Kubernetes lifecycle
- kubeadm
- Talos Linux
- Cluster API (CAPI)
- Managed Kubernetes
- Self-hosted clusters
- Upgrades & day-2
Senior SRE · Berlin, Germany
Andrei Stegaru I build Kubernetes platforms that stay up.
Senior SRE & DevOps engineer focused on cloud-native platforms: GitOps, Infrastructure as Code, automated CI/CD and observability, on-prem and across Azure, AWS, IONOS, Hetzner and STACKIT.
- years building cloud & Kubernetes platforms
- 7+
- Kubernetes Security Specialist, plus CKA and 4 more certifications
- CKS
- Kubernetes from bootstrap with kubeadm and Talos Linux to fleet management with Cluster API
- Day 0–2
- platforms in production: Azure, AWS, IONOS, Hetzner, STACKIT and on-prem
- 6
01 profile
Kubernetes platforms, automation and reliability.
I'm a Senior SRE / DevOps engineer with deep experience in Kubernetes platforms, CNCF technologies and cloud-native infrastructure. I design, build and operate scalable platforms with GitOps, Infrastructure as Code and automated CI/CD, in managed clouds and on-premises. I have run Kubernetes through its whole lifecycle: bootstrapping clusters with kubeadm, immutable Talos Linux nodes, and fleets managed with Cluster API.
At North.io I own production Kubernetes platforms end to end: Terraform and Ansible for provisioning, GitOps-based delivery, monitoring and alerting, and internal tooling written in Go. Before that, I built a self-service Kubernetes platform for public-sector digital services at SEITENBAU, modernised cloud-native delivery at TKD Solutions and worked on cloud infrastructure at IONOS.
I'm a CLI-first engineer: Neovim for code, kubectl for clusters, and a strong
preference for simple, composable tools in the Unix tradition.
-
GitOps & platform engineering
Flux, Argo CD, Kustomize and Helm. Every change to a cluster goes through Git.
-
Infrastructure as Code
Terraform, Ansible and CDK8s, on bare metal and in managed clouds.
-
Reliability & observability
Prometheus, Grafana and Datadog for metrics, dashboards and alerting.
-
Security built into the pipeline
CKS certified. Trivy, SonarQube and Qodana run in every pipeline.
02 stack
Tools I use in production.
GitOps & Platform
- Flux
- Argo CD
- Kustomize
- Helm
- Kubernetes platform design
Containers & IaC
- Kubernetes
- Docker
- Terraform
- Ansible
- CDK8s
Cloud platforms
- Azure
- AWS
- IONOS Cloud
- Hetzner
- STACKIT
CI/CD
- GitLab CI
- GitHub Actions
- Azure DevOps
- Jenkins
Monitoring & Security
- Prometheus
- Grafana
- Datadog
- Trivy
- SonarQube
- Qodana
Programming & scripting
- Go
- Python
- Bash / Shell
- TypeScript (CDK8s)
OS & networking
- Debian
- Ubuntu
- CentOS
- Alpine
- macOS
- Windows
- OpenVPN
- pfSense
- HTTP/S
Databases
- PostgreSQL
- MySQL
- MariaDB
- MongoDB
03 experience
Where I've worked.
-
Senior SRE Engineer
North.io current
- Design, build and operate production Kubernetes platforms across on-premises and cloud environments.
- Infrastructure as Code with Terraform and configuration management with Ansible, automating provisioning, configuration and day-2 operations.
- Build automation and internal tools in Go and shell.
- Design and maintain CI/CD and GitOps-based delivery workflows.
- Run monitoring, observability, alerting and reliability practices across the platform.
- Troubleshoot complex issues across infrastructure, networking, Linux and Kubernetes, improving scalability, resilience, security and operational efficiency.
- Work with development and infrastructure teams to deliver reliable self-service platforms.
- Kubernetes
- Terraform
- Ansible
- Go
- GitOps
- Observability
-
Senior System Developer
SEITENBAU GmbH
- Designed, built and operated managed and self-hosted Kubernetes platforms powering public-sector digital services and enterprise applications.
- Implemented GitOps workflows with Flux and Kustomize for automated, version-controlled application delivery.
- Provisioned Kubernetes infrastructure with Terraform and CDK8s for reproducible, scalable environments.
- Ran CI/CD pipelines in GitLab and Jenkins, improving deployment stability and shortening release cycles.
- Delivered a self-service Kubernetes platform for developers that standardised deployments, built mainly on open-source technology to avoid vendor lock-in.
- Worked in Scrum (sprints, retrospectives), continuously improving the platform and delivery processes.
- Flux
- Kustomize
- Terraform
- CDK8s
- GitLab
- Jenkins
- Bash
-
DevOps Engineer
TKD Solutions GmbH
- Developed and optimised Helm-based Kubernetes deployments for scalable, standardised rollouts.
- Automated CI/CD pipelines in Azure DevOps and GitLab, cutting delivery times and increasing reliability.
- Integrated code-quality and security gates (SonarQube, Trivy, Qodana) into every pipeline.
- Led the introduction of Infrastructure as Code with Terraform and Ansible.
- Established monitoring and alerting with Prometheus, Grafana and Datadog, reducing response times.
- Implemented cost-optimisation strategies that lowered operating expenses, and coached developers on DevOps practices.
- Helm
- Azure DevOps
- GitLab
- Terraform
- Ansible
- Datadog
- Trivy
-
Cloud Engineer
IONOS SE
- Maintained and scaled cloud infrastructure at one of Europe's leading cloud providers, with a focus on performance, resilience and security.
- Automated provisioning and configuration with Terraform and Ansible.
- Resolved complex issues across networking, Linux administration and cloud automation.
- Wrote documentation that made the team more efficient and spread knowledge across it.
- IONOS Cloud
- Terraform
- Ansible
- Linux
- Networking
-
IT Systems Administrator
Getronics
- Administered ~9,000 systems for a major manufacturing client, mostly Linux with some Windows.
- Designed VPN and remote-access solutions that improved security and reliability.
- Worked with colleagues to resolve critical IT incidents.
- Linux
- Windows
- VPN
- Remote access
-
Cloud Solutions Architect / DevOps Consultant
Self-employed
- Designed and implemented scalable Azure architectures with a focus on cost optimisation.
- Deployed and operated Kubernetes and Docker environments.
- Automated infrastructure with Terraform and Ansible.
- Set up secure VPNs and network-security strategies.
- Azure
- Kubernetes
- Docker
- Terraform
- Ansible
04 certifications
What I'm certified in.
-
CKS: Certified Kubernetes Security Specialist
The Linux Foundation ·
-
CKA: Certified Kubernetes Administrator
The Linux Foundation ·
-
HashiCorp Certified: Terraform Associate
HashiCorp ·
-
PCA: Prometheus Certified Associate
The Linux Foundation ·
-
PCAP: Certified Associate Python Programmer
Python Institute ·
-
LPIC-1: Linux Administrator
Linux Professional Institute ·
Also completed: MongoDB University Developer track, levels 1–3 (2023).
05 projects
Selected work.
Self-service Kubernetes platform
A developer self-service platform for public-sector digital services. GitOps with Flux and Kustomize, infrastructure in Terraform and CDK8s, built on open source to avoid vendor lock-in.
- Flux
- Kustomize
- Terraform
- CDK8s
Shift-left security in CI/CD
Quality and security checks added to Azure DevOps and GitLab pipelines: image and dependency scanning, static analysis and linting.
- Trivy
- SonarQube
- Qodana
- Azure DevOps
Azure subscription migration
Moved Azure resources to a new subscription without downtime. Resources, service connections and identities were migrated with Azure CLI scripts, and every service worked afterwards.
- Azure
- Azure CLI
- Terraform
- Azure DevOps
Observability stack
Prometheus, Alertmanager and Grafana with custom alert rules and dashboards.
- Prometheus
- Grafana
- Alertmanager
- Datadog
Custom Linux for embedded systems 2021
A minimal Linux OS built from scratch for embedded and IoT devices, focused on kernel security, namespaces and system-call management, with lightweight deployment strategies for constrained hardware.
- Linux kernel
- Namespaces
- Security
- IoT
This website
Plain HTML, CSS and JavaScript on Cloudflare Pages. Every push to main deploys it.
- HTML/CSS/JS
- Cloudflare Pages
- GitHub
06 background
From algorithmic composition to automation.
Before I worked in infrastructure, I studied composition and electronic music in Bucharest and Stuttgart. A lot of it was programming: generative music, signal processing and studio work.
Education
- Master, Composition & Electronic Music Staatliche Hochschule für Musik und Darstellende Kunst Stuttgart 2009 – 2011
- Bachelor, Composition & Electronic Music National University of Music Bucharest 2005 – 2009
Additional experience
- Sound design programmer Algorithmic composition, sound research and mastering with OpenMusic, Max/MSP and Pure Data 2011 – present
- Assistant tutor, MH Stuttgart Supported composition classes and ran the studio's technical side 2009 – 2011
Scholarships & masterclasses
- GEMA scholarship “10 Miniatures for Piano and Live Electronics”, Berlin 2021 – 2022
- Richard Wagner Scholarship Foundation Bayreuth Festival 2006 – 2007
- International masterclasses Jerusalem Academy of Music and Dance, Oslo, and composition with Prof. Sever Tipei (University of Illinois) 2006 – 2008
PDF
07 cv
The full CV, ready to download.
Two pages with my profile, skills, certifications and every role in detail. The CV is written in German.
08 contact
Get in touch.
Questions about a role or a project? Send me an email or write to me on LinkedIn.
- linkedin.com/in/andrei-stegaru
- github.com/a1010s
- Berlin-Friedrichshain, Germany