Utrecht · Amsterdam · the Randstad · fully remote across the EU

Cloud infrastructure that holds up in production and under audit.

Codeverse is the independent practice of Mihai Cindea, a freelance cloud and DevOps engineer based in Utrecht. I have spent twenty years building, automating and hardening infrastructure for online banks, fleet operators and scale-ups: AWS, Terraform, CI/CD, and the security work that makes all of it defensible. I work on-site across Noord-Holland and the Randstad, or fully remote.

Infrastructure delivered for
  • Mercell
  • Knab
  • LeasePlan
  • 3D Hubs
  • Patchman
  • Cisco
  • Nokia / Alcatel-Lucent

Services

What I get hired to do

Usually one of these is the reason someone calls. Usually two or three of them are the reason the problem existed in the first place.

Cloud architecture & migration

AWS designs that survive contact with real traffic and real auditors: multi-account layouts, ECS and EC2 workloads, RDS, S3, API Gateway. Legacy estates moved off tin in stages, not in one terrifying weekend.

More on AWS architecture

Infrastructure as Code

Terraform-first. Click-ops turned into reviewable modules with a state strategy the next engineer can live with, plus Ansible or Puppet for the configuration layer underneath.

More on Terraform work

CI/CD & developer experience

Azure DevOps, GitHub Actions, Jenkins. Pipelines that release safely and predictably, with dependency updates, compliance evidence and ticketing automated instead of nagged about.

More on CI/CD and developer experience

Security & compliance hardening

Edge protection with WAF, CloudFront and Shield. Distroless containers. Scanning with SonarCloud, Trivy and OWASP ZAP runs inside the build, so the audit evidence already exists when someone asks for it.

More on security hardening

Observability that earns its keep

New Relic, Datadog, Prometheus, Grafana, Splunk. Custom checks and alerts tuned so that a page means something is actually wrong, and bottlenecks show up before your users find them.

More on observability

Networking & connectivity

A Cisco-certified network background applied to cloud problems: hybrid connectivity, segmentation, MPLS, and VPN estates on pfSense, WireGuard or OpenVPN.

More on network engineering

Approach

How the work goes

Every engagement should end with a system your own team can run with confidence once I have left.

  1. 01

    Understand before touching

    Read the estate as it is, not as the diagram claims. Find where the risk, the cost and the manual toil live, and agree on what "done" looks like before changing anything.

  2. 02

    Automate the repeatable part

    Codify it in Terraform, wire it into the pipeline, and put scanning and monitoring around it. Changes go in small, reviewable steps, and production keeps running throughout.

  3. 03

    Hand it over properly

    Documentation, modules and runbooks your engineers own. If the handover only works while I'm still on the invoice, the job wasn't finished.

Selected engagements

Twenty years, abridged

Stack

Tools I actually run in production

This is what I reach for, not everything I have ever opened.

Cloud & infrastructure

  • AWS
  • Terraform
  • Terragrunt
  • Docker
  • Kubernetes
  • KVM
  • VMware

Automation

  • Python
  • Bash
  • PowerShell
  • Ansible
  • Puppet
  • GitHub Actions
  • Azure DevOps
  • Jenkins
  • RenovateBot
  • Backstage

AI & LLMs

  • Amazon Bedrock
  • LangChain
  • Claude
  • LLM cost monitoring

Observability & security

  • New Relic
  • Datadog
  • Splunk
  • Prometheus
  • Grafana
  • OpsLevel
  • SonarCloud
  • Trivy
  • OWASP ZAP

Networking

  • Cisco
  • MPLS
  • pfSense
  • WireGuard
  • OpenVPN
  • HAProxy

About

Codeverse is one engineer, on purpose

I'm Mihai Cindea. I started breaking and fixing computers in the early 2000s and got addicted to Linux almost immediately; a few friends and I ended up building a Slackware-based security distribution. I have looked at infrastructure through a security lens ever since.

The work has moved from remote sysadmin to telecom, and from telecom to cloud and DevOps. The job itself has stayed the same: understand the system, remove the manual steps, and make sure the thing still stands up when it is under load and someone is asking for evidence.

Codeverse is deliberately small. You get the engineer who does the work, not an account manager and a rotating bench.

Working language: English.

Coverage

Where I work

Utrecht is home, which puts most of the Randstad within an easy commute. Everything that does not need a desk in your building runs remote, which has been the normal way of working here since 2020.

On-site & hybrid

I travel regularly for kick-offs, workshops and the weeks when being in the room helps. That covers Utrecht, Noord-Holland, Zuid-Holland, Flevoland and Gelderland:

  • Utrecht
  • Amsterdam
  • Amstelveen
  • Hoofddorp & Schiphol
  • Haarlem
  • Hilversum & 't Gooi
  • Almere
  • Amersfoort
  • Nieuwegein
  • Zeist
  • Rotterdam
  • Den Haag
  • Leiden
  • Delft
  • Apeldoorn

Fully remote

Remote-first engagements are welcome, and I am used to them: the LeasePlan work was fully remote, and both Knab engagements ran remote or hybrid. I work in the Central European timezone and overlap comfortably with the UK, the Nordics, Iberia and most of the EU.

A distributed team suits the way I work anyway: async-friendly documentation, reviewable infrastructure changes, and pipelines that do not need someone watching them.

Common questions

Do you take fully remote contracts?

Yes. Most of the last six years has been remote or hybrid, including a fully remote year and a half running SAP OpenText hosting on AWS for LeasePlan. Fully remote engagements anywhere in the EU are fine, and I am equally happy coming on-site for the parts that need it.

Which regions do you cover for on-site work?

The whole Randstad is within comfortable reach of Utrecht (Amsterdam, Amstelveen, Hoofddorp, Schiphol, Haarlem, Hilversum, Almere, Rotterdam, Den Haag, Leiden and Delft), and so are Amersfoort and Apeldoorn to the east. Further afield in the Netherlands works too, usually as a mix of remote weeks and scheduled on-site days.

What kind of work is a good fit?

AWS architecture and migrations, Terraform and Infrastructure as Code, CI/CD and developer experience, container and cloud security hardening, and observability that produces useful alerts. Teams range from scale-ups with one overloaded platform engineer to regulated enterprises that need the audit trail to hold up.

Which language do you work in?

English. It is the working language of nearly every engineering team in the Randstad, and engagements run in it end to end: standups, documentation, review and handover.

Contact

Got infrastructure that needs an adult in the room?

Tell me what's breaking, what's slow, or what the auditor flagged. If I'm not the right person, I'll say so.

LinkedIn GitHub

Based in Utrecht · available remote or on-site in the Netherlands · engagements run in English