Paw Ormstrup Madsen. Dansk

Developer · DevOps · AI · Security

I build software and the platforms it runs on.

I'm a platform engineer with almost 13 years of experience on business-critical systems in pensions, insurance, finance and healthcare. Alongside my permanent job I take on selected freelance work: from .NET code and CI/CD to Azure, Kubernetes, observability, IT security and AI that runs on your own hardware.

How I can help

Three areas where I can make a difference quickly, either as an extra pair of hands in your team or as the person who takes a task from start to finish.

Development

Solid .NET solutions that are still easy to maintain five years from now.

  • APIs and integrations in ASP.NET Core
  • Web apps in Blazor, React or Angular
  • Upgrading older .NET to .NET 10
  • Testing with xUnit, Testcontainers and Playwright

DevOps and platform

Platforms where deployments are boring and problems are found before your customers find them.

  • Azure, AKS, Docker and Helm
  • Infrastructure as code: Terraform and Bicep
  • CI/CD in GitHub Actions, Azure DevOps and Octopus
  • Observability: Grafana, Loki, Tempo, Mimir and OpenTelemetry
  • Entra ID, Conditional Access and network security

AI in practice

AI that makes a difference day to day, without your data leaving the building.

  • AI agents in the development process (Claude Code, Codex)
  • MCP servers that connect AI to your own systems
  • Self-hosted language models on your own hardware
  • Visibility in AI assistants: structured data and llms.txt, so they get the facts about you right
  • From an idea to a tool people actually use

IT security for individuals and businesses

I've built and run systems in pensions, finance and healthcare, where data has to be protected, and at WhistleSafe confidentiality is the whole product. I use that experience to help individuals and businesses close the gaps before someone else finds them.

For you and your family

Peace of mind at home, without having to become an expert yourself.

  • A password manager and two-factor login set up for the whole family
  • Router, Wi-Fi and smart home devices secured and kept up to date
  • Backups that still work if your computer is hit by ransomware
  • Help spotting fake emails, texts and phone calls

For businesses

A sensible level of security for small and mid-sized businesses: concrete improvements rather than long reports.

  • Security review of Microsoft 365, Entra ID and your servers
  • MFA, Conditional Access and admin accounts under control
  • Updates and vulnerabilities: what are you running, and what is out of date?
  • Logging and monitoring, so you spot an attack in time
  • Requirements from NIS2, GDPR and customers turned into technical measures

When something goes wrong

A hacked account, suspicious activity or ransomware: help to stop the damage and move on.

  • Regain control of accounts and devices
  • Find out what happened and what the attacker got access to
  • Restore from backup and close the hole they came in through
  • An overview of who needs to know: your bank, the police and, if needed, the Danish Data Protection Agency

Email hej@pawmadsen.dk with a few lines about what you'd like checked, or what has happened.

Experience

I started out as a system administrator before I became an engineer, and I still want to understand the technology behind what I build and run.

2014 – now

Principal Software Engineer and platform engineer, Nobly

Software and platform for pensions, insurance, banking, mortgage credit and healthcare in Denmark and Norway.

  • Technical lead on the shared platform: tooling, deployment and environment automation for every team.
  • Three platform replacements from evaluation to shutdown, among them logging on Grafana Loki, which saves over DKK 1 million a year.
  • The Grafana stack as a platform service on three AKS clusters, upgraded without downtime.
  • Customer environments set up as infrastructure as code: from weeks of manual work to four hours.
  • Ten years before that as a developer and technical lead on business-critical .NET systems.
2023 – now

Co-founder, WhistleSafe (opens in a new tab)

My own SaaS company: a whistleblower platform in .NET and Blazor on Azure. I own the whole life cycle (product, architecture, development, operations and GDPR), with full end-to-end tests before every deployment and a self-hosted AI stack for customers whose data must stay in-house.

2026

Freelance, Dabeco (opens in a new tab)

Updating and optimising the website of a psychology practice. Everything was built and tested on a local copy before it went to the real site.

  • WordPress, the Enfold theme and PHP upgraded to the latest versions, keeping the existing design.
  • SEO: one H1 per page, titles and descriptions, alt texts, sitemap and IndexNow for Bing.
  • Visibility in AI assistants: structured data about the clinic and its therapists, an llms.txt generated from the site, and a test of what the assistants answer about the practice.
  • Google Ads built as six search campaigns, with ad tracking behind cookie consent.
  • Faster pages and better accessibility: contrast, link styling and button labels.

Read the full case with before and after figures

2022

Software Engineer, Danske Fragtmænd

Blazor and ASP.NET Web API.

1999 – 2014

System administrator, soldier and engineering student

System administrator at Daxten (networks, servers and workstations), soldier in the Danish Armed Forces, electronics technician apprentice and a B.Eng. in ICT from VIA University College in Horsens.

Technology

What I work with every day. I'm happy to learn something new when a job calls for it.

Programming

  • C# / .NET 10
  • ASP.NET Core
  • Blazor
  • EF Core
  • React
  • Angular
  • Python
  • Java
  • SQL Server
  • PostgreSQL

Cloud and containers

  • Azure
  • AKS / Kubernetes
  • Helm
  • Docker
  • Linux
  • Hub-spoke networking
  • Private endpoints

Infrastructure and delivery

  • Terraform
  • Bicep
  • GitHub Actions
  • Azure DevOps
  • Octopus Deploy
  • PowerShell
  • Bash

Observability

  • Grafana
  • Loki
  • Tempo
  • Mimir
  • Alloy
  • OpenTelemetry
  • Prometheus
  • Netdata

Identity and security

  • Entra ID
  • Conditional Access
  • OpenID Connect
  • Keycloak
  • SAML
  • MitID
  • GDPR

AI

  • Claude Code
  • Codex
  • MCP servers
  • llama.cpp
  • Open WebUI
  • Self-hosted inference

On the side

I'm an engineer at work and at home. I've been taking things apart and building new ones since I was a kid, and that's still how I learn.

  • Atomic GridMy online arena game for the browser, inspired by Atomic Bomberman and written from scratch in C# and .NET 10. Up to 10 players, free.
  • A home lab run like productionRouter, NAS, reverse proxy and monitoring, documented in git. It's also where this site runs.
  • HearthMy own self-hosted chat, voice and game-streaming app for family and friends, with web, desktop and Android apps.
  • Self-hosted AILanguage models on my own hardware, and an AI workshop portal that pupils at Danish schools use in class.
  • Hundslund LAN PartyTechnical organiser: more than 45 attendees, with the network and infrastructure built from scratch.

Images

A photo of me and a growing collection of AI portraits I've made from it with an open image model on my own graphics card.

Contact

Got a project, or just want to talk an idea through? Send me an email with a few lines about what it's about, and I'll get back to you.

You can also message me on my own Hearth (opens in a new tab). It's invite-only, so send me an email if you'd like an invite.