Senior DevOps / DevSecOps
& Cloud Platform Engineer
with AI doing the heavy lifting
For 20 years I have been helping companies build and run platforms and services across every major cloud and on-prem. Today I put AI agents to work across the whole delivery lifecycle — generating and refactoring pipelines, finding and fixing vulnerabilities, hardening environments and red-teaming AI workloads.
Trusted by global leaders
Pharma • Retail • Banking • Energy • Industry • Automotive • Logistics
SecOps Scanner
See every risk in your code and CI/CD. Fix it with AI. Before attackers notice.
- Leaked secrets in code and logs
- Live pipeline monitoring
- SBOM & supply-chain visibility
- "Fix with AI" → pull request
- AI agent security (Copilot, Claude, Cursor)
- Scorecard & reports for management
Signature AI Projects
AI is not a demo toy — it is a tool that finds issues in production, fixes them and speeds up delivery. This is how I put it to work.
AI SecOps Scanner
built & operated
Continuously crawls live cloud environments, detects vulnerabilities and misconfigurations, and uses AI to propose fixes and remediate them directly (auto-generated fixes / pull requests). Shift-left meets runtime security.
Enterprise AI Platform on Microsoft Foundry
Azure AI Foundry · AI Gateway (APIM)
Multi-tenant platform with isolated per-client projects and model deployments behind an AI Gateway (Azure API Management) for token quotas, usage visibility and governance — fully in Terraform with secure networking.
AI Agents & AI Red Teaming
PyRIT · garak
Design and build of LLM agents for DevOps tasks. Automated AI red teaming (prompt injection, jailbreaks, data leakage) with PyRIT / garak, wired into CI as a repeatable security gate.
AI-assisted CI/CD Migrations
Jenkins · Azure DevOps · GitLab → GitHub Actions / Harness
Reusable workflow templates, secrets & OIDC federation, runners, security gates — with AI-assisted conversion and refactoring of pipelines for a faster, safer cut-over.
AI with confidentiality built in
For work on your code I use either a self-hosted LLM on my own hardware or models inside your own tenant (Azure OpenAI / Foundry). Your code and architecture never reach third parties.
Core Skills
Hands-on — I design, secure and operate enterprise platforms.
AI for DevOps & DevSecOps
Microsoft Foundry (Azure AI Foundry), Azure OpenAI, AI Gateway (APIM), LLM agents, agentic automation, AI red teaming (PyRIT, garak), GenAI security & guardrails.
DevSecOps & Security
System, container, Kubernetes & cloud hardening, vulnerability management, SAST / SCA / IaC & secret scanning, supply-chain security, Azure Policy, Defender for Cloud, governance-as-code, Zero Trust.
CI/CD & Platform Engineering
GitHub Actions, Azure DevOps, GitLab CI, Jenkins, Harness · migrations to GitHub Actions and Harness · reusable templates, self-hosted runners, OIDC.
Infrastructure as Code
Terraform, Bicep, ARM templates, Ansible, Helm · modular design, remote state, drift detection.
Cloud — Azure · AWS · GCP
Azure (architecture, Landing Zones, networking, VPN, AKS, PaaS) · AWS (EC2, ECS, RDS, S3, Lambda, ELK) · GCP · on-prem.
Kubernetes & Containers
AKS, EKS, GKE, on-prem · Helm, Kustomize, Argo CD / Flux · RBAC, Pod Security, Calico / Cilium · KEDA, HPA · Prometheus, Grafana, Loki · Trivy, Kyverno / OPA, CIS hardening.
Selected Experience
Contracts for global leaders in pharma, retail, banking, energy and automotive.
Škoda Auto
2026Senior DevOps / DevSecOps Engineer (contract)
- Designed and built an enterprise AI platform on Microsoft Foundry for a group battery manufacturer: onboarding as code, AI Gateway (APIM) with per-project model allow-lists and token quotas, cost allocation per project, kill switches — all Terraform, OIDC only, no secrets
- Self-service portal for project owners: usage, cost, keys and chat scoped by Entra ID groups, on-behalf-of access to Key Vault and the gateway
- Design and modernisation of enterprise CI/CD pipelines; AI-assisted pipeline authoring and refactoring; DevSecOps scanning and policy checks in the delivery flow
- Pipeline migration Jenkins → Harness; Kubernetes workloads with Helm, Terraform and Python automation
Microsoft FoundryAzure API ManagementTerraformGitHub ActionsHarnessKubernetesHelmPythonAhold Delhaize (Albert)
2025Senior DevOps Consultant (remote, contract)
- Operated and migrated the Databricks data platform to a new platform
- Built GitLab CI/CD pipelines for the enterprise platform; supported data engineers with data pipelines
- Kubernetes operations: Helm chart development, scaffolding, upgrades and production troubleshooting
DatabricksGitLab CIKubernetesHelmTerraformPythonSanofi
2024Senior DevOps Consultant (remote, contract)
- Developed CI/CD pipelines for the enterprise platform in GitHub Actions
- Designed and implemented GitHub governance-as-code automation for the whole platform
GitHub ActionsGovernance as CodeSecurityNovo Nordisk
2023Azure DevOps Consultant (remote, contract)
- Developed and maintained CI/CD pipelines in Azure DevOps
- Maintained and troubleshot the Azure platform for the StudyBuilder clinical-study project
Azure DevOpsAzureTerraformDHL
2022Senior DevOps Engineer (contract)
- Migration of CI/CD from Jenkins, Azure DevOps and GitLab to GitHub Actions — reusable workflow templates with built-in security scanning
- Containerised services on Kubernetes with Helm and GitOps; cluster operations and troubleshooting
GitHub ActionsJenkinsKubernetesHelmTerraformPythonGreenFlux
2021Azure DevOps Consultant (remote, contract)
- Implemented CI/CD in Azure DevOps — 30 % shorter deployment time
- Terraform IaC on AWS for scalability and reliability; Azure VPN for secure hybrid connectivity
- Log analytics with Elasticsearch & Kibana — 25 % faster troubleshooting
AzureAWSTerraformAzure DevOpsELKPowerShellNorsk Hydro
2020Azure DevOps Consultant (remote, contract)
- Designed and built an Azure platform; developed CI/CD pipelines, APIs and PowerShell modules
- Automated provisioning and operations with Terraform and Ansible
AzureTerraformAnsiblePowerShell
Earlier career (2004 – 2020)
- Linde Gas GDC 2018, 2020
Azure Consultant — Azure platform build & baselines, on-prem → Azure migration, AKS, Terraform / ARM - Tieto 2017 – 2018
Azure Consultant — Azure integration, Terraform automation, Docker on AKS - BNP Paribas PF 2015 – 2017
App. Admin Specialist — CZ + SK technology merger, UNIX & middleware, first Azure implementation - IBM GSDC Brno 2009 – 2011
IT Specialist — WebSphere Portal & AS, Linux administration, Java debugging - NETWINGS SOLUTIONS 2004 – 2009
Founder — founded at 18, grew to 20 employees and 300+ web / e-commerce projects; sold to a private investor - Further engagements: Anglo American · Cloudeon · Recognize · The Unbelievable Machine Company · OMV Petrom · ČSOB (KBC) · Komerční banka (Société Générale)
Case Studies
Real problems, real solutions — AI platforms, governance, CI/CD migrations, security and automation.
AI Platform on Microsoft Foundry
Self-service LLM access for a battery manufacturer: onboarding as code, per-project model allow-lists, token quotas and cost allocation behind an AI Gateway. No secrets, all Terraform.
Read Case StudySanofi GitHub Governance
Enterprise governance framework for a global pharmaceutical company. 200+ repositories, automated audits, 100% compliance coverage.
Read Case StudyUnified CI/CD Migration
Migrating complex pipelines from Jenkins/ADO to GitHub Actions with zero downtime and full Terraform adoption.
Read Case StudyGovernance as Code
Automating security policies across 500+ repositories ensuring 100% compliance without manual intervention.
Read Case StudyZero-Touch Secret Rotation
Automated lifecycle management for Service Principal secrets and Storage Account keys with expiry monitoring and auto-rotation.
Read Case StudyCustom FinOps Intelligence
A proprietary cost-analysis tool that outperformed Azure Advisor and saved 25% of cloud spend.
Read Case StudyDeveloper Self-Service CI/CD
A library of modular, versioned GitHub Actions enabling developers to build complete pipelines without DevOps bottlenecks.
Read Case StudyAutomated ServiceNow RFCs
ServiceNow FastRFC workflow integrated into GitHub Actions for automated, traceable deployments.
Read Case StudyEnvironment Config as Code
Eliminated manual variable management in GitHub/ADO with automated, auditable environment configuration.
Read Case StudyEnterprise Integration Platform
IaC-based integration platform on Azure Service Bus, Logic Apps, APIM and SharePoint, deployed with Terraform + Bicep.
Read Case StudyVM Configuration Framework
PowerShell modules for automated post-deployment configuration of Azure VMs with centralized management.
Read Case StudyHow We Can Work Together
B2B contract, remote or on-site in the EU.
Contract Engagement
I join your team as a Senior DevOps / DevSecOps or Platform Engineer. Pipelines, Kubernetes, IaC, security — with AI applied wherever it saves time.
MONTHLY RETAINER • LONG-TERMAI Platform & AI Security
Enterprise AI platform on Microsoft Foundry with an AI Gateway, LLM agents for DevOps, and AI red teaming wired into CI. In Terraform, secured and governed.
PROJECT • FIXED SCOPEDevSecOps & Cloud Audit
Deep-dive review of your cloud, pipelines and Kubernetes — backed by AI-driven scanning. You get the risks found and a concrete remediation plan (often with fixes ready to merge).
If the audit doesn't demonstrate clear value, you don't pay.
14-DAY ENGAGEMENTWorkshops & Training
Hands-on, on your own code: AI in DevOps workflows, AI red teaming, modular Terraform, GitHub Actions, Kubernetes. I teach not just how but why — until it clicks.
TAILOREDEvery PR passes scans and policy checks.
Runbooks and diagrams in Git, no lock-in.
Code and docs belong to you.
What Clients Say
"He transformed our chaotic Azure infrastructure into a predictable, MLOps-ready platform. The 14-day architecture audit alone justified the entire investment. His strategic guidance on Landing Zones and governance is unmatched."
J. Kovář
CTO, Leading E-commerce Company
"His Terraform and Azure DevOps standards became the foundation for our entire engineering team. He's not just an architect; he's a highly organized force multiplier who instantly became a predictable member of our Scrum team. Our CI/CD pipelines are now fully automated and self-service."
M. Richter
Senior DevOps Manager, Global Finance
Certifications
Languages
Czech
Native
English
Fluent (C2/C1)
Russian
Fluent
German
Basic
Former professional ice-hockey referee — making calls under pressure is nothing new.
Recruiter & Agency Notice
Engagement & Status
Strictly B2B contract / freelance. Not considering permanent (FTE) roles.
Role Focus
Senior DevOps / DevSecOps / Platform roles, ideally involving AI, Kubernetes, IaC and CI/CD.
Location
Brno, CZ — remote or on-site in the EU. Travel for kick-offs and workshops across Europe and the USA.
Contact Preference
Prefer email, WhatsApp or LinkedIn — written messages get thoughtful replies.
Equipment
Happy to use corporate-managed devices with enterprise MDM.
Full IP Ownership
All deliverables become 100% your property, explicitly in the contract.
Messages that include a budget range get a guaranteed reply within 24 hours.