27.09.2026 aktualisiert
100 % verfügbar
Infrastructure & Platform Architect / Head of Infrastructure / Senior DevOps & SRE
Presinge, Schweiz
Nur Remote
Bachelor's of Science in Telecom Engineering, Master's of Science in Electrical EngineeringÜber mich
Infrastructure expert and hands-on platform architect with 20+ years in production IT, from systems and network administration to running global infrastructures.
Skills
ObservabilityArgo CDTempoRAGGitHub CopilotGitHub ActionsLLMAzure KubernetesZero TrustISO 27001GCPAzure DevOpsIAMLokiSecure Shell (SSH)
Cloud Infrastructure & Platform Architecture
Expertise in designing and operating cloud and hybrid infrastructure at scale, including migration of hundreds of production workloads to AWS, Kubernetes orchestration of 400+ services across 52 countries, and re-platforming from private to public cloud with significant cost reductions and no SLA regression.
Infrastructure as Code & Automation
Deep proficiency in Terraform and Ansible as organization-wide infrastructure-as-code standards, managing ~300 applications across 50-60 servers, with every change reviewed as a pull request, Packer image authoring, and provisioning times reduced from days to under an hour.
DevOps, CI/CD & Site Reliability Engineering
Hands-on delivery pipeline engineering across hundreds of repositories using canary-by-default, blue/green and rolling strategies, automated rollback, quality gates, and end-to-end observability (metrics, logs, traces) reducing serious incident resolution from hours to under an hour.
Container Orchestration (Kubernetes, Nomad, etc...)
Production operation of Kubernetes at the scale of dozens of large nodes and thousands of pods, with GitOps delivery, namespaces, role-based access, multi-tenant isolation, and leadership of Nomad-to-Kubernetes migrations with minimal customer-visible impact.
HashiCorp Stack (Vault, Terraform, Packer)
Full deployment of the HashiCorp stack from scratch: internal PKI for certificate issuance and rotation, secrets management with Vault, and Vault authentication integrated into provisioning, SSH and source control.
Security, Compliance & Identity Management
Support of ISO 27001 certification with remediation tracking and audit evidence, PCI DSS compliance for retail payment systems, centralized identity and access via Authentik federated with GitHub, MFA, SSO into Vault and SSH, alongside Okta and Google Workspace administration.
Networking & Telecom Engineering
Enterprise network core migration for a 600+-staff international organization, deployment of networking and load-balancing equipment, and complete end-to-end network documentation. Telecom engineering background making networking a strength across all infrastructure roles.
Multi-Agent AI & RAG Systems
Architecture and operation of multi-agent AI systems and custom RAG over internal document corpora, with API, MCP and CLI surfaces, observability and rate limiting for agent traffic, using specification-driven, AI-assisted development.
Observability & Incident Management
End-to-end observability covering metrics, logs and traces for every service, tiered on-call management, incident response and blameless post-mortems, bringing serious incident resolution to under an hour.
Cost Optimization & FinOps
Reduction of staging cloud bill through automated start/stop pipelines for non-production environments, and infrastructure spend cut through re-platforming to hybrid cloud, reported in unit-economics terms for finance teams.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2018
Sprachen
EnglischverhandlungssicherFranzösischMuttersprache
Projekthistorie
Enterprise engagements through own consultancy. Primary client ran 400+ production services (1,000+ across dev and staging) for a 30-engineer SaaS organization. Migrated hundreds of production workloads from private cloud to AWS across Nomad and Kubernetes. Made Terraform and Ansible the organization-wide infrastructure-as-code standard across 50-60 servers running ~300 applications. Deployed the full HashiCorp stack from scratch including internal PKI and Vault. Centralized identity and access via Authentik federated with GitHub. Built end-to-end observability reducing serious incident resolution to under an hour. Cut staging cloud bill 70% (~EUR 21K/year). Supported ISO 27001 certification. Also completed a short-term engagement for Semble, a UK/EU electronic health records platform (GDPR special-category health data, NHS DSPT and ISO 27001 environment).
Platform engineering consultancy with eight scale-up engagements as embedded infrastructure lead. Led Nomad to Kubernetes migration of 400+ production services with customer-visible impact held to a few minutes. Operated Kubernetes in production at scale with GitOps delivery. Ran multi-tenant platforms for US and New Zealand tenants. Re-platformed from expensive public cloud to cost-optimized hybrid infrastructure cutting spend 60% with no SLA regression. Ran delivery across hundreds of repositories with canary-by-default, blue/green and rolling strategies. Set up event-driven messaging (Kafka, SQS, RabbitMQ). Architected multi-agent AI systems and custom RAG over internal document corpora.
Managed the migration of the enterprise network core for a 600+-staff international secretariat (164 member delegations, ~90 nationalities), working mostly in French. Deployed networking and load-balancing equipment and wrote the complete end-to-end network documentation the organization had been missing.