Curriculum vitae

Prefer a PDF or a full reference list? Drop me a line and I'll send one over.

London, UK · Outside IR35 · Financial services & public sector · olaf@freundcloud.com

Profile

DevOps and platform engineering leader with 30 years of hands-on experience delivering large-scale cloud, CI/CD and developer-experience programmes for tier-1 financial services and regulated public-sector clients. Currently product owner and lead architect on SARC — a self-hosted, tamper-evident compliance and evidence platform for regulated delivery, spanning multi-cloud Kubernetes, three CI platforms and ServiceNow. Previously led a Bitbucket + Bamboo to GitHub Enterprise + GitHub Actions migration across six business units at a US investment bank, and rolled out a Backstage-based internal developer platform for the UK's National Energy System Operator. Equally comfortable architecting the platform, writing the Terraform, presenting the SOW to the CTO, and shipping the product.

Core skills

Source control & CI/CD: GitHub Enterprise (Cloud & Server), GitHub Actions, GHAS, CodeQL, Actions Runner Controller, Bitbucket → GitHub and Bamboo → Actions migration, Azure DevOps, GitLab CI, Jenkins, ArgoCD, FluxCD, Tekton.
DevSecOps & supply chain: Snyk, SonarQube, Wiz, JFrog Artifactory (OIDC), HashiCorp Vault, Fides, Kosli, SARIF, SBOM, signed commits, branch protection at scale.
Cloud & infrastructure: Azure (primary), AWS, GCP, Kubernetes (AKS, EKS, GKE), Azure Red Hat OpenShift, Docker, Helm, service mesh.
Infrastructure as code: Terraform, Crossplane, Bicep, ARM, Ansible, NixOS.
Platform engineering: Spotify Backstage, self-service templates, golden paths, FinOps, SRE, AIOps/LLMOps.
Governance & compliance: ServiceNow (DevOps Change Velocity, CMDB, ITSM), tamper-evident attestation ledgers, Azure Policy, AWS Organizations, SOX change controls, ISO 27001 alignment.
Observability: Prometheus, Grafana, Datadog, ELK, Azure Monitor, CloudWatch, distributed tracing.
Programming: Go, Python, Rust, PowerShell, Bash, YAML.

Experience

Calitii (a Synechron company) · Senior DevOps & Platform Architect (contract)

June 2025 – present · London

Product owner & lead architect — SARC. (current) Orchestrated compliance for regulated delivery: a self-hosted, tamper-evident Fides evidence ledger wired to ServiceNow and the delivery pipeline, with zero SaaS egress. Control coverage across DORA, ISO 27001, SOC 2, SOX, NIST 800-53, PSD2 and PCI-DSS; risk-scored change gates so a typo fix and a schema migration stop getting the same 48-hour CAB review; hash-chained audit log in place of quarterly evidence compilation. Single-switch deploys to AWS EKS, Azure AKS, GCP GKE, ROSA OpenShift and local k3d off one Terraform and Helm shape; identical pipeline on GitLab CI, GitHub Actions and Azure DevOps. A 37-screen portal with an in-cluster AI assistant and MCP servers, so auditors can query evidence in plain language without a cloud API key.

Lead DevOps & migration architect — Jefferies Financial Group. Led the GitHub Enterprise migration off Bitbucket + Bamboo across six business units; Phase 1 reference architecture of reusable workflow templates and self-hosted runners on AKS; Terraform-based GitHub Enterprise governance; zero-downtime cutover of production Bamboo pipelines; executive SOW and C-suite materials.

Lead platform engineer — National Energy System Operator. Designed and rolled out Backstage as NESO's internal developer platform; defined the DevOps framework — tooling standards, environment promotion, branching, change control.

Open source — Fides, Hecate & the Factory suite. Fides, a tamper-evident provenance and evidence ledger for the SDLC (Go); Hecate, the cross-environment promotion layer for FluxCD (Go); and the Factory suite — PFactory, AIFactory, TFactory and CFactory — a governed pipeline for AI software delivery with a human gate at every seam. Plus the Agentic SDLC reference implementation: the operating model for agent-written software as a repository that runs, with deterministic gates proven to refuse.

Open source — SkillAi. Self-hosted AI recruiting platform on Claude and Gemini; multi-format CV parsing, four-dimensional scoring, vector-embedding search; in production for HSBC Kraków hiring.

Ofgem · Senior DevOps Engineer (contract)

November 2024 – April 2025 · London

Return engagement continuing the AKS / microservices and CI/CD modernisation begun in 2020–2022.

R3 · DevOps Manager

June 2023 – June 2024 · London

Led a multinational DevSecOps team on R3's distributed-ledger products (Corda); established SRE practice — SLOs, structured logging, error budgets — improving reliability and MTTR; embedded shift-left security in the pipeline.

Contino · Principal Consultant

February 2023 – May 2023 · London

Client-facing delivery on cloud-native engagements across AWS, Azure and GCP.

Live-Tech Games · DevOps Engineer / Platform Lead

October 2022 – January 2023 · London

Scaled the platform to one million concurrent users on AKS through a microservices redesign and SRE-driven autoscaling; hardened the deployment pipeline with zero-trust controls.

Kantar Worldpanel · Head of Azure Platform

March 2022 – October 2022 · London

Ran the internal Azure platform as a product; applied FinOps to cut spend and modernised the platform with infrastructure as code.

Ofgem · DevOps Manager

July 2020 – March 2022 · London

Led the modernisation of legacy regulatory applications onto microservices on AKS with hardened CI/CD; authored the DevSecOps blueprints used to standardise environment delivery.

Earlier

Twelve years prior in cloud architecture, platform engineering and CTO/CIO roles across Oslo and London — Basefarm / Orange Professional Services (lead Azure solutions architect), Communitech (CTO), Molte Tech (head of Azure platform), and others. Details on request.

Languages & volunteering

English — fluent · Norwegian — native · Polish — heritage / fluent
Governor, The Norwegian School in London · 2020–2024