Freelance DevOps & Kubernetes engineer · Stuttgart
Your freelance Kubernetes & DevOps engineer.
I join your team on a project basis to build, automate and secure Kubernetes platforms on Azure, AWS, Open Telekom Cloud and on-prem: RKE2, GitOps with Argo CD, observability and zero-trust security. Remote across the DACH region and French-speaking countries, on-site around Stuttgart.
CKA & CKS certified
Certified Kubernetes Administrator
Certified Kubernetes Security Specialist
My cloud-native stack
CNCF ecosystem tools I use in real projects.
Services across DevOps, Kubernetes and cloud native
From architecture to stable operations: you get a production-ready platform, automated workflows and a team that can run it on its own.
Kubernetes platform engineering
Highly available clusters with RKE2 or Talos, on-prem, hybrid or air-gapped. Networking with Cilium, storage with Longhorn or Rook-Ceph, backups with Velero.
DevOps, CI/CD & GitOps
Pipelines in GitLab CI or GitHub Actions, deployments with Argo CD and Helm. Every change traceable in Git, every release reproducible.
Cloud-native architecture & migration
Platforms on Azure, AWS and Open Telekom Cloud, or hybrid with on-prem. Moving VMs and cloud services onto Kubernetes, service mesh with Istio, observability with Prometheus, Grafana and OpenTelemetry.
DevSecOps & compliance
Zero-trust networking, policy-as-code with OPA, image scanning with Trivy, hardening for multi-tenant platforms and support with ISO 27001.
27 minfrom an empty Proxmox host to a highly available RKE2 cluster, fully automated
14 jobsin 6 pipeline stages: build, tests, SAST, Trivy, OWASP ZAP and GitOps deployment
24in-depth articles on Kubernetes, networking and security on the blog
CKA + CKSCertified Kubernetes Administrator and Certified Kubernetes Security Specialist
Projects from practice
Client projects for Hamdiservices, each documented with architecture, implementation and results.
Client project for Hamdiservices
Infrastructure as code that deploys a production-ready, highly available RKE2 cluster on Proxmox in about 27 minutes. The whole toolkit runs in one Docker container, so every deployment is reproducible in any environment.
Client project for Hamdiservices
A GitLab-integrated CI/CD and GitOps pipeline for a Next.js blog platform on RKE2: build, test, scan and roll out with Argo CD, just like in production.
Client feedback
I had the pleasure of working with Elmehdi on our infrastructure modernization project for us over four months. He is an incredibly skilled professional who brought deep Kubernetes and automation expertise to our team. I was particularly impressed by his ability to build a complete production-grade Kubernetes platform that reduced our deployment time.
Available now
How we work together
I join where your team needs support: owning the build of a new platform, or reinforcing your existing platform team.
- AvailabilityAvailable now for new projects, remote or on-site around Stuttgart.
- Project-basedA clearly defined goal with milestones, for example building, migrating or hardening a Kubernetes platform.
- Team reinforcementA multi-month engagement inside your platform or DevOps team, remote or hybrid.
- TermsDay rate on request. Billed by time and materials or per project.
- LanguagesGerman, French and English.
- Knowledge transfer includedDocumentation, runbooks and a clean handover. Infrastructure and deployments live as code in Git.
From the blog
Hands-on articles from real projects on Kubernetes, networking and security.
Istio Service Mesh Architecture – Part1
What a mesh actually solves and when you don’t need one.
OPA at the Gateway
one Policy engine behind every API request written once, tested like code, logged with a reason
External Connectivity, the Kubernetes-Native Way
Parts 1 and 2 built increasingly good answers to the same question: how do you get an IPsec tunnel out
Tell me about your project.
Whether it is a new Kubernetes platform, more reliable pipelines or a review of your current setup: send me a short note. You get a first assessment and a proposal for the next steps.
- Directly by email[email protected]
- LinkedInlinkedin.com/in/elmehdi-diab
- LocationStuttgart. Remote across the DACH region and French-speaking countries.