@twitter @linkedin @twitch @rss

Your Application’s Resilience is my Business

I help organizations by accelerating their application maturity towards more resilient and secure processes.

DevOps, AppSec, DevSecOps, Cloud Native, IaC, all sound new to you? Book a free discovery call now!

About me

My name is Markus, and I am Freelance DevSecOps and Cloud Security Consultant.

I have 12+ years of experience in tech: from systems engineering, software development, to cyber security. If you really want to drill down, here is my resume

If you have any questions, I would love to hear from you!

Clients & Work

  1. The scope of this project was to optimize and move an application to the cloud. The source code for the analysis pipeline was created for the use of university super-computer equipment. Another freelancer developed the frontend for the B2C offering. Any performance, UI/UX and scaling issues were not part of my tasks. I developed several different architecture patterns. Together with the customer we decided on the most suitable solution. Cost, scalability, and maintainability were the main factors to consider in this situation.

    Python AWS Cloud Architecture

  2. At Footstock I moved from manual deployments to automated deployments on AWS. Footstock hosted all its source code on GitHub. We leveraged Github Actions as the continuous integration and delivery platform. At first, I created separate VPCs for production, testing, and development. Regulatory requirements made this separation necessary. I built infrastructure as code playbooks. They provided an easy way to create and tear down different setups fast. Technologies used were Fargate, RDS, KMS, IAM, and ALB.

    Github Actions AWS

Popular posts

  1. How can I move my application to the cloud?

    Colleagues, customers, and students alike asked me this question several times over the last 10 years. Let me outline the approach I would be using.

  2. Sharing 5 learnings from 5 months as a manager for cybersecurity:

  3. The ugly truth about passwords, or memorized secrets, is, that we still have way too many. They won’t go away any time soon either. They offer some benefits for the end user and the organisation providing password based authentication.


  4. I am dealing often with the issue of explaining how you get from a known deficit to actual risk for your organization. We will look into this by revisiting an issue a customer of mine had last year.

  5. All code for this blog post can be found at:

    Static Website S3 Repository

    Python AWS