Implementation of a scalable Kubernetes cluster with GitOps

Developed a highly available Kubernetes cluster with GitOps to optimize application delivery and development processes

• Set up the Amazon EKS cluster using AWS CDK, including automated tests with Jest to ensure correct configuration.

• Established a GitOps workflow with Flux that controls automated, versioned deployments from Git. Changes to the repository are immediately rolled out in Kubernetes, eliminating manual steps and enabling faster, reproducible deployments.

• Implemented OIDC and RBAC for secure authentication and authorization.

• Used Helm and Kustomize for dynamic, versioned Kubernetes deployments.

• Built and integrated CI/CD pipelines with GitLab that seamlessly interact with the GitOps process to automatically roll out deployments from the repository.

• Fully automated deployments without manual intervention by DevOps engineers -> drastic reduction in deployment times.

• Improved consistency and traceability of infrastructure changes by combining GitOps and CDK.

• Increased security and compliance through end-to-end authentication (OIDC & RBAC) and versioned infrastructure deployments.

• More efficient development processes as teams commit their changes directly via Git and Flux ensures secure, automated distribution.

• Technologies used: AWS IAM, AWS EKS, AWS EC2, AWS VPC, AWS S3, OIDC, RBAC, AWS CloudWatch, AWS CloudFormation, AWS Fargate, GitOps (Flux), GitLab, TypeScript, AWS CDK, Helm, Kustomize, Jest.

The client's service team wanted to build an automated cloud infrastructure with clear processes for infrastructure-as-code (IaC) and introduce maintainable CI/CD pipelines. They also needed to implement standardized AMI image creation for Windows and Linux with EC2 Image Builder.

• Automated the GitLab Runner infrastructure (setup, updates, and operations).

• Introduced AWS CDK to create and manage IaC templates.

• Developed CI/CD pipelines tailored flexibly to client requirements.

• Integrated EC2 Image Builder to automatically provide Windows and Linux AMI images - published as InnerSource under Free4All in GitLab.

• Conducted workshops and enablement for the service team.

• The service team now has a complete CI/CD infrastructure and can independently deploy IaC templates as well as predefined Windows and Linux images.

• The introduction of AWS CDK and EC2 Image Builder simplified infrastructure management and scaling.

• Deployment time for new server instances was significantly reduced through preconfigured AMIs.

• Technologies used: AWS IAM, AWS EC2, AWS SAM, AWS Step Functions, AWS VPC, AWS S3, AWS CloudTrail, AWS CloudWatch, AWS Auto Scaling, AWS SSM, EC2 Image Builder, Windows Server 2022, PowerShell, AWS Fargate, GitLab, TypeScript, AWS CDK, Citrix.

• Set up the strategy and led company management.
• Advised on cloud technologies with a focus on AWS and Kubernetes.
• Led automation projects and CI/CD pipeline implementations.

A client wanted to migrate their entire IT infrastructure to the AWS public cloud to benefit from greater scalability, cost efficiency, and flexibility. The migration covered extensive systems and had to be done without interrupting ongoing operations.

• Collaborated in an internal agile team at the client's (SCRUM and Kanban).

• Built CI/CD pipelines to automate resource provisioning.

• Advised on best practices for the migration, including implementing monitoring and security solutions.

• Collaborated in an agile team at the client's (SCRUM and Kanban).

• Trained internal development teams on how to use the new cloud environment.

• Introduced CI/CD pipelines that reduced resource provisioning time.

• Improved scalability: the infrastructure can flexibly adapt to growing demands.

• Technologies used: AWS IAM, AWS EC2, AWS OpsWorks (Chef), AWS VPC, AWS VPN, AWS S3, AWS S3 Glacier, AWS Route 53, AWS Step Functions, AWS CloudTrail, AWS CloudWatch, AWS CloudFormation, AWS API Gateway, AWS Lambda, AWS SNS, AWS SQS, AWS Auto Scaling, AWS SSM, Windows Server, AWS RDS, AWS KMS, AWS ECS, AWS Config, AWS DynamoDB, AWS CloudFront.

• Conducted training sessions for AWS, VMware, and Microsoft.
• Advised customers and speakers in front of audiences of up to 500 participants.

• Six-month assignment on the ElsaPro project with Pesavento Consulting
• Full-time position in the Backend Services team since June 2013

• Journalistic reporting for Computec Media, games.ch and Online-Welten GmbH

• Creating editorial content
• Maintaining contacts with publishers and obtaining test samples