You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Asier Aguado CormanAA

Asier Aguado Corman

DevOps, Backend & Platform Engineer (ex-CERN)

€500/day
San Sebastián, ES
8-15 years

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Asier

About Me


Senior Platform Engineer with over 10 years of experience transforming technical infrastructure into a competitive advantage. My primary focus is to eliminate operational friction by creating robust Internal Developer Platforms (IDPs) and APIs that allow product teams to concentrate on what truly matters: code.

Throughout my career in highly demanding technological organizations like CERN and Pictet, I have honed the ability to abstract the complexity of the Cloud and infrastructure through code (IaC) and advanced automation.

How can I bring value to your project?

  • Platform and Infrastructure Architecture:Expert in the Kubernetes and Docker ecosystem, with CKAD certification. I design scalable, resilient, and easy-to-operate environments.
  • Security and Identity Management (IAM):Specialist in security protocols (OIDC, SAML, OAuth2) and secret management tools like HashiCorp Vault. I have led critical migrations and designed access gateways for thousands of users.
  • DevOps Culture & Automation:I develop Terraform modules and CI/CD pipelines that drastically reduce time-to-market. My goal is absolute "self-service" for developers.

  • Backend Engineering:Unlike a traditional DevOps profile, I possess a solid background as a software engineer (Java, Python, C#), enabling me to build internal APIs and web services that integrate seamlessly with the company's technological stack.
  • Observability and Data:Implementation of monitoring stacks (Prometheus, Grafana, ELK) to ensure the business has full visibility into the health of its applications.
  • Global Collaboration:Full professional competence to lead technical meetings, write documentation, and coordinate teams in English and French.
  • Spanish

    Native or bilingual

  • English

    Fluent

  • French

    Fluent

  • Basque

    Fluent

Remote only
Primarily works remotely

Experience

  • Pictet Group
    Platform Engineer
    BANKING AND INSURANCE
    March 2024 - March 2026 (2 years)
    Ginebra, Switzerland
    • PIM: Architected and developed an internal Privileged Identity Management (PIM) application creating an abstraction layer over HashiCorp Vault to simplify secret management for developers, managing 5000+ privileges and secrets.
    • Platform automation: Developed reusable IaC modules and CI/CD templates that abstracted cloud complexity, reducing the time-to-market for new microservices.
    • Kubernetes: Built containerized versions of modern and legacy applications and deployed them into Kubernetes. Managed production applications running in cloud-native environments.
    • Observability: Improved the observability of the running stack by making the logs visible on Grafana, shortening incident diagnosis and feedback loops.
    • Development: Designed and implemented Java and Python-based backend APIs and internal web services supporting identity and access workflows, used directly by platform and security teams in production.
    • Compliance: Automated technical evidence collection for access audits, translating complex regulatory requirements into automated security policies.
    Python Docker Terraform Hashicorp Vault GitOps
  • CERN
    Software Engineer - Infrastructure
    RESEARCH
    October 2016 - October 2023 (7 years)
    Geneva, Switzerland
    • API Development: Designed and implemented APIs (in C#) and self-service portals (in React) used by internal teams to integrate with the identity platform.
    • Internal Tooling and Automation: Engineered a suite of self-service infrastructure libraries and portals, allowing engineering teams to autonomously provision authentication and monitoring resources.
    • CERN SSO: Architected the secure gateway for 3000+ laboratory users, implementing robust OIDC/SAML authentication flows and RBAC policies for cloud resources.
    • Kubernetes: Migrated Keycloak from the initial deployment using Puppet and virtual machines into Kubernetes.
    • Data Infrastructure: Managed large-scale distributed systems (Kafka, Flume), ensuring fault tolerance and scalability for high-throughput data ingestion.
    • Data Development: Developed data transformation and data enrichment jobs in Apache Spark and Scala.
    Kubernetes OAuth Keycloak ELK Linux System Administration
  • Diversius
    Software Developer
    TECH
    March 2016 - September 2016 (6 months)
    Donostia-San Sebastian, Gipuzkoa, Spain
    • Web applications: Built a full-stack web application (frontend and backend) for industrial optimization software, and a web scraper to populate a word-definition database.
    Java REST APIs Web Development Web Scraper Git

Recommendations

Be the first to recommend Asier

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • Master in Computational Engineering and Intelligent Systems
    University of the Basque Country
    2016
    Análisis de datos, Machine Learning, Robótica e Inteligencia Artificial
  • Degree in Computer Engineering
    University of the Basque Country
    2015

Certifications

Skill set

Categories