freundcloud
▲ DevOps · Platform Engineering · 30 years in

I build the platforms
other engineers build on.

I'm Olaf — a DevOps and platform engineering leader. Right now I'm moving a tier-1 investment bank off Bitbucket and Bamboo onto GitHub Enterprise, and standing up a Backstage developer platform for the UK's energy system operator.

See what I've built Read the CV Knowledge base

Selected work

A few things I've designed, written, and shipped.

Multi-cloud · Compliance

SARC

A compliance pipeline that ships the same code to AWS, Azure, GCP and a laptop k3d cluster from one switch — wiring ServiceNow, Kosli and three CI platforms into one auditable flow. See the full showcase →

 Open source · AI agents

The Factory suite

A governed pipeline for AI software delivery — PFactory plans it, AIFactory builds it, TFactory tests it, CFactory watches it. PARR, with a human gate at every seam and model-agnostic via MCP.

 Open source · Migration

Bifrost

Azure DevOps → GitHub Actions migration at portfolio scale. Wraps GitHub's importer with a review-first workflow, explainable risk scoring and signed attestations — air-gap capable on local models. Rust + React.

 Open source · Rust

ravn-agents

Self-healing for Linux fleets that never decides on its own — deterministic detection, Ed25519-signed remediation, AI that only explains. Runs on hosts, Kubernetes and air-gapped networks.

 Open source · Claude Code

skill-pool

The team layer for Claude Code's .claude/ — a self-hosted registry (Rust + Svelte) with retrospective capture that turns the work the team actually did into reviewable skills.

 Open source · AI

SkillAi

A self-hosted recruiting platform built on Claude and Gemini. Parses CVs, scores candidates four ways, and keeps every byte on infrastructure the team owns. In production hiring for HSBC's Kraków hub.

 CI/CD · Migration

GitHub Enterprise migration

Leading six business units at a US investment bank off Bitbucket + Bamboo onto GitHub Actions — reusable workflow templates, self-hosted runners on AKS, and governance as Terraform instead of clicks.

 Open source · NixOS

nixos_config

My whole machine estate declared in Nix — multi-host flakes with a feature-flag system, Agenix secrets, Home Manager and a custom CLI.

 Open source · Linux desktop

Desktop & terminal tooling

An Android phone as an MCP tool surface (lxconnect), Google Workspace in a TUI (gog/gogmail), websites as native GNOME apps, and a pile of COSMIC and Hyprland Rust.

 Writing

Knowledge base

Years of notes on cloud architecture, Kubernetes, IaC, DevSecOps and NixOS — the reference I wish I'd had starting out. Hundreds of pages, searchable.

Latest writing

Working out loud — the newest from the blog.

What I'm into

Internal developer platforms and golden paths · multi-cloud Kubernetes · Terraform and Nix for things that rebuild the same way every time · DevSecOps that developers don't route around · LLM tooling and MCP servers · and a Linux desktop held together with NixOS and a bit of Rust.