23.10.2026 aktualisiert


40 % teilweise verfügbar
DevSecOps, Cloud Security, Site Reliability Engineering, Performance Optimization
Wien, Österreich
Deutschland +6
MsC Telecommunicationsinfo: Deutschland, Österreich, Schweiz, Frankreich, Dänemark, Finnland, Schweden
Skills
SREJavaAkkaAmazon Web ServicesBash ShellCloud ComputingCloud-SicherheitLinuxDevOpsPerformance EngineeringZuverlässigkeitstechnikScalaWeb Performance OptimizationGoogle CloudCloud-Optimierung
Up-to-date resume on https://manuel.bernhardt.io/resume
Specialities
Cloud Security, Cloud Infrastructure, DevSecOps, Performance engineering
Distributed systems, microservices, event-driven systems, actor systems, asynchronous programming
Technical skills
- IaC (Terraform, Ansible, Puppet, Chef)
- Cloud (AWS / GCP / Azure)
- CI / CD
- Performance engineering, profiling, tracing
- Networking
- JVM (Scala / Kotlin / Java)
- Python, Go
- Typescript, Javascript, AngularJS, ReactJS
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2011
Sprachen
DeutschMutterspracheEnglischverhandlungssicherFranzösischMuttersprache
Projekthistorie
Mavie is a holistic healthcare provider, offering a range of services from preventive care and rehabilitation to company health management and telehealth, all under the umbrella of the UNIQA Group.
I’m working with Mavie on establishing their Site Reliability Engineering practices from the ground up, bringing the teams up to speed in the use of DevSecOps and SRE practices with a focus on best-practice security aspects of cloud-based software development.
- setting up an IaC platform for automated infrastructure deployment (initially Azure, then Google Cloud), establishing deployment and infrastructure framework for the common application infrastructure use-cases
- ISO27001 compliace w.r.t Cloud Infrastructure
- automating vulnerability detection and remediation
- consolidating the infrastructure by migrating all applications away from various cloud-based vendors on the new Google Cloud based platform
- setting up CI/CD pipelines with automated vulnerability scanning
- setting up monitoring, alerting and on-call rotation
- defining SLIs and SLOs, tunning them according to the needs of each business domain
- defining deployment processes
- securing access to critical parts of the infrastructure using fine-grained IAM policies, integrating Azure as IdP for GCP
- etc.
At Adaptive, I helped to benchmark the Aeron messaging platform on Amazon Web Services (AWS) and
another major cloud provider.
During the course of the project, I:
* built the infrastructure provisioning harness required to run the tests on two cloud providers
with different scenarios and configurations (instance types, network connectivity, storage,
etc.)
* built an automation for rendering results (latency graphs, experiment parameters, etc.)
* helped to run benchmarks, analyzing results and investigating performance issues
* built a tool for automatically provisioning, running and retrieving results
There is a press release from AWS on the topic and the performance testing results are publicly
available.
Tools used: AWS , Linux , Terraform , Bash , Performance Engineering , Python , Java
another major cloud provider.
During the course of the project, I:
* built the infrastructure provisioning harness required to run the tests on two cloud providers
with different scenarios and configurations (instance types, network connectivity, storage,
etc.)
* built an automation for rendering results (latency graphs, experiment parameters, etc.)
* helped to run benchmarks, analyzing results and investigating performance issues
* built a tool for automatically provisioning, running and retrieving results
There is a press release from AWS on the topic and the performance testing results are publicly
available.
Tools used: AWS , Linux , Terraform , Bash , Performance Engineering , Python , Java
After watching the drone footage of San Francisco in burning orange skies due to wildfires, with the
Blade Runner soundtrack playing on top of it, I decided to look for an engagement with a company
helping to do something to address climate change. This is how I learned about Leap Energy which
provides solutions for connecting distributed energy resources to wholesale energy markets in order
to make the electric grid more resilient.
In the role of Technical Lead I focused on projects in the following two areas:
* infrastructure modernization
* migration of the self-hosted customized VPN server to a cloud offering (vendor selection,
user migration)
* migration of the self-hosted Kafka cluster to Confluent Cloud (vendor selection, data
migration, integration with the monitoring system, service migration and coordinated rollout)
* migration of the self-hosted elasticsearch cluster to elastic cloud (vendor selection, data
migration, service migration, coordinated roll-out)
* microservice architecture modernization
* introduction of ADRs in order to document architecture decisions
* introduction of GRPC as a means for service-to-service communication (replacing direct
database access across services and an experimental service-to-service communication via
Kafka topics)
* development of a service protocol registry and distribution mechanism (based on protocol
buffers) to allow contract-first design and development of the various services
* introduction of Gradle with Kotlin support as a build tool as a replacement to maven and
porting multiple services
* introduction of jOOQ as a replacement to Hibernate for database access
Tools used: Kotlin , Java , Typescript, React, Go , Python , Bash , Gradle , Maven , GRPC , Kafka , SQL , elasticsearch ,
Terraform , AWS
Blade Runner soundtrack playing on top of it, I decided to look for an engagement with a company
helping to do something to address climate change. This is how I learned about Leap Energy which
provides solutions for connecting distributed energy resources to wholesale energy markets in order
to make the electric grid more resilient.
In the role of Technical Lead I focused on projects in the following two areas:
* infrastructure modernization
* migration of the self-hosted customized VPN server to a cloud offering (vendor selection,
user migration)
* migration of the self-hosted Kafka cluster to Confluent Cloud (vendor selection, data
migration, integration with the monitoring system, service migration and coordinated rollout)
* migration of the self-hosted elasticsearch cluster to elastic cloud (vendor selection, data
migration, service migration, coordinated roll-out)
* microservice architecture modernization
* introduction of ADRs in order to document architecture decisions
* introduction of GRPC as a means for service-to-service communication (replacing direct
database access across services and an experimental service-to-service communication via
Kafka topics)
* development of a service protocol registry and distribution mechanism (based on protocol
buffers) to allow contract-first design and development of the various services
* introduction of Gradle with Kotlin support as a build tool as a replacement to maven and
porting multiple services
* introduction of jOOQ as a replacement to Hibernate for database access
Tools used: Kotlin , Java , Typescript, React, Go , Python , Bash , Gradle , Maven , GRPC , Kafka , SQL , elasticsearch ,
Terraform , AWS