27.05.2026 aktualisiert
verifiziert
Premiumkunde
100 % verfügbarInfrastructure Automation Architect
Belp, Schweiz
Nur Remote
Oracle Certified, IBM Certified, HashiCorp CertifiedÜber mich
I take responsibility for security- and audit-critical infrastructure automation in regulated environments such as banks, insurance companies and telecommunications providers. My work is aimed at business unit leaders and department heads who need to make strategic technology decisions.
Skills
NIS 2DORAConfiguration ManagementInfrastrukturAnsibleVaultInfrastructure as Code (IaC)Infrastrukturautomatisierungs-FrameworksDeployment AutomationHashicorpTerraformOracle Cloud InfrastructureAutomation Anywhere
Platform & Infrastructure Automation
- Infrastructure as Code (Terraform, IaC) : Productive use in enterprise environments since 2016; design, implementation and operation of highly automated multi-tenant platforms with several hundred Terraform states and thousands of infrastructure resources
- Platform & Network Automation (Service Discovery, Service Mesh) : Since 2017; design and implementation of automated network and service discovery concepts in distributed platform landscapes
- Orchestration (Containers, VMs, Bare Metal, Processes) : Since 2020; unified orchestration of heterogeneous runtime environments
- Policy-as-Code & Governance : Since 2021; enforcement of security and compliance requirements as code
Security & Access Automation
- Secrets Management, PKI, MFA, Zero Trust : Since 2019; design and integration of security-critical platform components such as secrets, certificates and access control in regulated multi-tenant environments
Platform & Automation Tools - Enterprise Level
- Terraform : Core tool for the design, implementation and operation of automated platforms
- IBM Vault / HashiCorp Vault : Platform component for secrets, PKI and encryption
- Consul : Service discovery and networking of distributed platform services
- Nomad : Deployment and orchestration of production workloads
- Packer : Golden Image Creation / Operating System Provisioning
- Ansible : Application Deployment, Configuration Management
Cloud Architecture
- OCI : Since 2017
- AWS : 2021 - 2023
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2013
Sprachen
DeutschMutterspracheEnglischverhandlungssicher
Projekthistorie
Responsible for the design and implementation of a company-wide, comprehensive Infrastructure-as-Code (IaC) transformation in a regulated banking environment.
• Conducted a current-state assessment of infrastructure, processes, tooling, teams, ways of working and skills profiles as the basis for the target architecture and a PDO (Product-Driven Organization)
• Defined an audit-proof Everything-as-Code infrastructure tailored to the client’s specific situation, including governance, security and compliance
• Established a comprehensive IaC operating model, including the integration and transformation of internal teams
• Designed standardized, reusable Terraform modules for infrastructure and platform services
• Integrated Secrets Management, PKI and Encryption-as-a-Service to secure critical VMware and Kubernetes platform components as well as stored data
• Implemented the platform in line with regulatory requirements (DORA, BaFin, ACPR, CRA), with a focus on auditability and traceability
The initiative establishes the foundation for a standardized, automated and audit-proof infrastructure, reduces manual intervention and ensures scalable, traceable provisioning of IT resources in a banking environment.
Technologies used: Terraform, Vault, Consul, Ansible, Kubernetes, Policy-as-Code, VMware
- Analysis of the existing HashiCorp Vault installation and the covered use cases
- Migration of HashiCorp Vault clusters and adjustment to the operational processes of the Agency's PKI
- Integration of HashiCorp Vault clusters with the Agency's third-party PKI
- Planning and implementation of HashiCorp Vault automation
- Planning, execution, and integration of HashiCorp Vault into the Agency's IAM system
- Planning and implementation of securing HashiCorp Vault with an HSM
- Management of certificates and private keys in HashiCorp Vault
- High-degree automation of the BA's use cases
- Analysis and assessment of the existing HashiCorp Vault clusters
- Consulting and Creation of a new internal Root CA
- Design and implementation of a ‘state of the art’ Vault cluster serving as Intermediate CA
- Product documentation according to ISO 27001 standards
- General support with an ongoing IaC project (cloud migration)
- Training of customer’s employees
Zertifikate
Oracle Cloud Infrastructure 2024 Certified Architect Associate
Oracle2024
AWS Partner Technical Accreditation
Amazon Webservices2022
exali Berufshaftpflicht-Siegel
Das original exali Berufshaftpflicht-Siegel bestätigt dem Auftraggeber, dass die betreffende Person oder Firma eine aktuell gültige branchenspezifische Berufs- bzw. Betriebshaftpflichtversicherung abgeschlossen hat.
Versichert bis: 01.09.2027