01 / FIX
Troubleshooting & Emergency Support
Rapid diagnostics, root-cause analysis, fault isolation and recovery for unstable infrastructure and cyber-physical systems.
From €1,500
SENIOR SYSTEMS ARCHITECT / ENGINEERING
Engineering systems that operate in the real world.
I design and deploy cyber-physical, edge and industrial infrastructure where hardware, software, networks, control logic and data must operate as one reliable system.
LOCAL-FIRST
DETERMINISTIC
FAILURE-FIRST
RECOVERABLE
SECURITY-BY-DESIGN
CYBER-PHYSICAL PIPELINE
● ARCHITECTURE
Physical ProcessREALITY
Sensors / TelemetryINPUT
Edge RuntimeEXEC
State / Control CoreSTATE
Network / BackendDATA
Intelligence / DecisionLOGIC
Actuation / RecoveryACTION
NOMINAL
DEGRADED
SAFE
SYSTEM MODEL
I do not sell isolated technologies. I engineer the system around the problem.
A production system is not just an application, server or controller.
It is a chain of physical process → sensors → state → computation → communication → control → actuation → feedback.
My work connects those layers into architectures that remain understandable, observable and recoverable when individual components fail.
01 / ENGINEERING SERVICES
Fix. Design. Build. Deploy.
Productized engineering for companies that need a difficult technical problem solved without turning it into an open-ended consulting program.
02 / AUDIT
Technical Audit & Vulnerability Assessment
Architecture, infrastructure, network exposure, security boundaries, configuration, reliability and operational risk assessment.
From €2,500
03 / ARCHITECT
Architecture Design & System Optimization
System decomposition, state and control architecture, integration boundaries, resilience, security and target-state design.
From €3,500
04 / BUILD
Custom Edge / Industrial Software
Embedded systems, edge runtimes, telemetry, industrial protocols, automation and hardware/software integration.
From €5,000
05 / DEPLOY
DevSecOps & CI/CD Implementation
Reproducible deployment, hardened Linux, containers, zero-trust networking, CI/CD, configuration control and rollback.
From €5,000
06 / INDUSTRIAL
Cyber-Physical Systems Engineering
OT/IT integration, brownfield modernization, greenfield architecture and complex industrial CPS deployments.
Custom B2B scope
02 / PRODUCTIZED ENGINEERING
Defined technical outcomes.
Bounded engineering packages designed to solve concrete infrastructure, edge and reliability problems with an explicit scope, delivery window and technical outcome.
01
Private Zero-Trust Network
Private encrypted infrastructure perimeter with controlled access, segmentation, secure remote operations and reproducible configuration.
02
Deterministic Infrastructure Engine
Versioned infrastructure, reproducible deployment, validation, rollback and explicit recovery paths for production environments.
03
Failsafe Edge Hardware System
Local-first edge control for environments where network or cloud availability cannot be a physical dependency.
04
Telemetry & Control Backend
Validated telemetry and control infrastructure with API boundaries, time-series storage, observability and operational state.
03 / SYSTEMS ENGINEERING
From system risk to operational continuity.
Enterprise engagements are structured as a progression from paid assessment to architecture, engineering, deployment and long-term operational responsibility.
01 / AUDIT
Cyber-Physical Systems Audit
Current-state architecture, asset analysis, control and data flows, security boundaries, failure modes, reliability gaps and target architecture.
€5K–15K+
02 / ARCHITECTURE
Architecture & Engineering Design
System decomposition, state machines, control architecture, OT/IT integration, security, observability, recovery and deployment architecture.
€15K–100K+
03 / DUE DILIGENCE
Technical Due Diligence
Independent assessment before acquisition, modernization or major infrastructure investment: architecture, security, reliability, scalability and vendor risk.
€10K–50K+
04 / PILOT
Engineering & Pilot
Architecture implementation, edge integration, security hardening, telemetry, control integration and acceptance-driven prototype or pilot deployment.
€30K–150K+
05 / DEPLOYMENT
Production Deployment
Milestone-based production deployment covering infrastructure, orchestration, networking, security, commissioning and acceptance.
€50K–300K+
06 / ENTERPRISE
Enterprise Rollout
Large-scale industrial deployment with multi-node architecture, governance, security requirements, operational integration and long-term evolution.
€100K–1M+
04 / OPERATIONS
Engineering responsibility after deployment.
Ongoing architecture and infrastructure operations are delivered as an external systems engineering function, not commodity software support.
Architecture / Operations Retainer
Continuous monitoring, security maintenance, incident response, configuration management, recovery, architecture reviews, vendor evaluation, capacity planning and system evolution.
MONITORINGInfrastructure, nodes, connectivity and system health.
SECURITYPatch management, reviews, hardening and incident response.
RECOVERYBackup, configuration control and operational recovery.
ARCHITECTUREContinuous system evolution and technical oversight.
RECURRING ENGAGEMENT
- Fractional Systems Architect — €5K–25K+/month
- Infrastructure / Operations SLA — €5K–50K+/month
- Enterprise environments — €25K–50K+/month+
- Measured outcomes and acceptance criteria
05 / RELIABILITY ENGINEERING
Design for failure.
Networks disappear. Sensors produce invalid values. Power fails. Services become unavailable. Configurations drift.
A reliable system does not assume these events will never happen. It defines what happens when they do.
DETECT
→
ISOLATE
→
DEGRADE
→
RECOVER
→
VERIFY
06 / SYSTEM ARCHITECTURE
Software is only one layer.
I work across the complete engineering boundary: physical process, embedded control, edge compute, industrial networking, backend infrastructure, security and operational intelligence.
SYSTEM STACK
HARDWARE
Sensors · Actuators · Power · Industrial Devices
FIRMWARE
C / C++ · Embedded Control · UART · I²C · SPI
PROTOCOLS
RS-485 · Modbus · CAN · MQTT · TCP/IP
EDGE
Linux · NixOS · Alpine · Containers · Local Runtime
BACKEND
Python · FastAPI · PostgreSQL · Redis · APIs
INTELLIGENCE
Automation · FSM · AI Agents · Digital Twins
OPERATIONS
Monitoring · Security · CI/CD · Recovery
TECHNOLOGY
Linux
Python
C / C++
Rust
FastAPI
PostgreSQL
TimescaleDB
MQTT
Modbus
CAN
Docker
Git
WireGuard
Tailscale
Headscale
SSH
Suricata
Zeek
Wazuh
Nmap
ESP32
Arduino
Edge Linux
Embedded Systems
07 / PRINCIPLES
Architecture before implementation.
01 / STATE
Explicit State Ownership
Critical state is explicit, inspectable and governed by defined transitions rather than hidden behavior.
02 / CONTROL
Deterministic Control
Safety-critical and physical control boundaries remain predictable and independent from higher-level heuristics.
03 / FAILURE
Failure-First Design
Invalid inputs, lost connectivity, component failure and configuration errors are part of the architecture.
04 / RECOVERY
Recoverability
Systems should be observable, reproducible, recoverable and rebuildable rather than dependent on manual memory.
05 / SOVEREIGNTY
Local-First Operation
Critical state and control remain local where possible. Cloud services are optional coordination and analytics layers.
06 / SECURITY
Security by Architecture
Identity, segmentation, least privilege, encrypted transport, audit and recovery form one security boundary.
08 / REFERENCE R&D
Cyber-physical systems in practice.
My own R&D work provides a practical environment for validating architecture across physical, computational and operational constraints.
ERICA OS
Sovereign CPS Runtime
Local-first infrastructure and orchestration architecture for autonomous edge operation, explicit system state, telemetry, automation, diagnostics and recovery.
- Deterministic control states
- Local-first orchestration
- Edge device integration
- Telemetry and local memory
- Offline operation
- AI above deterministic boundaries
GOLDEN GREENS CROP / CEA
Controlled-Environment Agriculture
Vertically integrated cultivation infrastructure combining hardware, embedded control, IIoT, edge computing, telemetry, automation and biological process modeling.
- Environmental control loops
- Nutrient and water automation
- Edge control and telemetry
- Agro-photonics integration
- Digital-twin concepts
- Production-oriented CEA architecture
09 / APPLICATION DOMAINS
Where the architecture applies.
DOMAIN / 01
Industrial Automation
OT/IT integration, industrial networks, telemetry, edge control and modernization.
DOMAIN / 02
Industrial IoT
Distributed sensing, gateways, telemetry pipelines and operational infrastructure.
DOMAIN / 03
Controlled-Environment Agriculture
Environmental control, cultivation automation, resource systems and biological feedback.
DOMAIN / 04
Edge Infrastructure
Autonomous local compute for constrained, remote or unreliable environments.
DOMAIN / 05
Infrastructure Security
Network segmentation, secure access, hardening, monitoring and recovery.
DOMAIN / 06
Digital Twins & R&D
Observed state, derived state, deterministic state identity and verification.
10 / DELIVERY MODEL
From problem to working system.
01
Diagnose
Understand the actual system, constraints, dependencies and failure modes.
02
Model
Define state, data flow, interfaces, control boundaries and operational assumptions.
03
Architect
Define the target topology, security boundary, recovery strategy and implementation plan.
04
Build
Implement infrastructure, firmware, backend services, integrations or automation.
05
Verify
Test behavior against agreed requirements, including failure and degraded scenarios.
06
Deploy
Deliver the working system with documentation, configuration and reproducible deployment where applicable.
11 / ENGAGEMENT
Defined scope. Defined outcome.
Engineering without open-ended consulting.
Engagements are structured around a concrete technical problem, explicit constraints and a measurable outcome. Small deployments can become reference architectures; reference architectures can become production systems.
FIXED SCOPEClearly defined technical work.
FIXED WINDOWDays or weeks where practical.
B2B PROJECTArchitecture, implementation and integration.
RETAINEROngoing systems architecture and oversight.
BEST FIT
- Industrial companies
- Systems integrators
- AgTech / CEA operators
- IoT product teams
- Hardware startups
- Infrastructure teams
- Brownfield modernization
- DeepTech R&D
12 / COMMERCIAL MODEL
One system. Multiple revenue layers.
Engineering engagements create the initial relationship. Deployment creates infrastructure revenue. Operations create recurring revenue. Reusable systems become platform and IP.
REVENUE ENGINE
AUDIT
€5K–15K+ · Proof of Work and qualification
ARCHITECTURE
€15K–100K+ · Target system design
ENGINEERING
€30K–150K+ · Pilot and integration
DEPLOYMENT
€50K–300K+ · Production infrastructure
ENTERPRISE
€100K–1M+ · Multi-site / industrial rollout
OPERATIONS
€5K–50K+/month · SLA / architecture function
PLATFORM / IP
ERICA OS
Local-first control, state and edge orchestration
EDGE MESH
Sovereign connectivity and managed edge nodes
OPEN SOURCE
$0 · Self-hosted adoption layer
MANAGED PRO
$3–5 / node / month · Managed operations
ENTERPRISE
$15K+/year · Sovereign deployment
CUSTOM IP
Enterprise licenses, support and industrial deployment