Marcus Wiederstein

Administrator, DevOps

Marcus Wiederstein
Dülmen, Germany

Experience

Oct 2024 - Jul 2025
10 months

Administrator, DevOps

KZVB

  • Planned and implemented new network infrastructure (VLAN, LACP, DMZ, structured cabling)
  • Migrated from VMware to KVM using Oracle Linux Virtualization Manager (OLVM), including CPU pinning
  • Hardened the entire environment using SELinux (KVM hosts, container hosts, database servers)
  • Configured and operated the virtualization platform with OLVM and Ansible-based provisioning
  • Containerized and redeployed critical services: WordPress, Jenkins, PostgreSQL, MariaDB, Subversion with Apache + AD integration
  • Developed Ansible playbooks for automated deployment and configuration management
  • Integrated Foreman for repository and security management in the DMZ
  • Produced technical documentation in Markdown; organized in Bookstack
  • Coordinated with external vendors (e.g. HPE) for hardware installation and setup
  • Delivered all contributions documented and reproducible in Markdown
Jul 2023 - Oct 2024
1 year 4 months

DevOps Engineer / IT Consultant / System Administrator

Decathlon mode project

  • Operated and improved a complex production environment (Ansible, Docker, Kubernetes, Git)
  • Administered PostgreSQL and Oracle database instances
  • Analyzed and maintained virtualization and storage infrastructure (vSphere, HPE 3PAR, Multipath)
  • Delivered onboarding and technical training for internal administrators (Ansible, Kubernetes, CI/CD)
  • Created technical documentation and ensured knowledge transfer
  • Integrated Linux servers with Active Directory domain using SSSD
  • Maintained Docker container environments and KVM-based virtual machines
  • Refactored and extended Bash and Python scripts
  • Corrected and enhanced existing Ansible playbooks
  • Conducted workshops and introduced ChatGPT/Gemini for prompt engineering
Feb 2021 - Oct 2023
2 years 9 months

DevOps Engineer / Linux Specialist / Database Migration

MLP

  • Supported design and operation of Kubernetes clusters (deployment, Helm, monitoring)
  • Managed containerized applications (logging, secrets, persistent volumes, registry integration)
  • Migrated live Oracle databases to PostgreSQL using Altova MapForce, Python, and pgloader
  • Set up a highly available PostgreSQL environment with streaming replication and VIP failover
  • Developed automation scripts for data migration and verification (Python, Bash)
  • Administered mixed Linux platforms (SLES, Ubuntu, RHEL)
Dec 2019 - Jul 2021
1 year 8 months

DevOps, Linux Administrator

Univention Corporate Server project

  • Designed and implemented a Samba-compatible Active Directory domain with Univention Corporate Server
  • Integrated UCS into existing Linux and Windows environments
  • Developed automation scripts in Python for user provisioning, ACLs, and backups
  • Documented the domain architecture and created handover procedures
  • Provided consulting on LDAP/Kerberos-based application integration
Jun 2017 - Dec 2021
4 years 7 months

Administrator, XSD Designer, Data Analyst

Rheinmetall

  • Designed and documented complex XML/XSD target structures
  • Created reusable and configurable mapping templates in Altova MapForce
  • Implemented multi-stage mappings: Oracle → XML → JSON
  • Automated mapping processes via MapForce scripts and job scheduling
  • Integrated schema validation and test datasets
  • Optimized performance for large data volumes and repeated runs
Jan 2008 - Present
18 years 1 month

IT Project Manager, System Administrator

Own data center

  • Planned, set up, and operated a fully self-hosted data center with fibre uplink and static IPs
  • Virtualized using KVM (virsh) and Ceph block storage with multipath connectivity
  • Deployed and operated a Kubernetes platform for containerized services
  • Dockerized core services: Bookstack, Nextcloud, OpenProject, Mailcow
  • Built firewall and VPN infrastructure with OPNsense and WireGuard
  • Integrated Samba-based Active Directory domain with Kerberos and SSSD for Linux systems
  • Implemented browser-based training system via Apache Guacamole (snapshots, file transfer)
  • Rebuilt and migrated company websites with WordPress into private infrastructure
  • Used AI tools (ChatGPT/Gemini) for documentation, automation, and operational support
  • Maintained stable, high-performance infrastructure with 24/7 availability
  • Created scalable training platform with isolated, resettable DevOps/Kubernetes/Linux labs

Summary

I support companies in building digital infrastructures that are self-determined, maintainable, and future-proof – based entirely on open-source technologies and independent of proprietary ecosystems. I place strong emphasis on knowledge transfer through structured documentation and hands-on training.

I take a holistic view of IT – from the network layer to container platforms to stable applications.

For refining language, exploring edge cases, and reflecting on architectural choices, I occasionally use supportive tools like ChatGPT and Gemini – for structure, phrasing, best-practice input, and sometimes a bit of emotional support during long working phases. All decisions, content, and technical solutions, however, are based entirely on my own expertise and experience.

Skills

  • Linux Administration: Debian, Ubuntu, Rhel, Oracle Linux; Systemd, Lvm, Crontab, Shell, Ssh, Journalctl
  • Infrastructure, Networking & Security: Vlan, Trunking, Fibre Channel, Lacp, Multipath, Ceph (Block Storage)
  • Firewall/vpn: Opnsense, Flexiwan, Openwrt, Wireguard
  • Security: Selinux, Apparmor, Clamav, Rspamd, Tls Certificates, Ssh Hardening, Network Hardening, Kerberos, Openscap
  • Ldap/authentication: Samba Ad, Sssd, Pam, Winbind, Kerberos, Apache Modules (Mod Authnz Ldap, Mod Auth Kerb)
  • Openstack (Core Services): Nova, Neutron, Keystone, Ceph, Cinder (Ceph Backend), Horizon
  • Monitoring: Prometheus, Grafana, Snmp-based Hardware Monitoring
  • Hardware/hosting: Raspberry Pi, Disk Enclosures, Fibre Channel, Self-hosting Setups
  • Virtualization: Proxmox Ve, Kvm With Virsh, Oracle Linux Virtualization Manager (Olvm)
  • Kubernetes: Kubespray (Provisioning With Ansible), Cluster Setup, Deployment, Helm, Kustomize, Gitops, Opa/gatekeeper, Secrets, Volumes, Rbac, Kubevirt, Longhorn
  • Containerization: Docker, Docker Compose
  • Openstack (Integration): Ansible, Heat (Orchestration), Magnum (Kubernetes On Openstack), Automation
  • Automation & Scripting: Ansible, Bash, Git, Python, Php
  • Databases (Postgresql): Administration, Security, High Availability, Performance Tuning, Monitoring, Ci/cd, Migration, Operation On Docker, Kubernetes And On-premise, Backup & Recovery (Including Pitr), Clustering, Replication
  • Databases (Mariadb/mysql): Security, Monitoring, Ci/cd Integration, Docker/kubernetes Integration, Performance Tuning
  • Migration & Mapping: Altova Mapforce, Talend Open Studio
  • Server Software: Apache2, Nginx, Mailcow, Wordpress, Ha Cluster, Apache Guacamole, Samba
  • Self-hosted Tools: Bookstack, Nextcloud, Opentalk, Openproject, Git, Freeswitch, Espro Crm, Matrix/element
  • Diy And Infrastructure Projects: Raspberry Pi-based Home Servers, Network Test Environments, Backup Servers
  • Training & Lab Environments: Virtual Lab Setups With Kvm, Browser-based Access Via Apache Guacamole, Use Of Ansible, Kubernetes And Git
  • Ai & Documentation: Chatgpt/gemini Prompt Engineering, Markdown-based Workflows, Bookstack Knowledge Systems

Languages

German
Native
English
Advanced

Education

Ruhr University Bochum

Electrical Engineering & Computer Science · Bochum, Germany

Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Similar Freelancers

Discover other experts with similar qualifications and experience

Pierre Gronau
Pierre Gronau

Ansible Automation, Windows Third Level Support

View Profile
Jens Rehsack
Jens Rehsack

Technical Product Owner

View Profile
Yasin Yildiz
Yasin Yildiz

DevOps Architect & Backend Developer

View Profile
Reza Sayyarzamani
Reza Sayyarzamani

DevOps and Cloud Engineer

View Profile
Frank Joraschkewitz
Frank Joraschkewitz

Lead Project Manager

View Profile
Andreas Eckert
Andreas Eckert

IT Services - Support & Automation

View Profile
Kai Held
Kai Held

Backend Python Engineer

View Profile
Thorsten Matzner
Thorsten Matzner

Senior Test Engineer for an OpenShift Data and Analytics Platform

View Profile
Patrick Eichler
Patrick Eichler

Kubernetes Expert | Google Cloud Platform Engineer

View Profile
Benito Exner
Benito Exner

Cloud DevOps Engineer

View Profile
Jan Mönnich
Jan Mönnich

Interface project at HR Solutions GmbH for Rhineland-Palatinate / BAMF

View Profile
Michal Budzyn
Michal Budzyn

Senior Golang Engineer

View Profile
Björn Ohlrich
Björn Ohlrich

IT Freelancer

View Profile
Hanno Kolvenbach
Hanno Kolvenbach

Vice President, Product Development

View Profile
Timon Ringwald
Timon Ringwald

Database Developer – Research Project – Healthcare Billing

View Profile
Werner Keil
Werner Keil

Test Coordinator, Designer and Engineer

View Profile
Jin-ho Yun
Jin-ho Yun

Server Migration Consultant

View Profile
Thomas Jarnot
Thomas Jarnot

Backend Developer, DevOps Engineer

View Profile
Ivaylo Sieme
Ivaylo Sieme

Cloud Architect & AI Engineer

View Profile
Sven Koebnick
Sven Koebnick

All-round admin

View Profile
Ousmane Dia
Ousmane Dia

Azure Cloud Ops Engineer

View Profile
Jan Radon
Jan Radon

Software Engineer / Software Architect / Team Lead

View Profile
Mohamed Anssaien
Mohamed Anssaien

Senior Multi-Cloud Solution Architect

View Profile
Alagi Mansaray
Alagi Mansaray

Senior Project Manager S4HANA in the energy sector

View Profile
Manfred Schirmer
Manfred Schirmer

Senior System Engineer Linux

View Profile
Sami Bejaoui
Sami Bejaoui

Director IT Architecture & Infrastructure Management

View Profile
Ales Loncar
Ales Loncar

Senior DevOps Consultant (Freelance)

View Profile
Lothar Hinsche
Lothar Hinsche

Solution Manager for PoC investigation and replacement and refinement of an existing cloud and IoT power plant control system

View Profile
Anton Klonov
Anton Klonov

Head of Technical Overall Integration NSC / Hadoop Cloud Development

View Profile
Ralf Ramge
Ralf Ramge

Security Architect

View Profile