DevSecOps - / Kubernetes Security Engineer
- Verfügbarkeit einsehen
- 0 Referenzen
- 105€/Stunde
- 14712 Rathenow
- Europa
- de | en | no
- 24.08.2024
Kurzvorstellung
Qualifikationen
Projekt‐ & Berufserfahrung
10/2022 – 12/2022
Tätigkeitsbeschreibung
Design of target infrastructure and strategy to migrate a Kafka cluster running
on EC2 instances in AWS to EKS including Apache Kafka, Apache Zookeeper,
Kafka Schema Registry and Kafka Connect. Conceptional design of Kafka broker exposing to different networks using HAProxy Ingress Controller, AWS LoadBalancer Controller and externalDNS. Evaluating of Cruise-Control to support a zero downtime stretching migration strategy. Using Helm charts and Terraform. Integrate GitOps methodology to deploy the full kafka stack using ArgoCD
Amazon Web Services (AWS), Git, Apache Kafka, Kubernetes
1/2022 – offen
Tätigkeitsbeschreibung
Design and Implement AWS Cloud infrastructure with Terraform for multiple
Cloud-City migration projects. Using Gitlab for versioning and CI/CD as well
as Gitlab Agent to deploy separate additional small and simple inhouse devel-
oped applications through polling to EKS. Using Lambda functions triggered by
CLoudwatch log events from ECS Fargatte and EC2 deployed container to scale
up and down rendering cluster for Autodesk VRED. Integrate EFS and EBS
Volumes for statefull applications inside ECS and EKS. Provide SPA frontend
application through Cloudfront using S3 and OCA. Always fully encrypted in
transit and at rest using CMKs as well as access restricting PoLP conform IAM
policies and roles. Bringing BMC Helix ITSM up and running inside EKS.
Amazon Web Services (AWS), Kubernetes
11/2021 – offen
Tätigkeitsbeschreibung
Working on my personal project to implement a Security Integration Platform
with Kubernetes and Flux using intensively Cilium and eBPF features like Falco.
Uing the GitOps approach with fluxCD as well as multi cluster technologies
like submariner or Cilium Cluster-Mesh. Conceptional work with Linkerd as ser-
vicemesh through multiple cluster. All over 4C security especially for Cluster,
Container and Supply-Chain security using Aqua security tools like Kube-bench, trivy, kube-hunter as well as Security Profiles Operator to generate security profiles for container workload and also TFSec and Checkov for Terraform analysis. Integrating centralized policy provider with Gatekeeper. Utilize Webhook configurations and Operators to provide cross cluster support for shared services. Using Prometheus/Grafana or Elasticsearch/Kibana for Monitoring and Logging as well as Redis(-Graph) for real-time data processing and analysing. The overall goal of my Project is to detect and prevent threats especially APTs alongside OWASP (Kubernetes) Top 10 and the ATT&CK Framework in a fully integrative way for Kubernetes Native Environments.
Kubernetes
4/2021 – 10/2021
TätigkeitsbeschreibungImplement Cloud Infrastructures with Terraform and automate tasks with Github actions for multiple client projects based on open-source software solutions. Implement Go and Ansible based operators for Kubernetes. Preparing AWS based infrastructures for the department of health Ireland to host and run the official covid-pass and travel-registration app based on ECS and Lambda functions. Using Cloudwatch for logging and monitoring including dashboards and alarms. Heavy usage of SES and SNS for messaging and mailing. Writing blog posts about custom concepts for Kubernetes.
Eingesetzte QualifikationenAmazon Web Services (AWS)
7/2020 – 5/2021
Tätigkeitsbeschreibung
Redesign and implementing the Kubernetes based Infrastructure from Scratch
for On-Prem as well as AWS cloud environments. Define and Implement best
practice conform Branching strategies and CI/CD pipelines in Azure DevOps in-
cluding Devspace, Gloo API-Gateway and Kubernetes/Docker. using Ansible to
automate all Build and Deployments. Define and implement logging and mon-
itoring strategies based on Elastic-Cloud and Kibana. Dive Deep into Security
Tooling and implementing Security-Policies at all layers like Calico for global
network policies, DEX IdP, OAuth2.0 and OIDC or Conventions for code quality
and security
Kubernetes
4/2019 – 6/2020
Tätigkeitsbeschreibung
Design and realize a new IT-Infrastructure based on Kubernetes, using Ansible
and AWS and GCP to implement a Gitflow based Branching Model with Git-
lab CI/CD. Discover security needs and strategies to migrate from a complex
classic infrastructure to a cloud environment (GCP). Work on concepts for over-
all monitoring and logging with Elastic-Cloud including application performancemonitoring. Conceptional work on how to connect a IoT-devices to the cloud and monitor them as well as running commands remotely
Cloud Computing, Continuous Delivery, Cyber Security, Elasticsearch, Git, Infrastrukturarchitektur, Continuous Integration
4/2017 – 3/2019
Tätigkeitsbeschreibung
Designed and implemented a fully On-Premise solution to process hundreds of
thousands of events per second to detect cyber attacks. Build a big-data cluster based on Docker-Swarm and Elastic-Stack with Ansible on bare-metal server in a fully Air Gap and top secret environment from scratch including hardware and software installations in a federal data center. Fully automated with Ansible and Kickstart to create a one-boot cluster deployment. to provide logging-as-a-service and detection-as-a-service to all federal offices in the federal data center
Cyber Security, Administration von Datenbanken, DevOps (allg.), Server Administration
11/2015 – 4/2017
Tätigkeitsbeschreibung
Ruby on Rails developer and project member for integrating
Software analysing and modeling. Lead developer for a distributed
and RESTfull Environment.
Administration von Datenbanken, Datenbankentwicklung, Ruby on Rails
5/2015 – 10/2015
Tätigkeitsbeschreibung
Improving the internal IT-Infrastructure for security by
integrating Log and Netfow Analyser. Evaluate Open-Source
Groupware software systems. Build a business concept for pentest
services to support based on pentest-stanbard.org including tools
evaluation like Kali, nmap and more.
Cyber Security, Server Administration
1/2013 – 1/2014
Tätigkeitsbeschreibung
Software-Engineering with JavaEE (full stack) and Python Dijango
Linux/Unix System-Administration
IT-Security with FreeRADIUS, AD, Kerberos, Switch-Mgm. (HP
Pro Curve, Cisco IOS). Develop a JavaEE application for labs and
medical ofces to place orders for blood examinations, show the
results and manage billings, parameters and profles
Java Database Connectivity, Cyber Security, Server Administration, Enterprise Javabeans, Hibernate (Java), J2EE, Javaserver Faces
1/2010 – 2/2014
Tätigkeitsbeschreibung
VoIP-System development with Ruby on Rails and
FreeSWITCH, Linux/Unix System Administration
Develop an VoIP application server for handle complex call
scenarios like conferences, call center processes, supplementary
services, telephone systems and smart services combined with
freeSWITCH as an soft switch or rather PBX.
Administration von Datenbanken, Datenbankentwicklung, VoIP, Ruby on Rails
Ausbildung
Dortmund
Dortmund
Über mich
Weitere Kenntnisse
Folgt
Persönliche Daten
- Deutsch (Muttersprache)
- Englisch (Fließend)
- Norwegisch (Grundkenntnisse)
- Europäische Union
Kontaktdaten
Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.
Jetzt Mitglied werden