AWS Certified Cloud Practitioner

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Designed and developed the architecture of an enterprise SCM/CI platform for Kubernetes-native delivery and GitOps workflows.
• Implemented infrastructure automation and Vault & IAM integration for secure, compliant pipelines.
• Coordinated cross-functional teams to improve DevOps, security, and architecture in release processes.
• Increased platform adoption and developer experience by automating onboarding and artifact pipelines.

Independent consulting engagements supporting technology organizations on governance, system integration, and delivery structure.

• Supported technology organizations in strengthening governance, system integration planning, and delivery structure.
• Reviewed BSS/OSS modernization and data migration programs, validating effort estimates and identifying delivery risks.
• Introduced simple reporting and tracking tools to improve coordination across distributed teams.
• Advised on integration planning and governance, helping teams improve delivery structure and stakeholder alignment.

• Overall responsibility for the project lifecycle from scope definition to completion
• Close collaboration with platform teams, IT leaders, and external service providers
• Application of SAFe principles and structured sprint work
• Creation of a migration roadmap with clear milestones
• Monitoring of the lifecycle: onboarding, repository migration, replication of permissions, and system tests
• Visualization of the architecture with PlantUML and Gliffy as well as documentation in Confluence
• Regular status reports and running knowledge transfer sessions

• Independently designed, developed, published, and maintained mobile games for iOS and Android.
• Implemented application architecture, gameplay systems, UI, monetization, analytics, and platform integrations.
• Managed the complete release lifecycle, including testing, store publication, production monitoring, and iterative improvements based on analytics.

• Designed and implemented scalable ETL/ELT pipelines using Python, SQL, dbt, AWS and Informatica to ingest data from sources such as APIs, relational databases, and flat files into Snowflake, reducing pipeline runtime by ~30%.
• Migrated high-volume datasets from on-premises Teradata to Snowflake using AWS services (S3, Glue, Step Functions, IAM), ensuring data consistency and integrity.
• Applied Kimball methodology to design star and snowflake schemas, improving query performance and reducing Snowflake compute costs.
• Implemented automated data quality checks using SQL-based dbt tests and the Great Expectations framework to detect anomalies and enforce data correctness before production loads.
• Orchestrated ETL workflows in Airflow using Python and managed code deployments via Git with CI/CD best practices to increase deployment reliability and maintain pipeline uptime.
• Built interactive Power BI dashboards and curated datasets to enable data-driven decision-making for stakeholders.
• Maintained technical documentation in Confluence for ETL workflows, and led knowledge-sharing sessions for new joiners.

• Built a custom AI chatbot for an e-commerce client using GPT-4 and LangChain with RAG, reducing customer support ticket volume by 45% and improving response accuracy to 92%.
• Designed and deployed an intelligent document processing system using LlamaIndex, Pinecone, and FastAPI for a FinTech startup, enabling semantic search across 100K+ financial documents.
• Developed multi-agent AI workflows using CrewAI and LangGraph for a marketing agency, automating lead research, content generation, and outreach — saving 20+ hours/week of manual work.
• Created AI-powered automation pipelines using n8n, Make, and Zapier integrated with CRMs (GoHighLevel, HubSpot), reducing manual data entry by 80% for a real estate firm.
• Delivered prompt engineering and LLM fine-tuning consulting for multiple clients, optimizing AI model outputs for customer support, content creation, and data extraction use cases.
• Built production-ready REST APIs with Python and FastAPI to serve AI models on AWS and GCP, handling 10K+ daily requests with 99.9% uptime.

• Responsible for the end-to-end application and integration architecture of the Hamburg S-Bahn maintenance digitization program. A highlight is the introduction of robots and fixed camera towers to automate vehicle inspections, allowing AI image algorithms to assess train conditions during operation.
• Deutsche Bahn has one of the largest SAP PM implementations worldwide, which is a key component of this digitization.

• Rebuilding an existing cloud solution with Kubernetes, Terraform, Ansible, Prometheus, Grafana, GitLab, Argo CD and PostgreSQL
• Coordinating and managing external partners and service providers
• Ensuring service delivery on time and on budget with budget responsibility
• Integrating the cloud solution with external public clouds (AWS)
• Setting up and defining processes and workflows in Jira and Confluence
• Product management of software development for automation and self-service in CI/CD DevOps mode
• Agile software development with Kanban and Scrum in various development teams
• Single point of contact for key customers in respective projects
• Creating and aligning the product backlog with stakeholders from sales, architecture, development teams, marketing, management and customers
• Migrating existing customers to the AWS cloud as product owner
• Creating and aligning a product roadmap with internal and external stakeholders

DWH for customer and financial data

• Extension of the DWH with new data sources
• Report development
• Data quality management

Methodology: Scrum

Tools: Atlassian Confluence & Jira

Databases: Microsoft SQL Server

Programming languages: SQL, T-SQL

ETL: Microsoft SQL Server Integration Services (SSIS)

Frontend platform: PowerBI, Microsoft Reporting Services

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Designed, developed, and configured scalable data applications aligned with business processes and technical requirements.
• Architected scalable, cost-effective data architectures leveraging Snowflake across AWS, Azure and GCP, integrating dbt for data transformation and modeling.
• Built and maintained robust ETL Data Pipelines, ensuring high data quality for seamless migration and cross-system integration.
• Demonstrated strong expertise in SQL & Python with extensive experience in data modeling, ETL/ELT pipeline development, and streaming data processing; proficient in Git-based version control, CI/CD practices, and testing frameworks, with solid knowledge of data quality, observability, cost optimization, security, and data governance principles.
• Led multiple data migration initiatives from SAP HANA to Snowflake using a modular dbt framework.
• Designed and maintained end-to-end data transformation workflows using dbt on Snowflake, implemented layered data models, optimized performance, and ensured high-quality data delivery for business intelligence and reporting.
• Managed development, QA, and production deployments through structured version control and release management using GitLab.
• Integrated and centralized data from multiple sources including relational databases, flat files, Excel, and large-scale systems into Snowflake.
• Applied strong expertise in Sales, Marketing, HR, and ERP data domains, developing and maintaining relevant KPIs and reporting solutions.
• Collaborated with cross-functional teams to deliver end-to-end data solutions on schedule through proactive issue resolution and effective coordination.
• Administered the Snowflake sandbox environment for Data Engineering division.
• Trained colleagues transitioning into data roles on Snowflake and provided technical guidance and mentorship to junior team members.