23.10.2026 aktualisiert
teilweise verfügbar
info: Abends und am Wochenende verfügbar
Azure Solutions Architect (AZ-305) | DevOps | AKS, Bicep, Terraform, IaC, CI/CD
Cesis, Lettland
Nur Remote
Über mich
Certified Azure Solutions Architect Expert (AZ-305, AZ-104) and hands-on DevOps engineer. I design secure, cost-aware Azure platforms and build them as code. Currently running production Azure for a regulated Swiss bank. Remote, EU-based.
Skills
Argo CDHelmAzure DevOpsActive DirectoryCloudfrontMicrosoft AzureCloud-EngineeringDevOpsAzure SQLAzure Active DirectoryAnsiblePrometheusSolution ArchitectureGrafanaIT-Architektur
Certified Azure Solutions Architect Expert (AZ-305, AZ-104) and hands-on DevOps engineer with 5+ years in DevOps and systems engineering. I design secure, cost-aware Azure architectures and build them as code. Currently designing and running production Azure infrastructure for a regulated Swiss financial institution.
Azure architecture: landing zones (Cloud Adoption Framework), Well-Architected reviews, identity and governance (Entra ID, RBAC, Azure Policy, management groups), hub-spoke networking, Private Endpoints, high availability and disaster recovery, cost optimisation, migration to Azure.
Microsoft Azure services: AKS, Azure DevOps, Bicep, Key Vault, VNet, VPN Gateway, Application Gateway, Load Balancer, Azure SQL, SQL Managed Instance, Azure Monitor, Log Analytics, Azure OpenAI infrastructure.
AWS: EKS, EC2, IAM, VPC, S3, CloudFront, Route 53, Lambda, RDS, CloudWatch.
Kubernetes & containers: Kubernetes (AKS, EKS), Docker, Helm, Kustomize, Argo CD, GitOps, migration of legacy applications to containers.
Infrastructure as Code & automation: Terraform, Bicep, Ansible, reverse-engineering existing Azure resources into IaC, PowerShell, Bash, Python.
CI/CD: Azure DevOps Pipelines, GitLab CI, GitHub Actions, approval gates, multi-environment releases (DEV/UAT/PROD).
Monitoring & observability: Prometheus, Grafana, Azure Monitor, CloudWatch, ELK Stack, Zabbix.
Databases: Azure SQL, SQL MI, MSSQL, PostgreSQL, MySQL, AWS RDS.
Microsoft 365 & endpoint management: Microsoft Intune, Windows Autopilot, Entra ID, Conditional Access, Microsoft Defender, Active Directory, Group Policy, Windows Server.
Selected results:
- Run 7 AKS clusters across 6 environments in a regulated banking environment
- Designed and support the end-to-end infrastructure architecture for an Azure OpenAI service in banking
- Multi-region infrastructure migration; credit-decision platform restructured to Helm
- Owned an AWS estate of 75+ EC2 servers and 2 EKS clusters; full Terraform IaC rollout from scratch
- Cut VM provisioning from 1.5 hours to 15 minutes per machine
- Migrated 500+ endpoints to Windows 11 with zero-touch Intune provisioning
Languages: English (fluent), Russian (fluent), Latvian (native). Remote only, EU-based (CET+1).
Erfahrung
Berufserfahrung5 - 10 Jahre
Freelancer seit2026
Sprachen
EnglishverhandlungssicherRussianverhandlungssicherLatvianMuttersprache
Projekthistorie
Remote member of the infrastructure team at a regulated Swiss bank; owner of the Azure platform under strict compliance requirements.
- Designed the end-to-end Azure infrastructure architecture for Azure OpenAI services used in banking, and support it in production
- Run 7 AKS clusters across 6 environments; CI/CD and GitOps with Azure DevOps and Argo CD; Infrastructure as Code with Bicep
- Delivered a multi-region infrastructure migration
- Migrated and restructured a credit-decision platform to Helm
- Operate Azure SQL, SQL MI, MSSQL and MySQL; monitoring with Azure Monitor and Prometheus
- Azure networking and VPN management; DNS management automated and under source control
- Technologies: Azure, AKS, Helm, Argo CD, Azure DevOps, Bicep, Azure OpenAI, Entra ID, Key Vault, Private Endpoints, Azure SQL, Prometheus
Full DevOps responsibility for a production AWS environment with 75+ EC2 servers and 2 EKS clusters.
- Rolled out Infrastructure as Code from scratch with Terraform and Ansible
- Migrated legacy services to Docker containers on Kubernetes (EKS)
- GitOps delivery with Argo CD and GitLab CI/CD
- Monitoring and logging with Prometheus, Zabbix and ELK
- Optimised infrastructure for a 24/7 call-centre platform
- Cut VM provisioning from 1.5 hours to 15 minutes per machine, speeding up disaster recovery
- Technologies: AWS (EKS, EC2, IAM, VPC, S3, RDS), Terraform, Ansible, Docker, Kubernetes, Argo CD, GitLab CI, PostgreSQL, MySQL, Prometheus, Zabbix, ELK
Managed enterprise Microsoft infrastructure for a consumer-finance company: 500+ workstations, 50+ servers, Azure administration and security.
- Migrated 500+ endpoints to Windows 11 with zero-touch provisioning via Microsoft Intune
- Microsoft Intune and MECM deployment; Autopilot-based device setup
- Active Directory, Group Policy and Office 365 administration
- Technologies: Microsoft Intune, Autopilot, MECM, Active Directory, GPO, Office 365, Azure, Windows Server