09/18/2026 updated
100 % available
Solution Architect | IAM/PAM for Swiss Banking | C#/.NET, Azure, Kubernetes
Timisoara, Romania
Worldwide
BA Computer Science, Master's in Artificial Intelligence and Distributed ComputingAbout me
Solution Architect with 15+ years in enterprise software, across banking, e-learning, and oil & gas. Core stack is C#/.NET on Azure and Kubernetes. 7+ years in architecture roles, the last four on strategic PAM platforms for Swiss banks covering 250,000+ endpoints and 80+ integrated systems.
OAuth 2.0OIDCAzure FunctionsZero TrustIAMActive DirectoryPython (Programming Language)Lightweight Directory Access Protocols (LDAP)PostgreSQLAzure SQLAzure Active DirectorySolution ArchitectureVault.NET CoreReact.js
Architected PAM capabilities managing 10,000+ privileged accounts across 250,000+ endpoints, reducing provisioning from hours to a 3-minute SLA and supporting internal/external audits against FINMA-driven controls.
Experience
Professional experience10+ years
Freelancer since2026
Languages
GermanBasic knowledgeEnglishFluentRomanianNative speaker
Project history
- Architected a strategic Privileged Access Management (PAM) solution from scratch, governing privileged access to critical platforms such as Linux, Windows, and databases; onboarded 30,000+ endpoints.
- Designed and built integrations with authoritative source systems (CMDB, Application Catalog, Entra ID) to ingest master data into the PAM solution.
- Owned and authored the Solution Architecture Document, which consistently passed audit reviews. Replaced a non-compliant privileged access process for a critical platform with the strategic PAM solution, bringing it into full audit compliance.
- Mastered UBS internal SDLC and Access Management policies, guiding the team on application lifecycle management and compliance.
- Designed a high-availability architecture on AKS with an active-active setup across two Azure regions, backed by PostgreSQL Flexible Server with zone-redundant HA and cross-region active-passive replication.
- Designed real-time integration of the PAM solution with HashiCorp Vault for secret retrieval, with an Azure Key Vault cache as a failover - sourcing secrets from Azure if Vault was unavailable to ensure high availability.
- Governed the fully Terraform-based Infrastructure-as-Code, reviewing developers' Terraform to ensure alignment with the target architecture and standards.
- Took over as lead architect of a strategic PAM governance solution already in production, providing a single pane of glass for infrastructure access management across both privileged and non-privileged access.
- Unblocked and delivered a platform integration that had stalled for over six months, shortly after taking over the architecture.
- Designed integrations to onboard critical platforms - including Delinea Cloud Suite, Entra ID roles, Delinea Server Suite, storage and network devices, data virtualization (Denodo), databases (MS SQL, Oracle, MongoDB), and mainframe - extending a solution spanning 80+ platforms and 250,000+ endpoints.
- Replaced legacy standing access with compliant just-in-time (JIT) privileged access, cutting provisioning time from hours to under three minutes against a 3-minute SLA.
- Designed a Data Lake integration for audit reporting, built on a medallion-style layered architecture (raw, cleansed, and application zones) to deliver compliant audit reports.
- Partnered with the CMDB, Identity Governance, Access Approval, and Application Management teams to design and adjust integrations that ensured compliance.
- Architected the migration of the application from a legacy Java runtime to Kubernetes (Argo), with an active-active setup across two data centers.
- Designed a Kafka based messaging integration to enable asynchronous processing between the PAM solution and a downstream application.