Aeven – Tanzu Kubernetes Platform for Critical Public Systems
Platform Architect & Engineer
Building and architecting a shared VMware Tanzu Kubernetes platform that Aeven runs for public-sector systems classed as critical infrastructure. The platform spans three data centres under NIS2, GDPR and ISO 27001, takes its first systems from project into operation, and is being prepared to consolidate 18 existing systems, both virtual machines and Kubernetes workloads. Parts of the environment are airgapped, so every change travels one controlled path: lint and validation in Azure DevOps, then a GitLab mirror into the closed zone, so it is always clear what changed, by whom and when.
- Develop and maintain the platform codebase, mostly Ansible, with every image scanned for vulnerabilities in Harbor and in the pipelines
- Designed and documented the database backup and recovery setup: two PostgreSQL servers per environment with streaming replication, hourly backups and offsite file backup
- Built the operations centre's Grafana dashboards, contributed to the ISO 27001, NIS2 and GDPR work, and act as the technical link between the end customer's architect and Aeven's teams
- VMware Tanzu
- Kubernetes
- Ansible
- Azure DevOps
- GitLab
- Harbor
- Vault
- PostgreSQL
- Grafana