Infrastructure
The whole stack, run end to end.
Kubernetes clusters, databases and CI/CD pipelines, set up, deployed and kept running.
Security & Infrastructure Engineer
Marian-Razvan
Banateanu.
I build, run and secure the infrastructure behind digital services, up to national-scale public systems.
-
4+
years building and securing production systems
-
MEng
Advanced Cybersecurity, POLITEHNICA Bucharest
-
ISO 27001
information security compliance
Security infrastructure.
End to end.
From Kubernetes to ISO compliance, I handle the whole process, so nothing slips through the gaps between teams.
Security testing
Found before attackers find it.
Code analysis and security testing, with clear reports that tell your team exactly what to fix.
Monitoring
Always watching.
Metrics, logs and threat detection with Prometheus, Grafana and Wazuh, so issues surface early.
Compliance
ISO, made practical.
Leading ISO/IEC 27001 compliance for information security, plus the ISO requirements for AI, turning them into controls that work day to day.
Integrations & APIs
Connected to the systems that matter.
Secure APIs and integrations with SSO and digital identity providers, public-sector platforms and third-party services.
Identity & IT
The right access for the right people.
Microsoft Azure administration for users and access, plus the hardware your team works on.
About me.
I'm Razvan, a security and infrastructure engineer based in Bucharest. I started out writing software, from web platforms to machine learning and blockchain, then moved closer to what runs underneath it: the servers, pipelines, identities and controls that keep everything running and safe.
Today I handle infrastructure, security and ISO/IEC 27001 compliance, including work on national-scale public systems. I hold a Master's in Advanced Cybersecurity, and a background in power engineering and PLC programming gives me a feel for industrial systems, not just cloud ones.
Experience.
Four years across software, infrastructure and security, from fintech and industrial automation to national public systems.
-
Mar 2025 – Present
Security & Infrastructure Engineer
Graphit Innovation Factory · Bucharest
Infrastructure, security and ISO/IEC 27001 compliance, end to end. Development on a national-scale public platform, focused on authentication, APIs and integrations.
-
Jul 2024 – Mar 2025
Software Engineer
ELECTRO-TOTAL · Bucharest
Developed and optimized automated systems through PLC programming, working directly with clients on custom solutions.
-
Jan – Apr 2024
Full-stack Developer
ICI Bucharest · National Institute for R&D in Informatics
Migrated a React application to Next.js, improving performance and user experience.
-
Jul 2022 – Dec 2023
Software Engineer
PAM Quantum Investments · Bucharest
Web applications with React, Express.js, Flask and Django; a Python Telegram bot; machine learning on financial data; Rust smart contracts on MultiversX.
Education
2024 – 2026
Master of Engineering, Advanced Cybersecurity
University POLITEHNICA of Bucharest
2018 – 2022
Bachelor of Engineering, Power Engineering and IT
University POLITEHNICA of Bucharest. Energy systems, PLC programming, MATLAB, Simulink and C++.
Services.
Clear, scoped help for teams that need their infrastructure built right and kept secure.
Infrastructure & monitoring
Set up right. Kept running.
For teams that need a reliable platform they can see into.
- Kubernetes, databases and CI/CD pipelines
- Metrics, dashboards and alerts with Prometheus and Grafana
- Security monitoring with Wazuh
SSO & integrations
Sign-in and systems, connected.
For products that need secure authentication and dependable integrations.
- Single sign-on and digital identity providers
- Secure APIs and third-party integrations
- Integrations with public-sector platforms
Security essentials
The basics, done properly.
For teams that know security matters but haven't had the time to set it up.
- Access control and user management
- Secure configuration of servers and services
- Code review for common vulnerabilities
ISO/IEC 27001 readiness
Compliance that works in practice.
For companies preparing for ISO/IEC 27001.
- Gaps between your setup and the standard's requirements
- Practical controls, not just paperwork
- Support in the compliance discussions
No fixed price list. Every project is quoted after a short conversation about your needs and where you're based. Start the conversation
How I work.
Security isn't a one-off project. It's a cycle, and I run all of it.
-
01
Assess
Map the environment, the risks and what matters most to protect.
-
02
Design
Architect a security setup that fits the business, not the other way around.
-
03
Develop
Build and configure each component, tested before it touches production.
-
04
Implement
Roll out with minimal disruption, hardened and fully documented.
-
05
Analyze
Monitor, audit and refine. Then the cycle starts again.
Every layer.
Every process.
Secured.
Let's talk security.
Planning new infrastructure, or want a second pair of eyes on what you already run? I'd like to hear about it.
banateanu.razvan1@gmail.com