DevOps and development for small teams: CI/CD, infrastructure, web applications and operations, remote only.
Scattered scripts, manual releases and gaps in monitoring become one platform on which deployments run without downtime, measured in day-to-day operations.
Every step runs automatically and is monitored, and every release can be rolled back.
Services
Nine areas, available individually or combined.
Automated build, test and deployment pipelines, from commit to production. With GitOps if you want it: the desired state lives in the repository, Argo CD or Flux reconcile the cluster against it, and a rollback is a commit.
Pulling data from APIs, documents and publicly accessible websites, normalizing it and loading it into your database or system. Jobs run on a schedule and are monitored. Legal limits such as terms of use and GDPR are clarified before we start.
Web applications and internal tools such as admin interfaces or dashboards, backends and APIs that connect your existing systems, and browser extensions. Also fast websites without a cookie banner, as long as no tracking is needed. I take care of deployment and operations as well. Examples are this website and my own products further down.
Metrics, logs and alerts that report problems before customers notice, and dashboards that show the cause of an incident within minutes.
Running Linux systems reliably and automating recurring tasks, idempotent and documented well enough for someone else to take over.
$ ansible-playbook site.yml --check
ok=42 changed=0 failed=0 · idempotent
$ kubectl get nodes
3/3 Ready
$ uptime
up 10+ years
Setup, tuning and hardening of relational and in-memory databases, including tested backup and restore strategies.
Servers, networks and services are described as code in Git, so every change is versioned and the setup can be rebuilt identically at any time.
Moving existing applications into containers and building Kubernetes clusters all the way to production operations.
Security checks run inside the pipeline: vulnerability scanning, secrets management and hardened systems from the start.
Remote only, for teams in Germany and worldwide. In English or German.
Anonymized projects for small companies with four to five employees, each delivered by me alone, usually within one to two weeks. References and contacts are available in a personal conversation.
Starting point: Releases were done by hand; a deployment took around 45 minutes.
Replaced manual release processes with multi-stage GitLab CI pipelines including automated tests, artifact management and rollbacks.
45 → 10 min
deploy time after the pipeline rebuild
Starting point: A new infrastructure in which not a single service could be reachable from the internet.
Built a complete infrastructure with no publicly reachable services. The only way in is a VPN tunnel secured by a YubiKey hardware key.
0 ports
exposed to the outside; access only via VPN and YubiKey
Starting point: Applications had to run on the company's own hardware, with separate environments and deployments without downtime.
Built a highly available Kubernetes cluster on bare metal with Helm-based deployments and separate environments.
0× downtime
for deployments in day-to-day operations
Starting point: When something broke, finding the root cause took hours.
Introduced Prometheus, Grafana and Loki for an existing product team, including the alerting concept and runbooks.
h → min
time to root cause
< 30 min
to a tested recovery
Starting point: There was neither point-in-time recovery nor a proven restore.
Hardened a PostgreSQL cluster, established point-in-time recovery and automated regular restore testing.
Alongside client work I develop products of my own. Three of them:
In production
Multi-tenant platform that brings provisioning, inventory (CMDB), monitoring and cost tracking for several companies together. Creates VMs on Proxmox and in the cloud, optionally fully encrypted with remote unlock via SSH.
In development
Renters document the vehicle condition in a guided photo walkaround in the browser, an ML model detects damage. The result is a cryptographically signed PDF report, stored in line with GDPR.
In development
A private budgeting PWA that pulls accounts from two banks via FinTS and PSD2. Field-level encryption, passkey-only login, reachable only inside a private network.
I started out in classic system administration, then moved into automation and eventually into the architecture and operation of complete platforms.
When you get in touch, you talk to me directly. I plan the infrastructure, build it and then run it myself.
Contact
You will hear back within 24 hours on business days. Briefly describe what you need.
Available for new projects now · remote
Prefer to write directly?
oliver@bae.hrYour details are used exclusively to process your inquiry. See the privacy policy for details.
What happens next
Send your request
Briefly describe the situation, the goal and the timeframe.
Personal reply
Directly from me, with no sales layer in between.
Scope it together
In a call we clarify scope, approach and effort.