01
Platform engineering & GitOps
Kubernetes platforms built to be operated: ArgoCD hub-and-spoke, OpenTofu, Helm and Kustomize, Kyverno, observability, secrets and certificates – from first cluster to handover.
Freelance · Hamburg · Remote across the EU
Senior DevOps & platform engineer with 15+ years in distributed systems. I design, build and review Kubernetes platforms on European clouds – GitOps, multi-tenancy and cost transparency included.
Available from December 2026

Services
01
Kubernetes platforms built to be operated: ArgoCD hub-and-spoke, OpenTofu, Helm and Kustomize, Kyverno, observability, secrets and certificates – from first cluster to handover.
02
From on-premise or hyperscaler to STACKIT or Scaleway: provider evaluation, migration plan, hands-on execution, with GDPR in mind.
03
ADR-style reviews of Kubernetes and cloud platforms: architecture, operability, tenant isolation, cost and delivery pipelines. Clear findings, prioritized recommendations.
Selected work
Federated ArgoCD platform on STACKIT serving many internal tenants, including air-gapped production plants. I designed the FinOps strategy and implemented multi-tenancy with Capsule and Kyverno without Capsule Proxy, including CLI self-service.
Infrastructure costs cut by nearly 50% within the first month.
Legacy Docker Swarm on-premise, moved to a GDPR-compliant Kubernetes landscape aligned with CIS Controls v8. Led an 11-person team, bootstrapped Terraform, ArgoCD and GitLab CI, replaced the legacy VPN with mTLS PKI and AD integration.
Full production migration – infrastructure, services, data – completed.
Starting from zero: OpenTofu and ArgoCD hub-and-spoke foundation, SKE, Gateway API, External Secrets, cert-manager, observability and dashboards-as-code. The platform hosts the client's MCP server for AI agent integration.
Platform foundation in place within three months.
Stack
Journey
About
I'm Felix, a cloud and platform engineer based in Hamburg.
I started my journey in theoretical computer science and distributed systems, then spent many years writing software – backend services, APIs and tooling in Go, Python, Java and TypeScript. Kubernetes has been part of that work since 2015, shortly after its first release.
Security came along the way – a master's thesis on detecting advanced persistent threats at Fraunhofer Singapore, then blue teaming and threat hunting at Tenzir, while building Threat Bus, an open-source layer for sharing threat intelligence between security tools. After that, I worked as SRE for German government infrastructure.
That path shapes how I build platforms today: operability, isolation and cost are part of my designs from day one – and the team should be able to run what I hand over without me.
Since 2022 I have been working independently, as architect and hands-on engineer in one – I've led a full production migration to Scaleway, built platform foundations on STACKIT and reviewed large Kubernetes environments. My work is AI-accelerated; the decisions behind it rest on fifteen years of building and running systems.
Contact
Available from December 2026