Stein Welberg Email & Phone Number

Utrecht, Nl

For SURF, I am building an Internal Developer Platform from scratch. The platform enables developers to build, test, and deploy and maintain their software in a self-service manner. For building software, CI/CD components for a range of programming languages are available. These components standardize the build & deploy pipelines. The platform also comes with a number of templates for building applications. The DTAP environments are built as separate kubernetes clusters that come with a number of services like managed Postgres databases, Object store (MinIO) & OpenSearch. Code quality and security are paramount; with Backstage used to provide insights into these aspects. The platform is fully self-hosted. Technologies used: GitLab, Kubernetes, Docker, FluxCD, Backstage, Grafana, Prometheus, Loki, Tempo, MinIO, Cert-Manager, ExternalDNS, Postgres, OpenSearch, Open Policy Agent, Renovate, and more.

Utrecht, Nl

At SURF I have assisted the T&I team with an exploration on the next steps with regards to their products. They have the wish to combine a few of their products into one new product. Apart from guiding the exploration, I have given advice with regards to the architecture that would be a good fit.

I have helped SLE rebuild their pedigree software to keep track of Animal species. During the period I worked for them, I have achieved the following:- Covered the entire application with component integration tests- Redesigned the application architecture to make it more future proof- Implement an audit trail of actions that happened within the Pedigrees- Switched to a different database type- Implemented several new features: e.g. generating an animal certificate pdf, Allowing users to create reports that are exported to Excel.- Reimplemented the CI pipelines- Reworked the CD procedures- Designed and implemented a way to run multiple instances of the applicationsUsed technologies:- Python- Typescript- AWS (CDK), AWS Lambda's, API Gateway, RDS (PostgreSQL engine)

Amersfoort, Utrecht, Nl

My journey at OneWelcome was a continuation of an exciting journey in the world of secure identity solutions. It was a period of substantial growth and transformation, where innovation met integration head-on. Below a list of the things that I contributed to:Multi-Tenant Platform Mastery 🌐: I continued to build and enhance our multi-tenant platform, ensuring it remained robust and scalable.Bringing Teams Together 🤝: I played a part in merging two organizations, creating the largest European CIAM provider.Championing the "You Build It, You Own It" Paradigm 🏆: We embraced the "You Build It, You Own It" mindset, empowering engineers to own their creations, resulting in streamlined processes.Due Diligence for the Thales Acquisition 💼: I helped with the Due Diligence process for the Thales acquisition, ensuring excellence throughout.Led the Developer Enablement team, focusing on cross-cutting challenges like our event bus, shared CI/CD code, and libraries, making our engineers super-efficient.Revamped our engineering and CI/CD processes, making us top contenders among all CircleCI customers.Helped to achieve our SOC2 Type 2 certification by automating as much as possible we were able to get it with causing zero disruption to our engineers day-to-day work - a testament to our dedication to security and operational excellence.My OneWelcome adventure was all about innovation, integration, and pushing the limits in the world of secure identity solutions. 🚀

Amersfoort, Utrecht, Nl

Pioneering CIAM in Europe 🇪🇺My journey at Onegini was a thrilling ride through the realm of Customer Identity and Access Management (CIAM). We were pioneers, the first CIAM vendor in the Netherlands, making waves in the insurance market.Scaling Up with Success 🚀Onegini was no small player; it was a dynamic scale-up. I witnessed and contributed to its growth from approx 10 to 100 people, marking a journey of innovation and shaping CIAM.Architecting the Future 🏗️I led the charge as the person responsible for the platform's architecture and technological choices. My proudest achievements include:📱 Building a secure mobile application development platform used for transferring large sums of money.🔄 Rearchitecting the single-tenant platform into a multi-tenant one.🏭 Splitting a monolithic application into smaller services while keeping the shop open.🔐 Designing and implementing secure communication for mobile devices, even in untrusted networks.🧬 Crafting secure data encryption with tenant-specific encryption keys that are rotatable, with the flexibility to change algorithms without data loss.🌐 Implementing a fully serverless event bus ensuring one-time and in-order delivery, powered by DynamoDB (streams) & Lambda.🎯 Introducing Domain Driven Design into the organization, revolutionizing our approach to problem-solving.Embracing Cutting-Edge Tech 💻Our tech stack was the engine driving our innovation. We embraced several AWS services, Java, JavaScript, CircleCI, Spring Boot & Framework, Terraform, Kubernetes, Docker, and many more. This tech ecosystem enabled us to create groundbreaking solutions setting new standards in the CIAM domain.Onegini wasn't just a workplace; it was a crucible of innovation and collaboration. Our journey marked by continuous growth, exploration, and a relentless pursuit of excellence. Proud to have been part of a team pushing the boundaries of what CIAM could achieve.

At Innovation District, I led a tech adventure that reshaped how we approach online business security. Back in the day, CIAM (Customer Identity and Access Management) wasn't even a buzzword yet.👐 Getting My Hands DirtyI'm a tech leader who's not afraid to get my hands dirty. We started from scratch, crafting a SaaS solution that made online transactions secure and user-friendly. I wasn't just the visionary; I was on the frontlines, making it happen. 🏗️ Building from ScratchWe built our CIAM product from the ground up. It was a thrilling challenge. Our goal was to empower consumers, and we did it by embracing industry standards like OAuth, SAML, and OpenID. Our tech stack included Java, Ruby, Spring Framework, Netflix Asgard, and AWS.🚀👥 Team Growth and InnovationWhat's even more exciting than tech? People. I had the pleasure of growing and mentoring a fantastic team. Together, we drove innovation and explored new horizons.⚙️ Automating ExcellenceOur commitment to excellence extended to our development and deployment processes. We fully automated our CI/CD pipelines, enabling us to roll out updates faster than ever.Innovation District wasn't just a job; it was a place where we redefined online business security. Our journey was marked by innovation, teamwork, and a relentless pursuit of excellence, and I'm proud to have been part of it.

Utrecht, Nl

SURFconext formerly known as COllaboration INfrastructure is about improving the opportunities for cross institution collaboration. It provides the middleware (based on open standards e.g. OpenSocial) for federated authentication, authorization and group management to enable educational institutions in the Netherlands to collaborate. I'm working with the following open-source products: Shibboleth, SimpleSamlPHP, Corto. We use the following technologies / standards: OpenSocial, Saml 2.0, java, php, REST, AJAX. The project methodology used for the project is SCRUM.

Nieuwegein, Utrecht, Nl

Everett is an innovative IT company specialized in the fields of identity and access management, system integration and application integration.My specialty is identity and access management. Installing, configuring, and customizing such solutions according to customers' wishes. For customizations we use all kinds of technologies, ranging from webservices to ajax.

Nieuwegein, Utrecht, Nl

Everett is an innovative IT company specialized in the fields of identity and access management, system integration and application integration.My specialty is identity and access management. Installing, configuring, and customizing such solutions according to customers' wishes. For customizations we use all kinds of technologies, ranging from webservices to ajax.

Den Haag, Nl

OPTA wanted insight in the possibilities to create a digital counter (digitaal loket) to provide a number of their services via internet. We provided them with two possibilities tuned to their budget and requirements. These possibilities included connections to eHerkenning and DigiD for authentication and authorization. I was responsible for the possible solutions and writing the report.

Utrecht, Nl

COllaboration INfrastructure is about improving the opportunities for cross institution collaboration. It provides the middleware (based on open standards) for federated authentication, authorization and group management to enable educational institutions in the Netherlands to collaborate. The project methodology used for the project is SCRUM.

2511 Dp Den Haag, Postbus 20011, Nl

'Digitale Werkplek Rijksdienst' is the project to create a common workplace for all government departments (approx. 250.000 employees). Access Management at DWR focuses on Single Sign-On for the applications that DWR provides to the departments. The Goal is to provide SSO between Windows Desktops, SAP Netweaver, Sharepoint 2007, and others. The access Management products used are: OpenAM and ADFS 2

Rotterdam, Zuid-Holland, Nl

Helping the Erasmus University Rotterdam set up their architecture processes to adapt their way of working to manage change in a better way, facilitate more communication among organizational divisions, and to increase quality.

Rotterdam, Zuid-Holland, Nl

Attaching the current OpenSSO instance of the Erasmus University Rotterdam to the SURFnet federation in order to let EUR use the SURFnet services or provide EUR services to third party organizations.

Leiderdorp, Zuid-Holland, Nl

Installing, configuring and customizing of a number of Oracle products (Identity Manager, Access Manager, Internet Directory, Weblogic). Also customizing these products to customers' wishes.

Utrecht, Nl

COllaboration INfrastructure is about improving the opportunities for cross institution collaboration. It provides the middleware (based on open standards) for federated authentication, authorization and group management to enable educational institutions in the Netherlands to collaborate. The project methodology used for the PoC is SCRUM.

Paris, France, Fr

I am doing research on the possibilities to transform an architecture created using the IAF (Integrated Architecture Framework) approach into an architecture which uses ArchiMate models for documentation and visualisation.

Manage IT projects for Student Solutions' customers.

Develop websites / web applications

Paris, Fr

In this position I have the responsibility that an event (20-600 people) have a good time. I've to take care that all the employees are working, so practically I'm the manager on site manager during an event.

Piranha is the association where I play Waterpolo. At present I'm also in the Governing board of this association. Where My job is to keep the Waterpolo division running.

Msc, Business Information Technology

Bsc, Business Information Technology