Description

Staff SRE and DevOps architect with 15+ years of experience designing and operating large-scale, multi-cloud infrastructure - primarily on AWS, Azure, and GCP. Based in Ticino, Switzerland, I work with engineering teams across the DACH region and beyond as an independent consultant through Swiss GmbH.

My core focus is reliability engineering at scale: multi-region cloud architecture, infrastructure-as-code (Pulumi, Terraform), observability, and cloud networking. Most recently, I led the Feature Flags SRE team at CloudBees, owning a 20+ AWS account multi-region platform and driving the IaC migration from Terraform to Pulumi.

I specialise in Agentic SRE - applying AI agent frameworks (Claude Agent SDK, AWS Bedrock) to infrastructure operations: network observability, anomaly detection, and automated remediation. This is where infrastructure engineering meets the next generation of operational tooling.

If you need a senior technical partner for infrastructure architecture, SRE transformation, or a hands-on engagement to bring your platform reliability and observability to the next level - let's talk.

Industry field of expertise

Languages

English
Native or bilingual
Italian
Fluent
German
Conversational

Workplace preferences

Can work on-site

Locarno (up to 50km), Milan (up to 50km), Zurich (up to 50km), Lucerne (up to 50km), Zug (up to 50km)

CloudBees Inc
Staff Operations Engineer | SRE DevOps Tech Lead
TECH
August 2021 - June 2026 (4 years and 10 months)
Switzerland
Team Leadership: Served as Tech Lead for the Feature Flags SRE team - set technical direction and infrastructure roadmap, ran Scrum ceremonies, and guided 3 engineers across reliability, observability, and deployment workflows.
Cloud Architecture: Designed and operated a multi-region AWS infrastructure (US-East, US-West) for the CloudBees DevSecOps SaaS platform, spanning 20+ AWS accounts across shared SaaS and fully isolated single-tenant environments.
Next-Gen SRE: Built the organisation's first network observability layer using the Claude Agent SDK and AWS Bedrock - establishing baseline traffic visibility and anomaly detection across EKS and AWS where none existed before. Traffic analysis identified routing inefficiencies that, by shifting to internal VPC endpoints, eliminated ~$2k/month in NAT Gateway processing costs in production alone.
Performance Engineering: Optimised CDN configuration for the Feature Flags product, reducing flag evaluation latency for EU customers from ~500ms to under 100ms - an 80% improvement without infrastructure changes.
Modern Deployments: Built and operated CI/CD pipelines spanning every environment type - SaaS production, pre-prod, QA, test, and customer demo environments, plus fully isolated single-tenant AWS accounts. Extended the same pipeline framework to automate customer network interconnections.
IaC Migration: Migrated core infrastructure from Terraform to Pulumi (Python/Go) when HCL ran out of expressiveness for conditional multi-tenant networking - automating isolated single-tenant deployments into independent AWS accounts, with dynamic CIDR validation and real unit and integration tests.
Customer Architecture: Represented CloudBees in enterprise sales and pre-sales engagements - assessed customer network topologies, proposed and explained interconnection architectures (Transit Gateway, IPsec VPN, private connectivity), and translated complex infrastructure requirements into implementable solutions.
Site Reliability Engineering Amazon Web Services DevOps Kubernetes Terraform
Smart Reporting GmbH
Senior DevOps Engineer
SOFTWARE PUBLISHING
May 2020 - June 2021 (1 year and 1 month)
Munich, Germany
Team Leadership: Led a team of 3 DevOps and 2 IT engineers, establishing Agile/Scrum ceremonies that increased deployment transparency and team velocity.
Platform Delivery: Delivered the cloud version of the radiology reporting platform on AWS - introducing IaC-controlled, structured cloud infrastructure for a 50-developer engineering org that previously had no standardised provisioning. Maintained parallel on-premise containerised installations. Unified identity management across Azure Active Directory and AWS.
Kubernetes & EKS Migration: Introduced EKS and container immutability standards - replaced a workflow where developers SSHed into long-lived containers and edited files directly with proper image-based, immutable deployments.
Release Engineering: Built the complete release infrastructure from scratch - GitLab CI pipelines across QA, pre-prod, and production, Terraform-managed AWS environments, and Packer-based image builds for on-premise deployments - where no structured release process existed before.
Kubernetes Terraform Amazon Web Services DevOps Gitlab
AstraZeneca (DE)
Senior DevOps Engineer
BIOTECH
July 2019 - May 2020 (10 months)
Munich, Germany
Engineering Leadership: Directed internal engineers and external contractors across the full infrastructure lifecycle; led technical hiring for the DevOps team and mentored junior engineers.
Cloud Migration Strategy: Spearheaded the migration of 200+ VMs from on-premise to AWS; architected and automated the hybrid-cloud environment using Terraform and Ansible.
GxP Architectural Lead: Led the design and implementation of infrastructure architectures that met strict GxP requirements; functioned as the technical lead for infrastructure audits.
CAPA & Audit Leadership: Led the DevOps team through 2-3 GxP infrastructure audits contributing to successful ISO certification - operationalised Corrective and Preventive Actions (CAPA) within the DevOps process, ensuring automated guardrails and technical controls met regulatory requirements.
Change Management: Introduced an ITIL-based change management process for infrastructure - establishing structured approval workflows, change request procedures, and rollback standards that aligned DevOps practices with GxP regulatory requirements.
Terraform Ansible DevOps Amazon Web Services