Senior DevOps Engineer · Infrastructure Architect

DevOps & Linux Architecture for Scalable Systems in the DACH Region

I help companies in DE, AT, and CH build robust Linux infrastructures, automate deployments, and safely conduct complex migrations – with technical depth and operational experience.

About me

I am Michael Hettwer – a Senior DevOps Engineer and Infrastructure Architect based in Prague and Berlin. I administer and architect Linux environments, from medium-sized single servers to enterprise clusters with 400+ hosts.

My focus is on automation (Ansible, GitOps), secure migrations, Kubernetes adoptions, and ongoing hardening of critical infrastructures – including within the context of NIS2 compliance.

More about my background →

Linux

Architecture & Operations

400+

Hosts managed concurrently

DACH

Remote Focus

NIS2

Security & Compliance

Services

What I offer

DevOps Sparring

Sparring partner for your team: Evaluate and improve processes, toolchains, CI/CD pipelines, and GitOps workflows.

Infrastructure Review

Inventory of your Linux environment: Identify vulnerabilities, highlight optimization potential, and create an action plan.

Migration & Modernization

CentOS 7 → AlmaLinux, legacy replacement, Kubernetes adoption – cleanly planned and executed.

Managed Linux Infrastructure

Ongoing management of complex Linux environments: Monitoring, security hardening, patching, and operations.

Collaboration

How We Work Together

It starts with a free 30-minute intro call – video or phone, your choice. You describe your infrastructure; I give you an honest assessment of whether and how I can help.

If it is a fit on both sides, we run a short audit (infrastructure review or NIS2 gap analysis) with concrete recommendations. From there, we work either project-based or in a sparring model: fixed sessions, clear deliverables, no surprises.

Remote from Prague and Berlin, with full DACH coverage and native German communication.

Why me

Direct experience instead of theory

  • Operational Linux practice in large environments (400+ hosts)
  • Technical depth rather than superficial consulting
  • Pragmatic solutions – without unnecessary complexity
  • Direct communication, short paths, full ownership
  • Remote-first for DE, AT, CH – no travel days billed

References

Selected Projects

Mid-sized manufacturer, ~300 Linux servers

Challenge

CentOS 7 End-of-Life, no migration concept, tight deadline

Approach

Migration plan, Ansible automation, rolling rollout to AlmaLinux

Result

300+ servers migrated within 6 months, zero production downtime

AlmaLinuxAnsibleMigration

SaaS provider, cloud-native infrastructure

Challenge

Monolithic deployment, long release cycles, high error rate in releases

Approach

Kubernetes adoption, GitOps with ArgoCD, structured CI/CD pipelines

Result

Deployment frequency increased from monthly to daily, rollback time under 3 minutes

KubernetesArgoCDGitOps

E-Commerce company, NIS2 compliance

Challenge

Insufficient security measures, lack of documentation, audit risk

Approach

Gap analysis, security hardening according to CIS benchmarks, monitoring setup, documentation

Result

NIS2 compliance achieved, audit successfully passed, continuous monitoring established

NIS2SecurityCompliance

Remote & DACH

DACH & Remote: Your Location, My Setup

I work remotely for companies in Germany, Austria and Switzerland – in native German and fluent English. That means documentation in German, calls in your timezone, and an understanding of GDPR, NIS2 and typical DACH compliance requirements.

Whether you are in Berlin, Vienna or Zurich, collaboration is as seamless as on-site.

Technologies

Technologies & Current Focus Areas

Focus areas: AlmaLinux/Rocky Linux migrations, Ansible-based infrastructure-as-code, Kubernetes with GitOps (ArgoCD), CI/CD via GitLab and GitHub Actions, NIS2-compliant system hardening.

Currently guiding several teams through CentOS 7-to-AlmaLinux transitions and the introduction of policy-as-code for container workloads.

AlmaLinuxRocky LinuxAnsibleKubernetesArgoCDGitOpsGitLab CIGitHub ActionsNIS2System Hardening

FAQ

Questions I Often Hear

Do you work on-site?

Primarily remote; occasional on-site days for initial audits are possible.

How quickly can you start?

Usually within 1–2 weeks after the first call.

What does an infrastructure review cost?

The first call is free; the audit is quoted individually.

Ready for your next step?

Send me a short message – I usually get back to you within one business day. An initial 30-minute introductory meeting is free of charge.

Get in Touch Now