About

Professional developer since 2001. AWS Community Builder since 2021.

25 years from pixel to pipeline. Started in design agencies turning PSDs into HTML, built and led a 35-person dev team, ran multi-account AWS infrastructure at scale – and now build the CLIs, MCP servers and agents that teams and AI run on.

Automation is my core craft. AI makes producing code cheap; what still matters is knowing which process to automate, where the edge cases hide, and how a tool feels to the person – or the agent – using it. That’s where the agency years pay off: I design tooling like a product.

I take ownership – of projects, problems and solutions.

AI-native development: spec-driven development with agentic coding tools (Claude Code, OpenCode) – and I build the tooling those agents use: MCP servers, CLIs, skills, hooks, GitHub Actions.

Go is my preferred language. TypeScript and Python where they fit. Bash hero, Makefile ninja.

Can lead, want to code.

I do the full stack:

  • AI tooling – MCP servers, agent skills/plugins, CLIs for humans and agents
  • Infrastructure as code – AWS CDK, CloudFormation, Terraform
  • Automation & CI/CD – GitHub Actions, GitLab Pipelines, AWS CodePipeline
  • Application / Service / Microservice design
  • Front- and backend development
  • Observability – Metrics, logging, tracing
  • Containers & serverless – for development, testing, CI and prod
  • DB schema design – PostgreSQL, MySQL
  • Server administration & virtualization

As important as code is documentation: my code ships with an owner’s and user’s manual.

Fully remote since 2013, always in widely distributed teams.

Stack Overflow: 61k reputation, long-time #1 answerer for Ansible (still top 5 all-time), top 5% for git, Docker, ssh, Jinja2, CSS… – written back when humans still answered each other’s questions.

Technologies I want to work with: TypeScript, Go, Rust, AWS, AWS CDK, Serverless, Bash, Claude Code, AI agents, Automation, Docker

Open Source & AI Tooling

Tools I build and maintain – for developers, for myself, and increasingly for AI agents. Most ship as SDK + CLI + MCP server, so humans and agents use the same interface.

  • IAM Floyd – AWS IAM policy statement generator with a fluent interface – for TypeScript, JavaScript, Python, Java, C# and Go. Covers every AWS service, updated automatically.
  • cfn-teleport – Rust CLI for moving CloudFormation resources across and within stacks without recreating them.
  • cdk-ec2-key-pair – AWS CDK L3 construct for managing EC2 key pairs.
  • Avanti – Stateful package manager for arbitrary text files: declare what you need and where to get it; Avanti fetches, diffs and writes with full version history, atomic rollbacks and diff-before-apply safety.
  • boarding-gate – GitHub Action that queues workflow runs so only one at a time uses shared resources – ordered by PR labels, without cancelling pending runs, aware of auto-merge and outdated branches.
  • Ansible Silo – Self-contained, drop-in Ansible distribution in Docker: version manager and playbook bundler in one. Built and open-sourced at Groupon (2017).
  • anton – Node.js SDK, CLI, MCP server and Agent Skill for the anton.app learning platform.
  • duolingo – Duolingo SDK, CLI and MCP server.
  • lanis – SDK, CLI and MCP server for Schulportal Hessen (Lanis).
  • dsbmobile – SDK, CLI and MCP server for DSBmobile – German school substitution plans.
  • switch-parental-controls – CLI and MCP server exposing Nintendo Switch Parental Controls as commands and AI-accessible tools.
  • reminders-cli – CLI for Apple Reminders on macOS: JSON output, batch edits, repeating reminders, Homebrew install. Also available as a Claude Code plugin.

Experiences

  • Building AI agents, MCP servers and agent skills for Jira, GitLab and internal DB systems – putting agentic workflows into daily operations
  • Replaced Ansible Tower with a custom serverless automation platform on AWS SSM, Lambda and ECS/Fargate (after first building an autoscaling Ansible Tower cluster)
  • Managing GitLab runner infrastructure, build environments and CI/CD pipelines for 300+ projects
  • Migrated Ansible and CloudFormation IaC to AWS CDK
  • Molecule test coverage for ~300 Ansible roles and playbooks
  • Managing SAP infrastructure in AWS; responsible for AWS account and system security

  • Managed all company AWS accounts and baseline configuration via Terraform/Terragrunt
  • Established a modular, extendable tooling framework based on Terragrunt, aws-okta, tfenv, Terraform Landscape and a lot of Makefile – so teams could start quickly with robust, secure multi-account IaC
  • Designed and built multi-account/multi-environment Terraform CI/CD system based on AWS API Gateway, Lambda, Fargate, DynamoDB and S3

  • VM provisioning, management and user support (KVM/QEMU/Virsh)
  • Developed Go microservices for the complete VM lifecycle (request, approval, allocation, deployment, migration, deletion) – libvirt, Go kit, GORM, PostgreSQL
  • Go-based VM console tool: opens SSH tunnels to VM hosts and connects to the VNC port, for troubleshooting VMs that have no SSH access
  • Manually migrated and enhanced graphs and dashboards for 23 services from legacy in-house graphing tool to VMware Wavefront
  • Built a package repository cache (CentOS/RPM incl. EPEL/ELRepo, plus Debian and FreeBSD): automated upstream syncing, snapshot tagging for reproducible installs (“infrastructure versioning”), custom package uploads, ZFS replication across 3 data centers – based on mrepo, FreeNAS, Python tooling and Ansible
  • Containerized applications to make builds, tests and deployments faster and more reliable (Docker)
  • Automated image building via Jenkins pipelines

  • Invented Ansible Silo (open source, Groupon) – self-contained, drop-in Ansible distribution in Docker: version manager and playbook bundler in one
  • Built “Redis as a Service”: large-scale, highly available, rack-aware Redis clusters with configurable shards and replication rings – based on Redis Sentinel and twemproxy/nutcracker, lifecycle management via Ansible
  • Built a tooling framework for Ansible 1.3 that added features Ansible itself only introduced with version 2 – including Galaxy-like role distribution with plugin support
  • Set up an internal Ansible Galaxy hub and wrote a complete role set for managing CentOS 6/7 systems: DNS/Named, NTP, sshd, network interfaces (bonding, bridges), users, kernel settings, log rotation, log forwarding to Splunk and metrics forwarding to Nagios
  • Ansible callback plugins for sending events to Nagios, automatic downtime and chat notifications
  • Serverspec test suites for Ansible roles

  • Managed global Splunk infrastructure with ~200 indexers and 20+ TB daily indexing volume
  • Supported Splunk users with scheduled searches and dashboards; reviewed and optimized searches
  • Wrote custom Ruby plugins for Splunk searches
  • Managed updates and custom app distribution through Splunk Deployment Server

  • Built and led a PHP development team from scratch, growing it to 35 developers
  • Designed and built PHP applications based on Zend Framework for Groupon’s high-traffic platform
  • Technical lead for GrouponShop, the jobs, blog and premium-partner systems, and all online-marketing applications: landing pages, AdWords real-time bidding, newsletter, tracking and ad systems

  • Created websites for various customers, mostly based on webEdition and Drupal
  • Set up, configured and themed forum, blog and shop systems
  • Developed PHP applications and modules for Drupal, webEdition and Magento
  • Built HTML/CSS templates from PSD designs

  • Contract work for agencies: HTML, CSS, JavaScript, PHP and CMS projects (mostly webEdition)
  • Built HTML/CSS templates from PSD designs

  • Vocational training as Fachinformatiker Anwendungsentwicklung (German IT specialist certification, application development)
  • Developed web applications based on HTML, CSS, JavaScript, XML, PHP, web services and databases (MySQL, Xindice, Tamino)
  • Built websites based on content management systems (eZ Publish, Imperia 5)

  • Supervised children and teenagers in the internet café “Globales Lokal”
  • Administered SuSE Linux clients
  • First hands-on HTML and PHP, maintaining the website of “Globales Lokal”
  • Taught beginner HTML classes to kids