You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Staf WagemakersSW

Staf Wagemakers

Security, Linux, Unix & Cloud System Engineer

€730/day
Antwerpen, BE
15+ years

Average response time: 1 hour

About Staf

Throughout my career, I have helped organizations modernize their infrastructure by integrating
security into every stage of the software delivery lifecycle, automating operational processes, and
building scalable, secure, and reliable platforms.

I am a Security, Linux, and Cloud Engineer with over 30 years of experience designing, securing, automating, and operating enterprise IT infrastructure. My expertise spans DevSecOps, Kubernetes, OpenShift, PKI/HSM, infrastructure automation, and cloud-native platforms.

What I can do for you:

• Infrastructure automation:

Design and automate reliable infrastructure using Infrastructure as Code and configuration management to improve consistency, scalability, and operational efficiency. Streamline and automate your infrastructure to reduce manual overhead and eliminate human error.

• DevSecOps & Platform Security:

Integrate security into CI/CD pipelines, Kubernetes platforms, and cloud environments using industry best practices, threat modeling, compliance automation, and vulnerability management.

• PKI, Identity & Secrets Management:

Implement and integrate PKI, HSM, certificate lifecycle management, authentication, authorization, and enterprise secrets management solutions.

• Software & Platform Engineering:

Develop automation tools, deployment frameworks, and operational tooling that simplify infrastructure management and improve developer productivity.

Why work with me?

With three decades of real-world experience, I bring both deep technical knowledge and a pragmatic mindset. I don't just deliver code — I deliver solutions that work in production.

Interested in collaborating? Feel free to reach out and let's discuss your project.
  • Dutch

    Native or bilingual

  • English

    Fluent

Can work on-site
Antwerpen (up to 50km), Brussel (up to 50km), Maastricht (up to 50km)

Experience

  • Mask27.dev
    Independent Security, Linux, Unix & Cloud System Engineer
    October 2023 - Today (2 years and 10 months)
    Owner

    I am an engineer with over 30 years of experience in Unix system administration, software development, system development/automation, cybersecurity, and cloud computing.


  • Federal Public
    DevOps Engineer
    October 2023 - Today (2 years and 10 months)
    Brussel, Belgium
    Freelance assignment.


    ◦ Migrated Kubernetes setup from OpenShift 3 to OpenShift 4.
    RedHat OpenShift, Ansible, GitLab
    ◦ Migrated virtual machines from OpenStack to VMware.
    OpenStack, VMWare, Ansible, Docker, Docker Compose, Docker Swarm
    ◦ Improved monitoring setup.
    Prometheus, Grafana, AlertManager, Ansible, GitLab, Loki, ELK Stack (Elasticsearch)
    ◦ Reviewed CI/CD pipelines and created new architecture to deploy the applications with Helm.
    GitLab, Ansible, Terraform, OpenShift, Kubenetes, Helm, Helmfile, ArgoCD, Docker, Podman
    ◦ Security review and architecture.
    GitLab, Trivy, Syft, Grype, Kubescape, SonarQube, OpenSCAP, SBOM, OWASP dependencytrack, OWASP CycloneDX, RedHat Satellite
    ◦ Upgraded GitLab from 15 to 17. Reviewed/Improved pipelines and automation setup. GitLab, Semaphore, Ansible, Terraform
    ◦ Implemented secret management solution.
    Kubernetes, OpenShift, External Secrets Operator (ESO), Vaultwarden, Ansible, Hashicorp Vault, OpenBao, Azure Key Vault, Secret Store CSI Driver, Hashicorp Vault Secret Operator (VSO)
    ◦ Setup and maintain the Docker build environment for our developers. Docker, Docker Compose, Docker Swarm
    ◦ Setup SSO for Java applications.
    Kubernetes, OpenShift, Keycloak, LDAP, Active directory
    ◦ Reviewed Hybrid cloud setup
    Kubernetes, OpenShift, Amazon AWS, Microsoft Azure, Terraform
    ◦ Automate certicate renewal process
    Kubernetes, OpenShift, cert-manager, Hashicorp vault PKI, Ansible, ACME, Certbot
    Kubernetes Hashicorp Vault OpenShift Linux Docker
  • GIMV
    Tomcat Security Engineer
    February 2025 - April 2025 (2 months)
    Antwerpen, Belgium
    Freelance assignment (short-term project)

    ◦ TLS configuration for Tomcat.
    Tomcat, OpenSSL, Nmap
    TLS Apache Tomcat Nmap IT-Security OpenSSL

Recommendations

Be the first to recommend Staf

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • Bachelor Electronics
    Karel de Grote hogeschool
    1994
    Bachelor Electronics
  • Unix & Internet Security (AT
    Unix & Internet Security (AT

Categories