28.10.2026 aktualisiert
Premiumkunde
40 % teilweise verfügbarSovereign Cloud & Kubernetes Consultant | CNCF Kubestronaut | Secure, open-source platforms
Eisenberg, Deutschland
Weltweit
Über mich
I help organizations build secure, sovereign, open-source Kubernetes platforms they fully control. CNCF Kubestronaut, 15+ years in platform engineering, GitOps and cloud security. I design, migrate and operate production Kubernetes platforms end to end. Let's talk.
Skills
Kubernetes-SicherheitCertificate of Cloud Security KnowledgeCloud ComputingLinuxGitHubVPNPostgreSQLMySQLPci DSSScrumRuby On RailsRedisAnsiblePrometheusRuby
Sovereign Cloud & Kubernetes Architecture
CNCF Kubestronaut with CKA, CKAD, CKS, KCNA and KCSA certifications, plus LFCS. Designs and builds sovereign, hybrid and self-hosted Kubernetes platforms for regulated organisations. Production experience with AWS (primary), GCP, Hetzner Cloud, bare-metal and on-premises infrastructure, covering EKS, GKE, Rancher, RKE2, K3s, Gardener, Kubermatic, Talos Linux and Talos Omni.
Platform Engineering & Internal Developer PlatformsBuilds and operates Internal Developer Platforms for large international engineering teams. Focus on developer self-service, infrastructure provisioning, preview-environment automation, CI/CD optimisation and platform-as-a-product practices. Develops custom Kubernetes operators, CRDs and internal tooling using Go, Cobra, Backstage and Crossplane.
Security, Compliance & Software Supply ChainsDesigns platform security and governance controls supporting PCI DSS, BSI C5, ISO 27001 and GDPR requirements. Hands-on experience with OPA/Gatekeeper, Kyverno, Falco, Trivy, kube-bench, Wazuh, Network Policies, Cosign, Harbor, in-toto and SBOM-based supply-chain security.
Secrets, Identity & PKIImplements secure secrets management, encryption, identity and certificate workflows using Tang/Clevis, OpenBao, HashiCorp Vault, SOPS, Sealed Secrets, External Secrets, Keycloak, cert-manager and step-ca.
GitOps, Infrastructure as Code & AutomationBuilds repeatable, auditable infrastructure and delivery processes using Terraform/OpenTofu, Ansible, ArgoCD, FluxCD, GitHub Actions, GitLab CI, Jenkins and Forgejo. Experienced in greenfield platforms and the modernisation of legacy delivery environments.
Storage, Backup & Disaster RecoveryDesigns sovereign storage, backup and recovery architectures using Longhorn, Rook/Ceph, Velero and MinIO, with a focus on service continuity, recoverability and reliable hybrid-platform operations.
Observability & Platform OperationsImplements and operates monitoring, logging and telemetry stacks using Prometheus, Thanos, Mimir, Grafana, Loki, Fluentd, OpenTelemetry, ELK and OpenSearch. Supports SLI/SLO definition, production troubleshooting and sustainable platform operations.
Cloud-Native NetworkingDesigns secure networking for multi-cluster and multi-tenant platforms using Cilium/eBPF, Gateway API, Istio, CoreDNS and WireGuard, including network segmentation, service mesh and workload-isolation patterns.
Linux, Programming & Data15+ years of Linux experience across system administration, kernel and systemd internals, networking, firewalls, storage, virtualisation, containers, performance tuning, hardening and scripting. Production experience with Go, Python, Ruby/Rails, SQL, PostgreSQL, MySQL, Redis/Valkey and MongoDB.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2025
Sprachen
ArabischverhandlungssicherDeutschverhandlungssicherEnglischverhandlungssicherPersischMuttersprache
Projekthistorie
Independent consulting practice specializing in Kubernetes implementation, cloud-native architecture, and infrastructure automation for SMBs and enterprises. Deliver cloud migration, Kubernetes cluster buildouts, security hardening, CI/CD pipeline design, and platform engineering using open-source, sovereignty-aligned tooling.
Led the design and delivery of an internal developer enablement platform, integrating company-standard configurations, authentication, and tooling to accelerate onboarding. Built a framework to model application architecture and auto-generate infrastructure manifests across environments, reducing cognitive load and standardizing deployments. Key contributor to the Architecture team: defined cross-team technical strategy, reusable patterns, and proof-of-concepts; mentored engineers across teams. Optimized CI/CD pipelines, reducing build times, improving deployment stability, and cutting cloud costs.
Worked on refactoring and redesign of legacy system components in a fintech environment. Designed and implemented a GDPR-compliant data anonymization system. Built internal and external APIs across multiple fintech services.
exali Berufshaftpflicht-Siegel
Das original exali Berufshaftpflicht-Siegel bestätigt dem Auftraggeber, dass die betreffende Person oder Firma eine aktuell gültige branchenspezifische Berufs- bzw. Betriebshaftpflichtversicherung abgeschlossen hat.
Versichert bis: 01.05.2027