Cahit Öz
Security-First: Ensuring the highest levels of compliance and adherence to stringent security standards through systematic infrastructure hardening, proactive vulnerability scanning, and the consistent implementation of DevSecOps and CI/CD pipelines.
Team Leadership & Coordination: Over 12 years of experience in leading and successfully integrating geographically distributed, cross-functional teams within complex project environments.
More than 20 years of IT experience with a focus on designing and implementing secure, highly available, and cost-efficient solutions across AWS, Azure, and GCP.
Innovation & AI: Deep expertise in the full AI lifecycle—from traditional deep learning with TensorFlow, Keras, and PyTorch to modern GenAI/LLM architectures (RAG)—driving significant gains in development efficiency and process optimization.
Experience
Solution Architect / SRE (Contractor)
Leading the operational excellence and reliability engineering for critical application infrastructure, focusing on high availability and data-driven performance monitoring.
- Reliability Engineering: Define and monitor Service Level Indicators (SLIs) and Service Level Objectives (SLOs) to ensure high availability, recoverability, and efficient resource consumption of application operations.
- Incident & Problem Management: Perform deep-dive analysis of application disruptions and errors, implementing immediate workarounds and long-term technical fixes to maintain system stability.
- Performance Optimization: Track and report on application performance against defined SLOs, providing stakeholders with data-driven insights into system health and resource trends.
- Release & Deployment Management: Lead installation planning for application releases and actively contribute to specifications, testing, and rollout phases to ensure seamless implementation.
- Stakeholder Coordination: Act as the primary liaison between application users, support units, and development teams to streamline communication and resolve complex technical bottlenecks.
- Process & Documentation: Manage comprehensive system documentation, including operating manuals and user guides, while overseeing change requests and critical data maintenance.
- Continuous Improvement: Coordinate application evolution by gathering business requirements, developing solution concepts, and formalizing release agreements.
Solution Architect / Consultant (Contractor)
Supporting the infrastructure separation initiative at dsm-firmenich as part of a corporate carve-out, scheduled for completion by the end of 2025. Focused on the migration of legacy systems and VMware-based workloads to the AWS Cloud and a secondary data center in Switzerland. Apart from technical consulting, I am also responsible for the hands-on implementation of the solutions.
- Drive the end-to-end planning and execution of server and workload migrations in a complex, multi-site carve-out environment, ensuring business continuity and minimal disruption.
- Design and implement tailored migration strategies, including lift-and-shift and replatforming approaches, aligned with organizational and technical requirements.
- Collaborate with cross-functional teams (networking, security, application owners) to assess current infrastructure, define the target state, and ensure compliance with security and regulatory standards.
- Optimize infrastructure performance, availability, and cost across hybrid-cloud and multi-data center environments.
- Provide architectural guidance and hands-on support for cloud infrastructure, automation, and monitoring.
Solution Architect (Freelancer)
Conceptualized and designed a Landing Zone for PowerApps applications within the Azure cloud environment.
Consultant, Developer (Freelancer)
- Vulnerability Management: Leveraged CVE and NVD frameworks to identify, prioritize, and remediate security flaws, utilizing CVSS scoring to focus on high-risk exposures.
- Infrastructure Auditing: Executed comprehensive vulnerability scans across enterprise infrastructure, identifying critical weaknesses and providing actionable risk-reduction roadmaps.
- Systems Hardening: Strengthened organizational security posture by implementing rigorous hardening measures (e.g., CIS Benchmarks, OS-level security configurations) across production environments.
- Security Automation: Engineered custom automation scripts in Golang to optimize security workflows.
- Offensive Security: Conducted targeted penetration testing to simulate real-world attack vectors, validating system resilience and ensuring the effectiveness of existing controls.
Consultant (Freelancer)
- Coordinated AWS-related changes with stakeholders, ensuring alignment and effective communication.
- Optimized AWS resources for cost and performance, achieving on Some Services savings of %90 Percent.
- Enhanced the Disaster Recovery (DR) strategy and pipelines
- Advised development teams on designing highly available (HA) systems, promoting best practices.
- Improved the system's security posture
Senior Technology Architect
Provided consulting services to clients migrating SAP systems to the cloud, focusing on AWS
Solution Architect
- Hardened multiple environments against identified vulnerabilities, improving overall security.
- Enhanced the development environment with CI/CD pipelines using GitHub Actions, streamlining the software delivery process.
- Implemented network firewalls and a transient gateway to secure communication between VPCs and the internet.
- Integrated AWS infrastructure with APIGEE (Google's REST API Gateway) running on GCP, enabling secure API access.
Solution Architect
- Automated and optimized cloud infrastructure creation for prospective customers.
- Developed a web portal for users to request infrastructure for POCs.
- Containerized server systems using Docker, improving portability and scalability.
- Automated recurring tasks using AWS Lambda functions, increasing efficiency.
- Implemented Infrastructure as Code (IaC) using CloudFormation and Terraform for automated infrastructure deployments.
- Created a VDI infrastructure using Workspaces and AppStream to provide secure access to the environments.
Consultant (Freelancer)
- Rollout of Fiskalisierung in Austria for GK Cash Registers
- Requirements gathering
- 3rd. Level Support
Programm Manager / Solution Architect(Freelancer)
Submitting a Proposal to Migrate 53 on premise SAP Servers (Prod/Dev/Test) to the AWS cloud. During this migration, 23 instances that use Oracle DB should have been transformed to SAP HANA and 30 environments migrated via Lift&Shift The main objective of the customer is to optimize the environment for cost and agility and minimize its IT footprint.
Solution Architect/Consultant (Freelancer)
Analyzing the Onpremise and AWS Cloud infrastructure and reporting the requirements needed to fullfill the PCI/DSS 3.2.1 requirements
Projectmanager / Consultant
- Ensuring that communication within the internal and external network is PCI/DSS compliant. That communication is established over TLS 1,2 only and using strong ciphers.
- Establishing systems to track customer readiness and F5 configuration monitoring.
- Coordination of remote and onsite teams that handle the Application, Server and Cloud infrastructure.
- Design of Software Solutions that are used to track vulnerabilities.
Developer / Project Manager / Solution Architect
- The optimized routes were then transferred to the phone of the driver (The Ionic framework was used to establish a solution for iPhone, Android and Windows based Phones)
- Development of a Software Solution that optimizes destinations that are entered through an API either based on Time or Distance
- For scalability the Google FIREBASE database was used.
Projekt Manager
- Responsible for the design of the Application and Technology Architecture and managing their implementation for the Retail sector.
- Leading workshops to analyze the IS State and gather customer requirements.
- Monitoring and Reporting the project status, ensuring that the project is within the defined budget, quality and proceeding according to plan.
- Responsible for the delivery of Licenses, Software and integrating our systems to services provided by 3rd parties.
Military Service
Solution Architect / Projekt Manager / Team Leader / Software Developer
- Gathering requirements and designing the System and Software Architecture.
- Problem management, Incident Management and ensuring that they are solved within the time frame specified by the SLA.
- Working in multicultural environment acting as single point of contact between Product Owners across Europe and the Development and Test Teams in Turkey.
- Designing, preparing and updating the required documents, tools and reports informing stakeholders about the Project status.
- Ensuring that the customer system environment (CMDB) is kept up to date.
- As a Product Owner was responsible for developing a new Software Solution. (modernisation of an existing system)
Global Vendor Support / Service Manager
- Responsible for two Software Applications to enhance customer satisfaction.
- Problem and Incident Management, Root cause analysis, release Management.
- Ensuring that problems were solved, within the times defined by the SLA.
- Regular reporting regarding for Management about Incidents and Problems.
- Requirements gathering.
Project Management / Software Development Specialist
- Was responsible for the ERP upgrade of a newly Acquired German company and its integration with the SAP system.
- Responsible of elevating the level of services provided by the IT department using COBIT and ITIL
- Implementing solutions to automate processes in Automotive Manufacturing.
Software Development Engineer
Responsible for enhancing their Software Solution based on customer Requirements.
Automation Programmer
Porting a Software Monitoring Server System, running under HP-UX, to a Server-Client System that would, on the client side run on Windows Desktop Computers. The system was used to evaluate the Quality of the spraying process of Automobiles.
Tutor
Giving lectures on the following subjects
- Visual Basic for Beginners
- Visual Basic for experienced programmers
- Programming for the Web
Projects
AI-POWERED APPLICATION DEVELOPMENT
- Utilized the Gemini API within a RAG (Retrieval-Augmented Generation) architecture to anchor the model with user-specific data, ensuring highly personalized and accurate cover letter generation.
- Developed an edge networking layer using Cloudflare Workers as a secure reverse proxy, including dynamic URL rewriting and edge caching strategies to mask backend storage and enforce SSL.
- Architected an asynchronous, event-driven queue with Firestore and Google Cloud Run, alongside deploying a headless browser engine (Puppeteer) with global caching for scalable generation of formatted, print-ready PDFs.
- Established Continuous Integration and Continuous Deployment (CI/CD) pipelines via GitHub Actions to automate testing and the deployment of edge infrastructure and frontend updates.
- Leveraged AI-powered development tools (e.g., Firebase Studio) and a modern serverless stack for rapid development, iteration, and deployment of the application, designing the architecture for future AIOps integration.