Cahit Öz

Lindenweg 2, 4303 Kaiseraugst · +41 76 618 00 33 · [email protected]

Security-First: Ensuring the highest levels of compliance and adherence to stringent security standards through systematic infrastructure hardening, proactive vulnerability scanning, and the consistent implementation of DevSecOps and CI/CD pipelines.

Team Leadership & Coordination: Over 12 years of experience in leading and successfully integrating geographically distributed, cross-functional teams within complex project environments.

More than 20 years of IT experience with a focus on designing and implementing secure, highly available, and cost-efficient solutions across AWS, Azure, and GCP.

Innovation & AI: Deep expertise in the full AI lifecycle—from traditional deep learning with TensorFlow, Keras, and PyTorch to modern GenAI/LLM architectures (RAG)—driving significant gains in development efficiency and process optimization.

Experience

Solution Architect / SRE (Contractor)

SBB Swiss Federal Railways (Switzerland) (Orange Business)
April 2026 - Now

Leading the operational excellence and reliability engineering for critical application infrastructure, focusing on high availability and data-driven performance monitoring.

  • Reliability Engineering: Define and monitor Service Level Indicators (SLIs) and Service Level Objectives (SLOs) to ensure high availability, recoverability, and efficient resource consumption of application operations.
  • Incident & Problem Management: Perform deep-dive analysis of application disruptions and errors, implementing immediate workarounds and long-term technical fixes to maintain system stability.
  • Performance Optimization: Track and report on application performance against defined SLOs, providing stakeholders with data-driven insights into system health and resource trends.
  • Release & Deployment Management: Lead installation planning for application releases and actively contribute to specifications, testing, and rollout phases to ensure seamless implementation.
  • Stakeholder Coordination: Act as the primary liaison between application users, support units, and development teams to streamline communication and resolve complex technical bottlenecks.
  • Process & Documentation: Manage comprehensive system documentation, including operating manuals and user guides, while overseeing change requests and critical data maintenance.
  • Continuous Improvement: Coordinate application evolution by gathering business requirements, developing solution concepts, and formalizing release agreements.
Used technologies, Tools and Methodologies
SLIs / SLOs / SLAs Prometheus Grafana Kubernetes Docker JIRA XRAY Confluence ITIL

Solution Architect / Consultant (Contractor)

dsm firmenich (Basel/Switzerland) (BECHTLE)
May 2025 - December 2025

Supporting the infrastructure separation initiative at dsm-firmenich as part of a corporate carve-out, scheduled for completion by the end of 2025. Focused on the migration of legacy systems and VMware-based workloads to the AWS Cloud and a secondary data center in Switzerland. Apart from technical consulting, I am also responsible for the hands-on implementation of the solutions.

  • Drive the end-to-end planning and execution of server and workload migrations in a complex, multi-site carve-out environment, ensuring business continuity and minimal disruption.
  • Design and implement tailored migration strategies, including lift-and-shift and replatforming approaches, aligned with organizational and technical requirements.
  • Collaborate with cross-functional teams (networking, security, application owners) to assess current infrastructure, define the target state, and ensure compliance with security and regulatory standards.
  • Optimize infrastructure performance, availability, and cost across hybrid-cloud and multi-data center environments.
  • Provide architectural guidance and hands-on support for cloud infrastructure, automation, and monitoring.
Used technologies, Tools and Methodologies
VMware ESXi 7 AWS Application Migration Service (MGN) AWS Database Migration Service (DMS) AWS EC2 VPC CloudWatch CloudTrail

Solution Architect (Freelancer)

die Mobiliar (Bern/Switzerland) (QIM INFO)
November 2024 - March 2025

Conceptualized and designed a Landing Zone for PowerApps applications within the Azure cloud environment.

Used technologies, Tools and Methodologies
Kubernetes CrossPlane Azure Golang

Consultant, Developer (Freelancer)

Bundeswehr IT (BWI)
February 2024 - November 2024
  • Vulnerability Management: Leveraged CVE and NVD frameworks to identify, prioritize, and remediate security flaws, utilizing CVSS scoring to focus on high-risk exposures.
  • Infrastructure Auditing: Executed comprehensive vulnerability scans across enterprise infrastructure, identifying critical weaknesses and providing actionable risk-reduction roadmaps.
  • Systems Hardening: Strengthened organizational security posture by implementing rigorous hardening measures (e.g., CIS Benchmarks, OS-level security configurations) across production environments.
  • Security Automation: Engineered custom automation scripts in Golang to optimize security workflows.
  • Offensive Security: Conducted targeted penetration testing to simulate real-world attack vectors, validating system resilience and ensuring the effectiveness of existing controls.
Used technologies, Tools and Methodologies
Golang Kubernetes DOCKER REDHAT SLES NMAP CVE/NVD CIS-Benchmarks

Consultant (Freelancer)

Misumi Europe GmbH
June 2023 - February 2024
  • Coordinated AWS-related changes with stakeholders, ensuring alignment and effective communication.
  • Optimized AWS resources for cost and performance, achieving on Some Services savings of %90 Percent.
  • Enhanced the Disaster Recovery (DR) strategy and pipelines
  • Advised development teams on designing highly available (HA) systems, promoting best practices.
  • Improved the system's security posture
Used technologies, Tools and Methodologies
AWS Backup Security AWS WAF Cloudflare EC2 Aurora EKS Apprunner Containers Docker High Availability Disaster Recovery

Senior Technology Architect

Bearingpoint GmbH
Februar 2023 - June 2023

Provided consulting services to clients migrating SAP systems to the cloud, focusing on AWS

Used technologies, Tools and Methodologies
SAP Data Analytics EC2 SAP Activate Cost Optimization High Availability Disaster Recovery

Solution Architect

Lufthansa Industry Solutions
May 2022 - October 2022
  • Hardened multiple environments against identified vulnerabilities, improving overall security.
  • Enhanced the development environment with CI/CD pipelines using GitHub Actions, streamlining the software delivery process.
  • Implemented network firewalls and a transient gateway to secure communication between VPCs and the internet.
  • Integrated AWS infrastructure with APIGEE (Google's REST API Gateway) running on GCP, enabling secure API access.
Used technologies, Tools and Methodologies
Terraform Amazon Inspector Amazon Code Build Amazon Code Deploy Amazon Code Pipeline APIGEE

Solution Architect

Siemens Industry Solutions
September 2019 - April 2022
  • Automated and optimized cloud infrastructure creation for prospective customers.
  • Developed a web portal for users to request infrastructure for POCs.
  • Containerized server systems using Docker, improving portability and scalability.
  • Automated recurring tasks using AWS Lambda functions, increasing efficiency.
  • Implemented Infrastructure as Code (IaC) using CloudFormation and Terraform for automated infrastructure deployments.
  • Created a VDI infrastructure using Workspaces and AppStream to provide secure access to the environments.
Used technologies, Tools and Methodologies
Terraform Amazon Inspector Amazon Code Build Amazon Code Deploy Amazon Code Pipeline AWS API Gateway AZURE GCP

Consultant (Freelancer)

CHRIST Juweliere und Uhrenmacher seit 1863 GmbH
March 2019 - Juli 2019
  • Rollout of Fiskalisierung in Austria for GK Cash Registers
  • Requirements gathering
  • 3rd. Level Support
Used technologies, Tools and Methodologies
GK Cash Registers

Programm Manager / Solution Architect(Freelancer)

LTI - Larsen & Toubro Infotech
May 2019

Submitting a Proposal to Migrate 53 on premise SAP Servers (Prod/Dev/Test) to the AWS cloud. During this migration, 23 instances that use Oracle DB should have been transformed to SAP HANA and 30 environments migrated via Lift&Shift The main objective of the customer is to optimize the environment for cost and agility and minimize its IT footprint.

Used technologies, Tools and Methodologies
SAP HANA SAP ASE Software Update Manager (SUM) database migration option (DMO) Cloudformation System Manager EC2 Lambda Route53 S3 Glacier AWS Direct Connect Palo Alto Kaspersky

Solution Architect/Consultant (Freelancer)

ALDI Süd International Services
January 2019

Analyzing the Onpremise and AWS Cloud infrastructure and reporting the requirements needed to fullfill the PCI/DSS 3.2.1 requirements

Used technologies, Tools and Methodologies
AWS Datenzentren SAP Hybris SAP ADOBE Experience Manager

Projectmanager / Consultant

Amadeus Data Processing GmbH (Erding) (Temporary Employment)
October 2017 - December 2018
  • Ensuring that communication within the internal and external network is PCI/DSS compliant. That communication is established over TLS 1,2 only and using strong ciphers.
  • Establishing systems to track customer readiness and F5 configuration monitoring.
  • Coordination of remote and onsite teams that handle the Application, Server and Cloud infrastructure.
  • Design of Software Solutions that are used to track vulnerabilities.
Used technologies, Tools and Methodologies
AWS Cloud Amazon ECS Kubernetes System Architecture JIRA Confluence SLA Network scanners Nmap Citrix Thin / Fat-Client TLS-Scanner Security Vulnerability-Scanner Elastic Search Kibana

Developer / Project Manager / Solution Architect

Optimize Route (Founder of the Startup)
March 2017 - October 2017
  • The optimized routes were then transferred to the phone of the driver (The Ionic framework was used to establish a solution for iPhone, Android and Windows based Phones)
  • Development of a Software Solution that optimizes destinations that are entered through an API either based on Time or Distance
  • For scalability the Google FIREBASE database was used.
Used technologies, Tools and Methodologies
Google Maps Google Cloud Platform Microservices Google Functions Docker Google Firebase IONIC Framework PHP Node.JS Angular JS Maria DB FIREBASE HTML CSS Java Script

Projekt Manager

GK Software AG (Home Office)
January 2016 - March 2017
  • Responsible for the design of the Application and Technology Architecture and managing their implementation for the Retail sector.
  • Leading workshops to analyze the IS State and gather customer requirements.
  • Monitoring and Reporting the project status, ensuring that the project is within the defined budget, quality and proceeding according to plan.
  • Responsible for the delivery of Licenses, Software and integrating our systems to services provided by 3rd parties.
Used technologies, Tools and Methodologies
System Architecture JIRA Confluence SAP SAP-HANA Oracle MS-SQL Java IIS Tomcat NetWeaver POS Label and Poster Printing Scale Self-Checkout

Military Service

Turkish Military (Istanbul/Turkey)
December 2014 - May 2015

Solution Architect / Projekt Manager / Team Leader / Software Developer

Unify Inc. / ICTerra Information & Communcations A.S. (Ankara/Turkey)
July 2008 - December 2014
  • Gathering requirements and designing the System and Software Architecture.
  • Problem management, Incident Management and ensuring that they are solved within the time frame specified by the SLA.
  • Working in multicultural environment acting as single point of contact between Product Owners across Europe and the Development and Test Teams in Turkey.
  • Designing, preparing and updating the required documents, tools and reports informing stakeholders about the Project status.
  • Ensuring that the customer system environment (CMDB) is kept up to date.
  • As a Product Owner was responsible for developing a new Software Solution. (modernisation of an existing system)
Used technologies, Tools and Methodologies
Product Owner BPMN SDLC SLA KPI VoIP SIP HFA TDM Unified Communications C C++ ECL Java PHP Perl Soft Clients

Global Vendor Support / Service Manager

Siemens Enterprise Communications (Ankara/Turkey)
March 2007 - July 2008
  • Responsible for two Software Applications to enhance customer satisfaction.
  • Problem and Incident Management, Root cause analysis, release Management.
  • Ensuring that problems were solved, within the times defined by the SLA.
  • Regular reporting regarding for Management about Incidents and Problems.
  • Requirements gathering.
Used technologies, Tools and Methodologies
ITIL SLA User Management Fault Management Quality of Service Management (BSS/OSS) Java

Project Management / Software Development Specialist

Uzel Holding (Istanbul/Turkey)
February 2005 - March 2007
  • Was responsible for the ERP upgrade of a newly Acquired German company and its integration with the SAP system.
  • Responsible of elevating the level of services provided by the IT department using COBIT and ITIL
  • Implementing solutions to automate processes in Automotive Manufacturing.
Used technologies, Tools and Methodologies
COBIT ITIL IT Service Management Project Management

Software Development Engineer

SFS (Istanbul/Turkey)
August 2004 - February 2005

Responsible for enhancing their Software Solution based on customer Requirements.

Used technologies, Tools and Methodologies
Visual Basic 6 ASP .NET Jasper Reports UML

Automation Programmer

AMA Systems GmbH – Pforzheim
January 2002 - March 2004

Porting a Software Monitoring Server System, running under HP-UX, to a Server-Client System that would, on the client side run on Windows Desktop Computers. The system was used to evaluate the Quality of the spraying process of Automobiles.

Used technologies, Tools and Methodologies
PASCAL DELPHI C C++ UML

Tutor

Office of Lifelong learning (Edinburgh/UK)
October 1999 - July 2001

Giving lectures on the following subjects

  • Visual Basic for Beginners
  • Visual Basic for experienced programmers
  • Programming for the Web

Projects

AI-POWERED APPLICATION DEVELOPMENT

PERSONAL PROJECT: (https://cvsonline.ai/)
November 2025 - April 2026
  • Utilized the Gemini API within a RAG (Retrieval-Augmented Generation) architecture to anchor the model with user-specific data, ensuring highly personalized and accurate cover letter generation.
  • Developed an edge networking layer using Cloudflare Workers as a secure reverse proxy, including dynamic URL rewriting and edge caching strategies to mask backend storage and enforce SSL.
  • Architected an asynchronous, event-driven queue with Firestore and Google Cloud Run, alongside deploying a headless browser engine (Puppeteer) with global caching for scalable generation of formatted, print-ready PDFs.
  • Established Continuous Integration and Continuous Deployment (CI/CD) pipelines via GitHub Actions to automate testing and the deployment of edge infrastructure and frontend updates.
  • Leveraged AI-powered development tools (e.g., Firebase Studio) and a modern serverless stack for rapid development, iteration, and deployment of the application, designing the architecture for future AIOps integration.
Used Technologies, Tools and Methodologies
Gemini API LLMs RAG Vector Databases Next.js GCP Cloud Run Firebase Cloudflare GitHub Actions Puppeteer Serverless Event-Driven Architecture

Education

B.Sc. Software Engineering

Graduated Dec 2001

Diploma - Computer Programming

Graduated July 1998

Skills

Cloud & Infrastructure
AWS (Expert) Azure GCP Kubernetes (CKA) Terraform / IaC Microservices Serverless (Lambda/Functions)
Security & Compliance
DevSecOps CIS Benchmarks Hardening SAST/DAST/IAST Penetration Testing Vulnerability Scanning
Development
Go Python Java NodeJS C/C++ React / Angular PHP
Data & Storage
Oracle PostgreSQL DynamoDB Aurora Firebase Vector DBs (RAG)
Methodologies & Leadership
Cross-Functional Team Leadership
Agile / Scrum / Kanban
CI/CD Pipeline Automation
Requirements Engineering
Datacenter Migration