosted runners, with enforced dev-first promotion.
4 years 8 months
2022-02 - now

Design and deployment of enterprise platforms

Solution Architect (Co-founder)
Solution Architect (Co-founder)
Design and delivery of enterprise platforms for major Swiss banks in compliance with FINMA regulations; the projects listed below for Credit Suisse and UBS were executed through Ozius. Since February 2026, the focus has been on internal platform and tooling development.
  • Earned HashiCorp Certified: Vault Associate (003), extending PAM architecture into secrets management.
  • Built a proof-of-concept Microsoft Teams bot for a client on Azure AI Foundry, answering questions about theirapplication with retrieval-augmented generation over its PDF documentation.
  • Built the firm's internal tooling with agentic coding workflows in Claude Code and OpenAI Codex: a CRM for clientacquisition (Blazor), exposed to AI agents through its own MCP server, and an invoicing app that closes the month foraccounting, both on Microsoft Agent Framework.
  • Built the company website and internal tools in React and TypeScript over a GraphQL API built with HotChocolate.
  • Own Ozius Solutions' Entra ID and Microsoft 365 tenant end to end, with fully passwordless sign-in on FIDO2 security keysand the joiner-mover-leaver identity lifecycle.
on request
Timisoara (Romania)
1 year 9 months
2024-06 - 2026-02

Conception and development of a strategic platform

Solution Architect
Solution Architect
  • Architected a strategic privileged access management (PAM) platform from scratch, modelled with domain-driven design,taking it from blank page to production across Linux, Windows, and database estates covering 30,000+ endpoints, withuser sign-in federated to Entra ID (OIDC).
  • Designed a high-availability architecture for Docker workloads on AKS, with an active-active setup across two Azureregions, backed by PostgreSQL Flexible Server with zone-redundant HA and cross-region active-passive replication.
  • Owned and authored the Solution Architecture Document, modelled in UML, ArchiMate and BPMN, which consistentlypassed architecture and SDLC reviews.
  • Designed and built integrations with authoritative source systems (CMDB, Application Catalog, Entra ID via Graph API) to ingest master data into the platform.
  • Designed real-time secret retrieval from HashiCorp Vault with an Azure Key Vault cache as failover, sourcing secrets from Azure if Vault was unavailable to keep the platform available.
  • Governed the fully Terraform-based Infrastructure-as-Code, reviewing developers' Terraform to ensure alignment with the target architecture and standards.
  • Built the load and performance test suite for the platform's APIs in Python with Locust.
  • Mastered UBS internal SDLC and Access Management policies, guiding the team on application lifecycle management and compliance.
UBS Switzerland AG
Zurich (Switzerland (remote))
2 years 5 months
2022-02 - 2024-06

strategic access governance platform

PAM Solution Architect
PAM Solution Architect
  • Took over as lead architect of the bank's strategic access governance platform, covering privileged access management (PAM) and non-privileged access, with user sign-in on SSO over OIDC / OAuth 2.0; extended it to 80+ integrated platforms and 250,000+ endpoints.
  • Architected the migration of the application from a legacy Java runtime to Docker containers on OpenShift, with an activeactive setup across two data centers.
  • Designed integrations onboarding critical platforms including Active Directory (LDAP/ADSI) group management, Entra ID roles, Delinea Server Suite, Delinea Cloud Suite, storage and network devices, data virtualization (Denodo), databases (MS SQL, Oracle, MongoDB), and mainframe (LDAP), across 15+ system integrations.
  • Designed a Data Lake ETL integration for audit reporting, built on a medallion-style layered architecture (raw, cleansed and application zones), supporting internal and external banking audits against FINMA-driven controls.
  • Designed a Kafka based event-driven integration to enable asynchronous processing between the platform and a downstream application.
  • Architected the platform's authorisation model on RBAC with attribute-based decisions: application-scoped roles, delegated administration, and IT Owner definitions that let application teams govern their own access.
  • Replaced legacy standing access with an automated just-in-time (JIT) workflow, applying least-privilege and Zero Trust principles, and cutting provisioning time from hours to under three minutes against a 3-minute SLA.
  • Unblocked and delivered a platform integration that had stalled for over six months, shortly after taking over the architecture.
  • Partnered with the CMDB, Identity Governance, Access Approval, and Application Management teams to design and adjust integrations that ensured compliance.
Credit Suisse Switzerland AG
Zurich (Switzerland (remote))
1 year
2021-02 - 2022-01

Provision of technical expertise

Director of Technology
Director of Technology
UK-headquartered software consultancy; helped grow the Timisoara office from 15 to 95 employees
  • Owned technical architecture across my tower's projects and drove technical excellence standards.
  • Partnered closely with the sales team - providing technical expertise, delivering project estimations, and defining optimal team compositions for new engagements.
  • Designed and delivered a serverless integration between an HR system and a project management system in under a month, on Azure Functions provisioned with Bicep.
  • Designed the technical solution for migrating a legacy PHP/MySQL e-learning system to Java/ MongoDB on AWS, including team composition, risk analysis, and high-level estimates.
  • Conducted 70+ technical interviews per year while mentoring architects and leads across several projects.
Amdaris Romania
Timisoara (Romania)
1 year 10 months
2019-05 - 2021-02

Warehouse management platform (oil and gas industry)

Technical Software Architect
Technical Software Architect
  • Stock management platform (oil & gas): architected a multi-tenant solution with offline mobile synchronisation over REST APIs I designed and customer identity on Azure AD B2C (OIDC), and led the team of 9 (.NET Core, Xamarin Forms, Angular, MS SQL, Azure, ARM templates).
  • E-learning content delivery platform: architect for a 30+ engineer team, converting functional requirements into technical specifications and holding architectural consistency across the group (Java, Spring Boot, React, AWS).
  • Greenfield apprenticeship e-learning platform: designed the microservices architecture on Azure that the client approved and that won the contract.
Amdaris Romania
Timisoara (Romania)
2 years 8 months
2016-10 - 2019-05

Electronic signature platform

Senior Software Engineer/ Tech Lead
Senior Software Engineer/ Tech Lead
  • E-signing platform for major UK banks: tech lead for 3 teams (15 engineers) on a multi-tenant SaaS for mortgage and credit contracts, with strict tenant isolation, RBAC, audit trails for non-repudiation, and a weekly production release cadence on Azure DevOps Pipelines (ASP.NET, C#, Azure).
  • E-learning platform for UK private schools: led a team of 10+ on a multi-tenant SaaS, platform modernisation, and new feature design under continuous deployment (ASP.NET MVC, jQuery, MS SQL).
  • Designed and helped implement a serverless file parsing and ingestion solution for an AI project on Azure Functions.
  • Trainer in the internship program and active in recruitment as the office scaled.
Amdaris Romania
Timisoara (Romania)
3 years 7 months
2013-04 - 2016-10

E-learning platform for an educational company

Software Engineer
Software Engineer
  • E-Learning platform for one of the world's largest educational companies; built desktop tools (WPF, MVVM) and web applications (ASP.NET MVC) in a team of 10+
  • Took the initiative to automate build and deployment pipelines with TeamCity and TFS Deployment
  • Developed WiX Toolset installers for the WPF applications
  • Co-founded internship program
Amdaris Moldova
Chisinau (Moldova)
10 months
2012-07 - 2013-04

Self-Employed

Software Developer & Entrepreneur
Software Developer & Entrepreneur
Windows Phone apps for proprietary products and freelance client projects, covering the entire lifecycle from concept to monetization in the Marketplace; "Ice Piano" achieved the top rating in its category (MVVM).
1 year 1 month
2011-07 - 2012-07

Early Distributed Systems Work - High-Load Portals

Software Developer
Software Developer
  • Distributed architecture: early adopter of microservices (2011), working with senior developers on multiple services
  • High-load systems: worked on one of Moldova's most visited news portals and a public advertising platform similar to Google Ads for Moldova's market
  • Implemented SSO using OAuth and OpenID for Moldova's largest web portals (100K-500K users)
Simpals
Chisinau (Moldova)

Aus- und Weiterbildung

Aus- und Weiterbildung

1 year 10 months
2016-10 - 2018-07

Artificial Intelligence and Distributed Computing

Master, West University of Timisoara
Master
West University of Timisoara
Thesis: on request
3 years 11 months
2007-09 - 2011-07

Computer Science

Bachelor, Technical University of Moldova
Bachelor
Technical University of Moldova

Position

Position

Solution Architect | IAM/PAM for Swiss Banking | C#/.NET, Azure, Kubernetes

Kompetenzen

Kompetenzen

Top-Skills

Solution Architect Azure .NET HashiCorp Vault Role-Based Access Control (RBAC) Attribute-Based Access Control (ABAC) Privileged Access management (PAM) Microsoft Entra ID OpenID Connect Python TypeScript React Microsoft AI Foundry Microsoft Agent Framework Agentic Engineering Claude Code OpenAI Codex

Produkte / Standards / Erfahrungen / Methoden

PROFILE
Solution Architect with 15+ years in enterprise software, designing cloud-native platforms and leading engineering teams of up to 30 across banking, e-learning, and oil & gas. Core stack is C#/.NET on Azure andKubernetes. 7+ years in architecture roles, the last four on strategic PAM platforms for Credit Suisse and UBS covering 250,000+ endpoints and 80+ integrated systems. Master's in Artificial Intelligence and runs a self-hosted Proxmox,Kubernetes, HashiCorp Vault and Terraform lab.
  • Key figures: 15+ Years in Software · 30+ Engineers in Largest Team · 250K+ Endpoints in Production · 3 Industries Delivered

CORE SKILLS
  • Architecture:
    • Solution Architecture, Microservices, Event-Driven, Domain-Driven Design (DDD), Java/Spring Boot (architecturelevel), Multi-Tenant SaaS, High Availability, Offline Sync, ETL, UML, ArchiMate, BPMN
  • Backend:
    • C#/.NET (15+ yrs), ASP.NET Core, Python, REST, GraphQL, Kafka
  • Frontend & Mobile:
    • React/TypeScript (5 yrs), Angular, Xamarin, WPF
  • Data:
    • PostgreSQL, MS SQL Server, MongoDB, Data Lake (medallion)
  • Cloud & DevOps:
    • Azure (Expert), AWS, Kubernetes/AKS, Docker, Terraform, Bicep/ARM, Azure Functions, Azure DevOpsPipelines, GitHub Actions, Flux CD, Proxmox
  • Security & Identity:
    • IAM/PAM, Entra ID, OAuth 2.0, OIDC, SSO, FIDO2 / Passwordless, RBAC/ABAC, HashiCorp Vault, Zero Trust
  • AI Engineering:
    • Microsoft Agent Framework, MCP servers, Azure AI Foundry, Retrieval-Augmented Generation (RAG)
  • AI-Assisted Development:
    • Claude Code (advanced, daily), OpenAI Codex, agentic coding workflows
  • Leadership:
    • Team leadership (9-30 engineers), pre-sales and estimation, technical mentoring, hiring
  • Compliance:
    • ?FINMA-driven controls, Banking Audit

Vertrauen Sie auf Randstad

Im Bereich Freelancing
Im Bereich Arbeitnehmerüberlassung / Personalvermittlung

Fragen?

Rufen Sie uns an +49 89 500316-300 oder schreiben Sie uns:

Das Freelancer-Portal

Direktester geht's nicht! Ganz einfach Freelancer finden und direkt Kontakt aufnehmen.