Senior DevOps / Platform Engineer – Kubernetes, OpenShift, ArgoCD, GitLab CI/CD, Terraform, Azure

As a DevOps team member, I am responsible for the solutioning and delivery of OpenShift applications playing a key role in initiating and coordinating the application development process into release management in close collaboration with different stakeholders.
The application deployment and their surrounding infrastructure systems are being part of an automated process following the GitOps best practices in CICD using ArgoCD and tools like Kustomize and Helm Charts as well as Azure Pipelines for the build and release process.
The release management is being coordinated in close collaboration with the product owners within the organization after the approval of security.
OpenShift offers a highly scalable and reliable platform that requires a good level of expertise configuring and maintaining a highly available cluster operation that I am able to deliver.

• Design and implementation of the Red Hat OpenShift Container Platform environment
• Engineering and operational improvements in relation to operational tasks and strategic projects
• Providing support within the framework of the existing support organization
• Strong collaboration with international teams within a global banking structure
• Strong knowledge and experience of Kubernetes clusters based on Red Hat OpenShift (SDN, Service Mesh, Security, etc.)
• Sound and practical experience in automation (e.g. Helm, Kustomize, ArgoCD)
• Good Linux knowledge (preferably RHEL/CentOS) including scripting
• Knowledge and experience with systems like Kafka, Grafana, ELK, MongoDB, Hashicorp vault, Apache NIFI
• Team player, ability to work with different stakeholders

Tech-Stack:
DevOps, Kubernetes, Docker, Openshift, OC Compliance Operator, VmWare, LDAP, Network Security, MongoDB, Redis, Oracle Database, Azure DevOps, Azure Pipeline, ArgoCD, Helm, Kustomize, YAML, Jira, Confluence, Git, BitBucket, Elasticsearch, Kibana, Kafka, Kafka Connect, Strimzi  Apache Nifi, Grafana, Prometheus, RHEL, Bash, HAProxy, Harbor, WSO2, Keycloak, Airlock

Senior IAM Consultant Application Transformation, Automotive (Daimler Truck AG)

• IAM Application Transformation (Concept work)
• Support in Application Discovery and Application Migration Process
• Support in Designing and Building of a sustainable and lean Identity and Access Management Landscape
• Support for IAM architecture topics and identity providers (Microsoft Azure)
• Perform an application discovery plan to collect missing IAM-specific information about the affected applications
• Creation of a migration plan, roadmap to ensure the migration of the applications in the best possible way
• Detailed technical definition for the migration process
• Use of a central identity and governance tool (EmpowerID)
• Prioritization of tasks and steps in the project according to relevance and feasibility
• Handover Migration Guide to DEV and Tech Leads

Cloud Security Expert - Azure Migration, Container und Workloads Security, Automotive (BMW Group)

• Migration of OpenShift applications to Azure (Hands-on & Concept work)
• Responsible for the solution, architecture and setup of the IT infrastructure.
• Review requirements, design and configure, monitor and maintain cloud-based solutions in Azure.
• Support in the creation of the technical design, documentation and implementation of the cloud infrastructure.
• Maintain and create new cloud environments
• Design and development of IaC components (Infrastructure as Code), Terraform
• YAML Manifests Configuration, Helm Chart Deployments, (Kustomize)
• Implementation of organizational cloud compliance requirements
• IAM-Security and Role Based Authentication (RBAC)
• Definition of security controls and standards to meet business and user requirements
• Implementation of security best practices in Azure infrastructure to comply with industry standard frameworks and policies.
• AKS - Kubernetes Services Security Best Practices
• Runtime Security, Container Image Scanning
• Kubernetes, Container und Pods Security (Gatekeeper, securityContext)
• Metrics Monitoring & Alerting (Grafana, Prometheus)
• Network Security and Traffic Flow optimization, Istio service mesh

Cyber Security Maturity Model (CMM) Phase 2 for a large manufacturer of household appliances in Europe (BSH Hausgeräte GmbH)

• Creation of handouts for the Cyber Security Maturity Model (based on the NIST Cyber Security Framework;108 Controls.
• The handouts are developed under the NIST Cyber Security Framework exclusively for the eight core topics of Supply Chain Risk Management, Risk Management, Identity Management & Access Control, Data Security, Information Protection Processes & Procedures, Protective Technology, Security Continuous Monitoring, Recovery Planning. The eight core topics include 52 control activities.
• The handouts consider the following points in particular:
• Comprehensible concretization of the question for the maturity assessment, including examples and explanations
• Information on concrete result types for the maturity level classification, including e.g. guidelines, documents, templates, applications, processes, etc.
• Supplemental information to support overall understanding of the control (e.g., explanation of control objective, explanation of appropriate/targeted maturity level, reporting pathways, etc.)
• Indication and reference to existing documentation.

E-Mail Services Configuration & Website development for a logistics company 
Website design for a logistics company and setting up the e-mail services.

• Deploy and configure a Ubuntu VM Instance for the web application
• Deploy and configure a Windows Server 2016 VM / MS Exchange
• Configuration of Active Directory (AD) DC and user permissions
• Support in configuring and selecting a Microsoft 365 Business Plan

Frontend Web-Development ReactJS Project
Development of a Single Page Application (SPA) for a fashion store in Düsseldorf, Germany

• JSON Product data API calls
• Responsive Design
• Implementation of filter and sort functions according to different criteria
• Site URL routes definition

Support in the further development of Front Arena Prime at a State bank in Munich (BayenLB)

• Configuration of FExpiration and scheduling tasks to delete no longer needed Instruments
• Configuration of FDeletePositions and scheduling tasks to delete no longer needed Trades
• Development of a Linux Bash wrapper script as a workaround which calls adcli and smbclient/smbcopy including all program-specific parameters.
• Price Definitions Updates in Scripts/Queries.
• Code review and changes according to the Front Arena Release documentation

Development of a Python-based Profile Tool

• Modeling the database schema for a MySQL database and building the appropriate tables in the database.

• Filling the database with the profile data of the employees.
• Revision of the profile design and presentation of the various variants.
• Implementing the functionality for reading the data from the database and creation of appropriate data structures.
• Implementing the functionality for generating PDF files using the PDFkit library.
• Programming a web application with profile data input functionality using the Flask library.

Development of a Python-based Real-Time Data feed streaming pipeline into MS SQL

• Access to Stocks, Currencies historical data from Exchange Services
• Dataframe Conversion, NumPy, Pandas
• Reading values: Bid, Ask, High, Low, Open, Current Volume
• Creating and executing SQL queries

Web development with Magento and Shopware e-Commerce platforms for introducing online stores in various niche markets

• Template design and customization of layouts for best user experience and usability
• Integration of new database tables and mapping of the respective attributes on the article page for an improved and more comprehensive product presentation
• Creation of filter functions on the article page according to different criteria and attribute selection
• Development of ETL/ELT processes with TALEND OpenStudio. This was necessary to process large amounts of data records from respective suppliers and to extract article information.
• Development of cronjob scripts in the respective shopping system for an automatic and timely import of item data.
• Development of cronjob scripts for a regular update of stock levels and prices.
• VMWare EsXi virtualization.
• Design of an on-premises infrastructure
• Migration V2P from Ubuntu server Magento/Shopware to on-premises VMWare EsXi environment.
• Hosting/configuration of GCP/Shopware Bitnami Stack instances on Google Cloud Platform.
• Hosting/configuration of Windows Server 2016 instances HETZNER AG Cloud Infrastructure
• Installation and configuration of Let's Encrypt SSL certificates.
• Installation and configuration Windows Server 2016 Active Directory

• Installation and configuration of email services Ubuntu Server & GCP Active Directory Domain Controller Config. (AD DC)
• Creating users and setting permissions accordingly.
• Email backups, storage backups, VM snapshots
• Ensure directories and files are set with correct permissions and are fully protected from potential attacks.
• Development of a BASH script for automatic renewal of SSL/TLS certificates.
• Use of the ACME protocol and CertBot.

Manager and founder of online stores with budget responsibility, responsible for the continuous improvement of business processes

• Participation in ITK events and partnership programs.
• Member of the Synaxon AG IT-VerbundgruppeMicrotrend IT Partner.
• FUJITSU SELECT Partner.
• Certification in the field of Workplace Systems FUJITSU Technology Solution.
• Negotiation of framework agreements to enable better purchasing conditions with leading service providers and suppliers.
• Member of the ITScope trading platform.
• Conception and regular exchange with the specialist department on the subject of B2B system connectivity.
• Close cooperation in adhering to the technical and legal guidelines for the use of article information and its properties on the article page, especially images of high resolution that have potential CopyRight rights.
• Collaboration with content provider vendors DCI, Ingram Micro.
• Planning effective seasonal marketing campaign in various niche markets
• Creation and optimization of Google Shopping Listing Campaigns for targeted groups.
• Cooperation with price comparison portals IDEALO, Geizhals, Rakuten online portal, Hitmeister.
• Performing market analysis to identify potential trends and their products at an early stage. This enables the launch of targeted campaigns with a high return on investment (ROI).
• Organize FLASH sales campaigns in cooperation with MYDEALZ bargain portal.
• Spreading the product range on various internet portals.
• Organize freelance program in an international environment and cooperation with coders and Google Adwords "connoisseurs" on sophisticated and seasonal campaigns.
• Responsible for budget planning for all project steps and investments.