Hire the Best DevOps Engineers
in Romania

I build cloud infrastructure that you can leave alone. Predictable, reproducible, auditable. Not held together with manual ClickOps and dread. Most teams I work with come to me when one of three things is happening. The AWS bill keeps climbing every month and nobody can explain why. I cut waste on real client workloads by moving idle EC2 to scheduled start and stop, replacing NAT Gateways with VPC endpoints (saves around $35 per month per environment, before traffic), right sizing instances, and surfacing waste with proper tagging and Cost Explorer dashboards. Production was set up in the console two years ago and now nobody dares touch it. I migrate ClickOps environments into Terraform without breaking running services. Module based, workspace driven, with state in S3 and DynamoDB locking. The handover is a repo your team can read, not a black box only I understand. The infrastructure works but it is exposed in places it should not be. I have moved public ALBs to private origins behind CloudFront and WAF, replaced shared IAM users with role based access, locked down security groups, and put secrets in Secrets Manager instead of environment files. Boring, careful work. The kind that prevents the 3 AM call. What I work with daily: - AWS — ECS Fargate, RDS, Aurora, S3, CloudFront, Route 53, Cognito, Secrets Manager, SQS, Lambda, EC2, VPC, IAM, WAF, CloudWatch - Terraform — custom modules, workspace structure, multi account setups, S3 and DynamoDB state - CI/CD — GitHub Actions, GitLab CI, automated database migrations, container scanning - Python — FastAPI services, Celery workers, automation scripts, infrastructure tooling - Security — Cognito with JWT auth, VPC design without NAT, IAM least privilege, audit logging - Containers — Docker, ECS Fargate (Spot and on demand), private ECR Recent work: - Built a battery storage SaaS platform on AWS. FastAPI plus Celery, dual queue ECS Fargate workers (Spot for short jobs, on demand for long ones), Cognito auth, full Terraform from scratch. - Architected a private ML training platform on OVH. GPU workers, Celery, Tailscale private networking, S3 compatible object storage. - Self hosted infrastructure deployment on a Swiss vServer. Docker stack with Keycloak SSO, Traefik with Let's Encrypt, GitLab CI/CD. - Migrated multiple client workloads from public ALBs to private origins behind CloudFront and WAF. - Built scheduled EC2 start and stop automation for a workflow stack to cut idle compute cost. How I work: - Everything goes in Terraform. If it is not in code, it does not exist. - I write things down. Runbooks, decision logs, architecture diagrams. The next person on the project should not need to call me. - I would rather flag a risk early than discover it during a deploy. - If I think the scope is wrong or the approach will not hold up, I will say so. You are paying for judgment, not just hands. Background includes 9 AWS certifications across architect, security, networking, and devops tracks, plus internships at Deutsche Bank and ING Hubs on the Java backend side, and ongoing freelance work across AWS infrastructure, security migrations, and platform engineering. If you are trying to clean up production, get out of ClickOps, cut your AWS bill, or build a new platform from scratch, happy to talk. If your project is more "throw a script together fast and do not worry about it later," I am probably not the right fit.

𝗕𝗼𝗮𝘀𝘁𝗶𝗻𝗴 𝟭𝟴 𝘆𝗲𝗮𝗿𝘀 𝗼𝗳 𝗽𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹 𝗽𝗿𝗼𝗱𝘂𝗰𝘁 𝗱𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁 𝗮𝗻𝗱 𝗱𝗲𝗹𝗶𝘃𝗲𝗿𝘆 𝘀𝗲𝗿𝘃𝗶𝗰𝗲𝘀 Helping clients with end-to-end product development, and DevOps automation services. For the last year also focused on helping clients integrate AI-based solutions within their workflows and processes. If you need help with your software product, be it development, or operations, I am here to help. And always happy to chat on how to make products more useful, usable and fair. Local, on-premise, or the cloud? Small, medium-sized, or a large corporation? All of these are my familiar environments.

Greetings! I'm a proficient DevOps Engineer with a certification in Junior Penetration Testing. Currently, I'm thriving in my role as a DevOps Engineer, where I leverage my expertise in a variety of cutting-edge technologies, such as AWS, Terraform, Ansible, Jenkins, Linux, Docker, Kubernetes, and Python, which I engage with on a daily basis. Beyond my professional responsibilities, my true passion lies within the realm of Cybersecurity. In my free time, I actively immerse myself in platforms like TryHackMe and HackTheBox, tirelessly uncovering new vulnerabilities and exploring innovative approaches to exploit them. My unique combination of DevOps proficiency and cybersecurity fervor positions me as an ideal candidate for projects that require a blend of these skill sets. Whether you need assistance with cloud infrastructure, automation, or a keen eye to uncover potential vulnerabilities, I am prepared to deliver exceptional results. Let's collaborate to fortify your IT infrastructure and ensure it remains impervious to cyber threats. If you're seeking a versatile professional who can seamlessly bridge the gap between DevOps and Cybersecurity, don't hesitate to reach out. I'm here to help safeguard your digital assets and enhance your operational efficiency.

Implementing top notch solutions within software development, integration and deployment processes. Delivering idiomatic code and optimized integration solutions. The clients I work with use the latest technologies in their business solutions. I am a great fit If you think: ✔ "This system is crucial to the business operations and I need help ASAP" ✔ "I need somebody trustworthy to work on a sensitive task" ✔ "The existing system is very complicated and needs some tweaking" ✔ "We need somebody on our team that can collaborate efficiently with the existing staff" ✔ "I don't have the technical knowledge required and I need a user friendly solution" Working with me, you will ➼ Understand the roots of the technical issues you may be facing, as well as the solution ➼ Receive secure, cost-effective implementations ➼ Be able to use the latest technologies ➼ Get the job done as fast as possible, sometimes way ahead of the deadlines ➼ Excellent communication from my side My clients shared a LOT of feedback to me: ⮞ "Outstanding work! The setup is secure, and the documentation is clear and thorough." ⮞ "Communication was excellent throughout." ⮞ "Laurian's highly-skilled, professional, and fast." Not everybody is a good partner, though. Some signs we might not get along: ✘ The client is struggling to pay for my work or avoids it intentionally ✘ Respect is not a core value for the client Sound like a fit 👌? What's next: ☛ Press the '...' button then the ‘Send Message’ button in the top right-hand corner ☛ Write me a message with info about the job Areas of expertise: Programming languages: C++, Golang, Rust, Python, JavaScript/TypeScript, Bash, PHP Virtualization and containerization: Docker, Kubernetes Cloud Providers: AWS, GCP, Azure Databases: MySQL, Postgres, Redis, MongoDB Frameworks: Vuejs, Nextjs, Gin, Symfony Others: networking, git

11 years Linux expertise, passionate about all IT areas and projects. Software, Networking and Hardware skilled.

✅ Formerly employed by: IBM, Ericsson, MetroAG, Upwork ► Linux, Unix: +19 years. ► AWS: +10 Years. ► DevOps: +9 years . ► SRE: +7 Years. ► Upwork Talent Cloud Member I love Vim/TMUX and split keyboards. Currently I can only accommodate long-term projects. For European clients VAT Reverse Charge may apply. Thank you very much for reading my profile. I'm looking forward to meeting you! Aldo