Marcus Kjellin

ICA Gruppen

Platform Engineer

2026 - 2026

ICA Gruppen is a parent company to ICA Banken, ICA Fastigheter, Apoteket Hjärtat and has since been merged with ICA Sverige as well, which is the company handling all the stores around the country.

Marcus worked within the Data & Analytics department, supporting multiple business units. He was tasked with helping migrate on-prem implementations to Google Cloud using Infrastructure as Code, ensuring secure, compliant, and scalable foundations.

Maintain and evolve a secure, stable GCP platform with strong governance and change management.
Implement GCP infrastructure via Terraform.
Set up and maintain CI/CD pipelines with strong test suites and quality gates.
Enforce platform security baselines and guardrails.
Lead and execute change management processes.
Collaborate with security stakeholders to ensure cloud environments meet bankinggrade reliability and compliance.
Set up and maintained Google Kubernetes Engine (GKE) for hosting Gitlab runners.
Set up and maintained Artifact Registry with Container Scanning.
Verified Security Vulnerabilities in Security Command Center and took action if deemed a risk.

Result: Delivered a standardized, hardened GCP platform with reproducible IaC workflows, improved deployment reliability, and compliant guardrails, enabling multiple business units to migrate from on-prem to cloud with reduced operational risk and faster delivery.

Method/Tech: GCP: IAM, Buckets, BigQuery, BigTable, Firestore, Dataflow, GKE,
Cloud Build, Cloud Functions, Dataproc, Pub/Sub, Workflows, Scheduler, VPC, Compute Engine, App Engine, Artifact Registry, Container Scanning (Artifact analysis and vulnerability scanning), VPC Service Controls (VPC SC), Security Command Center, Secret Manager, Key Management, Certificate Manager.
Terraform, Gitlab Workflows, Github Actions, CI/CD, Networking, Kubernetes, Observability, Git, Agile.

Modoyo AB

DevOps Engineer

2024 -

Modoyo is a small gaming company. Marcus engineered the end-to-end AWS platform for an online game, focusing on secure, scalable, and automated foundations. He combined platform engineering with security operations to harden services, standardize deployments, and enable fast, safe delivery for backend and game server workloads.

Design, secure, and operate AWS infrastructure with strong guardrails and IaC/CI/CD; manage game server operations and developer workflows.

Implement AWS IaC with Terraform, enforcing least-privilege IAM, KMS encryption, VPC segmentation, tagging, and policy controls.
Build CI/CD with GitHub Actions/CodeBuild/CodePipeline, adding quality gates, image scanning (ECR), and automated validations.
Manage ASG-based game servers with CloudWatch metrics and alarms; instrument EKS services with Prometheus and dashboards in Grafana.
Operate and maintain ASG-based game servers in AWS, with metrics and alarms in CloudWatch.
Set up and manage EKS for backend services, with observability being Prometheus scraping with Grafana dashboards.
Provision and harden EKS for backend services (matchmaking, scaling, telemetry), applying RBAC, network policies, secrets management, and audit logging. - Automate Docker ArgoCD deployments so backend repos continuously deliver to EKS.
Manage secrets and configuration with Secrets Manager and Parameter Store; standardize operations via SSM.
Integrate identity and access for player/admin flows with Cognito; improve resilience with Route 53, CloudFront, and Global Accelerator.

Result: Delivered a hardened, reproducible AWS platform with built-in security controls and automated deployments. Release friction decreased, scalability and reliability improved for game servers and backend services, and operational risk was reduced through encryption, least-privilege access, image scanning, and continuous monitoring.

Method/Tech: AWS: IAM, EC2, S3, EKS, ECS, ASG, CodeBuild, CodePipeline, SSM, CloudWatch, Cognito, Route 53, ECR, KMS, IAM, Lambda, Secrets Manager, Parameter Store, Global Accelerator, CloudFront, VPC. GCP: IAM, OAuth/Branding
Terraform, Python, Golang, Git, Github Actions, ArgoCD, Docker, Kubernetes, Karpenter, Grafana, Prometheus, Linux/Windows.

Branscher

Banking

Metoder & processer

Agile, Workflows, Governance, CI/CD, Change Management, Operational Efficiency, DevOps, Configuration Management, Automation, IT Operations, Access governance, Standardize, RBAC, Branding, Analytics, Key Management, Incident Response, Workforce Development, Operational Risk, Project Delivery, Vulnerability Remediation, Cost Optimization, Education, Network Reliability, Compliance requirements, Risk

Verksamhetsområde och funktion

Security, Phone Support, Service Desk, IT support, Procurement, Budget, Incident Management, Recruitment, Administration, Advise, User Support, Cisco Meraki

Plattformar

Linux, Windows Server, Version control, Cloud, EC2, AWS, Azure, VPC, Windows, IT System, Servers, GitLab, Kafka, Kubernetes, Google Cloud, Azure Functions, GCP, GitHub Actions

Produkter

VMware, Nginx, Docker, Active Directory, S3, CloudWatch, Lambda, Grafana, Azure VM, Automated, Azure Resource Manager, CloudFront, Prometheus, Windows Server Administration, Azure Monitor, Azure Key Vault, Dataflow, FortiGate

Roller

Server administration, DevSecOps, Platform Engineer

Tekniker

Switches, Network Security, OAuth, Encryption, Blueprints, Backend, IAM, Load Balancer, Cloud Engineer, Metrics, Cloud Architecture, Python, Vulnerability Scanning, Hybrid Cloud, Build Automation, Cloud Functions, Telemetry, Scalability, Microsoft SQL, Vulnerabilities, Backend services

Verktyg

Infrastructure, Git, Dashboards, Bash, PowerShell, SCOM, Go, Puppet, Network Policies, Azure Active Directory, Remote Support, Terraform, Route 53, Tooling, ArgoCD, BigQuery, CRM system

Okategoriserat

Security Operations, BigTable, Access controls, Firestore, App Engine, Reproducible, Pub/Sub, Online game, AzureAD, Throughput, Tagging, Audit Logging, Continuous monitoring, Security controls, Playground, Compute Engine, Hybrid Cloud Infrastructure, Policy Enforcement, CI/CD Workflows, Google Cloud Certified Professional Cloud Architect

Platform Engineer, ICA Gruppen

2026 - 2026

DevOps Engineer, Modoyo AB

2024 -

Cloud Engineer, Playground Tech AB

2023 - 2024

Senior IT Administrator/DevOps Engineer, Fall Damage Studio AB

2021 - 2023

IT Operations Specialist, Acne Studios AB

2019 - 2021

Internal IT System Administrator, Star Stable Entertainment AB

2019 - 2019

Service Desk, Lernia

2018 - 2019

IT Support, Regeringskansliet

2017 - 2018