Toralf C.-IT Consultant in PKI Software Development
Check rate
Experience
IT Consultant in PKI Software Development
BWI
- Implementation of a full-stack application with Angular as frontend framework and Java as backend language
- Use of the Swagger OpenAPI specification for REST communication between frontend and backend applications
- Control of a card printer via the Nexus Card SDK framework
- Design and implementation of card management software with web interface and JavaFX module for printer monitoring
- Use of Cucumber tests for test automation and creation of test artifacts for testing outside the development environment
- Use of Wireshark for network investigations to analyze the API of a third-party product and to check the REST API of the self-developed software
IT Consultant in PKI Software Development
BWI
- New development of existing software with the Spring Boot 3 framework
- Control of a Thales HSM from Java
- Development of GUI tools with Java FX 24
- Use of Wireshark to check the REST API of the self-developed software
Software Architect (Subject Matter Expert)
Techniker Krankenkasse
- Formulation of requirements for Android and iOS development in Kotlin and Swift within a sprint
- Improvement of the TK-Safe-App with a focus on vaccine individualization
- Creation of Scrum stories and acceptance criteria for bug fixes and new features
Freelance Java Developer
BITMARCK
- Development of software for describing health data for health insurance companies on JBOSS servers with J2EE
- Use of the BDD language Gherkin in Cucumber for end-to-end tests with Selenium for the web interface in Java
- Implementation of Clean Code principles and loose coupling between frameworks
Freelance Java and Groovy Developer
Ingrano GmbH
- Further development of existing tests for Worldline GmbH
- Extension of the Cryptolib with features for generating RSA and ECC certificates in the X.509 area
- Revision of the test design according to Clean Code paradigms
Freelance Test Developer
Ingrano GmbH
- Adaptation and new development of tests for the KoCo-Konnektor based on field test errors and TÜV IT requirements
- Testing the cryptographic parameters of the protected data transmission between the connector and the healthcare TI
Developer and Training Manager
Velamentum
- Development and redesign of the Velamentum ServerSuite as a full-stack project
- Frontend: Angular 21 (TypeScript, CSS, HTML)
- Backend: Go 1.25 with OpenAPI-RESTful API
- Development of an in-house CA in Go to secure the RESTful interfaces and generate third-party certificates via SCEP
- Use of Podman containers instead of Docker to support rootless Systemd
- Automated distribution of root certificates to various client operating systems and browsers
- Integration and use of OpenVAS, Wazuh, Suricata, ClamAV and Shuffle in self-designed containers
- Development of training with hardware (Raspberry Pi 5 or AMD64 computer) and training materials for practical network security
Specification Engineer in the Patient Team
gematik GmbH
- Further development of the specification for the architecture of the electronic patient record (ePA)
- Management of the requirements lifecycle (AFOs) for ePA 1 through ePA 5
- Implementation of fine-grained access control in software architecture in accordance with the Patient Data Protection Act
- Close coordination with specifiers of other components, ensuring technology neutrality and compatibility
Adjunct Lecturer in Computer Security, Penetration Testing and IT Systems Security
Code University Berlin
- Development and delivery of a block seminar in English
- Establishment of a Penetration Testing Lab (PenTestLab) as an OpenSource Java Spring Boot application for creating and provisioning virtual machines with Vagrant and Ansible
- Integration and control of Metasploit, ZenMap, Armitage, OpenVAS, Snort, OSSEC and Graylog for practical training in attacks and monitoring
Software Architect and Product Owner
T-Systems
- Architecture and design of the T-SystemsCA according to Clean Code and SOLID principles for PKCS#12 containers and certificate packaging for terminal and card simulators
- Role as Product Owner in the Scrum team (6–9 developers), with temporary responsibility for Scrum Master tasks
- Design and development of an AdminCA in Java to generate valid and invalid X.509, CVC G1 and CVC G2 certificates using Spring 2 and Bouncy-Castle
C++ Developer in Embedded Systems
T-Systems
- Implementation of control routines for card terminals using the SICCT protocol to communicate with smartcard crypto processors
- Development environment: Eclipse, source code management with Git, ticket system Jira, documentation in Confluence
- Development in the Scrum process, tests in Gherkin with Cucumber and programming of the Cucumber scanner routines in Java
Managing Director and Developer
CSC
- Design and development of the OpenSource VelamentumServerSuite as Docker containers (12-factor app) for Intel and ARM hardware in the SOHO environment
- Development of a VelamentumCA in Go for issuing and actively distributing valid X.509 certificates, with support for SCEP and OCSP
- Integration of OpenVAS, Snort, OSSEC, iRedMail, RoundCube, Rainloop, Nextcloud, OpenMediaVault and Kodi as apps
- Use of Jira, YouTrack, Git, GitLab, Docker-Registry and Ansible for task management, versioning, image deployments and DevOps support
Software Architect and Developer in the PKI Environment
gematik GmbH
- Design and programming of a GematikCA for X.509 and CV certificates, extension and later complete replacement of the OpenSource EJBCA components with proprietary source code
- Web interface in HTML/CSS with jQuery
- Core: Java library for generating valid and invalid certificates according to X.509, CV G1, CV G2 with Brainpool curves
- Creation of valid and invalid TSLs, use of Bouncy-Castle for cryptographic routines
- Build management with Maven and Ant, version control with git/gitblit, Jira in the agile Scrum process
Freelance Software Architect and Developer
OpenLimit GmbH
- Development of complex C++ and Java libraries for proprietary cryptographic software
- Design of a signature service with a RESTful interface for a browser-based client
- Development of the web GUI in HTML/CSS, porting of console functionality to a web application with more than 100 configurable parameters
- Server-side JSF, database connection via JPA, communication with smartcards/HSMs via PKCS#11, version control with SCCS and Subversion
Commercial self-employment in crypto software design and sales
Self-employed
- Design, development and sales of the Velamentum crypto software for protecting computers against Trojans
- Design of a complex PKI with a central trust authority and SmartCard protection
- Management of a team consisting of one developer and one designer
Programmer and Software Architect
Bundesdruckerei GmbH, Berlin
- Design and programming of the Country-CA for Germany to generate ICAO-compliant CV certificates for passports
- Development of cryptographic routines with Bouncy-Castle, GUI with SWT
- Technical project management and implementation of a complex PKI
Freelance Programmer
Bundesdruckerei GmbH, Berlin
- Contributed to the development of software for programming the chips in electronic passports
Author of the Specialist Book Angewandte Typografie
Self-employed
- Creation of a specialist book about typography, type layout, and book printing techniques
- Use of OpenOffice for prepress and professional book typesetting
Freelance Software Developer
Alcatel Berlin
- Creation of a project study on internal communication between signal boxes (English)
- Implementation of the Euroradio protocol for the Alcatel/Siemens communication stack
- Coding of communication between signal boxes with OpenSSL in C++
- Design of a generic cryptographic communication stack, creation of test routines for SIL 4 approval by the Federal Railway Authority
- Porting of open-source software to high-security hardware platforms (Tagopert)
- Worked as part of a team of about 85 employees
Freelance Programmer
Self-employed
- Programming in K&R C and C++ (MFC, STL) for retail (Lidl & Schwarz) and public authorities (BfA)
- Porting code from C to C while addressing the Year 2000 problem
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Government and Administration, Education, Retail, Healthcare, and Telecommunication.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Product Development, Project Management, Research and Development, Sales, and Operations.
Summary
28 years of experience in software architecture and development in general cryptography programming (symmetric, asymmetric, cryptographic protection of data transmissions, Public Key Infrastructures (PKI)) in C/C++, Java, Go and Angular, design, programming, network design for the secure operation of active malicious computers, development of a full-stack application with Angular as frontend framework and Java and Go as backend languages, setup and operation of Certificate Authorities (CAs), penetration testing, project management for the “T-Systems Konnektor” product, participation at gematik in the software and hardware specification for the “Elektronische Patientenakte” project, test developer for the KoCo-Konnektor, PKI software developer for HSM control from Java for key derivation, employee of Techniker Krankenkasse for requirements gathering for PKI protection of the Techniker Krankenkasse mobile phone app.
25 years of experience in software architecture and development in C/C++ and Java programming under Windows, Linux and AIX, including control of the operating systems’ GUI features.
16 years of experience in Java programming:
Storing data via the JPA interface
Spring Boot3 Framework
Java FX GUI applications
Application design with Java 6, 7, 8, 9, 11, 13, 18, 21, 24
Architecture and design of complex server applications with RESTful API
Use of the Swagger OpenAPI framework
Extensive use of the Bouncycastle library
JavaFX GUI development
13 years of experience using the JBOSS, Glassfish and Wildfly application servers.
10 years of experience with smart card control, PKCS#7, PKCS#10, PKCS#11 and PKCS#15 API, control from Java and C++, ISO 7816 tokens.
12 years of experience with HTTP and CSS, setting up projects with the Bootstrap framework and Angular.
10 years of experience with web service technologies SOAP, RESTful Service (via Java Spring and Java Spring Boot).
10 years of experience implementing Clean Code paradigms (according to R.C. Martin) and SOLID principles in software, especially loose coupling via interfaces and limiting the responsibilities of Java classes.
7 years of experience working in Scrum teams as a developer (BITMARCK, Gematik, T-Systems) and as a software architect and team leader PO (T-Systems).
5 years of experience programming WebGUI applications with Angular, JavaScript, jQuery with AJAX and client-side control of RESTful Services.
5 years of experience with Docker and Podman as tools for isolated execution of applications on a computer and for supporting deployment processes.
5 years of experience with SQL using MS SQL, MySQL, PostgreSQL from Java and Python (Django).
5 years of experience in application programming with libraries from OpenSwan, IPSEC, OpenVPN, CyberGhost, DNSSEC, ISO-7816 tokens.
5 years of experience using and programming plugins for the OpenVAS vulnerability scanner, registered OpenSource developer at Greenbone since 05/2015.
2 years of experience in Python programming (Django and Python control of websites and databases).
5 years of experience using the DevOp software Ansible in the software development process.
6 years of experience with Maven, SVN, Git, GitLab, Jira, Confluence (also as administrator); IDEs: Eclipse, IntelliJ Idea, IntelliJ GoLang, IntelliJ PyCharm, Visual C++, MPS.
3 years of experience controlling the SICCT protocol using Java and C++.
3 years of experience creating, testing and deploying Podman and Docker images in local registries, converting server software into 12-factor apps within Podman and Docker containers.
3 years of experience setting up and using local Podman and Docker registries (e.g. within GitLab), creating, testing and deploying in local registries, converting server software into 12-factor apps within Podman and Docker containers.
2 years of experience implementing Domain Driven Design in Java, Go and Angular.
3 years of experience implementing Behaviour Driven Testing with the Gherkin implementations Cucumber for Go, Java and Typescript.
3 years of experience in frontend development with Angular 14, 15, 16, 17, 18, 19, 20 and 21.
4 years of experience in backend development with Go.
3 years of experience in GUI development with Java FX 24 and 25.
Skills
Operating Systems: Unix/Linux (Ubuntu, Debian) +++ 26 Years.
Operating Systems: Windows (7, 8, 10, 11) +++ 25 Years.
Operating Systems: Mac Os (X) ++ 8 Years.
Operating Systems: Creation Of Customized Ubuntu Distributions ++ 6 Years.
Programming Languages/Frameworks: Java +++ 15 Years.
Programming Languages/Frameworks: C++ +++ 22 Years.
Programming Languages/Frameworks: C (Ansi C, K & R C) +++ 6 Years.
Programming Languages/Frameworks: Go +++ 5 Years.
Programming Languages/Frameworks: Angular +++ 3 Years.
Programming Languages/Frameworks: Typescript/Css/Html +++ 5 Years.
Programming Languages/Frameworks: Admin Lte 3 For Angular +++ 5 Years.
Technologies: Uml +++ 13 Years.
Technologies: Domain Driven Design +++ 5 Years.
Technologies: Junit (Test-Driven Development) +++ 10 Years.
Technologies: Test Driven Design +++ 5 Years.
Technologies: Gradle +++ 6 Years.
Technologies: Webservices ++ 4 Years.
Technologies: Ansible +++ 6 Years.
Technologies: Java Fx ++ 2 Years.
Technologies: Java Ee Technology +++ 7 Years.
Technologies: Spring Boot 2 And Spring Boot 3 +++ 6 Years.
Technologies: Hsm And Smart Card Programming Via The Pkcs#11 Interface In Java +++ 7 Years.
Technologies: Cucumber With Java, Go And Typescript +++ 5 Years.
Technologies: Selenium For Automated Web Testing +++ 5 Years.
Technologies: Evaluation Of Certificates According To The X.509 Standard +++ 9 Years.
Databases: Mysql/Mariadb ++ 5 Years.
Databases: Oracle ++ 2 Years.
Databases: Postgresql ++ 6 Years.
Tools: Wireshark ++ 5 Years.
Tools: Jetbrain Intellij Ultimate And Eclipse (Angular, Html, Css, C++, Java And Go) +++ 11 Years.
Tools: Together +++ 3 Years.
Tools: Enterprise Architect +++ 3 Years.
Tools: Clearcase ++ 3 Years.
Tools: Svn +++ 5 Years.
Tools: Confluence +++ 11 Years.
Tools: Git +++ 10 Years.
Tools: Bouncy-Castle Cryptographic Library +++ 10 Years.
Tools: Maven, Gradle, Groovy +++ 8 Years.
Tools: Cmake +++ 8 Years.
Tools: Make +++ 10 Years.
Tools: Jira +++ 5 Years.
Tools: Confluence +++ 5 Years.
Tools: Openproject + 1 Year.
Products: Ms Office (Macro Creation) +++ 7 Years.
Products: Openoffice/Libreoffice (Macro Creation) +++ 7 Years.
Other: Tls Communication Protocols +++ 16 Years.
Other: Preparation And Delivery Of Training In Cryptography, Office And Pki +++ 13 Years.
Languages
Education
Universität Rostock
Diplom-Ingenieur · Electrical Engineering, specialization in Communications Engineering, focus on “Geheime Datenübertragung” · Rostock, Germany · 1,4
Brinkmann-Gymnasium Güstrow
Abitur · Güstrow, Germany · 1,2
Certifications & licenses
Scrum.org
Scrum.org
Statistics
Experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Toralf is based in Hohen Neuendorf, Germany and can operate in on-site, hybrid, and remote work models.
Toralf speaks the following languages: German (Native), English (Advanced).
Toralf has at least 29 years of experience. During this time, Toralf has worked in at least 18 different roles and for 13 different companies. The average length of individual experience is 2 years and 6 months. Note that Toralf may not have shared all experience and actually has more experience.
Based on recent experience, Toralf would be well-suited for roles such as: IT Consultant in PKI Software Development, Software Architect (Subject Matter Expert), Freelance Java Developer.
Toralf's most recent position is IT Consultant in PKI Software Development at BWI.
In recent years, Toralf has worked for BWI, Techniker Krankenkasse, BITMARCK, Ingrano GmbH, and Velamentum.
Toralf is most experienced in industries like Information Technology, Government and Administration, and Education. Toralf also has some experience in Retail, Healthcare, and Telecommunication.
Toralf is most experienced in business areas like Information Technology, Product Development, and Project Management. Toralf also has some experience in Research and Development, Sales, and Operations.
Toralf has recently worked in industries like Information Technology, Education, and Healthcare.
Toralf has recently worked in business areas like Information Technology, Product Development, and Research and Development.
Toralf holds a Bachelor in Electrical Engineering, specialization in Communications Engineering, focus on “Geheime Datenübertragung” from Universität Rostock.
Toralf has 2 certificates. These include: Professional Scrum Product Owner and Professional Scrum Master.
Toralf is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 13 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Laurin H.
Martin W.
Rainer D.
Werner K.
Pierre G.
Frédéric K.
Jan M.
Christoph T.
Arne H.
Stanislaus S.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a IT Consultant in PKI Software Development
Hüseyin K.
Ola V.
Michael K.
Dimitri S.
Niko S.
Rüdiger S.
Marcel S.
Timo K.
Björn W.
Meik S.
Nearby freelancers
Professionals working in or nearby Hohen Neuendorf, Germany
Martin H.
Fred K.
William N.
Paul K.
Björn S.
Mojtaba P.
Silvia B.
Stefan O.
Piet Q.
Sascha B.
