Find the perfect expert with a HashiCorp Certified: Terraform Associate certificate in Germany in minutes from over 15,000 CVs with the power of AI.

SCS provides its services to various trading and settlement locations and offers a variety of functionalities related to settlement. The business objectives of the C7 SCS are:

• Safeguard against counterparty risk.
• Reduction of External Settlement Volume.
• Central Risk Management.
• Post-Trade Anonymity.
• Efficient Failure Management.

Technologies: Java 17, Spring Boot 3, Microservices (REST API), Spring Data JPA/Hibernate, Sonar Qube, fortify findings, Mockito, Jenkins, Docker RHEL-OpenShift, Maven, Pod man, GitHub, JIRA, WIKI, Liquibase, Swagger API, AMQP, Apache Camel, GCP Machines Infra setup, Terraform, PostgreSQL, React.js, Instana, Graylog, Daisy LLM Usage, GitHub Copilot.

Roles and Responsibilities:

• Followed SOLID Design Principles for Microservice implementation.
• Reviewed and refactored codes were appropriate in line with best practices, accessibility, security, quality, and performance.
• Developed applications using build tools, Maven, and continuous integration using Jenkins.
• Followed the CI/CD process and ensured that the developed code passed the Sonar Qube quality gate standards.
• Used DBAG Artifactory Repository Manager for updated application images, versions, and jar files.
• Deployed the microservices using the container system Padman and container orchestration tools like OpenShift.
• Used Liquibase for the database version control system.
• Enhanced application performance by optimizing Java code and implementing efficient algorithms.
• Experienced in identifying and remediating known CVEs in third-party libraries using SCA tools to ensure secure and compliant security Clearing Services components, Fixed the issues in SCS components.
• Experienced in vulnerability remediation, including identifying security weaknesses, prioritizing risks, and implementing effective fixes to strengthen SCS System.
• Enabled mTLS for database authentication and broker setups to enforce encrypted, certificate-validated communications.

• Implementation of a REST-based web service for querying contract, claim, customer, and sales data as part of the Dialogmanager project.
• Data sharing is carried out in compliance with CoC requirements as well as individual user permissions from IAM (Identity and Access Management).
• Implementation using JBoss EAP 8.1 (JakartaEE 10) and Java 21, as well as JAX-RS, CDI, Microprofile-Config, Microprofile-OpenAPI.

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

• Built and operated an AWS Landing Zone with Terraform / OpenTofu (multi-account structure, IAM baselines, network and security standards)
• Designed and operated platform-oriented AWS architectures to standardize infrastructure and operations processes
• Built and operated Kubernetes-based platforms (EKS) as a shared runtime environment for application teams
• Established GitOps-based deployments with Argo CD and FluxCD
• Developed and operated central CI/CD platforms (GitLab CI, GitHub Actions, Jenkins)
• Enabled developer and project teams with reusable platform components
• Introduced and implemented FinOps structures (AWS Cost Explorer, CUR + Athena, Infracost, Grafana dashboards)
• Built and operated central observability platforms (Prometheus, Grafana, Loki, Alertmanager, CloudWatch)

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

• Requirements analysis for the enterprise-wide observability platform.
• Creation of playbooks and pipelines for rolling out Envoy, OpenTelemetry Collectors, and OpenTelemetry Agents.
• Conducting load tests for capacity planning of metrics for the observability platform.
• Documentation and implementation of compliance standards for production readiness.
• Creation and design of RED metrics, spanmetrics, JBoss, and Tomcat dashboards for mission-critical applications.
• Setting up alerts for critical applications for proactive incident response.
• Integration of OpenShift applications into the enterprise-wide observability stack.

• Integrated complex AI-based energy system models into the frontend framework, enabling the visualization of insights for 6+ key clients and maximizing energy utilization.
• Maximized energy efficiency and utilization by architecting the seamless data flow between AI models and the user interface for rapid, actionable reporting.

• Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering (SRE) team.
• Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts.
• Wrote documentation.

AWS Cloud migration:

• Design and implement CI/CD for deploying AWS resources using GitLab CI, Terraform, and GitOps.
• Create and configure DevOps toolchain including Jenkins, Harbor, and Vault.
• Deploy billing application, microservices, and supporting infrastructure services to Nomad clusters.
• Re-designed TLS/mTLS certificate management using Vault and Lambda.

Security (Infrastructure Hardening & Patch Management & Vulnerability Scanning):

• Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts (Harbor, Jenkins, Vault).
• Created hardened AMIs via Packer based on CIS benchmarks for Nomad, Jenkins, Harbor, and Vault; deployed using Terraform.
• Integrated Trivy via Harbor plugin for container image scanning.
• Implemented strict AWS VPC security group rules.
• Developed and maintained patching process across environments using Qualys and Wiz.
• Deployed Qualys Cloud Agent to all EC2 instances, tracked CVEs and tested patches in lower environments before rollout.
• Automated patch deployment across all AWS accounts using Terraform and GitLab CI and verified patch compliance via Qualys/Wiz dashboards.

• Further development and maintenance of a complex sales platform focused on digital closing processes, customer portal interactions, and document generation for financial and insurance products
• Development and maintenance of microservices with Spring Boot 3 and Kotlin
• Frontend development with Angular 20 to display products, applications, and documents
• Conducting end-to-end tests with Playwright and integration tests with WireMock
• Creating and optimizing Quartz jobs and CronJobs
• Refactoring the security configuration in a multi-realm Keycloak setup with custom FilterChain, permission evaluator, and factory routing
• Creating dynamic emails with Thymeleaf
• Extensive error analysis with Application Insights, Log Analytics, and direct SQL debugging
• Introducing a dynamically controllable security architecture with flexible token processing based on path and realm
• Stabilizing and clearly structuring the closing process for complex product models
• Significantly increased maintainability and readability of code through modular refactorings
• Improved test stability and depth by combining Playwright, WireMock, and integration tests
• Targeted performance optimization through analysis of Hibernate statistics, query tuning, and use of SQL execution plans
• Technologies used: Java 21, Kotlin, Spring Boot 3, Angular, TypeScript, REST API, JSON, Kubernetes, Docker, PostgreSQL, Liquibase, Keycloak, OAuth2, GitHub Actions, Testcontainers, Azure Application Insights, Thymeleaf, Tilt, Microsoft SQL Server

• Extended a global large-scale project to improve the multi-tenant GCP data platform using FAST framework concepts, leveraging Terraform, Terraform Enterprise, and GitLab.
• Collaborated closely with security and governance teams to architect and implement secure and compliant GCP environments, focusing on VPC Service Controls, KMS, organizational structure, and guardrails to support the isolation of corporate entities.
• Enhanced the security posture of the enterprise GCP platform by implementing robust security measures, including GCP organization policies, deny policies, and VPC Service Controls to safeguard against potential exfiltration risks.
• Implemented controls based on CSA Cloud Controls Matrix (CCM v4) to secure the GCP cloud environment.
• Automated key components of the GitLab CI/CD pipeline by integrating OpenID Connect (OIDC) for workload identity federation, necessary for a large migration from GitHub.
• Implemented a YAML-based project factory to facilitate easy, secure, and governed provisioning of tenant projects, increasing speed, scalability, and usability while minimizing operational burden.
• Developed a dynamic approach for policy attachment to tenants using a YAML-based custom IAM template approach.
• Evaluated and implemented Google PAM (Privileged Access Manager) in a proof of concept for organization-wide just-in-time access.
• Set up CyberArk SCA and CEM tooling to ensure secure cloud access and provide visibility into the cloud environment.
• Handled GCP incidents, ensuring prompt resolution and operational stability.
• Authored and maintained extensive documentation within an Agile environment, utilizing Jira and Confluence for project tracking and knowledge management.
• Utilized HashiCorp Sentinel as a policy-as-code tool to shift-left cloud security by enforcing policies before infrastructure provisioning.
• Used Prisma Cloud to continuously monitor and secure GCP resources, ensuring compliance and risk mitigation across the organization.
• Developed a custom Org Policy Factory to standardize and automate custom governance across projects, ensuring enforcement of non-trivial organizational controls.
• Architected and built a cloud-agnostic credential lifecycle management platform with Python and GitLab to automate the secure handling of static credentials, improving governance, compliance, and audit readiness.
• Delivered an executive-level presentation on VPC Service Controls to C-level stakeholders, driving strategic awareness and alignment on cloud security posture.
• Led resolution of P1 incidents with high production impact, restoring services under critical time constraints.
• Architected and deployed a central monitoring and alerting solution using Cloud Monitoring and PromQL, providing real-time visibility into system health and proactive incident detection.
• Designed and developed a Python-based broker for self-service integration with an internal developer platform, streamlining onboarding and reducing manual effort.
• Implemented a templating approach for VPC Service Controls, enabling repeatable, secure, and consistent deployment patterns across tenants and environments.

• Analyze of customer’s requirements and design architectural solutions for customer projects
• Design and implementation of cloud infrastructure and services: AWS, Azure and OpenStack
• Consulting for cloud architectures and operating concepts
• Data Center migration accompaniment and coordination with developers and Stakeholders

• Development of a central billing app for cloud costs at DB
• AWS
• Python
• AWS CDK
• RDS
• Spark (PySpark)
• Glue
• Lambda
• CI/CD (GitLab)
• React/Typescript
• data optimization
• Scrum

• Developed automated ETL pipelines with AWS Glue and Athena to ensure consistent data quality and governance requirements
• Implemented validation, anonymization, and encryption measures for data in compliance with GDPR
• Optimized cloud costs by introducing FinOps practices and increased transparency for business units
• Monitored performance, performed root cause analyses, and ensured adherence to SLAs
• Supported data and solution architects in building scalable data models for ML and analytics scenarios