Luca Borruto
ENFR
Open to DevOps/Platform roles in Switzerland · on-site or remote

DevOps / Platform Engineer, based near Geneva.

I’m Luca, an IT System Administrator working in a Platform/DevOps scope at Agicap: multi-cloud Kubernetes (Azure AKS, Google GKE), Terraform, and the network and identity layer underneath. Before Agicap, six years in IT: system administration, infrastructure projects on a SEVESO-classified industrial site, and technical support. Open to Platform/DevOps roles in Switzerland (Geneva/Romandie).

Get in touch
Recent workCV
8 yrs
in IT
×2
clouds, prod
800
users supported
0 s
SEVESO downtime

Recent work.

03 / 03
01Platform · GitOps
2024 — Now

GitOps CI/CD pipeline for internal deployments

Rollback time reduced from ~2h to under 90 seconds; 100% of infrastructure changes now reviewed via pull request.

  • Moved deployments behind ArgoCD, so merging to main triggers the deployment automatically.
  • Put Terraform behind Atlantis, so every infrastructure change goes through a pull request with the plan visible in the review.
  • Repackaged internal applications as Helm charts with separate values per environment.
  • Set up Prometheus and Grafana for platform monitoring.
< 90 sto roll back
100%infra by PR
×2clouds
ArgoCDAtlantisHelmTerraformAKSGKEPrometheusGrafana
02Security · Network · Identity
2024

Enterprise WiFi security with certificate-based authentication

Shared WiFi passwords retired across offices in two countries; authentication is now certificate-based.

  • Set up FreeRADIUS as the authentication backend, with EAP-TLS so each device authenticates with its own certificate.
  • Deployed client certificates via the existing MDM (Intune, Apple Business Manager).
  • Cisco Meraki manages the LAN and WiFi; Fortinet handles the perimeter.
~3 sto connect
4platforms
0auth failures
EAP-TLSFreeRADIUSIntuneABMMerakiFortinet
03Industrial · SEVESO · VoIP
2021 — 2023

Telephony migration on a SEVESO high-threshold industrial site

Full VoIP migration completed for 570 employees with zero safety-related downtime.

  • Inventoried every phone, key line, and safety-critical station on-site before planning the migration.
  • Migrated in small batches, running old and new systems in parallel to allow immediate rollback.
  • Carried out the work outside production hours, with the operations team briefed and able to halt the migration at any point.
0 ssafety downtime
570migrated
100%inventoried up front
VoIPSIPLinuxVMware ESXIndustrial networkProject mgmt

The toolbox.

Cloud & Platform
AzureGCPAWSKubernetesDockervSphere
IaC & Delivery
TerraformAtlantisHelmArgoCDGitHub ActionsPrometheusGrafanaELK Stack
Networking & Identity
Cisco MerakiFortinetFreeRADIUSOktaIntuneApple Business ManagerHashiCorp Vault
Scripting & OS
BashPythonNode.jsLinux

Where I’ve been.

2018→
  1. 2024 — Now
    IT System Administrator (Platform/DevOps scope)
    Agicap · Lyon
    Platform & IT for a scale-up on Kubernetes across two clouds.
  2. 2023 — Now
    Freelance Consultant
    Singular-Solutions · Lyon
    Short engagements across network, identity, and platform work.
  3. 2021 — 2023
    IT Infrastructure Project Manager
    Elkem Silicones · Lyon / SEVESO site
    Ran infra projects on a regulated chemical site.
  4. 2018 — 2021
    IT Support Technician
    Tessi · Lyon
    Daily ops, on-site support, internal tooling.
2023
5-year degree · RNCP level 7 (EQF level 7 — Master’s equivalent)
IPI · IT engineering school
· LET’S TALK

Open to Platform/DevOps opportunities in Switzerland.

Permanent or contract, DevOps / Platform / IT. Based near Geneva, eligible for a Swiss cross-border (G) work permit. French/English. On-site or remote. Replies within a day.

luca.borruto@gmail.com
LinkedInGitHub