Dominic Heun

Cloud- and Software Architect, IT Security Enthusiast, Software Engineer

Summary

I am passionate about creating software that makes a difference for everybody. My focus is on cloud-native applications featuring Kubernetes and modern SSDLC approaches. In these approaches, the software should not only meet customer criteria but also follow best practices, be secure and compliant according to regulations.

Experience

12/2024 - Present

Head of Operations and Governance

Operation, Governance and Engineering of a PaaS-Platform

  • I was responsible for managing and planning a PaaS for our customers.
  • I implemented a multi-tenant identity and access management system, implementing OAUTH2.0. In this system, I used NestJS, Typescript, TypeORM, and Redis.
  • Access control governance using Open-Policy-Agent, Rego, and JWTs for a microservice-oriented application.
  • I led a project to ensure ISO27001 compliance of our department and implemented measures to adhere to the ISMS.
  • I operated several internal systems using ArgoCD and Azure Kubernetes Service.
05/2021 - 12/2024

Lead Developer and Head of Operations

Creation and Operation of a SaaS-Plattform

  • I planned and executed the development of our own customer-facing PaaS system using Typescript and NestJS
  • The governance of our GitHub/GitLab organization was carried out by me including Actions and Org administration
  • I built the infrastructure for the development and hosting of our PaaS service running on Kubernetes, VMs, Pulumi, in Azure and AWS cloud
09/2020 - Present

Freelancer

Creation and maintenance of a planning system

  • Analysis of requirements in the business process.
  • Creation of a webapp using React.
  • Implementation of the system using TypeScript, NestJS, and MySQL.
  • Maintenance and consulting for changing business needs.
09/2020 - 05/2021

Freelancer

Working on the creation of a SaaS chatbot platform and its Operations. DevOps engineer and software engineer.

  • Transition of ClickOps to IaC using Pulumi.
  • Planning and implementation of a Kubernetes-native approach with AKS.
  • Maintenance and deployment of a Hashicorp Vault cluster for secure operations.
  • Transition of GitLab CI to GitHub Actions.
  • Maintenance and Governance of AWS, Azure, and GCP Accounts.

Education

Karlsruhe Institute of Technology

10/2024 - Present

Master of Science IT-Security and Telematics

  • IT Security
  • Design and Analyze Decentralized Systems
  • Telematics
  • Web Applications and Service-Oriented Architectures

Karlsruhe Institute of Technology

10/2020 - 09/2024

Bachelor of Science Computer Science

  • Software Security Engineering
  • Decentralized Systems

Volunteer

AStA at KIT

11/2025 - Present
Head of Catering

I organize and fulfill the catering of 400 volunteers. This includes meal planning, team composition, supplier relations, communication with other workgroups, and carrying out actual catering.

KIT

07/2022 - 03/2026
Ministry for Group Coordination

I am responsible for organizing the structure and processes of my student group. This includes the processing of AStA forms, governance of members, and organization of meetings.

  • Awarded 'Auszeichnung für herausragende Ehrenamtliche Leistung' in 2025.

El Rancho

01/2020 - 07/2020
Volunteer

I helped to serve up to 900 persons daily

  • Preparation of meals for our catering.
  • Planning of staff meals.