10/27/2026 updated
100 % available
Senior Platform Engineer - Kubernetes, AWS EKS, Crossplane & GitOps
Poznan, Poland
Only remote
Master of Science, Data Processing TechnologiesCrossplaneKubernetes SecurityAmazon Web ServicesCloud Platform SystemGitLabKubernetesTerraformAWS EKSDocker
Senior Platform Engineer with 10+ years in software and platform engineering, freelancing since 2017. I design and build secure, self-service multi-tenant Kubernetes platforms on AWS EKS, where teams deploy applications and their infrastructure (RDS, S3, ElastiCache) from a single manifest.
CORE EXPERTISE
- Kubernetes platform engineering: multi-tenant EKS, tenant isolation, golden paths, self-service via Git and Argo CD
- Crossplane: authoring compositions in KCL, turning AWS resources into governed self-service building blocks with secure defaults built in
- Infrastructure as Code: Terraform (maintaining and modernizing existing codebases, migrating parts to Crossplane)
- GitOps & CI/CD: Argo CD, GitLab CI, Argo Workflows & Events
- Kubernetes security: Kyverno (policy-as-code), Cilium network policies (L4/L7), Pod Security, image hardening, vulnerability remediation with CrowdStrike and Wiz
- AWS IAM: permissions boundaries, ABAC session tags, per-team role factories, EKS Pod Identity, cross-account role chaining
- Secrets management: External Secrets Operator with AWS Secrets Manager, per-tenant stores
- Cost optimization: rightsizing, spot capacity, storage tiering and cleanup, typically 20-80% savings per workload
TOOLS & TECHNOLOGIES
Kubernetes, EKS, Crossplane, KCL, Terraform, Helm, Argo CD, Karpenter, Kyverno, Cilium, External Secrets Operator, cert-manager, Traefik, Docker, Linux, GitLab CI, AWS (IAM, VPC, RDS, ElastiCache, S3, Secrets Manager, Route 53), Azure AKS, Datadog, CrowdStrike, Wiz, Python, TypeScript, Bash
SELECTED PROJECTS
- Multi-tenant Kubernetes platform for a US enterprise security organization: co-designed and built a shared-EKS platform across a multi-account AWS setup. Crossplane/KCL compositions, GitOps delivery, Kyverno and Cilium isolation, IAM role factory, centralized secrets. Migrated 30+ workloads onto the platform.
- Deployment modernization for a fintech SaaS company: worked on a legacy-heavy, largely manual EKS deployment process for a large financial system. Mapped gaps with the owning teams; automated post-provisioning of new clusters with Terraform and Crossplane: CRDs, storage classes and CSI drivers, IAM roles and Pod Identity, security groups, and certificates via cert-manager with DNS-01 on Route 53.
- Azure platform hardening for a Dutch telecom operator: Terraform-based Azure infrastructure (AKS, HDInsight), CI/CD improvements, and AKS workload hardening (security contexts, non-root, image remediation).
BACKGROUND
Before platform work I was a software engineer (Scala, Java, Python, React/TypeScript), so I can work in application code, not just infrastructure. I use AI coding agents (Claude Code, Kiro CLI) daily, under the same policy and review gates as human changes.
Certifications: CKA (2023), CKAD (2020), AWS Solutions Architect Associate (2022).
Languages: English (fluent), Polish (native).
Remote from Poland (CET), B2B.
Experience
Professional experience10+ years
Freelancer since2017
Languages
EnglishFluentPolishNative speaker
Project history
Designed and built multi-tenant Kubernetes platforms on shared AWS EKS, authored Crossplane/KCL compositions for GitOps delivery, enforced tenant isolation with Kyverno and Cilium policies, managed secrets with External Secrets Operator, migrated 30+ workloads onto EKS, reduced cloud spend by 20-80% per workload, and managed vulnerability remediation with CrowdStrike and Wiz. Also worked on deployment automation for a fintech SaaS company and Azure platform hardening for a Dutch telecom operator.
Built and ran business-automation microservices on Kubernetes, developed web applications for the security department using Scala and Python backends with GraphQL/REST APIs and React/TypeScript frontends, and set up GitLab CI/CD pipelines for testing, building, and deployment.
Led development of a microservices Warehouse Management System using Scala, Akka, PostgreSQL, and Cassandra, directly driving physical warehouse operations.