Robert Andruschow

DevOps / Platform / Site Reliability / Cloud / Backend Engineer

Berlin, Germany

SUMMARY

Seasoned Platform / DevOps / Site Reliabilty / Cloud Engineer with 15 years of experience in the industry and a background in Backend engineering and mathematics.
I have worked for 6 years as a backend engineer in the Java universe before moving to infrastructure related occupations for the past 9 years. I have worked extensively with public cloud (AWS, GCP), Kubernetes and various CI/CD systems. I am a polyglott programmer with primary expertise in Golang and Java.
I have a proven track record of successfully executing tech projects, owning all aspects of the infrastructure, fostering knowledge transfer inside and cross-teams and establishing cyber security standards within an organization.
I created kube-advisor.io, a platform which uncovers misconfigurations and best practice violations in Kubernetes clusters.
Recently I worked on a enterprise Kubernetes platform at Mercedes-Benz Tech Innovation making heavy use of AI models for feature development and debugging.

Skills

  • Tech Ownership
  • Public Cloud Architecture
  • Automation
  • Platform Engineering
  • Software Architecture
  • Cyber Security
  • Backend Engineering
  • Agile Methodologies

Familiar Technologies

  • AWS (8y)
  • GCP (3y)
  • Kubernetes (7y)
  • Docker
  • Helm
  • Prometheus / Grafana / Loki / Open Telemetry
  • Datadog
  • Infrastructure-as-Code
  • Terraform
  • Cloudformation
  • CDK
  • Java/Groovy/Kotlin+Spring/Grails
  • Maven/Gradle
  • Golang
  • Python
  • Bash
  • Java- / Typescript
  • Ruby
  • Hashicorp Vault
  • Cloudflare / Zero Trust
  • Networking / TCP/IP / UDP / SSL / DNS
  • CI/CD
  • GitHub Actions
  • CircleCI
  • Gitlab Pipelines
  • Bitbucket Pipelines
  • Spinnaker
  • Jenkins
  • PostgreSQL
  • DynamoDB
  • MySQL
  • Atlassian Stack
  • OpsGenie
  • Site24x7
 Google Cloud Certified Professional Cloud Architect

EDUCATION

Technische Universität Berlin

2007 – 2017 | Bachelor of Science (in 2011, final grade 1,8) and Master of Science (unfinished)

EXPERIENCE

Kubernetes Platform Engineer (labour lease)

April 2025 - September 2026 | Mercedes-Benz Tech Innovation

    Contributed to development and management an enterprise-scale Container-as-a-Service (CaaS) platform, automating the lifecycle of approximately 400 Kubernetes clusters deployed on both AWS and OpenStack environments.
  • › Co-developed the Generation 2 architecture of the enterprise platform, utilizing AWS managed EKS to improve scalability, reliability, and developer experience.
  • › Implemented GitOps and control-plane methodologies using Golang Kubernetes Operators, Crossplane, FluxCD, and Sveltos to fully automate infrastructure provisioning.
  • › Automated the provisioning, reconciliation, and deletion of EKS clusters, including its AWS accounts, complex networking, and IAM roles.
  • › Add-on Management: Standardized and automated the deployment of essential cluster add-ons, including cert-manager and external-dns, ensuring consistent environment baselines.
  • › On-call and maintenance for the existing platform, particularly Generation 1 providing Vanilla Kubernetes clusters on top of AWS using ClusterAPI

Founder

August 2024 - now | kube-advisor.io

    I solo-created a platform automating observability for Kubernetes best practices and misconfigurations
  • › Worked on all aspects of the product: AWS Infrastructure, Backend(Golang), Frontend(React, Bootstrap, Tailwind), Kubernetes agent(Golang), Marketing and Sales.
  • › Open-sourced the Kubernetes agent and its helm chart

Site Reliability Engineer (labour lease)

August 2023 - August 2024 | Bundesdruckerei GmbH

    Worked on the projects Smart-eID (the digital passport for Germany), EZB I (the digital car registration for Germany) and the digital driver's license for Germany.
  • › Site Reliability Engineering on top of BDR's on-premise OpenShift Platform
  • › Introduced a project-generic release process utilizing Helm and GitLab Pipelines balancing the needs of software engineers, project management and customers
  • › Introduction of RFC's for solutions design and a team-internal 360° feedback process
  • › Led discussions with the customer (KBA) around a secure network connection via Netz-des-Bundes
  • › Design and implementation of a monitoring solution for the Governikus eID-Server

Cloud Consultant (Freelancer)

August 2023 - April 2024 | KiVVON GmbH

    I supported a startup development team with their AWS/Cloud architecture and security posture
  • › Designed a new network infrastructure (VPC, Subnets, Client VPN) following AWS Well-Architected guidelines and moved all applications there

Senior DevOps Engineer

June 2020 - May 2023 | UP42 GmbH

    I owned the whole company's cloud infrastructure (mainly GCP + GKE, but also AWS and Azure)
  • › Designed and implemented secrets management using HashiCorp Vault and rolled it out to the whole org
  • › Introduced Cloudflare Zero Trust for non-public-IP access to internal applications
  • › Managed the conduction of penetration tests with multiple external providers and organized resolution of the issues found
  • › Supported the SOC 2 Type 2 cyber security certification process of UP42 which ended in a successful certification
  • › Improved observability of the platform, introduction of alerting and on-call using OpsGenie

DevOps Engineer

October 2017 - May 2020 | Bonial International GmbH

  • › Introduction of containerization into the company, first with ECS, then EKS including CI/CD with Spinnaker, logging with fluentd/Cloudwatch/Elasticsearch, monitoring with Prometheus and on-call with VictorOps.
  • › Main contact person for all SDLC revoling topics for around 100 software engineers
  • › Built proxy for DataDog whitelisting custom metrics serving 10000 requests/minute using reactive Java
  • › Reengineered app for self-service staging environment creation using CloudFormation and Grails
  • › Implemented ChatOps apps interconnecting Slack and Spinnaker

Backend Engineer

June 2011 - Oct 2017 | Bonial International GmbH

  • › Backend engineering with java, groovy, spring and grails. Deep dive into various software design patterns (e.g microservices, BDD/TDD, anti-trainwreck, auto-scaling).
  • › Owned and improved main notification system sending millions of messages to customers on a daily basis
  • › Dealt with design and migrations for various database systems (Postgres, MongoDB)
  • › Owned the system scraping data from hundreds of retailer websites regularly

Developer Pawn Shop Business Software

2010 - 2013 | Self-employed

  • › C# and .Net Development with WinForms
  • › Defined the product based on customer discussions