Cloud & DevOps Engineer working on AWS and Azure: infrastructure as code, CI/CD pipelines and internal developer platforms.

I build systems that run unattended, raise an alarm when they break and keep a record of what they did. Teams ship faster when reliability, security and operability are built in from the start, not left as someone else's problem.

Now: running voltcast live on AWS. Next up: deploys from CI over OIDC and a public status page.

A live forecasting service. Every morning it forecasts tomorrow's German/Luxembourg day-ahead electricity price for all 96 quarter-hours, publishes before the 12:00 auction closes and grades itself against the cleared prices that afternoon.

• Runs unattended on EventBridge Scheduler, Step Functions and one Lambda, all in Terraform, for an estimated 2 USD a month.
• Says when it breaks: alarms for a missed deadline or a failed run, a runbook for each alarm and an incident log.
• Refuses bad data: a data contract stops the run when upstream prices look wrong, and every forecast records the code version and a hash of every input it read.

• pg-slot-sentinel: catches a quiet way Postgres runs out of disk, a replication slot nobody reads any more, and pages before the retained WAL fills RDS storage. A docker-compose demo reproduces the failure end to end.
  Python Lambda Terraform CloudWatch
• Klausel: a self-hosted, GDPR-compliant contract reviewer for German legal text. It redacts personal data, splits documents by § and answers questions with cited sources, using local embeddings and a local LLM. No cloud APIs at runtime.
  Python Qdrant Ollama ZenML MinIO
• Distributed Load Testing: a Terraform module that fans one k6 script out across parallel Fargate tasks and collects the results in S3. A lean take on AWS's reference solution.
  Terraform ECS Fargate Step Functions k6
• Internal Developer Platform API: a self-service API that lets developers provision EKS environments. GitHub Actions runs Terraform with separate plan and apply roles over OIDC, and nothing is applied without an approval.
  Python FastAPI Terraform EKS Helm
• OpenStreetMap on AWS: the OpenStreetMap website on ECS Fargate and RDS Postgres, deployed with Terraform through GitHub Actions OIDC across dev, acceptance and production.
  Terraform ECS Fargate RDS Ansible

Also: PipelineForge (CodePipeline to ECS Fargate), ELK SIEM sandbox, Python automation.

• Infrastructure is code. Every AWS project above is built with Terraform, so it can be reproduced, reviewed and torn down.
• No long-lived keys. Where CI deploys to AWS, it signs in through OIDC with short-lived credentials, not stored access keys.
• The safe path is the easy path. Developers get self-service, with guardrails such as separate plan and apply steps and approvals built in.
• Operability is part of the design. Alarms, runbooks and incident write-ups ship with the first release, not after the first outage.

Area	Tools
Cloud
Infrastructure as code
Containers
CI/CD
Observability & on-call
Languages & data