Certified Kubernetes Application Developer (CKAD)

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Delivered MVP-focused full-stack architecture for a health-sector client: Vite/React frontend, backend services on Google Cloud Run, and Supabase for database plus IAM/authentication.
• Supported product requirements engineering and prioritized cost-aware workload placement, implementing browser-side/edge computation where feasible before moving logic to backend services.

I designed and developed an AI-powered multi-tenant platform on Azure that transforms SAP process recordings into technical documentation, presentations and automated tests, processing over 15,000 process recordings for enterprise customers like Würth. I owned the architecture, the production releases and the DevOps setup. I also designed a multi-tenant system with SSO and role-based access on Azure. Implemented an MCP Server with Dynamic OAuth Authentication.

Main Tasks:

• Sprint planning and feature preparation
• Design the multi-tenant platform architecture (FastAPI, SQLAlchemy, PostgreSQL row-level security for tenant isolation)
• Develop AI pipelines with Prefect for transcription (Azure Speech API), document generation and SAP screen-recording analysis (Claude, gpt-4-mini)
• Design and implement an MCP server to expose tenant knowledge to LLM clients (Claude), with async retrieval and reranking
• Implement LLM cost tracking, rate limiting and client pooling for Anthropic/OpenAI/Azure OpenAI endpoints
• Set up CI/CD: Docker images to Azure Container Registry, GitHub Actions, Azure Static Web Apps, Alembic migrations in containers
• Manage production releases and execute live data migrations for enterprise customers
• Define engineering standards and architecture patterns for the team

Environment: Azure / Azure Foundry / Python / FastAPI / Prefect / React / PostgreSQL

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

Project: Digitalization of Warehouse Processes | Building a Data Analytics Platform.

• Built a web-based workforce allocation system that digitized daily shift planning by matching worker expertise to operational zones, replacing manual coordination with a structured workflow adopted across the site, saving supervisors time on daily planning.
• Developed a real-time operational visibility dashboard giving supervisors a live view of task throughput and outstanding workload across warehouse zones throughout the day, helping reduce overtime and idle labour costs.
• Developed a slotting optimization solution to improve warehouse picking efficiency and reduce picking time per order, working directly with operations teams from concept through production deployment.

Technologies used: Python, Django, PostgreSQL, Pandas, NumPy, HTML, Java, JavaScript, Docker, Kubernetes, AWS, Power BI, GitHub Actions CI/CD, GitOps, Claude, OpenAI

• Responsible for Openshift/Kubernetes on-prem administration and developer support.
• Developed URP infrastructure automation with Python, Ansible, Kustomize and ArgoCD, Argo Workflow/Events stack.
• Wrote smoke and load tests for URP infrastructure utilizing Python, Kustomize and ApplicationSets.
• Helped to set up and deploy URP infrastructure in Google Cloud, GKE.
• Set up monitoring for URP and ArgoCD stack with Splunk Cloud.
• Performed system administration tasks across RedHat Linux, Kubernetes/Openshift, ArgoCD, GitLab, Bitbucket Enterprise, Kafka and MongoDB.

• Further development and maintenance of a complex sales platform with a focus on digital closing processes, customer portal interactions, and document generation for financial and insurance products
• Development and maintenance of microservices with Spring Boot 3 and Kotlin
• Frontend development with Angular 20 for displaying products, applications, and documents
• Execution of end-to-end tests with Playwright and integration tests with WireMock
• Creation and optimization of Quartz jobs and CronJobs
• Refactoring of the security configuration in a multi-realm Keycloak setup with a custom filter chain, permission evaluator, and factory routing
• Creation of dynamic emails with Thymeleaf
• Extensive error analysis with Application Insights, Log Analytics, and direct SQL debugging
• Introduction of a dynamically controlled security architecture with flexible token handling depending on path and realm
• Stabilization and clear structuring of the closing process for complex product models
• Significantly improved maintainability and readability of the code through modular refactorings
• Higher test stability and depth through combined use of Playwright, WireMock, and integration tests
• Targeted performance optimization through analysis of Hibernate statistics, query tuning, and use of SQL execution plans
• Technologies used: Java 21, Kotlin, Spring Boot 3, Angular, TypeScript, REST API, JSON, Kubernetes, Docker, PostgreSQL, Liquibase, Keycloak, OAuth2, GitHub Actions, Testcontainers, Azure Application Insights, Thymeleaf, Tilt, Microsoft SQL Server

• Development of the digital organ donation register, commissioned by the Federal Institute for Drugs and Medical Devices (BfArM)

• Implementation of user stories in several microservices (frontend and backend)

• Ensuring quality with unit, integration, and E2E tests

• Conducting code reviews

• Coordination with other development teams

• Taking over the software license check and simplifying the process

• Responsibility for implementing and documenting the business logging

• Setting up a development environment with Docker Compose

• Co-founded the Real-Time Data team, which grew to 10 members over time.
• Developed and delivered core data products.
• Optimized real-time application performance and implemented monitoring, alerting and logging solutions to ensure system stability.
• Created and maintained deployment pipelines.
• Collaborated with teammates, architects and experts in an agile Scrum environment.
• Operated applications, analyzed, tested and troubleshot software solutions.

• Cloud Computing Fundamentals & Architecture: Expertise in core cloud concepts, including the three main Service Models (IaaS, PaaS, SaaS) and diverse Deployment Models (Public, Private, Hybrid, Multi-cloud).
• Modern Application Deployment Strategies (GCP Focus): Instruction on the GCP Application Hosting Spectrum, covering Virtual Machines, Containers (Kubernetes and Cloud Run), Platform as a Service (App Engine), and Serverless Computing (Functions as a Service - FaaS).
• Data Management & Big Data Analytics: Comprehensive coverage of Cloud Storage options (Object, Block, File) and Database solutions, including Relational (Cloud SQL), NoSQL (Firestore, BigTable, Memorystore), and serverless enterprise data warehousing (BigQuery).
• DevOps and Infrastructure Automation: Skills in DevOps principles, including Continuous Integration (CI), Continuous Delivery (CD), Infrastructure as Code (IaC) using tools like Terraform, and implementing effective Monitoring and Logging for system observability.
• Emerging Technologies & Responsible Cloud Use: Focus on crucial topics like Cloud and IoT Security, Identity and Access Management (IAM), data privacy, and the ethical considerations of cloud and massive data collection.

I have worked across multiple international client projects, holding senior roles including Software Architect, Senior Software Developer, Technical Lead, and Lead Backend & DevOps Engineer. My experience spans complex enterprise environments in banking, financial services, telecommunications, engineering, and automotive domains, supporting organisations such as UniCredit Bank, Telefónica O2, and BMW.

At UniCredit Bank, within the Securities Domain Transformation program, I led the modernisation of legacy monolithic systems into cloud-native Spring Boot microservices and an Angular frontend deployed on Google Cloud Platform. Beyond implementation, I was responsible for defining the target architecture, producing system architecture diagrams and sequence diagrams, and preparing API contract documentation for clients. I designed RESTful APIs and integrated Apigee for secure and reusable cross-project service consumption of APIs. I architected Kubernetes-based deployments using Helm. CI/CD pipelines were built with Jenkins, automating code analysis using Sonar, as well as testing and deployment stages. Defining clean coding principles for the project, conducting regular code reviews, and mentoring junior developers were also among my tasks at UniCredit.

At Telefónica O2, I led the transformation of a legacy call centre desktop application into a cloud-native microservices and micro-frontend solution. I actively contributed to the platform architecture, creating system architecture diagrams, component diagrams, architecture documentation, and ADRs for future references. I improved the performance and scalability of the services. I optimised AWS infrastructure costs, particularly by minimising the use of DynamoDB and reusing test environments effectively. Observability was implemented using Prometheus, Grafana, CloudWatch, and Splunk dashboards. CI/CD pipelines were delivered using GitLab, Docker, Kubernetes, and AWS. Conducted techinical sessions for teams.

• Design and provide best practices on data modeling for dbt, including changing dimensions, late arriving data handling, and testing
• Design the ingestion flow from other systems into S3 and Redshift
• Design and implement new partitions for Dagster and incremental loading with dbt
• Map business requirements to technical architectures
• Instruct junior team members

• Evaluation and scoring of various technologies as future telematics platform (Kafka Streams, Spark, Splunk, Snowflake)
• Improve test framework and scalability of Telematics streaming service (Scala, Property-Based Testing, Kafka, Kafka Streams, Kubernetes)