Siegfried-Thor B.-AI Risk Auditor for Enterprise CMS | AEM / AEMaaCS Architect | AI Governance (EU AI Act · NIST AI RMF · ISO/IEC 42001) | Web &
Check rate
Experience
Independent AI Risk Auditor & Software Architecture Reviewer
Confidential Client
Conducted an independent technical assessment of an AI-enabled software platform, combining AI risk auditing, cybersecurity analysis and software architecture review. Reviewed application components, APIs, data flows, LLM integrations, retrieval-augmented generation, multi-agent orchestration, authentication, tenant isolation, dependency vulnerabilities, AI governance and model lifecycle controls. Authored a technical audit report with a structured risk register, source-code evidence, regulatory references, corrective actions, AI system inventory, risk classification, remediation roadmap and Key Risk Indicators.
Technologies: TypeScript, JavaScript, React, Next.js, Node.js, REST APIs, MongoDB, Redis, AWS serverless services, OAuth 2.0 / OpenID Connect, LLM APIs, RAG, vector search, multi-agent orchestration, Model Context Protocol, C4 architecture modelling, threat modelling, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894, OWASP guidance, MITRE ATLAS
AI Architect & Author
CQ-Factory GmbH
Designed and published Auditable Modular RAG, a reference architecture for evolving enterprise AI systems through controlled component replacement. Defined versioned contracts, authorization and assurance controls, risk-based validation, evidence requirements, approval responsibilities, machine-readable contract schemas, automated validation tools, digital-signature mechanisms and lifecycle governance.
AI Architect · AI Risk Auditor · Systems Integration Architect
Global Optics & Medical Technology Group (Vision Care)
Solution and Integration Architect for a new B2B integration portal replacing a legacy AEM-based portal. Authored the platform-decision package comparing AEM as a Cloud Service, a standalone Angular / ASP.NET Core application on Azure, and frontend-cloud hosting. Designed the Azure and Contentful target architecture, contract-first integrations, event-driven jobs, grounded RAG assistant, EU AI Act applicability assessment, threat model and governance audit.
Technologies and methods: EU AI Act, GDPR, NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894, MITRE ATLAS, OWASP Top 10 for LLM Applications, threat modelling, Azure, Azure OpenAI, Bicep, Azure DevOps, WAF, CSP, OAuth 2.0 / OpenID Connect with PKCE, SBOM, Angular, ASP.NET Core, Contentful, Salesforce, REST/JSON, C4 modelling, DevSecOps, Python
Lead AEMaaCS Architect & AI Governance Lead
European Southern Observatory (ESO)
Leading solution architecture, AI integration strategy and technical delivery direction for ESO's migration from heterogeneous legacy platforms to Adobe Experience Manager as a Cloud Service. Defined target architecture across AEM Sites, Assets, frontend components and integrations; designed React Islands architecture and shared React component library; shaped migration, DAM, metadata, AI co-pilot, intelligent asset enrichment and AI governance requirements using NIST AI RMF and EU AI Act.
Technologies: Adobe Experience Manager as a Cloud Service, AEM Sites, AEM Assets, AEM Core Components, Java 21, Apache Sling, OSGi, HTL, React, TypeScript, Tailwind CSS, Storybook, Python, REST/JSON APIs, GraphQL, Adobe Cloud Manager, GitLab CI/CD, WCAG, Generative AI, RAG, Agentic Workflows, NIST AI RMF and EU AI Act
AI-Focused AEM Architect & Digital Transformation Consultant
Telefonica / o2
Returned to the project to support the next phase of the platform evolution with a focus on AI integration, customer journey development and technical enablement of the AEM platform. Designed concepts for Generative AI in CMS authoring, evaluated Generative Engine Optimization, supported telecommunication product journeys, translated requirements into epics and user stories, and supported the evolution of the AEM Cloud platform.
AI Engineer & Backend Developer
European Southern Observatory
Designed and implemented a scalable RAG system on Google Cloud Platform to integrate LLM-powered knowledge retrieval into enterprise applications. Built a Dockerized FastAPI application on Cloud Run, implemented embedding pipelines and vector search, integrated Redis, BigQuery and Cloud Monitoring, and connected the backend with Adobe Experience Manager through Assets HTTP API and GraphQL schemas.
Technologies: Google Cloud Platform, Cloud Run, Vertex AI, Matching Engine, Cloud Storage, IAM, Docker, FastAPI, LangChain, Python 3.12, Gemini 2.5 Pro, Redis, BigQuery, React, Next.js, GraphQL, Adobe Experience Manager
AI Solutions Architect & Full-Stack Developer
Kaufland
Part-time research and development project exploring AI integration in AEM-based platforms. Integrated LangChain between AEM and SAP PIM, developed a FastAPI interface, implemented vector embeddings for semantic product search, evaluated Vertex AI / Gemini, LM Studio, Hugging Face and OpenAI, developed product recommendations and designed a Pinecone vector database.
Business Analyst: Digital Experience & CMS Migration
Telecommunication
Led the integration of accessibility and SEO best practices into AEM Cloud, translated business requirements into technical specifications, epics and user stories, developed a whitelabeling application, integrated AEM with Analytics, Target and CRM, documented migration processes, reviewed templates and components, managed Jira tickets and presented project progress to executives and business units.
AEM Architecture & Development
Mortgage financing
Integrated a modern AEM archetype structure with Webpack and Vue.js, replaced the Gulp-based frontend build process, introduced a Vue frontend library based on Atomic Design, migrated Classic Dialogs to Touch UI with Coral, resolved web security vulnerabilities, ensured WCAG 2.1 compliance, planned migration to AEM Cloud and evaluated Magnolia, Liferay, Sitecore and Typo3.
AEM Architecture & Development
Stiebel-Eltron
Created a new AEM 6.5.15 project, designed the Touch UI architecture, established templates and multi-tenancy structures, developed AEM Core Components with Vue, integrated Context-Aware Configurations and experience fragments, implemented security scanning and mitigated HTTP Method Override vulnerabilities.
AEM Architecture & Development
HUK Coburg (Insurance)
Developed AEM Core Components, replaced IBM WebSphere use cases with AEM backend logic, created a centralized redirect manager, performed enhancements across three AEM platforms, developed AEM Forms and Groovy migration scripts, and implemented security enhancements.
AEM Architecture / Consulting
JungVonMatt / BMW.COM
Developed a proof of concept demonstrating Adobe Core Components interaction with BMW Web Core Components Foundation, architected a reusable Vue.js frontend layer based on Atomic Design, introduced experience fragments and style policies, used Webpack for AEM client libraries and consolidated project configurations.
AEM Development
SHE / Vorwerk
Performed full-stack development of AEM components and templates using Vue.js, AngularJS and jQuery, enhanced forms, developed backend services, integrated SAP Hybris Commerce and Phrase.com, and managed service ticket acquisition.
AEM Development
Government Austria
Managed implementation of concepts to update AEM to versions 6.4 and 6.5, redeveloped components with React for a headless CMS approach, established a separate AEM network and set up build pipelines.
AEM Development
Government Switzerland
Advanced a longstanding AEM application through migrations to versions 6.3, 6.4 and 6.5 for multiple Swiss Federal Authorities, led a 2021 relaunch focused on cloud readiness, developed Vue, AngularJS, AlpineJS and React components, integrated external systems via REST and SOAP, developed Node.js microservices, performed security hardening and created Jira specifications.
AEM Upgrade Consultant
Government Austria
Presented AEM 6.5 features, created a migration plan, developed installation guides and React component stubs, analyzed security issues, overlays and content migration complexity, performed functional tests, manuals, penetration tests and security checks.
AEM Development
ERGO Insurance Company
Developed an AEM 6.4 insurance platform with React, server-side rendering, adaptive image loaders, MSM, blueprints, editable templates, experience fragments, workflows, Adobe Analytics, context-aware configurations and Dispatcher caching.
AEM Development
Allianz AG
Developed AEM frontend components with HTL, Coral UI and AngularJS, REST services, LDAP-based ACLs, approval workflows, Maven project structure, Jenkins and Sonar continuous delivery, and Dispatcher-to-Publish data transfer.
AEM Development
Allianz AG
Developed a greenfield B2B AEM 6.3 whitelabeling platform with responsive components, REST microservices, LDAP authentication, npm, Node.js, Webpack, online calculators and AEM personalization.
AEM Consulting / Business Analyst
BMW AG
Created functional documents, clarified technical questions, verified external concepts, managed Scene7 to Dynamic Media Cloud migration, developed Docker microservices, introduced Adobe Target A/B testing, optimized frontend performance, planned website rollouts and architected an API gateway.
AEM Development
Government of Hong Kong
Collaborated with a remote Hong Kong team to develop a new AEM 6.1 web presence using AEM Communities, Sightly, Handlebars, Knockout and jQuery.
AEM Architecture & Development
Digital Agency
Further developed an AEM 6.1 platform, reworked frontend architecture, introduced responsive components and a mobile app, enhanced Touch UI, search, DAM overlays, closed user groups and Amazon S3 DAM storage.
PhoneGap App Development
Private Equity Company
Developed an enterprise sales app for iOS, Android and Windows 8 tablets using PhoneGap/Cordova, RESTful services and GRUNT-based modularization.
IBM Bluemix Development
fmo Marketing GmbH
Conceived and developed a Java cloud backend on IBM Bluemix, implemented RESTful services with RAML, connected IBM DB2 and customized iOS and Android apps.
Onlineshop with AEM6
E-Commerce
Migrated an e-commerce platform from Adobe CQ 5.6.1 and Hybris to Adobe AEM 6, developed Sightly components, Sling Models and responsive layouts.
CQ5 Consulting
COOP
Designed and architected a blog with Adobe CQ 5.6 in customer workshops, defining functional requirements and the technical solution.
CQ5 Development
SapientNitro
Further developed Audi.com and EON portals with Adobe Day CQ 5.x, developed CQ components, adapted HTML5 prototypes and performed CQ upgrades.
CQ Development
Salzburg AG
Developed a greenfield energy sales presentation platform with Adobe CQ 5.6.1, planned architecture and infrastructure, connected an iPad app and implemented secure authentication.
CQ5 Development
BMW AG
Further developed the BMW.de portal with Adobe Day CQ 5.4/5.5, created CQ components and REST services, developed migration scripts and GUI tests, and implemented tracking.
Business Analyst, Audi App Center I/FP-65
Audi AG
Managed app consulting processes, established Application Lifecycle Management, created guidelines and templates, introduced automated testing, performed code reviews and security checks, and coordinated app projects.
Java Web Development
Planethome AG
Further developed a real estate web platform and partner pages, established extranet processes, integrated financial institutions via SOAP, executed the German relaunch, developed the mobile version and added Webtrekk tracking.
Java Web Development
Planethome AG
Developed and enhanced a real estate web platform in Austria and partner web pages, established extranet processes, connected financial institutions via SOAP and executed a German relaunch with mobile version and Webtrekk tracking.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Banking and Finance, Government and Administration, Automotive, Insurance, and Telecommunication.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Product Development, Project Management, Marketing, Customer Service, and Quality Assurance.
Summary
Enterprise AEM / AEMaaCS architect and AI Risk Auditor with 15+ years designing and delivering complex, scalable and secure digital platforms. After more than a decade building enterprise content management systems on Adobe Experience Manager, cloud-native architectures and AI-powered content solutions, I now focus on auditing the AI embedded in those platforms against the EU AI Act, NIST AI RMF and ISO/IEC 42001 - pairing hands-on engineering with independent AI risk assurance.
I combine deep full-stack expertise (Java, Python, Node.js, modern frontend frameworks) and migration strategy skills with AI governance, compliance and security. The result is a rare profile: I can build AI-enabled platforms and audit them against regulation. I combine source-code analysis with AI governance and risk assessment.
My mission is to help organizations adopt AI responsibly: designing future-ready, intelligent and secure web ecosystems and independently auditing the AI inside them so they stay compliant, explainable and trustworthy — through a synergy of enterprise architecture, applied AI and cybersecurity.
Skills
Ai Risk Auditing & Assurance
- Independent, External Assessment Of Ai Embedded In Cms And Web Platforms — Risk Classification (Eu Ai Act Annex Iii / High-Risk) And Conformity-Assessment Readiness, Audited Against The Nist Ai Rmf (Govern · Map · Measure · Manage), Iso/Iec 42001 & Iso/Iec 27001, The Owasp Top 10 For Llm & Agentic Applications And Mitre Atlas. Deliverables: Model Cards, Ai-Sbom, Living Risk Register, Control Testing, Gap Analysis, Audit Reporting And The Three Lines Of Defence.
Ai & Llm Engineering
- Llms, Rag (Retrieval-Augmented Generation), Langchain, Openai Gpt, Vertex Ai (Gemini), Hugging Face, Vector Databases (Pinecone, Faiss, Chroma), Embeddings, Prompt Engineering, Ai Inference Pipelines, Fastapi-Based Llm Services, Etl Pipelines, Data Transformation
Ai Security & Secure Execution
- Secure Llm Architectures, Prompt Injection Mitigation, Input Validation & Sanitization, Trust Boundary Design, Secure Api Endpoints, Controlled Execution Environments, Defense-In-Depth Strategies For Ai And Web Applications, Including Risk-Aware Design Of Llm Systems In Regulated Environments
Ai Governance & Responsible Ai
- Establishing Internal Ai Governance: Responsible Ai Principles, Model Risk Assessment, Ai Security Frameworks (Incl. Google Saif), Governance Of Llm And Agentic Systems, Continuous Monitoring & Auditability Of Ai Workflows, Human-In-The-Loop (Hitl) Design, Gpai Obligations, And Secure Deployment Of Ai In Regulated Environments (E.G., Finance). Sharpened By The University Of Oxford "Managing Enterprise Ai Risks" Programme And Packt'S "Generative Ai & Agentic Ai For Finance" Certification.
Cloud & Ai Platforms
- Google Cloud Platform (Gcp), Vertex Ai, Vertex Ai Studio, Iam & Access Control, Ai Pipeline Orchestration, Cloud Run, Containerized Ai Workloads (Docker, Fastapi), Kubernetes, Secure Llm Endpoints
Web Application Security, Cybersecurity
- Owasp Top 10, Secure Coding (Java, Python, Javascript), Web Application Firewalls (Mod Security), Penetration Testing, Ai Red Teaming, Siem Integration, Http Method Hardening, Xss/Xxe/Ssrf Mitigation, Frontend Security (Dom Isolation, Safe Rendering); Toolchain: Burp Suite, Owasp Zap, Snyk, Sonarqube
Cms & Digital Experience Platform
- Adobe Experience Manager (Aem 6.X, Aemaacs), Sites, Assets (Dam), Core Components, Editable Templates, Experience Fragments, Forms, Edge Delivery Services, Universal Editor, Cloud Manager, Targeting, Headless Cms (Storyblok), Content Migration, Cms Exit Strategies, Content Restructuring
Full-Stack & Backend Development
- Java Ee, Spring, Hibernate, Jax-Rs (Rest), Soap, Sling Models, Osgi, Apache Felix, Python (Fastapi), Node.Js
Frontend Engineering
- React, Next.Js, Vue.Js (2 & 3), Vite, Angularjs, Alpinejs, Jquery, Webpack, Npm, Atomic Design, Storybook, Secure Frontend Patterns (Safe Rendering, Sanitization, Csp, Trusted Types)
Business Analysis & Requirements Engineering
- Stakeholder Workshops, Requirements Elicitation & Prioritization, Epic/Story Definition (Jira), Blueprinting, Functional & Non-Functional Specs, Acceptance Criteria & Uat, Cross-Team Coordination, Wcag & Seo Compliance
Mobile & Hybrid Apps
- Apache Cordova (Phonegap), Hybrid Cms Apps (Aem), Onsen Ui, Ionic Framework, Android & Ios Deployment
Languages & Tools
- Java, Typescript, Python, Bash, Groovy, Git, Docker, Kubernetes, Vs Code, Intellij Idea, Eclipse, Xcode, Kali Linux
Languages
Education
Kempten University of Applied Sciences
M.Sc., Diplom-Informatiker FH · Computer Science · Kempten, Germany
GLS / Royal Mail
Forwarding agent (Speditionskaufmann)
Certifications & licenses
Managing Enterprise AI Risks: Governance, Operational, Cyber (online)
University of Oxford
Generative AI and Agentic AI for Finance - Cohort 2
Packt Publishing
Google Trainings & Badges for Google Cloud Platform (Vertex-AI)
Cisco Trainings & Badges for Cybersecurity
Adobe Campaign: End User and Application Developer Training
Adobe DAY CQ 5.5 Developer & System Administrator Training
Adobe DAY CQ 5.6 Advanced Developer Training
Statistics
Experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Siegfried-Thor is based in Grasbrunn, Germany.
Siegfried-Thor speaks the following languages: German (Native), English (Advanced).
Siegfried-Thor has at least 16 years of experience. During this time, Siegfried-Thor has worked in at least 21 different roles and for 28 different companies. The average length of individual experience is 1 year and 6 months. Note that Siegfried-Thor may not have shared all experience and actually has more experience.
Based on recent experience, Siegfried-Thor would be well-suited for roles such as: Independent AI Risk Auditor & Software Architecture Reviewer, AI Architect & Author, AI Architect · AI Risk Auditor · Systems Integration Architect.
Siegfried-Thor's most recent position is Independent AI Risk Auditor & Software Architecture Reviewer at Confidential Client.
In recent years, Siegfried-Thor has worked for Confidential Client, CQ-Factory GmbH, Global Optics & Medical Technology Group (Vision Care), European Southern Observatory (ESO), and Telefonica / o2.
Siegfried-Thor is most experienced in industries like Information Technology, Government and Administration, and Banking and Finance. Siegfried-Thor also has some experience in Automotive, Insurance, and Real Estate.
Siegfried-Thor is most experienced in business areas like Information Technology, Product Development, and Project Management. Siegfried-Thor also has some experience in Marketing, Customer Service, and Quality Assurance.
Siegfried-Thor has recently worked in industries like Information Technology, Government and Administration, and Telecommunication.
Siegfried-Thor has recently worked in business areas like Information Technology, Product Development, and Marketing.
Siegfried-Thor holds a Master in Computer Science from Kempten University of Applied Sciences.
Siegfried-Thor has 7 certificates. Among them, these include: Managing Enterprise AI Risks: Governance, Operational, Cyber (online), Generative AI and Agentic AI for Finance - Cohort 2, and Google Trainings & Badges for Google Cloud Platform (Vertex-AI).
Siegfried-Thor will be available from January 2027.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 17 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Ronald F.
Paul W.
Jürgen F.
Frédéric K.
Markus O.
Tezcan D.
Eduard V.
Patrik G.
Peter F.
Khalid E.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Independent AI Risk Auditor & Software Architecture Reviewer
Pierre G.
Oliver F.
Alexander S.
Sascha L.
Martin R.
Uwe S.
Christian D.
Lothar H.
Bernhard D.
Christian G.
Nearby freelancers
Professionals working in or nearby Grasbrunn, Germany
Roland C.
Florian S.
Karlheinz W.
Max R.
Jens R.
Olga B.
Fred H.
Elisabeth W.
Sarah R.
Rallis T.
