Skip to content

Available for DACH consulting & platform work

Paul Lichtenberger

DevOps & Platform Engineer

I build and run production infrastructure end-to-end — from bare metal and CI/CD to identity, observability and LLM operations.

location
Austria · remote for the DACH region
languages
German (native) · English (professional)
2014
in software, industrial-grade
5
companies · automotive → consulting
15+
self-hosted services in production
0
click-ops · everything as code

About

I come from industrial software delivery — automotive and home-appliance and machinery contexts (Continental, EDAG, BSH, Kiefel), where correctness and repeatable pipelines are not optional.

Today I work as a DevOps Engineer at talsen team GmbH, an agile consultancy blending BDD/TDD, DevOps and generative AI in industrial software development. I own the platform end-to-end: provisioning, CI/CD, identity, registry, observability and LLM operations.

My approach is everything-as-code with a strong bias toward EU data sovereignty — I self-host what many teams outsource, so I understand the whole stack down to the metal. I run what I recommend.

Outside of work: cycling in the Alps.

Experience

  1. talsen team GmbH current

    Feb 2025 – Present

    DevOps Engineer

    Remote · Salzburg / Germany

    Agile software consultancy blending BDD/TDD, DevOps and generative AI in industrial software development. I own the self-hosted platform end-to-end — containerized services, automation, AI systems and observability.

    • Design and operate multi-service Docker/Compose platforms (Traefik, Keycloak, SearxNG, Firecrawl, Jitsi, vector databases) with a focus on reliability, secure routing and observability.
    • Automate provisioning, backup, restore and health checks in Python/Bash, improving resilience and cutting manual effort.
    • Build RAG ingestion pipelines and chatbots with LlamaIndex, Qdrant/Milvus and Chainlit, plus distributed scraping via Playwright.
    • Integrate Grafana, Prometheus and logging pipelines across self-hosted stacks for alerting, uptime tracking and fast troubleshooting.
    • Develop internal developer tooling: VS Code extension logic, Git author automation and CI testing frameworks (Jest + Cucumber).
    • Docker / Compose
    • Traefik
    • Keycloak
    • RAG · LlamaIndex
    • Grafana / Prometheus
  2. KIEFEL GmbH

    Jan 2023 – Feb 2025

    Senior DevOps Engineer

    Freilassing, Bavaria, DE

    Thermoforming and industrial-machinery manufacturer. Senior DevOps role spanning CI/CD, cloud and the digital infrastructure behind industrial systems.

    • Built CI/CD pipelines and shaped the architectural design of the digital infrastructure.
    • Handled cloud configuration and deployment on Azure.
    • Installed and provisioned industrial PCs with Puppet.
    • Developed administration tools for the digital infrastructure.
    • CI/CD
    • Azure
    • Puppet
    • Infrastructure
  3. BSH Home Appliances Group

    Jan 2021 – Dec 2022

    Continuous Integration Engineer

    Traunreut, Bavaria, DE

    One of the largest home-appliance manufacturers in Europe. Built the CI/CD backbone and standardized, containerized developer environments.

    • Developed CI/CD pipelines and rolled out DevOps tools and processes.
    • Created container images for CI/CD and as a standardized developer environment.
    • Configured and maintained Jenkins masters and developed shared Jenkins libraries.
    • Jenkins
    • CI/CD
    • Docker
    • Shared libraries
  4. EDAG Group

    Apr 2017 – Dec 2020

    Software Developer — Tools (Embedded)

    Regensburg, DE

    Engineering services provider for the automotive industry. Built developer toolchains and CI/CD for automotive ECU series development.

    • Developed the Python/MATLAB toolchain for engineers working on series development of automotive ECUs.
    • Configured and maintained build and license servers; created and supplied Docker images.
    • Built and maintained CI/CD pipelines with Jenkins / GitLab CI.
    • Developed PREEvision metrics in Java and supported developers and testers.
    • Python / MATLAB
    • Jenkins · GitLab CI
    • Docker
    • Java
  5. Continental

    Jul 2014 – Apr 2017

    Working Student — Backend Development

    Regensburg, DE

    Global automotive technology company. Backend development for a vehicle remote-diagnosis service, alongside studies.

    • Developed a Django backend and data model for a vehicle remote-diagnosis service.
    • Configured and maintained a Couchbase database.
    • Python
    • Django
    • Couchbase
  6. Universität Regensburg

    2015 – 2017

    M.Sc. Medieninformatik (Media Informatics)

Skills & Expertise

Platform & Infrastructure

Bare metal to orchestration, everything provisioned as code.

  • Ansible (end-to-end provisioning)
  • Docker & Docker Compose
  • Terraform (incl. Harbor provider)
  • Kubernetes (GitLab Agent access)
  • Puppet (industrial PC provisioning)
  • Azure (cloud config & deployment)
  • Semaphore
  • Traefik (routing & middleware)
  • Tailscale (incl. Funnel)

Identity, Security & Registry

Single sign-on, sovereign registries and security tooling.

  • Keycloak (OIDC / SSO)
  • Authentik (OIDC / SSO)
  • Azure AD / Entra ID (oauth2-proxy, traefik-oidc)
  • Harbor registry (OIDC, robot accounts, IaC)
  • Wazuh (SIEM evaluation)

CI/CD & Quality Engineering

Pipelines and quality gates that hold industrial delivery to standard.

  • GitLab CI/CD (templates, runners, self-hosted)
  • Jenkins (masters, shared libraries)
  • BDD (behave, Cucumber)
  • TDD (Jest, pytest)
  • Mutation testing (Stryker, pymute)
  • Static analysis & complexity tooling
  • Internal CLI & VS Code tooling

AI / LLM Operations

Running generative-AI workloads privately, with EU data sovereignty in mind.

  • Langfuse observability (Keycloak SSO)
  • RAG pipelines (LlamaIndex)
  • Vector databases (Qdrant / Milvus)
  • Chainlit chat UIs
  • Playwright distributed scraping
  • Agent deployment & MCP tool servers
  • Agent safety hooks
  • Self-hosted OCR / model serving (EU-sovereign)

Observability & Ops

Production monitoring and a broad self-hosted service portfolio.

  • Grafana
  • Prometheus (metrics & alerting)
  • InfluxDB
  • Promtail / log pipelines
  • Nextcloud · Matrix/Synapse · Jitsi
  • SearxNG · Firecrawl
  • Production service operations

Homelab & Infrastructure

A production-grade, self-hosted platform I run end-to-end — provisioned with Ansible, Terraform and Docker Compose, deployed through GitLab CI/CD. It is the working proof behind the résumé: I run what I recommend.

request flow · everything behind SSO
Internet Tailscale Traefik TLS · routing Keycloak OIDC / SSO Authentik Delivery AI / LLM Ops Observability

Edge & Network

edge

Ingress, TLS and private overlay networking.

  • Traefik

    Reverse proxy · routing · middleware

  • Tailscale

    Mesh VPN · Funnel for public exposure

Identity

identity

One sign-on across every service.

  • Keycloak

    OIDC identity provider · SSO

  • Authentik

    OIDC / forward-auth

  • oauth2-proxy

    Entra ID bridge for legacy apps

Delivery Platform

delivery

Source, pipelines and artifacts.

  • GitLab

    Self-hosted SCM + CI/CD

  • GitLab Runners

    Pipeline execution

  • Harbor

    Container registry · OIDC · robots

  • Semaphore

    Ansible orchestration UI

AI / LLM Operations

ai

Private generative-AI workloads, EU-sovereign.

  • Langfuse

    LLM observability · Keycloak SSO

  • Agents + MCP

    Tool servers · safety hooks

  • OCR / model serving

    Self-hosted inference

Observability & Services

ops

Monitoring and day-to-day production services.

  • Grafana

    Dashboards

  • InfluxDB

    Time-series metrics

  • Nextcloud

    Files & collaboration

  • Matrix / Synapse

    Secure messaging

provisioned with

  • › Ansible + Semaphore
  • › Terraform (Harbor)
  • › Docker Compose
  • › GitLab CI/CD

No click-ops. Every service reproducible from code.

Writing & Notes

Field notes from running production infrastructure and self-hosted AI. (coming soon)

Get in touch

Looking for someone to build or operate your delivery platform, tighten your CI/CD, or run generative-AI workloads privately? I take on consulting and platform-engineering work across the DACH region.

Austria · remote for the DACH region