Christian R.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Europe-based Senior Cloud Security Engineer in Vienna, Austria. I help clients quickly recover and harden Cloudflare, Microsoft 365, Google Workspace, and AWS in live production environments. You work directly with me: no agency layer, no account manager, no handoff. The same person who reviews the logs, reads the headers, checks the DNS, inspects the IAM policies, and plans the change is the one you talk to. Two reasons clients usually hire me: 1. Recovering failing infrastructure Cloudflare rules blocking real users; DNS resolving differently across regions; Microsoft 365 mail flow breaking; SPF/DKIM/DMARC failing; Conditional Access locking users out; a high-volume sending platform landing in spam or its sender reputation collapsing; AWS environments drifting; or infrastructure becoming too risky to change safely. 2. Prevention When they want the environment built properly before it becomes too expensive to fix: secure identity, segmented infrastructure, controlled deployment pipelines, logging, monitoring, rollback procedures, and operating standards that hold up in production. Most engagements begin with a specific problem, then move into hardening, documentation, automation, governance, and reducing reliance on manual fixes. I bring 15+ years of experience across pharma, aviation, SaaS, MSP, startup, and Fortune 500 environments. My certifications include AWS Certified Solutions Architect Professional, AWS Certified Security Specialty, Terraform Associate, Microsoft 365 Enterprise Administrator Expert, MCSE Cloud Platform and Infrastructure, and Azure Architect. What I build and fix - Cloudflare and web infrastructure: WAF tuning, bot and DDoS mitigation, rate limiting, DNS, TLS, Workers, KV, Zero Trust, Access, WordPress and WooCommerce performance, hardening, malware cleanup, Linux, Nginx, Apache, and Docker. - AI and agentic infrastructure: LLM pipeline design and deployment (Anthropic, OpenAI), FastAPI and Python services, RAG, structured output, MCP server builds, prompt orchestration, evaluation and QA gates, API integration with Shopify and business systems, secure secrets handling, and VPS deployment on Hetzner and AWS. - Microsoft 365 and identity: Entra ID, Conditional Access, MFA, app registrations, least-privilege design, Defender for Office 365, audit logging, Exchange Online, hybrid mail flow, Intune, and GDPR-aligned tenant design. - Google Workspace security, governance, and migration: security reviews, identity and access controls, domain and tenant migrations, Shared Drive architecture, Gmail mail flow recovery, and evidence-based administration. - AWS infrastructure and security: VPC segmentation, IAM design, EC2 and RDS hardening, CloudWatch, GuardDuty, KMS, secure logging, and landing zone patterns. - Email deliverability and sending infrastructure at scale: SPF, DKIM, DMARC alignment and enforcement, header analysis, reputation recovery, SMTP relay, and coexistence across Google Workspace, Microsoft 365, and Postfix. Sending-platform infrastructure (Klaviyo and similar): deliverability diagnosis, sender reputation recovery, list and segment architecture, bounce and complaint forensics, ingestion-pipeline and API integration review, and warmup/scaling for high-volume senders. How I work Before changing anything, I review the evidence: logs, DNS behavior, headers, API output, IAM policies, live configuration, and operational risk. Changes follow ITIL methodologies and are planned, staged, documented, and, where possible, reversible. You get a clear record of what changed, why, which risks were reduced, how to roll back, and what to monitor afterwards. Message me if you need a senior independent consultant who can take ownership of your cloud infrastructure issues, without an agency layer between you and the work.