Building AI-powered operations platforms, sovereign digital infrastructure, and MCP-native systems at scale. 20+ years Open Source. 8+ years DevOps. Designing systems, directing implementation.
This AI knows my full professional background — try asking about my skills, projects, or experience.
Building Model Context Protocol (MCP) servers and connectors that give AI agents structured access to real infrastructure and applications. 100+ MCP tools across operations and workplace platforms.
LLM integration with sovereign AI providers (IONOS, OpenAI-compatible), RAG pipelines using Qdrant for semantic search, intent classification engines, SSE streaming. Claude Code skill harnesses and agentic workflow orchestration for infrastructure operations.
Designing end-to-end systems: Go microservices, React/TypeScript frontends, Kubernetes operators with 20+ CRDs, Helm charts, and CI/CD pipelines. Choosing the stack, defining the architecture, and directing implementation through to production.
JWT/OIDC/SAML authentication flows with Keycloak, supply-chain signing with cosign, GitLab CI pipeline design, and AI-assisted development workflows.
Multi-cluster Kubernetes platforms with RKE2/Rancher, ArgoCD GitOps, and Crossplane IaC. WireGuard mesh networking, OPNsense HA firewalls (CARP/pfsync), MetalLB/BGP load balancing.
Full lifecycle from bare metal provisioning (SUSE Elemental, Tinkerbell) through day-2 operations. NetBox-driven automation, secrets management with OpenBao/Vault, and observability with OpenTelemetry.
Built a DevOps team from scratch. Servant leadership, hiring, mentoring, performance feedback. Product Owner for in-house platform (FramES) with roadmap ownership and stakeholder alignment.
Training delivery for up to 50 participants in Kubernetes, CI/CD, and IaC. Enterprise enablement on-site and remote. Conference speaker (.NEXT Anaheim).
Full-stack AI-powered operations platform built from scratch in Go and React 19. Incident management with escalation policies, real-time alert ingestion from KeepHQ, on-call scheduling and roster management.
Integrated Zammad for ticketing and Outline for knowledge management. 100+ MCP tools across two servers enabling AI-agent-driven operations. Helm umbrella chart orchestrating 8 services. Keycloak SSO with both OIDC and SAML. Deployed via ArgoCD with External Secrets Operator and OpenBao.
Designed and automated a Rancher RKE2 core/edge platform with Harvester (HCI) and KubeVirt for Australia's 4th-largest telco. End-to-end bare-metal provisioning using SUSE Elemental and Tinkerbell, standardised cloud-init seed images, and closed-loop ops via NetBox-driven GitOps.
Established NetBox as the single source of truth (devices, clusters, IPAM, custom fields) generating Helm values and manifests. Argo CD Apps-of-Apps with ApplicationSets for continuous delivery across clusters, tenants, and environments.
Engineered storage and networking foundations: Portworx, MetalLB/FRR (BGP), ExternalDNS (Cloudflare), Whereabouts/DHCP. Automated secrets with Vault AppRole. Built an API gateway (Flask/FastAPI) for Redfish/CIMC boot control integrated with GitOps pipelines and NetBox webhooks. Delivered observability with OpenTelemetry/SigNoz.
Architected the next-generation Kubernetes operator and AI orchestration layer for openDesk, Germany's M365 replacement for federal government employees. MCP Hub with JWT auth dispatching to 10 connectors (47 tools) across Nextcloud, OX App Suite, Element/Matrix, OpenProject, Collabora, Jitsi, and XWiki.
Intent engine with 13 intent types, RAG pipeline with Qdrant, SSE streaming. React 19 PWA with phase-gated features, 4-role access model, WCAG 2.1 AA accessibility. 20 CRDs, 12 controllers. OX App Suite OAuth Bearer integration and Nubus user provisioning.
Standards-compliant urban data platform for German municipalities (Komm.ONE, Stadt Friedrichshafen). Next.js portal with Keycloak RBAC, CKAN data catalog with approval workflows, NGSI-LD context broker (Scorpio), geodata services, NiFi ETL pipelines, OpenMetadata governance, Cadenza visualisation. Multi-tenant architecture with IoT ingestion via MQTT and TimescaleDB.
Provisioned and operate 4 RKE2 Kubernetes clusters with WireGuard mesh networking on IONOS Cloud. OPNsense HA firewalls (CARP/pfsync), golden image build pipelines via GitLab CI, ArgoCD GitOps with External Secrets Operator and OpenBao. Custom MCP servers for automated VDC provisioning via agentic workflows. Claude Code skill harnesses and evaluation frameworks for AI-assisted infrastructure operations.