# Caleb Sargeant · Platform, Network & Security Engineer

> Markdown copy of <https://calebsargeant.com/>, generated from the same data as the page.

**Networks, platforms and the glue between them.**

I have worked in IT since 2012, specialising in platform engineering, automation, infrastructure as code, networking and security. I have run everything from bare-metal server rooms to virtualised platforms and cloud-native architectures, and I care about systems that are reliable, maintainable and boring in production.

- Platform, Network & Security Engineer, Eindhoven, Netherlands
- 13 years in IT, since 2012
- Open to platform, cloud and network/security engineering conversations.

[View the CV](https://calebsargeant.com/cv/) · [Download PDF](https://calebsargeant.com/downloads/Caleb_Sargeant_CV.pdf) · [GitHub](https://github.com/CalebSargeant)

- Years in IT: 13+
- Engineering roles: 13
- Countries worked in: 2
- Certifications: 8

## What I am on at the moment

The seats I currently hold, and what I am studying around them.

### Cloud Engineer, PinkRoccade

June 2025 to present · 1 yr 3 mo · Permanent · Netherlands

Cloud and platform engineering for local-government software: Kubernetes platforms, infrastructure as code and the migration path off legacy application stacks.

Stack: Kubernetes, Azure, Terraform, GitHub Actions, Helm, Linux, Python

### Co-Founder, Magma Moose

March 2023 to present · 3 yr 6 mo · Founder · Remote · Netherlands

Co-founded a development studio built around platform, cloud, network and security engineering, and its own developer tooling. I run the engineering: the shared infrastructure everything sits on, and most of the products on top of it.

Stack: Terraform, Terragrunt, Kubernetes, FluxCD, Cloudflare, GitHub Actions, Python, FastAPI

### DevOps Engineer, tengen

February 2023 to present · 3 yr 7 mo · Contract · Remote · South Africa

Sole DevOps engineer for a multi-cloud estate: GitOps Kubernetes, Terraform modules, WireGuard/MikroTik networking, and the monitoring that keeps a production camera fleet honest.

Stack: Kubernetes, FluxCD, Terraform, Ansible, AWS, Azure, GCP, Docker

Currently studying: AWS SysOps Administrator, AWS DevOps Engineer, AWS Security Specialty, Python, Kubernetes (CKA)

## Four things, and the overlap between them

Most of my work sits where two of these meet, which is usually where things break.

### Platform engineering

Kubernetes, Terraform and GitOps, and the internal platform on top of them, so a product team can bootstrap its own environments and repositories without waiting on me to do it by hand.

### Cloud infrastructure

Azure and AWS built as code rather than clicked together: AKS and EKS, networking, identity, and the unglamorous work of lifecycle rules and right-sized instances that keeps the monthly bill defensible.

### Networks

Routing, switching, firewalls and VPNs on Cisco, MikroTik and FortiGate, from a global multi-datacentre network on BGP and HSRP down to a single remote camera that has to come back on its own after a reboot.

### Security

Hardening, identity and the application-security toolchain: SSO, MFA and PKI on one side, Dependency-Track, SonarQube, Trivy and ZAP wired into CI on the other, with findings tracked until they are actually closed.

## Rated the way I would rate a colleague

Five is daily and deep. Three means it is running in production and I would keep the documentation open. The years are how long the thing has been in my hands.

### Platform & orchestration

- Kubernetes & Docker: Level 5 of 5, 6 yr
- Helm & Kustomize: Level 5 of 5, 5 yr
- GitOps (FluxCD, Argo): Level 5 of 5, 4 yr
- Terraform: Level 5 of 5, 6 yr
- Ansible: Level 4 of 5, 8 yr
- CI/CD (GitHub Actions, Jenkins, TeamCity, GitLab, Bitbucket): Level 5 of 5, 9 yr
- Git: Level 5 of 5, 12 yr

### Cloud

- Azure (AKS, ACR, APIM, Entra ID): Level 5 of 5, 4 yr
- AWS (EKS, VPC, IAM, S3, WAF): Level 4 of 5, 7 yr
- GCP: Level 3 of 5, 3 yr
- OpenStack: Level 3 of 5, 3 yr
- Cost optimisation & FinOps basics: Level 4 of 5, 5 yr

### Networking

- Routing & switching (Cisco, MikroTik): Level 5 of 5, 11 yr
- Firewalling (Cisco FTD/ASA, FortiGate, MikroTik, SonicWall): Level 5 of 5, 10 yr
- VPN (remote access and site-to-site): Level 5 of 5, 10 yr
- TCP/IP, DNS, DHCP, LDAP, PKI: Level 5 of 5, 12 yr
- BGP, OSPF, EIGRP, HSRP: Level 4 of 5, 8 yr
- Wireless (Ubiquiti, Meraki, MikroTik): Level 4 of 5, 9 yr

### Security

- Network & workload hardening: Level 5 of 5, 10 yr
- Identity & SSO (Entra ID, SAML, Duo, JumpCloud): Level 4 of 5, 6 yr
- AppSec toolchain (Dependency-Track, DefectDojo, SonarQube, Trivy, ZAP): Level 4 of 5, 4 yr
- Secrets management (SOPS, Key Vault, 1Password): Level 4 of 5, 5 yr
- Pentesting & vulnerability response: Level 3 of 5, 6 yr
- ISO 27001 & security governance: Level 3 of 5, 3 yr

### Observability & data

- Prometheus, Grafana, Alertmanager: Level 5 of 5, 6 yr
- Zabbix & Nagios: Level 4 of 5, 8 yr
- ELK / Graylog / Datadog: Level 4 of 5, 6 yr
- MongoDB, MySQL, PostgreSQL: Level 3 of 5, 7 yr

### Systems & scripting

- Linux (Ubuntu, CentOS, RHEL): Level 5 of 5, 12 yr
- Bash: Level 5 of 5, 12 yr
- Python: Level 4 of 5, 6 yr
- PowerShell: Level 3 of 5, 6 yr
- Windows Server (2003 onwards): Level 4 of 5, 12 yr

Also worth saying: Agile methodologies, Documentation as a habit, Problem solving, Team player, Time management, Clear communication, Customer service

## The last four seats

13 roles since 2012, from an MSP helpdesk to platform engineering. The full timeline, with every duty, is on the experience page.

### Cloud Engineer, PinkRoccade

Jun 2025 to Present · 1 yr 3 mo · Netherlands

Cloud and platform engineering for local-government software: Kubernetes platforms, infrastructure as code and the migration path off legacy application stacks.

### Platform Engineer, Budget Thuis

Jan 2024 to May 2025 · 1 yr 4 mo · Amsterdam, Netherlands

Azure platform engineering for a Dutch energy and telecoms provider: AKS, Terraform, the internal developer platform, and the CI/CD that hundreds of .NET services ship through.

### Co-Founder, Magma Moose

Mar 2023 to Present · 3 yr 6 mo · Remote · Netherlands

Co-founded a development studio built around platform, cloud, network and security engineering, and its own developer tooling. I run the engineering: the shared infrastructure everything sits on, and most of the products on top of it.

### DevOps Engineer, tengen

Feb 2023 to Present · 3 yr 7 mo · Remote · South Africa

Sole DevOps engineer for a multi-cloud estate: GitOps Kubernetes, Terraform modules, WireGuard/MikroTik networking, and the monitoring that keeps a production camera fleet honest.

[All 13 roles](https://calebsargeant.com/experience/) · [Certifications and courses](https://calebsargeant.com/education/)

## Worth a conversation?

Open to platform, cloud and network/security engineering conversations. Pick a slot, or send an email and I will come back to you.

- [Book a call](https://cal.com/calebsargeant/personal)
- [contact@calebsargeant.com](mailto:contact@calebsargeant.com)
- [+31 68 201 6886](tel:+31682016886)
- [CV (PDF)](https://calebsargeant.com/downloads/Caleb_Sargeant_CV.pdf)
- [JDs & Duties (PDF)](https://calebsargeant.com/downloads/Caleb_Sargeant_JDs_and_Duties.pdf)
- [Cover letter (PDF)](https://calebsargeant.com/downloads/Caleb_Sargeant_Cover_Letter.pdf)
