On-premises → AWS migration
A large migration project using Terraform and Ansible to standardize provisioning and configuration.
Senior Infrastructure & Systems Engineer
I combine systems administration, automation, cloud, networking and operations. From complete business environments to enterprise platforms and large migrations — with an emphasis on repeatability, documentation and ownership of the outcome.
Selected highlights
A few examples that best represent my work across production environments and infrastructure projects.
A large migration project using Terraform and Ansible to standardize provisioning and configuration.
Administration of HPE Ezmeral / MapR and Cloudera platforms with Hadoop, YARN, Spark and Oozie workloads.
Reusable roles, structured inventories, environment-specific variables and standardized playbooks for contact-center deployments.
Built and operated infrastructure for a licensed casino: networks, servers, endpoints, IAM, backup, monitoring and business-critical systems.
Professional profile
I work best where an existing environment needs to be understood, root causes need to be found, and the resulting solution has to remain maintainable after the project is over. My work spans operating systems and networking as well as automation, cloud and data platforms.
In practice, that means fewer one-off “magic” commands and more infrastructure as code, repeatable deployments, monitoring, controlled change and documentation that the next engineer can actually use.
Core expertise
I choose technology to fit the problem and the existing environment instead of rebuilding an environment just to match a preferred stack.
Systems administration, Active Directory, troubleshooting, updates, hardening and production operations.
Repeatable deployments and operations with an emphasis on readability, idempotency and maintainability.
Infrastructure migration and operations across AWS, Azure and OCI, plus containerization and orchestration.
Long-term administration of enterprise data platforms and Hadoop ecosystem components.
TCP/IP, routing, VPN, BGP, IPv6 and hands-on troubleshooting across systems and networks.
Monitoring, incidents, backup/DR, change management, AD, Entra ID, IAM/PIM/PAM and regulated environments.
Certifications & professional training
Selected certifications cover networking, information security, virtualization, VoIP and IPv6. Older credentials are included as a record of the technical foundations I continue to build on.
Information security and information security management systems auditing.
Credential ID: 2007/27001_AW/32Technical certification for the 3CX IP telephony platform.
MikroTik Certified Traffic Control Engineer.
MikroTik Certified Network Associate.
Building Private Cloud infrastructure based on Hyper-V.
Dynamic Windows Server 2008 R2 infrastructure.
Advanced level of the Hurricane Electric IPv6 certification program.
Experience
Systems administration, infrastructure, networking, operations, migration projects and automation — focused on environments that must remain maintainable after the project ends.
Administration and operations of HPE Ezmeral / MapR and Cloudera environments, including Hadoop, YARN, Spark and Oozie in enterprise settings.
Experience in a large migration of approximately 900 virtual machines from on-premises infrastructure to AWS using Terraform and Ansible.
Professional experience
Some management, consulting and advisory roles were held concurrently.
Containerized environments based on Docker, Docker Compose and Kubernetes, Windows Server, Ubuntu and RHEL, VPN connectivity, plus an Ansible framework for repeatable contact-center deployments with documentation and reusable procedures.
HPE Ezmeral / MapR, Cloudera, Hadoop, YARN, Spark and Oozie, RHEL, OpenShift, automation and the migration of approximately 900 VMs from an on-premises OVH environment to AWS using Terraform and Ansible. Also supported PCI-DSS and SOC 2 audits.
End-to-end responsibility for the IT infrastructure of a licensed casino in Liechtenstein: networks, servers, endpoints, backup, monitoring, Microsoft 365, IAM and approval-based PIM for third-party vendors.
Design, implementation and operation of complete customer environments covering Linux, Windows Server, Active Directory, IAM, networking, virtualization, storage, backup, monitoring, security and documentation.
Server, telecom and hosting infrastructure, VoIP, BGP, peering, IPv4/IPv6, own ASN and PI address space, plus operational coordination around RIPE NCC resources.
Selection, implementation and maintenance of business IT systems including Active Directory, Microsoft SQL Server, Exchange and Remote Desktop Services, plus supplier management, purchasing and ongoing user support.
Infrastructure consulting, security reviews and support with technology selection, implementation and maintenance of customer server and network environments.
Implemented and maintained Windows Server and Linux environments, supported local and remote users and advised on IT equipment and services.
Maintained day-to-day hardware and software systems, supported local and remote users and administered Novell NetWare environments.
Selected case studies
A compact view of what needed to be solved, how I approached it and what changed technically or operationally.
Contact
Use the form below. I do not publish my phone number or email address on this site.
Full CV available directly during the recruitment process.Role / project
A short description of the role and environment is enough to start.
Stack and scope
I am particularly interested in infrastructure, platform engineering, DevOps/SRE, systems engineering and automation.
Context
A few sentences are enough. We can clarify the details in the reply.