Anatoli Lichii

In meiner Rolle als Cloud Architect im Cloud Center of Excellence (CCoE) von Dataport gestalte ich die strategischen Leitplanken für die digitale Souveränität der deutschen Verwaltung. Ich helfe dabei die Governance- und Compliance-Vorgaben, die als verbindlicher Rahmen sowohl für die interne Infrastruktur von Dataport als auch für die Umsetzung komplexer Kundenprojekte dienen zu definieren. Durch meine Expertise in Cloud-Native-Technologien und Open-Source-Stacks wie Kubernetes stelle ich sicher, dass technische Innovationen im Einklang mit regulatorischen Anforderungen stehen und das digitale Rückgrat unserer Gesellschaft sicher und skalierbar bleibt.

I bring fresh wind into your IT landscape with innovative cloud technologies, smart automations, and tailored solutions. From AWS to Kubernetes and Terraform, I offer extensive expertise in Continuous Integration and Deployment. With skills in Python, TypeScript, and Bash, as well as years of experience in web hosting and open source, I am your ideal partner for forward-thinking IT projects. Beyond technology, I express my creativity through music, philosophy, and religion. Throughout my career, I have managed projects of varying complexity, focusing on building, maintaining, and scaling local IT infrastructure and hosting solutions for web projects. I supported logistics companies, web agencies, and service sector clients. I assisted various web agencies in implementing DevOps practices, continuous delivery, project monitoring, and addressing issues like domain hosting and newsletter delivery using container technologies and cloud approaches. As an external consultant for Designer Outlet City*, I coordinated the web presence project based on Typo3, trained staff, and managed the CMS launch and Hypercare phase. For various eCommerce projects, I contributed as a developer and consultant, building webshops on OXID or Shopware, integrating frontends, implementing backends, and ensuring successful project launches. At CV Media Production, I resolved technical difficulties in project coordination, data distribution, and privacy policy-compliant data management. I built and maintained web presences for medical offices using WordPress/Typo3, enhancing their online visibility. For a major logistics company*, I maintained a complex proxy mail server setup, migrated critical components, and ensured smooth operation during the Hypercare phase. I set up secure hosting environments for Shopware hosting packages, enabling quick customer onboarding.

As a Lead Cloud Engineer at a leading AWS partner, I lead the DevOps team and drive migrations from on-premises and multi-cloud environments to AWS, leveraging the AWS Well-Architected Framework to ensure scalable and efficient solutions. My responsibilities include conducting Well-Architected Reviews to optimize existing architectures, performing Optimization and Licensing Assessments (OLAs) to enhance cost efficiency and licensing strategies, and providing technical expertise in sales pitches. Additionally, I implement the AWS Migration Acceleration Program (MAP) to ensure structured and efficient cloud migrations for our clients.

Temporary employment: I supported the expansion and review of the platform architecture, developed strategies for migrating to a cloud-native architecture, and improved the technical organization through governance guidelines and training. Additionally, I introduced cloud knowledge formats, organized meetings, and offered AWS coaching. I integrated monitoring tools and developed customized training plans with AWS providers. In platform development, I worked on strategy and goal definitions, created roadmaps, optimized platform components, validated them in real scenarios, and trained teams on their use.

Project-related employment: I set up a Central Logging environment in AWS and designed a cloud solution adapted to KRITIS and BDEW controls. I planned the new architecture using Terragrunt, ensuring code duplication avoidance, a staging concept, and a simple, readable code structure. I ensured the infrastructure's BCM capability by simulating a complete failure and subsequent reconstruction of the logging infrastructure. I organized and conducted training for development teams, documented the entire infrastructure, and coordinated technical implementation with other engineering colleagues. I supported the team in creating Architectural Decision Records (ADRs) and documented the entire platform infrastructure and services, coordinating collaboration with other project teams. I built a code pipeline and the infrastructure for the Central Logging architecture and connected it to the existing SAML solution (Keycloak, Openshift IDM). I supported the Openshift platform in an AWS cloud environment and the implementation of existing cloud solutions in the project’s IaC team. I extended and supported the ELK stack on fluent-bit/fluentd basis using Kinesis Firehose and AWS Opensearch & Opensearch dashboard. Additionally, I extended the existing CI/CD solution for teams using code pipelines and developed infrastructure solutions based on Terraform. I also elaborated best practices for cloud consultants.

I supported and implemented solutions for 15 independent development teams in code delivery to productive clusters, custom cloud-based solutions in AWS, monitoring and logging solutions, Kafka and AWS RDS-based data cluster operations, application security with the security team, and architecture improvements and migrations with the architecture team. In platform engineering, I supported a Kubernetes-based platform in an AWS cloud environment and developed a migration concept to AWS EKS. I supported existing clusters and solutions including AWS MSK (Kafka), AWS RDS (Aurora/PostgreSQL), ELK Stack (fluentbit/fluentd + Kinesis Firehose + AWS ES-Kibana), and CI/CD solutions for teams using Concourse CI. I also developed and supported infrastructure solutions based on Terraform.

I developed vagrant, docker, and docker-compose environments for rapid project deployment, supported projects during launch, and assisted developers in the initial project phase. In platform engineering, I developed and supported automatically deployable testing solutions, infrastructure for code delivery and integration, and infrastructure for additional code testing systems and custom hosting solutions on both hardware and cloud. For infrastructure support, I developed and supported local IT solutions, configured server infrastructure for data transfer and storage, and managed local firewalls. Tech stack included VMware ESX, pfsense, freepbx, security scanning for local IT infrastructure, and gitlab, vagrant, PHP, bash, docker, docker-compose, traefik, terraform, and kubernetes for platform/SRE tasks.