CompTIA Security+

Led the end-to-end integration and migration architecture for decommissioning SAP IS-U market communication and transitioning to Salesforce Marketing Cloud (SFMC) with E.ON IT Services — covering regulated EDIFACT market messaging, a three-phase data migration (transfer of market message inventory after cutover), redesign of market communication processes, and full GDPR and German energy-market compliance.

• Designed the three-tier target architecture (SAP IS-U → NScale B2B gateway → SFMC) processing 50,000–100,000 EDIFACT messages daily within sub-5-minute SLAs.
• Architected the three-phase data migration: 36 months of historical data, zero-loss cutover of in-flight market messages, and near-real-time CDC synchronization.
• Delivered secure, BDEW/GDPR-compliant integration (AS2/OFTP2, RFC/IDoc, REST APIs, OAuth 2.0, Azure AD, AWS S3) achieving >99.5% uptime, <0.1% migration discrepancy, and RTO <4 hours.
• Applied BPMN to model and optimize the market communication processes.

Technologies: SAP IS-U, NScale, Salesforce Marketing Cloud, EDIFACT, OAuth 2.0, Azure AD, AWS S3, BPMN, Jira, Confluence, Draw.io

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, confirmation and conformity tests for safety-critical braking control units in the railway industry
• Software Test Application & Integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies and component interactions
• Test Automation (FEAT Framework): Co-development and further development of an automated test framework for test execution, reporting and result analysis
• Functional Safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage as well as conformity with EN50126/28/29
• Test Automation for Communication Components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements Analysis & Shift-Left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities and redundancies early in the SDLC
• Test Design & Test Case Development: Derivation of test conditions and coverage strategies and implementation of data-driven test cases (DDT) including reusable test data fixtures
• CI/CD & Automation (Python, PowerShell, Jenkins, SVN): Automation of build, test and HIL deployment processes as well as integration into CI/CD pipelines
• Test Data & Configuration Management (XML): Maintenance and adjustment of XML test vectors and system configurations with automated integration into test environments
• Non-Functional Testing: Execution of performance and load tests to assess stability and system behavior
• Agile Development & Defect Management (JIRA, Confluence): Work in Scrum teams, test coordination, review of test artifacts as well as defect tracking and root-cause analysis
• Error Analysis & Debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system levels (application to bus)
• Model-Based Analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & Test Documentation: Creation of integration and test documentation according to internal quality and certification requirements

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

Oracle Project Management and Automation

As part of the project, the operation of an Oracle infrastructure was automated by developing and enhancing Puppet modules and migrating existing Bash scripts to a standardized configuration management solution.

The aim of the project was to standardize and automate administrative processes, improve the maintainability of the Oracle platform, and increase the efficiency and traceability of infrastructure management through the use of Infrastructure as Code.

• Analysis and migration of existing Bash shell scripts to a Puppet-based automation solution
• Development and enhancement of Puppet modules for Oracle environments
• Automation of installation, configuration and operational processes using Infrastructure as Code
• Standardization and optimization of configuration management for Oracle systems
• Creation and maintenance of technical and operational documentation
• Planning, coordination and professional support during project implementation
• Operation and automation of Oracle systems on x86-based Linux server platforms
• Testing and quality assurance of the developed Puppet modules
• Analysis and resolution of technical errors as part of the automation and migration
• Close coordination with specialist departments and infrastructure teams to implement automation requirements

Technologies used: Puppet 7/8, SLES 15, Oracle 19, Oracle Grid, SVN, Windows Server, Confluence, VS Code, Ruby, Bash, Pass

Testing and verification of high-voltage systems

• Performed integration and system tests for control units in PHEV/EV vehicles using ECU-TEST (TraceTronic), Vector CANoe, CANalyzer, ETAS INCA, Tornado, E-Sys, and EDIABAS.
• Analyzed the interaction of high-voltage control units (including CCU, BMU, inverter, IPB, and IPF) and carried out software updates and flash processes to verify new software versions.
• Worked closely with software, system, and integration teams in an agile development environment to analyze issues and verify new software versions.

• As-is assessment of the current network infrastructure and its documentation, including on-site inspections
• Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
• Planning of new copper and fiber optic cabling, including patch panels
• Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
• Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
• Additional support after the components go live (hypercare phase)
• Regular communication with project management and client stakeholders

Conducted an independent technical assessment of an AI-enabled software platform, combining AI risk auditing, cybersecurity analysis and software architecture review. Reviewed application components, APIs, data flows, LLM integrations, retrieval-augmented generation, multi-agent orchestration, authentication, tenant isolation, dependency vulnerabilities, AI governance and model lifecycle controls. Authored a technical audit report with a structured risk register, source-code evidence, regulatory references, corrective actions, AI system inventory, risk classification, remediation roadmap and Key Risk Indicators.

Technologies: TypeScript, JavaScript, React, Next.js, Node.js, REST APIs, MongoDB, Redis, AWS serverless services, OAuth 2.0 / OpenID Connect, LLM APIs, RAG, vector search, multi-agent orchestration, Model Context Protocol, C4 architecture modelling, threat modelling, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894, OWASP guidance, MITRE ATLAS

Working as a QA Engineer within a regulated digital health environment, supporting structured test planning, test analysis, verification evidence and release readiness across mobile and web applications.

Creating, maintaining and executing manual and automated (MAESTRO, Katalon, Cypress) functional, regression and SIT test cases for iOS, Android and web platforms. Performing daily activities using Jira, Xray, Confluence, BrowserStack and staged test environments.

Supporting traceability between requirements, risks, test cases, defects and test results, helping ensure QA evidence is clear, auditable and suitable for regulated software delivery.

Collaborating with development, product, medical, regulatory and business stakeholders to clarify requirements, investigate defects, assess severity and priority, and reduce release risk.

Applying ISTQB, Agile and SAFe testing principles across mobile apps (as mobile medical devices), web platforms, system integration and regulated documentation.

Using AI products and open-source AI tools to support QA activities, including test case design, user story analysis, test data creation, process optimisation and regression coverage estimation.

• Lead Architecture in an interdisciplinary architecture team covering enterprise, solution, NOOTS, cloud and security architecture as well as regulatory and European interoperability requirements.

• Public / Government

• Development and management of target architectures, principles, standards and technical guardrails; assessment of Security-by-Design, IAM, data protection and interface/integration architectures; architecture reviews, security assessments, risk analyses, and preparation of decision records, target visions, roadmaps and decision papers. Architectural knowledge and consideration of relevant AD-NOOTS requirements, particularly for IAM, authorization, secure integration and interoperability.

• Technologies / Methods: Enterprise Architecture, Solution Architecture, Security Architecture, Cloud Architecture, NOOTS / EU-OOTS, IAM, Authorization, Security-by-Design, API/Integration Architecture, Interoperability, Risk Analysis, Architecture Governance

• Security and integration requirements as well as technical decisions are structured in reliable architecture and decision artifacts.

• Environmental testing, shaker testing up to 100G (Acutronic, LDS, RMS, Vibration Research)
• Testing device and temperature (Vötsch VC³7060, Weisstechnik)
• Analysis of shaker, temperature and shock tests and documentation of the results

Project: Arneburg BESS Station (30 MW / 78 MWh)

Responsibilities:

• Assistance for the Nidec site manager on site for all HSE-related matters
• Monitoring of all site activities in accordance with HSE guidelines and the Nidec's construction regulations
• Preparation of daily, weekly and monthly reports using HSE documents
• Management of Nidec's internal HSE reporting system
• Verification and validation of risk assessments
• Audits and inspections; participation in client meetings and implementation of HSE measures
• Document creation, verification of documents + RAMS
• Safety briefing / Toolbox meeting / Induction
• Participation in Nidec audits
• Verification of work suitability / RAMS and implementation of preventive measures
• Management of fire safety / Fire Response Plan (Fire Brigade)
• Organising emergency drills
• Compliance with HSE Plan and Nidec ERP
• Assistance with local legal requirements and ensuring compliance
• Coordination of services such as equipment hire, snow clearance and other services + their maintenance
• Local support on other matters

• Independently carried out integration, testing, and acceptance activities on 5G core systems in a containerized test environment; structured test protocols and documentation
• Built a 5G core and RAN integration environment from scratch (Docker Compose) for reproducible test scenarios across multiple vendor configurations
• Performed fault analysis and troubleshooting across the entire protocol stack (SBI, RRC, NAS, NGAP, TLS) to precisely isolate integration issues
• Contributed to the BSI-related NESAS-CCS-GI evaluation project – experience in security-critical, regulated customer projects

• Planning and implementation of compliance applications for customers
• Operational setup, expansion, support and risk assessment of the underlying IT platforms
• Responsible architect for the IT platforms and related interfaces
• Primary contact for technical topics, changes and releases, especially coordinating between manufacturers, the data center operator and the customers of sanctions monitoring
• Independent coordination of incident management / problem management
• Operational management of service providers and manufacturers, as well as performing non-organizational management tasks
• Technical contact in various internal and external IT customer projects (in some cases deputy project manager)
• Support in preparing offers for customer orders in application management for compliance applications
• Management of operational tasks and requests in sanctions monitoring

Reimagining second-hand commerce.

Selling has never been easier with our agentic reselling platform.

→ Take a Photo Of Your Item With the App. → Receive an Instant Offer. → Doorstep Pickup. → AI handles the resale.

Invite only. Join the waitlist on [link] Find our app on the App Store and Google Play or visit us on our website.

On a Mission to make selling as simple as buying. Named a top 100 impact startup by Change100. Winner of ChangeNOW award. Thousand of users across Europe.