Log In

Don't have an account? Register now

Forgot Password?

Register

Summary

Platform / DevOps Engineer — Kubernetes · Go · Terraform · Industrial OT

PROFILE
Platform engineer who owns an energy-sector Kubernetes estate end to end — build, deploy, respond, root-cause. Sole platform owner of the infrastructure behind a grid-scale battery-storage fleet scaling to 33.96 MW / 73.2 MWh across six clients: seven IONOS virtual data centres plus three industrial edge sites, ~40 nodes, ~€95k/year cloud spend, serving 15 plant operators and ~77 telemetry endpoints.

The flagship site is a 52 MWh utility-scale BESS whose EPC contract carries a 97% annual availability warranty with liquidated damages priced per kW-year, and the platform is in scope for KRITIS / NIS-2 — so reliability and audit evidence are contractual line items, not aspirations.

Built the GitOps delivery platform that took the team from manual monthly releases to multiple deploys per day, wrote the Go edge gateway that speaks Modbus TCP, SNMP and MQTT to ten families of OT hardware, and set the platform roadmap a nine-person team delivers against.

SELECTED RESULTS

  • Deploy frequency — Moved delivery from manual, roughly monthly releases to multiple deploys per day. On the AWS product: 133 automated production deploys over 11 months (~12/month, peak 54) at 83% first-try success, plus 59 backend deploys at 86%.
  • Production API latency — Reduced p50 from 3.81 s to 0.45 s and p99 from 14.75 s to 3.34 s; PHP-FPM CPU throttling from 49.5% to 1.6%. One algorithmic fix, no schema migration; payloads verified byte-identical across four capture passes; total user-visible downtime 51 seconds.
  • Supply-chain gates — Four-stage build-once-promote pipeline: build → Trivy scan + Syft CycloneDX SBOM → crane retag + cosign sign → deploy with auto-rollback. Cost ~18 s (median end-to-end 2.8 → ~3.1 min). Nothing unsigned or unscanned reaches staging.
  • Incident detection & recovery — Across six documented production incidents, recovery after diagnosis ran from ~1 minute to under 4 hours. Machine-detected a load-balancer fault in 3 seconds and quantified the loss of ~618,000 telemetry points across 77 devices. Shipped a namespaced-RBAC watchdog that auto-remediates telemetry-ingestion stalls in 1–2 minutes, and filed the durable in-process fix separately rather than letting the watchdog stand in for a cure.
  • Cost & capacity — Reclaimed 452 GB plus ~22 GiB of storage instead of expanding volumes; sized a capacity request against a measured 14.2 GiB requirement, obtained approval for a per-client scaling formula and justified flat-monthly VPS over per-minute cloud billing at −45% for 24×7 use.

CERTIFICATIONS, LANGUAGES & OTHER

Certifications

  • Certified Kubernetes Administrator (CKA) — Sep 2026 passed
  • Certified Kubernetes Security Specialist (CKS) — planned Dec 2026
  • Full Stack .NET Developer Programme, IT-Park (2018–2021) — completed

Trainings

  • “Kubernetese and Cloud-Native Associate (KCNA)” – KodeKloud
  • “Certified Kubernetes Administrator (CKA)” – KodeKloud
  • “JSON Path Test” – KodeKloud
  • “Linux Foundation Certified System Administrator (LFCS)” – KodeKooud
  • “Kubernetes – Hands-on Tutorial” – KodeKloud
  • “Docker Training Course” – KodeKloud
  • “DevOps Pre-Requisite Course” – KodeKloud
  • “Learning Linux Basics Course & Labs” – KodeKloud

Languages

  • English (native)
  • Russian (native)
  • German (B2)

Awards

  • Hackathon Gold, Russia — won three times
  • 2nd place, Hackathon Leipzig

Outside work

  • 12 years of competitive ice hockey, including professional contracts
  • Piano school finished with excellence and self-learned guitar play
  • Free time with board games, gaming, and pet projects

Availability & work rights

  • Relocating to Brisbane; available from 1 January 2027, 4 weeks’ notice.
  • Currently hold an EU family-member residence permit (Art. 10, Dir. 2004/38/EC) with full work rights in Germany.
  • USA citizenship holder.
  • For Australia I would require employer sponsorship (Skills in Demand, subclass 482) or a skilled-migration nomination.
  • References and Arbeitszeugnisse available on request.

Education

2025-10-01 to 2028-10-01 M.Sc. Artificial Intelligence at Universität zu Lübeck, Germany

Remote programme, expected completion in 2028.

2021-10-01 to 2025-05-01 B.Eng. Mechatronics at Technical University of Applied Sciences Würzburg-Schweinfurt (THWS)

210 ECTS; taught and examined entirely in English. Thesis: AI-driven trading agent for the electricity market.

SKills

.netaccessibility optimisationAmazon AuroraAmazon CognitoAmazon EKSAmazon S3AngularAnsibleAPI latency optimisationapplication deploymentarchitecture decision recordsArgoCDAsp.NetAuthentikautomated deploymentsAWSAWS ACMAWS CDKAWS KMSAWS Load Balancer ControllerAWS Secrets ManagerBashbuild-once-promote pipelinesC#capacity planningcert-managerCI/CDcloud infrastructureCluster Autoscalerconfiguration hardeningConfluent Cloudcontainer image signingCosigncost optimisationCRD controllersCycloneDX SBOMDevOpsdisaster containmentdistributed tracingdrift detectionedge computingedge-to-cloud systemsEMQXephemeral Kubernetes environmentsExternal Secrets Operatorfirewall auditingfrontend developmentfull-stack developmentGaleraGitea ActionsGithub ActionsGitHub OIDCGitOpsGoGrafanaHAProxyHarborHashiCorp VaultHelmhigh availabilityIAM Roles for Service Accounts (IRSA)IEC 60870-5-101incident responseIndustrial OTInfracostInfrastructure as Code (IaC)infrastructure automationIngress-NGINXIONOS CloudISO 27001 A.8.31IstioJenkinsK3sKafkaKeycloakKRITISKubernetesKubernetes API audit policyKubernetes securityKustomizeLimitRangeloggingLokiLonghornMetalLBMFAMinIOModbus TCPMonitoringMosquittoMQTTmulti-AZ architecturemulti-tenant infrastructureMySQLNetworkPolicyNIS-2Object LockobservabilityOIDC SSOOOM troubleshootingOPC-UAOpenTelemetryOpenTelemetry CollectorOT firewallingOT inventoryOT network discoveryOT network segmentationPercona XtraDBperformance optimisationPHPplatform engineeringplatform roadmap planningPod Security AdmissionPodDisruptionBudgetproduction operationsproduction troubleshootingprogramming tutoring.PrometheusPythonQuality AssuranceRBACReactRedisrelational databasesrelease engineeringResourceQuotaREST/API developmentroot-cause analysisSAML 2.0Site Reliability Engineering (SRE)SNMP v2cSnowflakesoftware supply-chain securitySyftteam coordinationTechnical Documentationtechnical leadershiptelemetry systemsTempoTerraformTest AutomationTrivyTypeScriptVictoriaMetricsvulnerability scanningWORM storageZot
CybersecurityEnterprise SoftwarePrompt EngineeringRenewable Energy Electricians (Solar/Wind)Software DevelopmentSoftware Engineering

Experience

2025-04-01 to Present DevOps / Site Reliability Engineer at Axsol GmbH

Sole platform engineer in a 9-person engineering team. Own production infrastructure across seven IONOS VDCs and three industrial edge clusters; built and operate a K3s/Terraform/ArgoCD GitOps platform; manage AWS infrastructure; develop Go-based OT/edge tooling; own observability, security controls, incident response, technical documentation, and the platform roadmap.

2022-06-01 to 2025-03-31 Frontend / Software Developer at Deutsche Telekom MMS GmbH

Developed Angular and React frontends, improved accessibility, contributed to PrimeNG, worked on testing and test automation, and presented at company-wide frontend community sessions. Promoted from working student to permanent employee based on technical performance.

2019-03-01 to 2021-11-30 Software Engineer Intern → Frontend Engineer → Full Stack Developer at IT-Park

Joined as an intern, promoted to Frontend Engineer in April 2020 and Full Stack Developer in March 2021. Built and maintained client web applications, developed ASP.NET server APIs and relational database functionality, acted as a technical lead, and tutored school and college students in programming.