Senior SRE · Berlin, Germany

Andrei Stegaru I build Kubernetes platforms that stay up.

Senior SRE & DevOps engineer focused on cloud-native platforms: GitOps, Infrastructure as Code, automated CI/CD and observability, on-prem and across Azure, AWS, IONOS, Hetzner and STACKIT.

Get in touch View experience
Years in cloud & DevOps
7+
Professional certifications
6
Systems administered at Getronics
~9k
Cloud platforms in production
5

01 profile

Kubernetes platforms, automation and reliability.

I'm a Senior SRE / DevOps engineer with deep experience in Kubernetes platforms, CNCF technologies and cloud-native infrastructure. I design, build and operate scalable platforms with GitOps, Infrastructure as Code and automated CI/CD, in managed clouds and on-premises. I have run Kubernetes through its whole lifecycle: bootstrapping clusters with kubeadm, immutable Talos Linux nodes, and fleets managed with Cluster API.

At North.io I own production Kubernetes platforms end to end: Terraform and Ansible for provisioning, GitOps-based delivery, monitoring and alerting, and internal tooling written in Go. Before that, I built a self-service Kubernetes platform for public-sector digital services at SEITENBAU, modernised cloud-native delivery at TKD Solutions and worked on cloud infrastructure at IONOS.

I'm a CLI-first engineer: Neovim for code, kubectl for clusters, and a strong preference for simple, composable tools in the Unix tradition.

  • GitOps & platform engineering

    Flux, Argo CD, Kustomize and Helm. Every change to a cluster goes through Git.

  • Infrastructure as Code

    Terraform, Ansible and CDK8s, on bare metal and in managed clouds.

  • Reliability & observability

    Prometheus, Grafana and Datadog for metrics, dashboards and alerting.

  • Security built into the pipeline

    CKS certified. Trivy, SonarQube and Qodana run in every pipeline.

02 stack

Tools I use in production.

Kubernetes lifecycle

  • kubeadm
  • Talos Linux
  • Cluster API (CAPI)
  • Managed Kubernetes
  • Self-hosted clusters
  • Upgrades & day-2

GitOps & Platform

  • Flux
  • Argo CD
  • Kustomize
  • Helm
  • Kubernetes platform design

Containers & IaC

  • Kubernetes
  • Docker
  • Terraform
  • Ansible
  • CDK8s

Cloud platforms

  • Azure
  • AWS
  • IONOS Cloud
  • Hetzner
  • STACKIT

CI/CD

  • GitLab CI
  • GitHub Actions
  • Azure DevOps
  • Jenkins

Monitoring & Security

  • Prometheus
  • Grafana
  • Datadog
  • Trivy
  • SonarQube
  • Qodana

Programming & scripting

  • Go
  • Python
  • Bash / Shell
  • TypeScript (CDK8s)

OS & networking

  • Debian
  • Ubuntu
  • CentOS
  • Alpine
  • macOS
  • Windows
  • OpenVPN
  • pfSense
  • HTTP/S

Databases

  • PostgreSQL
  • MySQL
  • MariaDB
  • MongoDB

03 experience

Where I've worked.

  1. – Present Berlin

    Senior SRE Engineer

    North.io current

    • Design, build and operate production Kubernetes platforms across on-premises and cloud environments.
    • Infrastructure as Code with Terraform and configuration management with Ansible, automating provisioning, configuration and day-2 operations.
    • Build automation and internal tools in Go and shell.
    • Design and maintain CI/CD and GitOps-based delivery workflows.
    • Run monitoring, observability, alerting and reliability practices across the platform.
    • Troubleshoot complex issues across infrastructure, networking, Linux and Kubernetes, improving scalability, resilience, security and operational efficiency.
    • Work with development and infrastructure teams to deliver reliable self-service platforms.
    • Kubernetes
    • Terraform
    • Ansible
    • Go
    • GitOps
    • Observability
  2. – Berlin / Remote

    Senior System Developer

    SEITENBAU GmbH

    • Designed, built and operated managed and self-hosted Kubernetes platforms powering public-sector digital services and enterprise applications.
    • Implemented GitOps workflows with Flux and Kustomize for automated, version-controlled application delivery.
    • Provisioned Kubernetes infrastructure with Terraform and CDK8s for reproducible, scalable environments.
    • Ran CI/CD pipelines in GitLab and Jenkins, improving deployment stability and shortening release cycles.
    • Delivered a self-service Kubernetes platform for developers that standardised deployments, built mainly on open-source technology to avoid vendor lock-in.
    • Worked in Scrum (sprints, retrospectives), continuously improving the platform and delivery processes.
    • Flux
    • Kustomize
    • Terraform
    • CDK8s
    • GitLab
    • Jenkins
    • Bash
  3. – Berlin

    DevOps Engineer

    TKD Solutions GmbH

    • Developed and optimised Helm-based Kubernetes deployments for scalable, standardised rollouts.
    • Automated CI/CD pipelines in Azure DevOps and GitLab, cutting delivery times and increasing reliability.
    • Integrated code-quality and security gates (SonarQube, Trivy, Qodana) into every pipeline.
    • Led the introduction of Infrastructure as Code with Terraform and Ansible.
    • Established monitoring and alerting with Prometheus, Grafana and Datadog, reducing response times.
    • Implemented cost-optimisation strategies that lowered operating expenses, and coached developers on DevOps practices.
    • Helm
    • Azure DevOps
    • GitLab
    • Terraform
    • Ansible
    • Datadog
    • Trivy
  4. – Berlin

    Cloud Engineer

    IONOS SE

    • Maintained and scaled cloud infrastructure at one of Europe's leading cloud providers, with a focus on performance, resilience and security.
    • Automated provisioning and configuration with Terraform and Ansible.
    • Resolved complex issues across networking, Linux administration and cloud automation.
    • Wrote documentation that made the team more efficient and spread knowledge across it.
    • IONOS Cloud
    • Terraform
    • Ansible
    • Linux
    • Networking
  5. – Berlin

    IT Systems Administrator

    Getronics

    • Administered ~9,000 systems for a major manufacturing client, mostly Linux with some Windows.
    • Designed VPN and remote-access solutions that improved security and reliability.
    • Worked with colleagues to resolve critical IT incidents.
    • Linux
    • Windows
    • VPN
    • Remote access
  6. – Freelance

    Cloud Solutions Architect / DevOps Consultant

    Self-employed

    • Designed and implemented scalable Azure architectures with a focus on cost optimisation.
    • Deployed and operated Kubernetes and Docker environments.
    • Automated infrastructure with Terraform and Ansible.
    • Set up secure VPNs and network-security strategies.
    • Azure
    • Kubernetes
    • Docker
    • Terraform
    • Ansible

04 certifications

What I'm certified in.

  • CKS: Certified Kubernetes Security Specialist

    The Linux Foundation ·

  • CKA: Certified Kubernetes Administrator

    The Linux Foundation ·

  • HashiCorp Certified: Terraform Associate

    HashiCorp ·

  • PCA: Prometheus Certified Associate

    The Linux Foundation ·

  • PCAP: Certified Associate Python Programmer

    Python Institute ·

  • LPIC-1: Linux Administrator

    Linux Professional Institute ·

Also completed: MongoDB University Developer track, levels 1–3 (2023).

05 projects

Selected work.

Self-service Kubernetes platform

A developer self-service platform for public-sector digital services. GitOps with Flux and Kustomize, infrastructure in Terraform and CDK8s, built on open source to avoid vendor lock-in.

  • Flux
  • Kustomize
  • Terraform
  • CDK8s

Shift-left security in CI/CD

Quality and security checks added to Azure DevOps and GitLab pipelines: image and dependency scanning, static analysis and linting.

  • Trivy
  • SonarQube
  • Qodana
  • Azure DevOps

Azure subscription migration

Moved Azure resources to a new subscription without downtime. Resources, service connections and identities were migrated with Azure CLI scripts, and every service worked afterwards.

  • Azure
  • Azure CLI
  • Terraform
  • Azure DevOps

Observability stack

Prometheus, Alertmanager and Grafana with custom alert rules and dashboards.

  • Prometheus
  • Grafana
  • Alertmanager
  • Datadog

Custom Linux for embedded systems 2021

A minimal Linux OS built from scratch for embedded and IoT devices, focused on kernel security, namespaces and system-call management, with lightweight deployment strategies for constrained hardware.

  • Linux kernel
  • Namespaces
  • Security
  • IoT

This website

Plain HTML, CSS and JavaScript on Cloudflare Pages. Every push to main deploys it.

  • HTML/CSS/JS
  • Cloudflare Pages
  • GitHub

06 background

From algorithmic composition to automation.

Before I worked in infrastructure, I studied composition and electronic music in Bucharest and Stuttgart. A lot of it was programming: generative music, signal processing and studio work.

Education

  • Master, Composition & Electronic Music Staatliche Hochschule für Musik und Darstellende Kunst Stuttgart 2009 – 2011
  • Bachelor, Composition & Electronic Music National University of Music Bucharest 2005 – 2009

Additional experience

  • Sound design programmer Algorithmic composition, sound research and mastering with OpenMusic, Max/MSP and Pure Data 2011 – present
  • Assistant tutor, MH Stuttgart Supported composition classes and ran the studio's technical side 2009 – 2011

Scholarships & masterclasses

  • GEMA scholarship “10 Miniatures for Piano and Live Electronics”, Berlin 2021 – 2022
  • Richard Wagner Scholarship Foundation Bayreuth Festival 2006 – 2007
  • International masterclasses Jerusalem Academy of Music and Dance, Oslo, and composition with Prof. Sever Tipei (University of Illinois) 2006 – 2008
I also perform as a pianist in Berlin

07 contact

Get in touch.

Questions about a role or a project? Send me an email or write to me on LinkedIn.

[email protected]