Cloud & DevOps engineer

Infrastructure for financial institutions. Secure by default, automated end to end, boring on purpose.

• Run and harden AWS, Kubernetes, and Linux environments for banks and brokerages.
• Provision with Terraform, deploy with Flux-based GitOps, ship through CI/CD — no hand-made servers.
• Operate and monitor business-critical workloads, own incidents, and automate the recurring work with JS7 JobScheduler.

AI tooling and KPI reporting for IT service management on the ServiceNow platform.

• Built a GDPR-compliant pseudonymisation pipeline for ServiceNow CSV exports: deterministic seeding, multiprocessing, and referential integrity preserved across tables.
• Built an LLM evaluator with a Composite Quality Index and NLI checks to benchmark Now Assist answers.
• Designed prompts, guardrails, and monitoring for Now Assist (GenAI) in ITSM.
• Owned requirements, controlling, and development of the department’s KPI dashboards; produced the reports, statistics, and conference material built on them.
• Backed Service Management, Customer Care, and Technical Account Management day to day: operational coordination, small projects, knowledge and document management, and onboarding of new customers and colleagues.

Internal authentication tooling and application security — at the airlift contractor behind NATO’s SALIS programme.

• Replaced third-party tools with a custom LDAP client in C#, standardising internal authentication.
• Exposed it through REST and CLI interfaces so services could integrate without the GUI.
• Penetration-tested the internal client/server applications and hardened them against the findings.
• Contributions to PHP-based internal tools.