Azure & GCP Cloud Engnieer

Hornbach GmbH

Konsumgüter und Handel

>10.000 Mitarbeiter

Cloud-Native Database Architecture (Azure & GCP): Managed and optimized Azure & GCP Databases for PostgreSQL Server environments, alongside complex Google Cloud SQL (MySQL and PostgreSQL) deployments for e-commerce and critical microservices. Evaluated and tuned performance tiers, connection pooling (PgBouncer), and Zone-Redundant High Availability, optimizing cloud spend while ensuring production resilience. Dynamically scaled GCP machine tiers (including high-performance Enterprise Plus) and toggled Regional/Zonal availability based on strict environment requirements.
VPC & GKE Refactoring: Architected a multi-tenant Shared VPC environment to isolate and scale GKE clusters across multiple app teams. Engineered highly secure, private regional clusters utilizing VPC-native routing, Dataplane V2 (eBPF) micro-segmentation, Workload Identity, and least-privilege Shielded Nodes (COS).
Enterprise Shared VPC Architecture: Spearheaded a multi-phase network modernization by designing a scalable Shared VPC topology (Host and Service projects) using Google-validated Terraform modules. Orchestrated the deployment of private VPC-native GKE clusters, integrated Cloud Armor WAF for secure Fastly ingress, and engineered workload migration strategies utilizing PSC and Direct VPC Egress.
Tech Stack: GCP (Cloud SQL, Cloud Storage, Cloud Scheduler, Pub/Sub, Secret Manager, Cloud IAM), Azure (AKS, PostgreSQL Flexible Server), Terraform, Jenkins, Groovy, Kubernetes, Helm, GitOps.

Kubernetes Expert | Google Cloud Platform Engineer

YunaCloud

Internet und Informationstechnologie

< 10 Mitarbeiter

- Setup Google Foundation (GCP) with Terraform (Bootstrap, Organization, Environments, Networks, Projects) , OPA Gateway and Github Actions
- Cloud Architect: Build up a Hub-and-Spoke network environment (Firewall, SVPC, private DNS, NAT Gateway, NextHop VMs, etc.)
- Connect OnPremise-Systems via Cloud VPN with internal Cloud components
- Implement a private GKE cluster in spoke SVPC with network tags to be compatible with Hub-and-Spoke
- Setup a developer platform via GKE (Kubernetes cluster) with ArgoCD, Prometheus, Grafana, CloudNativePG, Jaeger Tracing (with Cassandra Operator) / OpenTelemetry, Cilium, Dependency Track, KeyCloak (IAM), Falco, Kyverno, Velero, Sealed Secrets, SonarQube, and Trivy
- Postgres provisioning via CloudnativePG - backup and restore postgres clusters with Cloud Buckets
- Google Certifications: Google Cloud Certified Digital Leader, Google Cloud Certified Associate Cloud Engineer

Google Workspace Migration Engineer

Nutri Plus (nutri+)

Konsumgüter und Handel

10-50 Mitarbeiter

Zero-Downtime M365 Migration: Orchestrated a seamless, end-to-end migration of 30 enterprise accounts from Microsoft 365 to Google Workspace, ensuring absolute business continuity and zero disruption to daily operations.
Data Integrity & Transfer: Securely migrated all critical business data, including IMAP emails, calendars, contacts, and SharePoint/OneDrive files to Gmail and Google Drive, maintaining strict data privacy and folder structures.
Strategic Consulting & Architecture: Advised stakeholders on optimal Google Workspace structuring, designing an efficient organizational hierarchy utilizing Google Groups, shared resources, and dedicated accounts to streamline team collaboration.
User Training & Adoption: Led knowledge transfer and onboarding sessions, teaching the team how to effectively navigate and maximize productivity across the Google Apps landscape (Docs, Drive, Meet, Chat).
Workspace Security & Foundation: Architected the new Google Workspace foundation, configuring Organizational Units (OUs), centralized Identity and Access Management (IAM), and core email security protocols (SPF, DKIM, DMARC) to guarantee secure and reliable email deliverability.
Tech Stack: Google Workspace, Microsoft 365 / Exchange, Google Workspace Migration Tools, DNS Management.

Kubernetes Expert | StackIT Cloud Platform Engineer

mehrwert GmbH

Marketing, PR und Design

10-50 Mitarbeiter

GDPR-Compliant Cloud Architecture: Architected and deployed a highly secure, GDPR-compliant Hub-and-Spoke network topology on the European StackIT Cloud. Engineered a centralized Hub utilizing an OPNsense firewall and VPN gateways to govern external traffic, securely routing to strictly isolated Development and Production Spoke VPCs.
Platform Engineering (SKE & GitOps): Provisioned production-grade StackIT Kubernetes Engine (SKE) clusters across the Spoke VPCs. Established a robust DevSecOps foundation leveraging ArgoCD for GitOps, Trivy for continuous vulnerability scanning, and Kyverno for policy-as-code enforcement.
Cloud-Native AI Infrastructure: Engineered a highly available, containerized AI infrastructure to power local Generative AI applications. Deployed ChromaDB for Retrieval-Augmented Generation (RAG), Redis Sentinel for AI Short-Term Memory (STM), and Cassandra for Long-Term Memory (LTM), while securely serving the Gemma:4 LLM via Ollama natively within the cluster.
Security & Data Management: Deployed resilient, highly available PostgreSQL databases using the CloudNativePG operator and implemented Keycloak for centralized Identity and Access Management (IAM). Secured application traffic and credentials using cert-manager for automated TLS and External Secrets Operator connected directly to StackIT Secret Manager.
Tech Stack: StackIT Cloud, SKE, OPNsense, Kubernetes, ArgoCD, Kyverno, Trivy, CloudNativePG, Keycloak, ChromaDB, Redis Sentinel, Cassandra, Jaeger

Honorary Lecturer in Cloud Technologies

SRH University Berlin

Sonstiges

>10.000 Mitarbeiter

- Cloud Computing Fundamentals & Architecture: Expertise in core cloud concepts, including the three main Service Models (IaaS, PaaS, SaaS) and diverse Deployment Models (Public, Private, Hybrid, Multi-cloud).

- Modern Application Deployment Strategies (GCP Focus): Instruction on the GCP Application Hosting Spectrum, covering Virtual Machines, Containers (Kubernetes and Cloud Run), Platform as a Service (App Engine), and Serverless Computing (Functions as a Service - FaaS).

- Data Management & Big Data Analytics: Comprehensive coverage of Cloud Storage options (Object, Block, File) and Database solutions, including Relational (Cloud SQL), NoSQL (Firestore, BigTable, Memorystore), and serverless enterprise data warehousing (BigQuery).

- DevOps and Infrastructure Automation: Skills in DevOps principles, including Continuous Integration (CI), Continuous Delivery (CD), Infrastructure as Code (IaC) using tools like Terraform, and implementing effective Monitoring and Logging for system observability.

- Emerging Technologies & Responsible Cloud Use: Focus on crucial topics like Cloud and IoT Security, Identity and Access Management (IAM), data privacy, and the ethical considerations of cloud and massive data collection.

Google Cloud Engineer & Strategic IT Consultant

mehrwert GmbH

Marketing, PR und Design

10-50 Mitarbeiter

Zero-Downtime Google Workspace Migration: Orchestrated and executed a seamless, zero-downtime migration of enterprise emails, critical data, and collaborative systems to Google Workspace, ensuring absolute business continuity for the client.
GCP Foundation & Structuring: Architected and structured the foundational Google Cloud Platform (GCP) environment. Established a scalable, secure, and well-governed cloud hierarchy tailored to the company's operational needs.
Strategic Tech Consulting: Acted as the primary technical consultant for the end customer, advising stakeholders on complex technical decisions, cloud best practices, and overall IT strategy to drive modernization.
Tech Stack: GCP (Workload Identity Federation, Organization Hierarchy & Policies), Google Workspace, Github & Github Actions, Google Apps Script, Google Workspace Studio

Kubernetes Expert | Azure Cloud Engineer

SHE Informationstechnologie AG

Sonstiges

250-500 Mitarbeiter

- DevOps-Transformation von OnPremise-Applikationen in die Azure Cloud mittels IaC (Terraform), Helm Charts, GitOps (ArgoCD) und Manifesten
- Arbeit mit Linux Server Distributionen
- Provisionierung Wartung von AKS (Kubernetes) Clustern
- Volle Provisionierung von Grafana Manifesten (Dashboards, Alerts, usw) mittels IaC und Helm Charts
- Berater bei Architekturentscheidungen bzgl. Azure Komponenten und Kubernetes
- Handeln als Azure-Architekt und verantwortlich für die Implementierung
- Verwendete Azure Cloud Komponenten: Azure Application Gateway, AKS (Kubernetes), Azure Storage Accounts (Container), Azure Firewall, Web Application Firewall (WAF), Azure KeyVault, and Bastionhost
- Erstellung einer Hub-And-Spoke VNET Architektur
- Postgres-Migration von OnPremise-Umgebungen in die Azure Cloud mittels Active-Standby Prinzipien (Crunchy Operator)
- Implementierung von Cloud Logging durch Datenerfassung, die in einen Cloud-Speicher gestreamt werden, und Scrapen dieser Daten über Fluentbit und Visualisierung über OpenSearch (+ Operator)

Kubernetes Expert | Site Reliability Engineer

Industrie und Maschinenbau

5000-10.000 Mitarbeiter

- Management, further development, optimization and maintenance of Kubernetes clusters with over 1200 applications (Rancher), improving deployment efficiency by 30% and reducing downtime by 15%
- DevOps transformation from on-premise applications to Kubernetes using IaC, Helm Charts, GitOps and manifests
- Working with Linux server distributions
- Automated integration and deployment with GitLab CI/CD (.NetCore, Java, Golang, NodeJS), using jobs such as builds, tests, vulnerability scans, integration tests, deployment and notifications
- Introduction of GitOps using ArgoCD and Gitlab runners
- Integration of logging, tracing and monitoring using Grafana, Prometheus, Grafana Mimir, Jaeger, Opentelemetry, Opensearch, InfluxDB, and Sentry
- Integration of endpoints with Prometheus metrics in applications (.NetCore, Java, Golang, NodeJS), as well as sidecar tracing using OpenTelemetry Operator
- Full provisioning of Grafana manifests (dashboards, alerts, etc.) using IaC and Helm Charts
- Introduction of a decoupled IAM system using Keycloak (Operator) and OAuth2-Proxy
- Education and training of developers and system administrators in Kubernetes, observability and SRE approaches
- Consultant for architecture decisions regarding microservices in Kubernetes and tools, as well as databases
- Introduction of DevSecOps in CI/CD pipelines and Kubernetes - with tools such as HashiCorp Vault, Kyverno and Trivy
- Evaluation of the Confluent Kafka Operator in Kubernetes
- Deploy and maintain Strimzi Kafka Operator, Strimzi Kafka Clusters, Kafka-Rest-Proxy, Kafka Bridge, KSQL, AKHQ, Schema-Registry, and Kafka Connect
- Setting up K3s clusters in VPN
- Working with 5 teams according to agile principles; leading retrospectives and other agile ceremonies
- Introduction of integration tests with K6 Grafana
- Implementation of a notification system with Angular, NestJs, GraphQL, Postgres, VerneMQ and Golang
- Web development with Angular and NestJs
- Postgres cluster provisioning via CloudnativePG
- Provisioning and maintenance of MinIO to backup and restore postgres clusters
- Implement an API-Gateway via NgINX Fabric, OAuthProxy2 and Emissary Ingress

Kubernetes Expert | Site Reliability Engineer

Industrie und Maschinenbau

>10.000 Mitarbeiter

- Adding Monitoring, Logging and Tracing to AspNet Core, Java, Golang, and NodeJS Applications
- Setting up platforms like Jaeger (Tracing), OpenSearch/Loki/ElasticSearch (Logging), and Grafana Stacks (Monitoring) in Kubernetes environments
- Maintain and Migrate different Kubernetes environments and their deployments (applications) into OnPremise Kubernetes environment
- Train employees on/in Kubernetes
- Develop its company own notification system
- Help making architectural decisions regarding Kubernetes
- Help teams to being more agile
- Introduce CI/CD pipelines, Integration-Tests and Infrastructure as Code

Technical Lead

SmartLoC GmbH

Konsumgüter und Handel

< 10 Mitarbeiter

Site Reliability Engineering (DevOps)

Creating architectural overview for the business use-case (microservice approach)
Working with AWS (Elastic Stack, K8s, Route53, S3)
Creating and maintaining Kubernetes clusters in EKS environments
Maintaining VPCs and EC2 instances with Ansible / Terraform
CI/CD with Github Actions, Kubernetes, Helm & ArgoCD
Monitoring of applications with Grafana, Prometheus, and Influx
Hosting and maintaining Postgres instances

Full Stack Software Engineering

Working with AspNet Core
Implementation of Monitoring endpoints
Introduction of Serilog that got scrapped by Loki
Introduction of Tracing with OpenTelemetry

Professional in Google Cloud & Kubernetes

Profilanlagen

Über mich

Skills

Erfahrung

Sprachen

Projekthistorie

Azure & GCP Cloud Engnieer

Kubernetes Expert | Google Cloud Platform Engineer

Google Workspace Migration Engineer

Kubernetes Expert | StackIT Cloud Platform Engineer

Honorary Lecturer in Cloud Technologies

Google Cloud Engineer & Strategic IT Consultant

Kubernetes Expert | Azure Cloud Engineer

Kubernetes Expert | Site Reliability Engineer

Kubernetes Expert | Site Reliability Engineer

Technical Lead

Zertifikate

Kontaktanfrage