Senior Software Engineer, Infrastructure @ Camunda 📍 Austria · 🌐 Remote

I build CI/CD platforms that are fast and secure by default, and I turn incidents into structural fixes for the whole engineering org.

I'm a platform engineer with a programming background. I started as a Java developer building tools in the financial and public-services sectors, then deliberately moved deeper into the infrastructure stack: from application code to CI/CD pipelines, to containerizing microservices, to building entire Kubernetes platforms from bare metal up. Today I think like a programmer when solving infrastructure problems. I write reusable frameworks, design self-service abstractions, and ship end-to-end with minimal oversight, so the leverage lands on the whole organization.

I am a strong advocate for an async-first workstyle, valuing deep work, transparent group communication, and respecting others' time over synchronous interruptions (when plannable). Currently I'm building out my personal OS to become more data-driven and efficient with everyday chores and planning, across both my private and professional life.

Together with the Infra team, I run Camunda's developer platform for 100+ engineers across 10+ product teams: self-hosted GitHub Actions runners on GKE and EKS, preview environments, Kubernetes, container registries, dependency automation, observability and secrets management. My focus is secure software delivery: keyless CI identities, a pinned and tested supply chain, and self-service that keeps product teams unblocked. I own multi-quarter programs end to end, write the decision records other teams build on, and lead the Infra side of security incidents.

• 🔐 Secure by default, org-wide: moved CI secrets access for 100+ repositories to team-scoped, least-privilege policies and now to keyless OIDC; SHA- and digest-pinned the supply chain with policy enforcement; moved secrets-manager backups outside their own trust domain. Incident lead on the Infra side during industry-wide supply-chain attacks, each one turned into structural hardening. Case study →
• ⚡ Started and run a developer-toil reduction program: PR-lifetime leases for shared dev infrastructure, a component-test framework that gates dependency automerge, and an agent that retires upstream workarounds once fixes land, across 16 repositories. Agent-driven maintenance is the next stage. Case study →
• 🏗️ Led a multi-quarter, cross-team platform migration: moved a product team's benchmark environment onto isolated, GitOps-managed clusters, then handed it back as self-service. The owning team has since shipped 40+ changes to it on their own. Case study →
• 🤖 AI as a team force multiplier: agent skills that encode our runbooks, agent-authored PRs dispatched from request threads, and vault-wrapped-secrets, a public action that hands secrets to agent jobs without giving them credentials. Case study →
• 🧭 Set technical direction in writing: introduced decision records for our infrastructure codebase and authored the roadmaps and epics the team executes on.

I created HomeRacker because I was dissatisfied with existing 3D-printable rack solutions: too specific, too rigid, too many adapters. HomeRacker is a fully parametric, open-spec system that can build anything from a Raspberry Pi mini-rack to a 10"/19" server rack to a bookshelf. It needs no printed supports and no tools for assembly.

• 🎥 YouTube: Build Guides & Tutorials
• 🖨️ Makerworld: Ready-to-Print Models
• 🐙 Community Repo: Extensions & Modules

Also built scadm (PyPi), a zero-dependency Python package manager for OpenSCAD libraries. pip install scadm

Cloud          GCP · AWS · Azure · Hetzner
Kubernetes     GKE · EKS · Rancher · bare-metal
Virtualization Proxmox
IaC            Terraform · Pulumi (Go) · Kustomize · Ansible
GitOps         ArgoCD · FluxCD
CI/CD          GitHub Actions · Jenkins · Gitlab
Security       Teleport · Vault · WireGuard · Okta · Yubikeys (GPG)
Monitoring     Prometheus · Grafana · OpenTelemetry · Elasticsearch · Opensearch
Languages      Go · Java · TypeScript · Python · Shell
Databases      PostgreSQL · MySQL · MongoDB · Neo4j · Redis
3D/CAD         OpenSCAD (and the BOSL2 lib) · Fusion 360
Coding Agents  GitHub Copilot · Claude

• 💼 LinkedIn
• 📧 kellervater@gmail.com
• ▶️ YouTube