Caleb Sargeant

Open to platform, cloud and network/security engineering conversations.

Networks, platforms and the glue between them.

I have worked in IT since 2012, specialising in platform engineering, automation, infrastructure as code, networking and security. I have run everything from bare-metal server rooms to virtualised platforms and cloud-native architectures, and I care about systems that are reliable, maintainable and boring in production.

caleb@eindhoven: ~

caleb@eindhoven:~$ whoami

Platform, Network & Security Engineer, Eindhoven, Netherlands

13 years in IT, since 2012

caleb@eindhoven:~$ jobs

[1] Cloud Engineer, PinkRoccade (permanent)

[2] Co-Founder, Magma Moose (founder)

[3] DevOps Engineer, tengen (contract)

13+ Years in IT
13 Engineering roles
2 Countries worked in
8 Certifications

Now

What I am on at the moment

The seats I currently hold, and what I am studying around them.

June 2025 to present · 1 yr 3 mo · Permanent

Cloud Engineer

PinkRoccade · Netherlands

Cloud and platform engineering for local-government software: Kubernetes platforms, infrastructure as code and the migration path off legacy application stacks.

Kubernetes Azure Terraform GitHub Actions Helm Linux Python

March 2023 to present · 3 yr 6 mo · Founder

Co-Founder

Magma Moose · Remote · Netherlands

Co-founded a development studio built around platform, cloud, network and security engineering, and its own developer tooling. I run the engineering: the shared infrastructure everything sits on, and most of the products on top of it.

Terraform Terragrunt Kubernetes FluxCD Cloudflare GitHub Actions Python FastAPI

February 2023 to present · 3 yr 7 mo · Contract

DevOps Engineer

tengen · Remote · South Africa

Sole DevOps engineer for a multi-cloud estate: GitOps Kubernetes, Terraform modules, WireGuard/MikroTik networking, and the monitoring that keeps a production camera fleet honest.

Kubernetes FluxCD Terraform Ansible AWS Azure GCP Docker

Currently studying

AWS SysOps Administrator AWS DevOps Engineer AWS Security Specialty Python Kubernetes (CKA)

What I do

Four things, and the overlap between them

Most of my work sits where two of these meet, which is usually where things break.

Platform engineering

Kubernetes, Terraform and GitOps, and the internal platform on top of them, so a product team can bootstrap its own environments and repositories without waiting on me to do it by hand.

Cloud infrastructure

Azure and AWS built as code rather than clicked together: AKS and EKS, networking, identity, and the unglamorous work of lifecycle rules and right-sized instances that keeps the monthly bill defensible.

Networks

Routing, switching, firewalls and VPNs on Cisco, MikroTik and FortiGate, from a global multi-datacentre network on BGP and HSRP down to a single remote camera that has to come back on its own after a reboot.

Security

Hardening, identity and the application-security toolchain: SSO, MFA and PKI on one side, Dependency-Track, SonarQube, Trivy and ZAP wired into CI on the other, with findings tracked until they are actually closed.

Skills

Rated the way I would rate a colleague

Five is daily and deep. Three means it is running in production and I would keep the documentation open. The years are how long the thing has been in my hands.

Platform & orchestration

Kubernetes & Docker 6 yr
Helm & Kustomize 5 yr
GitOps (FluxCD, Argo) 4 yr
Terraform 6 yr
Ansible 8 yr
CI/CD (GitHub Actions, Jenkins, TeamCity, GitLab, Bitbucket) 9 yr
Git 12 yr

Cloud

Azure (AKS, ACR, APIM, Entra ID) 4 yr
AWS (EKS, VPC, IAM, S3, WAF) 7 yr
GCP 3 yr
OpenStack 3 yr
Cost optimisation & FinOps basics 5 yr

Networking

Routing & switching (Cisco, MikroTik) 11 yr
Firewalling (Cisco FTD/ASA, FortiGate, MikroTik, SonicWall) 10 yr
VPN (remote access and site-to-site) 10 yr
TCP/IP, DNS, DHCP, LDAP, PKI 12 yr
BGP, OSPF, EIGRP, HSRP 8 yr
Wireless (Ubiquiti, Meraki, MikroTik) 9 yr

Security

Network & workload hardening 10 yr
Identity & SSO (Entra ID, SAML, Duo, JumpCloud) 6 yr
AppSec toolchain (Dependency-Track, DefectDojo, SonarQube, Trivy, ZAP) 4 yr
Secrets management (SOPS, Key Vault, 1Password) 5 yr
Pentesting & vulnerability response 6 yr
ISO 27001 & security governance 3 yr

Observability & data

Prometheus, Grafana, Alertmanager 6 yr
Zabbix & Nagios 8 yr
ELK / Graylog / Datadog 6 yr
MongoDB, MySQL, PostgreSQL 7 yr

Systems & scripting

Linux (Ubuntu, CentOS, RHEL) 12 yr
Bash 12 yr
Python 6 yr
PowerShell 6 yr
Windows Server (2003 onwards) 12 yr

Also worth saying

Agile methodologies Documentation as a habit Problem solving Team player Time management Clear communication Customer service

Career

The last four seats

13 roles since 2012, from an MSP helpdesk to platform engineering. The full timeline, with every duty, is on the experience page.

Jun 2025 to Present · 1 yr 3 mo

Cloud Engineer

PinkRoccade · Netherlands

Cloud and platform engineering for local-government software: Kubernetes platforms, infrastructure as code and the migration path off legacy application stacks.

Jan 2024 to May 2025 · 1 yr 4 mo

Platform Engineer

Budget Thuis · Amsterdam, Netherlands

Azure platform engineering for a Dutch energy and telecoms provider: AKS, Terraform, the internal developer platform, and the CI/CD that hundreds of .NET services ship through.

Mar 2023 to Present · 3 yr 6 mo

Co-Founder

Magma Moose · Remote · Netherlands

Co-founded a development studio built around platform, cloud, network and security engineering, and its own developer tooling. I run the engineering: the shared infrastructure everything sits on, and most of the products on top of it.

Feb 2023 to Present · 3 yr 7 mo

DevOps Engineer

tengen · Remote · South Africa

Sole DevOps engineer for a multi-cloud estate: GitOps Kubernetes, Terraform modules, WireGuard/MikroTik networking, and the monitoring that keeps a production camera fleet honest.

Next

Worth a conversation?

Open to platform, cloud and network/security engineering conversations. Pick a slot, or send an email and I will come back to you.