Cloud migration & AKS
Built the AKS proof of concept for a banking platform moving off 30+ RHEL servers, with Vault-backed secrets, reusable Terraform and 10+ GitLab pipelines for 10,000+ daily users.
WORK / 2026Open for roles & collaborations
Need the person
who ships it?
I build secure Kubernetes and cloud platforms for regulated teams. Six years in banking, insurance and cloud native consulting. I built the AKS proof of concept for a bank moving 30+ RHEL servers to containers, cut critical and high CVEs by more than half, and cut environment provisioning from days to hours.
- StatusOpen now
- BaseLugano, CH
- RemoteEU / UTC+1
- EngagementsFull-time · contract
01 Start here
Tell me what
you're building.
Send the role, the problem or the rough shape of the work. CV requests welcome. I reply to every serious enquiry within two working days.
02 Where I fit
Where I do the work
Kubernetes & OpenShift
Highly available clusters, multi-tenant platforms and legacy migrations. AKS, OpenShift and the reliability work that keeps them up.
DevSecOps & supply chain
SBOMs, image signing, CVE remediation and policy that developers can actually live with. Security controls that ship with the platform, not after it.
Developer platforms & IaC
Self-service environments with Terraform, Crossplane, ArgoCD and Helm. Fewer tickets, shorter lead times and an infrastructure team that is not the bottleneck.
03 Evidence
What changed
>50%
Reduction in critical and high CVEs through automated remediation, SBOMs and signed images.
10+
Highly available OpenShift clusters for banking and insurance, plus a self-service AKS platform.
10k+
Daily users on a banking platform moving from 30+ RHEL servers to AKS, with Vault-backed secrets and 10+ GitLab pipelines.
04 Engagements
Ways to work together
Full-time
Platform engineering or DevSecOps roles in a product, cloud native or regulated team.
Contract
A migration, Kubernetes platform build or security remediation with a clear finish line.
Collaboration
Technical writing, open-source platform tooling or advisory work around Kubernetes and DevSecOps.
↗ Open for work