Where I've worked

6 roles since 2021, from industrial robotics and automotive test automation to systems architecture and senior DevOps.

  1. Sep 2025 - Present1 yr 3 mos

    Senior DevOps Engineer

    DevOps and cloud engineering across the full delivery lifecycle: CI/CD, infrastructure as code, Kubernetes on AWS/Azure/GCP, observability, and second-line escalation for major incidents.

    • Design and maintain CI/CD pipelines in GitLab CI, Jenkins and GitHub Actions, with schema-validation gates (yamllint, kubeconform, JSON Schema) that catch misconfigurations before deployment.
    • Infrastructure as code with Terraform, Ansible and Helm; containerised workloads on Kubernetes (EKS, AKS, GKE).
    • Workflow automation with Apache Airflow, AWX/Ansible Automation Platform and n8n (alerting, ServiceNow ticketing, notifications).
    • Identity and access: OIDC SSO for internal platforms and Kubernetes, OIDC federation for CI/CD workload identity, LDAP/AD group-based RBAC across GitLab, Jenkins, Grafana and Vault.
    • Second-line escalation during major incidents; incident, change and problem management.
    Full description

    Working in a DevOps and Cloud Engineering capacity with a strong focus on automation, scalability and reliability.

    Delivery pipelines. CI/CD in GitLab CI, Jenkins and GitHub Actions. YAML/JSON schema validation is a core part of pipeline and configuration management: pipeline definitions, Kubernetes manifests, Helm values and Terraform/Ansible files are validated with yamllint, kubeval/kubeconform, JSON Schema (ajv, check-jsonschema) and custom pre-commit hooks, so misconfigurations fail early and templates stay standardised across teams.

    Automation and orchestration. Apache Airflow DAGs for data and infrastructure workflows, AWX/Ansible Automation Platform for centralised, RBAC-controlled playbook execution, and n8n for event-driven integration between internal services (alerting, ServiceNow ticketing, notifications). Reusable, parameterised workflow templates reduce manual intervention.

    Cloud and observability. AWS, Azure and GCP (EC2, S3, RDS, Lambda, AKS, GKE) built for high availability and disaster recovery; Prometheus, Grafana, ELK/EFK and CloudWatch for observability; Vault, SonarQube and automated policy enforcement embedded in pipelines.

    Identity. OIDC-based SSO for internal platforms and Kubernetes clusters (Azure AD / Keycloak, kubectl OIDC), OIDC federation for CI/CD workload identity in AWS and Azure (no long-lived credentials), and LDAP/Active Directory integration for group-based RBAC across GitLab, Jenkins, Grafana and Vault.

    Operations. Linux and Windows server administration, patching and performance tuning; MySQL, PostgreSQL, MongoDB and SQL Server; consistent environments from dev to production; Agile delivery with Jira, Asana and Clarity.

  2. Jun 2024 - Sep 20251 yr 4 mos

    System Software Architect with Networking

    DevOps engineer and software architect delivering cloud-native platforms end to end, from network fabric and Kubernetes fleets to multi-cloud CI/CD and release engineering.

    • Multi-cloud CI/CD (on-prem, Azure DevOps, GitHub Actions, GitLab CI) with gated releases, SAST/DAST (SonarQube, OWASP ZAP), image scanning and blue/green + canary deployments via FluxCD/ArgoCD and LaunchDarkly.
    • Secured AKS/EKS/GKE fleets: Calico CNI, network policies, OPA Gatekeeper, managed through Helm, Kustomize and Rancher; IaC in Terraform, Pulumi and ARM/Bicep.
    • Service mesh (Istio, Linkerd) for mTLS, traffic shaping and Jaeger tracing; centralised logging and metrics with ELK, Prometheus and Grafana.
    • Solution architecture: domain-driven microservices, CQRS/ES on Kafka/Event Grid, serverless, API gateways, and chair of the Architecture Review Board (scalability, GDPR, PCI-DSS).
    • SRE practice: chaos engineering (Chaos Mesh, Gremlin), SLIs/SLOs, HPA/VPA autoscaling, DR game-days, PagerDuty/Opsgenie on-call and post-mortems.
    Azure DevOpsGitHub ActionsGitLab CI/CDJenkinsFlux CDArgo CDKubernetesHelmKustomizeRancherTerraformPulumi+18
    Full description

    Delivered cloud-native platforms from low-level network design through high-velocity application delivery, combining hands-on engineering with architecture leadership.

    Enterprise CI/CD and release engineering. Architected and implemented multi-cloud pipelines (on-premise, Azure DevOps, GitHub Actions, GitLab CI/CD) with build agents, parallelised test runners and gated releases. Blue/green and canary deployments through FluxCD/ArgoCD and feature flags (LaunchDarkly), with integrated SAST/DAST (SonarQube, OWASP ZAP), container-image scanning (Clair, Aqua) and compliance gates. Templated YAML pipelines and parameterised Terraform modules for self-service delivery.

    Cloud-native and infrastructure architecture. Led adoption of AKS/EKS/GKE clusters configured with Calico CNI, network policies, Pod Security and OPA Gatekeeper, with lifecycle managed through Helm, Kustomize and Rancher. IaC blueprints in Terraform, Pulumi and ARM/Bicep for resource groups, VNET peering, AWS Transit Gateways, VPN tunnels and hybrid ExpressRoute. Service mesh (Istio, Linkerd) for mutual TLS, traffic routing and distributed tracing.

    Software and network architecture. Domain-driven microservices, event-driven CQRS/ES (Kafka, Event Grid), serverless functions and API gateways (NGINX, Kong). Architecture reviews with C4/UML models; chaired Architecture Review Board sessions aligning teams on scalability, reliability, cost and compliance (GDPR, PCI-DSS). Multi-region VPC/VNET topologies with BGP failover, transit hubs, Azure Front Door / AWS ALB-NLB and CDN integration.

    Reliability engineering. Chaos engineering (Chaos Mesh, Gremlin), synthetic monitoring (New Relic, Datadog), SLIs/SLOs/SLAs, capacity planning with HPA/VPA and Cluster Autoscaler, DR game-days, on-call rotations, runbooks and post-mortems with PagerDuty/Opsgenie alerting.

    Teams. Code and design reviews, mentoring on TDD/BDD and pair programming, Scrum/Kanban workflows in Jira, PI planning and retrospectives.

  3. Dec 2023 - Jun 20247 mos

    System Software Architect & Requirement Manager

    Model-based systems engineering and requirements management for defence/aerospace systems: architecture in Eclipse Capella (ARCADIA), requirements flow-down in IBM DOORS and Polarion, verification planning and technical documentation.

    • Defined system architecture (hardware + software decomposition, component interactions, interfaces) using the ARCADIA framework in Eclipse Capella (model-based systems engineering).
    • Managed technical requirements flow-down from customer to sub-systems in IBM DOORS (DXL) and Siemens Polarion.
    • Developed and performed system verification methods to demonstrate compliance with customer needs, including product-safety certification activities.
    • Authored engineering plans, technical specifications, interface documents, test plans and technical reports; supported engineering reviews.
    Eclipse Capella (ARCADIA)IBM DOORSDXLSiemens PolarionSystems engineeringRequirements managementCC++PythonLinuxTestingJira+1
    Full description

    Systems architect defining the architecture of software + hardware systems against customer requirements: decomposition into components, their interactions and interfaces, and the technologies used in design and implementation.

    • Applied a systems-thinking approach to architecture across the product lifecycle; modelled the architecture with the ARCADIA framework in Eclipse Capella (model-based systems engineering).
    • Identified methods to test and validate the architecture; detailed the design and documented decisions and rationale.
    • Worked within the company's processes and the System Engineering Management Plan; developed the system design in line with the architecture and requirements.
    • Managed technical requirements flow-down and implementation from customer to sub-systems (IBM DOORS with DXL, Siemens Polarion).
    • Developed and performed system verification to demonstrate compliance; ensured design certification for contract requirements and legislation, including product safety.
    • Coordinated with the System Engineering Manager on schedule alignment; contributed engineering plans, technical specifications, interface documents, test plans and technical reports.
  4. Jan 2023 - Dec 20231 yr

    System Architect for Autonomous Mobility (ADAS)

    Systems engineering for ADAS sensor products (emergency brake assist, adaptive cruise control, lane keeping, traffic-sign recognition): requirements engineering, system architecture, safety integration and system FMEA.

    • Reviewed customer and stakeholder requirements, allocated them to system components and derived requirements for hardware, software and mechanical design teams.
    • Concept definition and system design; decomposed the system into components and disciplines and integrated the safety concept into the design.
    • Responsible for the system FMEA (with an FMEA moderator) and for tracking the resulting actions to completion.
    • Maintained the system bill of materials with input from hardware, mechanical and system technology; participated in discipline-architecture reviews and releases.
    Full description

    Continental's Autonomous Mobility business develops intelligent camera, lidar and radar sensors that give drivers active safety support: Emergency Brake Assist, Adaptive Cruise Control, Lane Keeping Support, Traffic Sign Recognition, Lane Departure Warning, Pedestrian Detection and Parking Assistance. The System Engineering team defines, designs and integrates these systems to customer requirements and project timing.

    Requirements engineering. Review of customer and stakeholder requirements; allocation to individual system components and hand-over to the dedicated design teams; creation of requirements for those teams based on the system architecture.

    System architecture. Concept definition and system design; integration of the safety concept; decomposition into components and disciplines (hardware, software, mechanical design); participation in discipline-architecture reviews and releases; periodic checks and updates of the system bill of materials.

    System FMEA. Owner of the system FMEA with the support of an FMEA moderator; tracking of the implementation of the resulting actions.

    Domains touched. HW/SW, QA, cybersecurity, functional safety, production and sensor technology. Alongside the architecture work: automated testing and deployment through dev-to-production environments, Linux (Red Hat) server administration and patching, VMware virtualisation, and scripting in Python and PowerShell.

  5. Apr 2022 - Jan 202310 mos

    Software Test Automation Engineer

    Automotive software test automation: Python frameworks around CANoe/CAPL, ECU communication simulation, flash-procedure automation with Arduino + Renesas/DediProg tooling, and structured defect reporting.

    • Automated all tests assigned to project functions and built a GUI-driven Python automation suite covering every function and test in the project.
    • Used the cantools library on .dbc files to drive messages and signals in automated tests; simulated ECU communication in CANoe (CAPL).
    • Automated the flash procedure with an embedded Arduino/Python rig driving the Renesas and DediProg tools.
    • Designed reusable test infrastructure, tools and modules; wrote and maintained manual and automated test plans.
    • Analysed, reproduced and reported defects in Jira, Bugzilla and ClearQuest and followed them to closure.
    Full description

    Automotive test automation engineer working across Windows, Linux, Unix and Solaris with C, C++, Python and CAPL, CANoe, Renesas and DediProg tooling, Qt-based UI, and ISTQB / AUTOSAR / ASPICE processes.

    • Automation of all tests assigned to each project function, consolidated into a single Python automation script with a graphical interface.
    • Access to the .dbc database through cantools to use messages and signals in test automation; ECU communication simulations in CANoe.
    • Automated flash procedure implemented as an embedded structure around Arduino and Python, driving the Renesas and DediProg programmers; software re-processing and injection into hardware components.
    • Architecture and implementation of automated test infrastructure, frameworks, reusable modules and test tools; manual and automated test scripts across applications and platforms.
    • Defect lifecycle: identification, minimal-steps analysis, clear reproducible reports in Jira, Bugzilla and ClearQuest, tracking and closure; daily/weekly status reporting to the project coordinator.
  6. Jun 2021 - Sep 20214 mos

    Automation Engineer (Internship)

    Industrial robotics internship: programming Kawasaki and Universal Robots arms, designing and commissioning robotic cells, and on-site maintenance at customer plants.

    • Programmed Kawasaki industrial robots in K-ROSET and via Teach Pendant, and collaborative Universal Robots arms via Teach Pendant.
    • Designed, automated, installed and integrated industrial robots and robotic cells; supported factory acceptance tests and commissioning.
    • Maintained robots and robotic cells on site at customer plants; collected control-system specifications (PLC, SCADA, I/O, VFDs, network components).
    • Worked with industrial communication protocols (Profibus, Profinet, OPC UA/DA, UART, I²C, CAN) and IT/OT network segregation.
    Industrial roboticsKawasaki robotsUniversal RobotsPLC programmingSCADAMATLAB / SimulinkEmbedded systemsPythonCC++OPC UAProfinet / Profibus
    Full description

    Automation engineers research, design and develop applications and systems for manufacturing-process automation, reducing human intervention where appropriate to reach the full potential of industrial robotics.

    • Direct programming of Kawasaki industrial robots in Kawasaki K-ROSET and with the Teach Pendant interface; direct programming of collaborative Universal Robots arms.
    • Design, automation, installation and integration of industrial robots and robotic cells; maintenance and installation visits at different clients.
    • Collection and preparation of control-system documentation (PLCs, PCs and SCADA servers, I/O devices, instruments, variable-frequency drives, network components) and of automation software backups.
    • Technical specifications for requests for quotation in electrical engineering and automation; supplier support during site visits and scope definition.
    • Participation in design, factory acceptance tests, installation supervision, commissioning and final acceptance of instrumentation, control-system and MCC modernisation projects.
    • Network and architecture definitions for IT/OT segregation, OT wireless and communication protocols (Profibus, OPC UA/DA, Profinet, UART, I²C, CAN), and integration with process historians.