My name is Florian Zouhar.
I am a Cloud Infrastructure Architect with focus on networking, security and edge services from Germany.
Designing and implementing complex cloud architectures and solving network related ch allanges are definitely one of my passions. My focus is to provide foundational cloud environment to accelerate our customers cloud journey in a most secure, resilient and flexible way. I have the goal is to use wide spread kn owledge on a technical level, experience with real world projects and my believe in the DevOps culture to achieve most viable results. I focus heavily on automation of processes and operations.
Se e my activities off work here. The mountains, the nature and breathing fresh air is what frees up my mind and gives me strength to face new challanges!
This is a collection of projects I have lead or contributed to.
The following resources help to build a AWS Service Catalog Product, which can be used as account provisioning product. Hence, all resources priviosioned into newly created account and the account itself are created fully automated and state is maintained within AWS CloudFormation.
See a typical use case including diagram by following the projects link below.
The open source project can be used to run Nextcloud on AWS at scale. Underlying AWS Services used are AWS Aurora Serverless, AWS Elastic Container Service, AWS ElastiCache.
One key factor to provide fast scalable file access is the use of a cloud-based objectstore. This project deploys nextcloud with Amazon S3 as primary storage.
In order to execute a multi account strategy on AWS successful, many foundational topics have to be covered. This includes baslines security of the whole organization, integration with existing IT management systems, automation of processes as much as possible. One of my focus topics was connectivity. This is not only relevant for IT applications. Special requirements from typical manufacturing business applications part of operational technology, have to be taken into account.
In summary everything is build to scale out properly, number of accounts quickly ramped up to a couple of hundreds.
This includes a setup of multiple OpenShift Clusters in a multi-cloud setup in Micrsoft Azure, AWS and Google Cloud Platform. This will leverage the automatic scaling functionalities and easy OpenShift Container Storage deployments. Using installer provisioned infrastructure while being compliant using hardened RHEL CoreOS images, CVE scaned docker registry and integrate into coporate networks are the main challanges here.
We design for failure and do regulary disaster and backup recovery trainings.
The target architecture leverages Cloud DevOps services as well as Kubernetes as the underlying platform.
An on-premise Kubernetes Cluster on top of OpenStack is use to anonymize and encrypt data while keeping it GDPR compliant. Data analytics tasks running Spark ML job the HDInsight Service in Microsoft Azure where leveraged to provide easy access to a Hadoop Cluster.
The Charger is a core part providing essential functions and models to work with geospatial data. The main storage is the Tank, designed and developed to be used in cloud environments. Based on a column-oriented database it stores geospatial bigdata to do simple analytic extracts and more important to create vector tiles on the fly for blazing fast map interfaces. Last but not least the Open Source component Tyler provides minimal and simple self-contained access to a subset of your data. Published in 2019 we contribute to the public, see here.
My main contributions are designing and implementing cloud-based solutions to support smart farming in Greece. We developed agriculture monitoring systems based on sensor and earth observation data.
I supported mainly interface communications between components and development operations. Our components in this project were deploymented in a container orchestration system using different tenants for development and production inside the Open Telekom Cloud.
GeoRocket is based on Elasticsearch and provides a query and aggregation endpoint. I was mainly involved in designing the aggregation DSL and implementing plugins used in the commercial GeoRocket Pro version.
In addition the Website was migrated to the cloud and their on-premise Exchange Server was replaced with Office 365, the Active directory was put into a Trust Relationship with the partner's one.
My main responsibility was implementing the complex interactive interface. Additionally, I was taken into account adapting REST endpoints and maintain our on-premise deployment of database components.
This step included a major rebuild and the following replacments:
Certifications i have achieved in information technology topics.
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 175 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster.
Scientific work i have published in the field of visualizations and vector data processing.
Conference Paper, AGILE
Florian Zouhar, Ivo Senner
Bachelor of Science, Technical University Darmstadt
Kathrin Ballweg, Florian Zouhar, et. al.
Technologies, tools and strategies i am experienced in working with.
I my free time i like to spend time with friends playing dart, traveling around the world. While traveling hiking is a favorite activity of mine.