10/20/2026 updated

**** ******** ****
verified
Premium member
100 % available

Principal Platform Architect | Cloud Foundations, Kubernetes, Terraform, GitOps | Edge & GPU K8s

Munich, Germany
Worldwide
Master of Engineering, Informatics · Bachelor of Mathematics
Munich, Germany
Worldwide
Master of Engineering, Informatics · Bachelor of Mathematics

Profile attachments

CV_Vahe_Sahakyan.pdf

About me

Platform architect, 20 years in infrastructure. I build cloud foundations and the platforms products run on, mostly on AWS and GCP. Recent: ClimatePartner's platform (12+ products) and Orbem's edge infrastructure platform (50+ GPU Kubernetes clusters). Remote EU or Munich, in English.

ObservabilityKeycloakSREArgo CDOIDCGitOpsGitHub ActionsServerlessHelmPlatform EngineeringMLOpsGCPIAMC (Programming Language)Amazon Web ServicesAmazon Elastic Compute CloudAmazon S3Microsoft AzureCloud ComputingCloud EngineeringContinuous DeliveryContinuous IntegrationLinuxDevOpsDirect ConnectDomain Name System (DNS)GitHubInfrastructure As A Service (IaaS)Incident ManagementVirtual Private Networks (VPN)Python (Programming Language)OpenStackOpenid ConnectAzure Active DirectoryAnsiblePrometheusSecurity Assertion Markup Language (SAML)Single Sign-OnTypeScriptDatadogGoogle CloudLoad BalancingCloud Platform SystemGrafanaAWS LambdaCloud TechnologiesInfrastructure as Code (IaC)AWS ECSGitLabGitlab-ciAWS AuroraKubernetesAWS GlueBare MetalAWS FargateCloud MigrationCloud OptimizationCloudwatchApi GatewayTerraformServerless ComputingAWS EKSDockerElastic Load BalancingJenkinsGolang
I'm a platform architect with 20 years in infrastructure, freelance since 2016. I build cloud foundations and the internal platforms on top of them, mostly on AWS and GCP, so that product teams deploy and run their services in production themselves. Hands-on: architecture, Terraform and Go, and on-call.

For ClimatePartner I built from scratch the cloud foundation and the platform that all its products run on: AWS accounts and networking, the ECS and Aurora runtime, GitHub CI/CD, Datadog observability, Keycloak identity, all as code. From one product in one account to 40+ accounts, 12+ products and 8 engineering teams. I ran it alone for two years, then hired and led the platform team. For Orbem I designed the edge infrastructure platform behind 50+ GPU Kubernetes clusters at customer sites in the EU and US, managed from GCP with Argo CD: network, server, OS and fleet tooling. Setup fell from several days to about 30 minutes, and I built and led the SRE team. Earlier: a hybrid cloud foundation (20+ AWS accounts) for Zooplus and cloud architecture at Siemens. Second specialty: identity and federation with Keycloak (6,000+ business customers), Entra ID, OIDC and SAML.

Remote within the EU or in Munich, in English, through my own company, cloudventure GmbH.
Roles: Platform Architect, Platform Engineer, Cloud Architect, Site Reliability Engineer (SRE), DevOps Engineer, Infrastructure Architect

Cloud: AWS, GCP, Azure, OpenStack, multi-account landing zones, hybrid cloud, cloud migration, serverless AWS: Organizations, IAM, SSO, VPC, Transit Gateway, Direct Connect, Route 53, EC2, ECS/Fargate, Lambda, S3, RDS/Aurora, API Gateway, SQS/SNS, KMS, CloudWatch Kubernetes & GitOps: Kubernetes, EKS, GKE, K3s, Helm, Argo CD, External Secrets Operator, Docker Infrastructure as Code & CI/CD: Terraform, CDK for Terraform, Terragrunt, Ansible, GitHub Actions, GitLab CI, Jenkins Platform Engineering & SRE: internal developer platform, self-service infrastructure, observability, Prometheus, Grafana, Datadog, incident response, on-call Edge & GPU infrastructure: bare metal, edge computing, GPU, NVIDIA, Linux, Ubuntu, Redfish/BMC, TPM, automated provisioning, fleet management Identity & Security: Keycloak, Microsoft Entra ID, OIDC, OAuth 2.0, SAML, SCIM, SSO, RBAC, secrets management, PCI DSS Networking: BGP, IPsec VPN, DNS, load balancing, CDN Programming: Go (Golang), Python, TypeScript, C

Experience

Professional experience10+ years
Freelancer since2016

Languages

DeutschGoodEnglischFluentRussischFluent

Project history

Principal Platform Architect, SRE Team Lead

Orbem
Industrial AI imaging scale-up with a GPU edge fleet at customer sites.
  • Designed and built the platform behind 50+ GPU Kubernetes (K3s) clusters at customer sites in the EU and US, managed from GCP with Argo CD and External Secrets Operator.
  • Cut cluster setup from several days to about 30 minutes with a Go CLI for Day-0 installs and Day-2 operations over Redfish/BMC, with the network devices managed in Terraform.
  • Grew the fleet from 9 to 50+ clusters with no infrastructure incident affecting customer production.
  • Built workforce identity as code with CDK for Terraform: Microsoft Entra ID groups, SAML/OIDC single sign-on for 19 applications and Google Cloud IAM, federated with Google Workspace over SCIM.
  • Proposed and built a dedicated SRE team with on-call, support and planning processes, led it for a year through ISO 27001 certification, then handed it over to an internal lead.

Principal Platform Architect, Platform Team Lead

ClimatePartner
  • Built the AWS cloud foundation and runtime platform (ECS, Aurora Serverless) from scratch, taking a SaaS company from one product in one account to 40+ accounts, 12+ products and 8 engineering teams.
  • Automated every layer: an account vending machine delivers a new AWS account with networking, observability and pipelines in about 15 minutes, and product teams ship with self-service Terraform modules.
  • Ran the platform as its only engineer for two years, then hired a team of four engineers within three months and led it as team lead.
  • Designed a serverless API integration platform on Lambda and API Gateway with an OpenAPI-first framework that generates the infrastructure from the API specification. Load-tested to 10K+ requests per second.
  • Designed and built a Keycloak-based multi-tenant identity platform for 6,000+ business customers and 20,000 users: single sign-on and role-based access across all products, configured in Terraform.

Cloud Architect

Crosscard
I was responsible for driving the company's cloud transformation further. This role involved overseeing the migration of existing infrastructure to the cloud environment and its subsequent integration, as well as providing architectural and technical guidance.
* Worked on cloud architecture and infrastructure automation optimizations
* Provided support and maintenance for the cloud environment
* Migrated the analytics platform to AWS
* Introduced GitLab and implemented CI/CD pipelines
* Implemented a cloud-native email delivery solution sending thousands of emails daily

Cloud Architect

Siemens
I was part of a cloud transformation initiative at Research and Development Unit focused on
enabling cloud-native deployments. My role involved providing the foundational cloud
infrastructure and runtime platform, along with consulting and supporting the design of
cloud-native applications.
* Designed and implemented machine learning workflows on AWS using Step Functions
and SageMaker
* Deployed and maintained OpenStack-based private cloud infrastructure
* Designed and implemented a central networking hub for the cloud environment
* Implemented a runtime platform for cloud-native applications and prototyping
* Implemented a central identity management solution

Cloud Migration and Automation Consultant

zooplus
  • Designed and built a hybrid cloud foundation from scratch: 20+ AWS accounts, hub-and-spoke networking and Direct Connect with BGP to the data center, before AWS offered an account API or a transit gateway.
  • Built a role vending machine that gives every application its own IAM role with generated least-privilege policies (about 200 roles), with a custom Terraform provider and a Go API.
  • Extended the Mesos runtime platform into AWS, so teams choose per service between data center and cloud.
  • Built a custom identity broker for login with corporate credentials (ADFS) to all AWS accounts, and introduced the infrastructure-as-code standards.

Senior Systems Engineer

Myra Security
At Myra Security, my role was twofold: I was responsible for the further development and optimization of systems, and I served as a contact for security incident response and customer support during attacks.
* Worked on global content delivery optimizations on both network and application layers
* Worked on attack detection and mitigation engines
* Designed and implemented S3 compatible cloud object storage integrated with CDN
* Provided support for security incidents and attack mitigation
* Worked on P2P video streaming technology

Senior Site Reliability Engineer

insparx
Operations of the company's online dating platforms: virtualized infrastructure, application deployment automation, monitoring and second-level support.

Site Reliability Engineer, later Senior SRE

be2
At be2, I joined as SRE and later transitioned into Senior SRE role. I led key initiatives to enhance the technology infrastructure, focusing on system efficiency, reliability, and scalability. My role involved strategic innovation and providing critical support to development teams.
* Implemented and maintained sharded and replicated MongoDB cluster
* Implemented and conducted a large scale database migration from MySQL to MongoDB
* Carried out a zero downtime firewall migration
* Worked on server virtualization and resource optimization
* Implemented asymmetric load balancing SDR reducing network load
* Implemented a forecasting solution based on monitoring data for hardware requirement predictions

Software Engineer and System Administrator

I have been working as a freelancer in various companies in Yerevan building internal and customer-facing applications and providing system administration services.
exali-logo

exali Professional Liability badge

The exali Professional Liability badge is a trusted mark for freelancers and service providers. It confirms that the freelancer carries professional liability insurance meeting exali's high standards — a symbol of reliability and professionalism.

Valid until: 05/01/2027

Learn more

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in