Freelance · Hamburg · Remote across the EU

Sovereign cloud & Kubernetes platforms on STACKIT and Scaleway.

Senior DevOps & platform engineer with 15+ years in distributed systems. I design, build and review Kubernetes platforms on European clouds – GitOps, multi-tenancy and cost transparency included.

Available from December 2026

Email meinfo [at] felix-ortmann.com
Felix Ortmann

Worked with

Schwarz Digits·Bundesdruckerei·uni-assist·GUS Group·Fraunhofer Singapore

Scaleway certified

Services

What I do

01

Platform engineering & GitOps

Kubernetes platforms built to be operated: ArgoCD hub-and-spoke, OpenTofu, Helm and Kustomize, Kyverno, observability, secrets and certificates – from first cluster to handover.

02

Migration to European clouds

From on-premise or hyperscaler to STACKIT or Scaleway: provider evaluation, migration plan, hands-on execution, with GDPR in mind.

03

Architecture reviews

ADR-style reviews of Kubernetes and cloud platforms: architecture, operability, tenant isolation, cost and delivery pipelines. Clear findings, prioritized recommendations.

Selected work

Recent projects

Schwarz Digits

2026

Industrial Edge Platform

Federated ArgoCD platform on STACKIT serving many internal tenants, including air-gapped production plants. I designed the FinOps strategy and implemented multi-tenancy with Capsule and Kyverno without Capsule Proxy, including CLI self-service.

Infrastructure costs cut by nearly 50% within the first month.

uni-assist

2023 – 2025

Migration to Scaleway

Legacy Docker Swarm on-premise, moved to a GDPR-compliant Kubernetes landscape aligned with CIS Controls v8. Led an 11-person team, bootstrapped Terraform, ArgoCD and GitLab CI, replaced the legacy VPN with mTLS PKI and AD integration.

Full production migration – infrastructure, services, data – completed.

GUS Group

2026

Cloud kickoff on STACKIT

Starting from zero: OpenTofu and ArgoCD hub-and-spoke foundation, SKE, Gateway API, External Secrets, cert-manager, observability and dashboards-as-code. The platform hosts the client's MCP server for AI agent integration.

Platform foundation in place within three months.

Stack

Current stack

Kubernetes

  • Kubernetes
  • Helm
  • Kustomize
  • Kyverno
  • cert-manager
  • External Secrets
  • external-dns
  • Gateway API

Multi-Tenancy & FinOps

  • Clastix Capsule
  • Kyverno policies
  • FinOps cost attribution
  • Air-gapped edge

Cloud

  • STACKIT
  • Scaleway

IaC & GitOps

  • OpenTofu
  • Terraform
  • ArgoCD

CI/CD

  • GitLab CI
  • GitHub Actions
  • Azure DevOps

Observability

  • Grafana
  • Loki
  • Mimir
  • Tempo
  • Alloy
  • Prometheus
  • Thanos
  • VictoriaMetrics

Identity & Networking

  • Keycloak
  • OIDC / OAuth
  • mTLS & PKI
  • ingress-nginx

Linux & Scripting

  • Linux
  • Arch Linux
  • Bash
  • Go
  • Python
  • Docker

AI & Agentic Engineering

  • Claude Code
  • MCP
Also
Managed PostgreSQL & MySQL · RabbitMQ
Earlier
AWS · GCP · OpenShift · Pulumi · Jenkins · TeamCity · ELK stack · WireGuard

Journey

Where I've worked

  1. Fall 2026 — Winter 2026GUS GroupCloud Engineer
    • Helped the client kickstart their cloud journey on the sovereign EU STACKIT platform.
    • Bootstrapped IaC & GitOps foundation with OpenTofu and ArgoCD (hub-and-spoke), including CI pipelines.
    • Provided the Kubernetes platform hosting the client's MCP server for AI agent integration.
    • Set up platform fundamentals for a modern, holistic cloud experience: Kubernetes SKE, external secrets, TLS certificate management, gateway API, DNS & routing, observability basics (alloy, k8s-monitoring), dashboards-as-code.

    ArgoCDDockerGrafanaHelmKubernetesLinux & BashOpenTofuRabbit MQgus-group.com

  2. Spring 2026 — Summer 2026Schwarz Digits (Industrial Edge Platform Team)Cloud Architect
    • Platform engineering in the Industrial Edge Platform team: federated ArgoCD architecture on STACKIT, serving a large internal customer base across the Schwarz ecosystem.
    • Designed the FinOps strategy for all internal tenants: Kubernetes-native cost attribution via labels and metadata, Grafana dashboards.
    • Cut infrastructure costs by nearly 50% within the first month by optimizing resource consumption across the ArgoCD platform without compromising performance.
    • Kubernetes multi-tenancy with Clastix Capsule and Kyverno policies, without Capsule Proxy, including CLI self-service for tenants.
    • Deployed to air-gapped production plants as well as classic cloud workloads through the central GitOps platform.
    • ArgoCD performance engineering; identified critical issues in the nested Helm chart architecture.
    • ADR-style security and architecture reviews of private cloud and industrial edge Kubernetes environments.

    ArgoCDDockerGitlab PipelinesGrafanaHelmKubernetesLinux & BashNginxTerraformschwarz-digits.de

  3. Spring 2023 — Spring 2025uni-assist e.V.Project Lead Cloud Migration
    • Project lead 'Cloud Migration' for moving the on-premise production environment to Scaleway.
    • Managed an 11-person agile team, doing Kanban.
    • Created a multi-stage migration plan for moving infrastructure, services, and data.
    • Architected the GDPR-compliant cloud landscape and deployment setup.
    • Active engineering to bootstrap the cloud environment with Terraform, GitLab, and ArgoCD.

    ArgoCDDockerGitlab PipelinesGrafanaJavaKubernetesLinux & BashNginxNodeJSPhpRabbit MQScalewayTerraformuni-assist.de

  4. Fall 2022 — Winter 2022StackstreamFull Stack Go Developer
    • Operated multi-cloud (GCP & AWS) environments using Terraform and ArgoCD.
    • Developed and maintained microservices using Golang in a Kafka-based architecture.
    • Implemented user-facing features in modern React.
    • Maintained a monolithic legacy Python project.

    ArgoCDAWSDockerGCPGitlab PipelinesGoGrafanaKafkaKubernetesLinux & BashNodeJSPythonReactJSTerraformstack-stream.com

  5. Spring 2022 — Spring 2022Walnut.ioConsultant Infrastructure Improvements
    • Conducted AWS infrastructure reviews and filed reports for potential improvements.
    • Re-worked GitHub CI/CD for a 50% speed up shipping an Elixir code base.

    AWSGitHub ActionsKubernetesNodeJSTypescriptwalnut.io

  6. Fall 2021 — Summer 2022BundesdruckereiSite Reliability Engineer
    • Ensured SLOs and SLAs are met for critical German government infrastructure services.
    • Assessed projects for their maturity level to facilitate go-live.
    • Provided CI/CD and streamlined deployment processes with GitLab pipelines.
    • Facilitated cross-service deployment strategies with Helm libraries.

    DockerGitlab PipelinesGrafanaHelmKubernetesLinux & BashNginxOpenshiftbundesdruckerei.de

  7. Fall 2019 — Summer 2021TenzirBlue Team Engineer
    • Ideated, authored, and maintained Threat Bus, an open-source threat intelligence dissemination layer.
    • Accomplished a joint project with a partner company to enable multiple fortune-500 companies to use our products for retrospective intelligence matching.
    • Architected and implemented the network setup for an appliance remote access strategy.
    • Managed the operation and security monitoring of all computer infrastructures both in-house and on-site (Kubernetes, VPN).
    • Acted as threat hunter in customer networks and filed bi-weekly security reports.
    • Provided CI/CD via GitHub actions.

    DockerElasticGCPGitHub ActionsGrafanaKubernetesLinux & BashNginxPythonReactJSWireguardtenzir.com

  8. Fall 2018 — Fall 2019Fraunhofer Institute SingaporeResearch Engineer
    • Conducted scientific research at the cybersecurity department of the Fraunhofer Institute Singapore.
    • Generated novel ideas and algorithms and implemented prototypes for:
      1. Detection of Advanced Persistent Threats in corporate networks.
      2. IDS alert correlation and Blue Team automation.
    • Won two prizes for innovative excellence in the cybersecurity industry.

    DockerElasticGitHub ActionsGoGrafanaKubernetesLinux & BashPythonReactJSfraunhofer.sg

  9. Winter 2017 — Fall 2018Moovel GroupBackend & DevOps Engineer
    • Provided and maintained infrastructure-as-code on AWS to enable urban mobility services in multiple German cities.
    • Helped architecting the AWS cloud landscape.
    • Delivered CI/CD via TeamCity for an entire engineering squad.
    • Conceptualized, implemented and maintained backend microservices.
    • Built an auto-suggest search for geo-coordinates and location data.

    AWSDockerElasticJavaKotlinNodeJSTeamcityTypescriptmoovel.com

Earlier (3)
  1. Summer 2015 — Summer 2016JobliftFullstack Engineer
    • Introduced Kubernetes to the team and handled the adoption when it was first released on GCP.
    • Provided and maintained infrastructure-as-code on GCP and provided CI/CD via Jenkins.
    • Greately contributed in architecting the GCP cloud landscape.
    • Planned, implemented, and maintained both backend- and frontend-serving microservices.

    DockerGCPGrafanaJavaKubernetesLinux & BashNginxNodeJSRabbit MQReactJSjoblift.com

  2. Spring 2014 — Spring 2015SinnerSchraderBackend Engineer
    • Worked cross-stack on a new concept-brand-shop for an international Swiss retail company.
    • Implemented web shop components with the Hybris framework.

    CoffeescriptJavaLinux & BashNodeJSsinnerschrader.com

  3. Winter 2013 — Spring 2014catworkxPlugin Engineer
    • Developed plugins for Atlassian Jira and Confluence.
    • Integrated LDAP / AD contact export with Atlassian products.

    AtlassianJavaLinux & BashPhpcatworkx.com

About

About me

I'm Felix, a cloud and platform engineer based in Hamburg.

I started my journey in theoretical computer science and distributed systems, then spent many years writing software – backend services, APIs and tooling in Go, Python, Java and TypeScript. Kubernetes has been part of that work since 2015, shortly after its first release.

Security came along the way – a master's thesis on detecting advanced persistent threats at Fraunhofer Singapore, then blue teaming and threat hunting at Tenzir, while building Threat Bus, an open-source layer for sharing threat intelligence between security tools. After that, I worked as SRE for German government infrastructure.

That path shapes how I build platforms today: operability, isolation and cost are part of my designs from day one – and the team should be able to run what I hand over without me.

Since 2022 I have been working independently, as architect and hands-on engineer in one – I've led a full production migration to Scaleway, built platform foundations on STACKIT and reviewed large Kubernetes environments. My work is AI-accelerated; the decisions behind it rest on fifteen years of building and running systems.

Highlights

  • M.Sc. Computer Science, University of Hamburg – 1.0, best of year
  • Fraunhofer stipend for the final year at NTU Singapore
  • Two awards for APT-detection research (BfV MINT Award, 1st place; CAST, 3rd place)
  • Arch Linux as daily driver for 15+ years
  • German (native), English (business fluent)

Contact

Have a project or a role in mind?

Available from December 2026