Cloud Architects in Germany

• Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
• Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
• Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
• Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
• Prepare security and compliance to support Microsoft 365 Copilot.
• Implement information protection and data loss prevention by using Microsoft Purview.
• Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
• Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
• Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
• Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.

Red Hat OpenShift Container Platform

Scope:

• Operation and configuration of the Red Hat OpenShift Container Platform, including network, storage, and security design.
• Implementation of centralized observability solutions (Prometheus, Grafana, alerting).
• Development of CI/CD pipelines, GitOps workflows, and automation frameworks.
• Training and enablement of operations and development teams.

Result: Accelerated service delivery, transparent operational metrics, and sustainable knowledge transfer.

Business and IT analysis as well as implementation consulting for an e-invoicing project (eInvoicing) for a state-owned bank

• Professional management and coordination of the external service provider
• Business support for the introduction and integration of an e-invoicing solution into existing system landscapes
• Design and validation of electronic invoice formats (XRechnung, ZUGFeRD), including business terms and business rules
• Definition and coordination of business validation logic, mandatory fields, and tax requirements
• Analysis and coordination of business edge cases together with business departments and the tax department
• Support with connecting invoice-generating systems as well as with integration and mapping processes
• Translation of business requirements into technical implementation requirements

• Lead Architecture in an interdisciplinary architecture team covering enterprise, solution, NOOTS, cloud and security architecture as well as regulatory and European interoperability requirements.

• Public / Government

• Development and management of target architectures, principles, standards and technical guardrails; assessment of Security-by-Design, IAM, data protection and interface/integration architectures; architecture reviews, security assessments, risk analyses, and preparation of decision records, target visions, roadmaps and decision papers. Architectural knowledge and consideration of relevant AD-NOOTS requirements, particularly for IAM, authorization, secure integration and interoperability.

• Technologies / Methods: Enterprise Architecture, Solution Architecture, Security Architecture, Cloud Architecture, NOOTS / EU-OOTS, IAM, Authorization, Security-by-Design, API/Integration Architecture, Interoperability, Risk Analysis, Architecture Governance

• Security and integration requirements as well as technical decisions are structured in reliable architecture and decision artifacts.

Stabilization of an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps

• Self-employed since 2008 in planning, developing, and supporting custom software, web, and system solutions for clients as well as my own projects.

• Complete technical implementation of projects — from requirements analysis and architecture to programming, release, maintenance, and further development.

• Development of database-driven web applications, customer portals, admin interfaces, ordering processes, user and permission management, and custom backend functions.

• Design and development of REST APIs, webhooks, microservices, and interfaces to reliably connect different applications and external services.

• Implementation of numerous smaller services and automations for data processing, monitoring, notifications, recurring tasks, and technical business processes.

• Development of Telegram bots with the Telegram Bot API, including automated notifications, user interactions, status queries, and control of technical workflows.

• Programming native Android applications in Java as well as developing my own games and interactive applications with Unity.

• Development, extension, and modernization of existing PHP, Java, JavaScript, and MySQL applications, including error analysis, performance optimization, and adaptation of grown codebases.

• Setup and support of Linux-based server environments with Apache and Nginx, as well as management of databases, domains, DNS, SSL certificates, email services, access rights, and backups.

• Development of browser-based automations with Selenium for data collection, checking, and processing of recurring workflows, reducing manual steps and making processes more reliable.

• Independent implementation of complete platforms and web projects, including devpraxis.de, hq-smm.com, and socialboost24.com.

• Many years of technical project support with responsibility for troubleshooting, maintenance, further development, documentation, and stable operation of production systems.

• Quick onboarding into existing applications and unfamiliar codebases to analyze technical problems in a structured way and implement practical, long-term maintainable solutions.

• Direct coordination with clients, clear explanation of technical topics, and independent implementation of agreed requirements.

• By combining software development, automation, and system administration, many tasks can be handled completely from a single source, which reduces coordination effort, technical dependencies, and processing time.

Assessed, structured, and managed complex tenders for Sogeti and as part of larger Capgemini proposals. Focused on analyzing challenging customer requirements, developing robust solution concepts, and translating technical, business, and commercial aspects into compelling proposal storylines. Working closely with delivery, sales, account, and proposal teams, I designed and assessed scalable, practical Quality Engineering solutions and prepared them for customer decisions. This included selecting suitable role profiles and right-shore staffing options, assessing available skills and capacity, and developing robust commercial pricing and effort estimates.

Particular focus on bid management and service proposal development (RfP-/Rfl analysis), solution design, presentation and management materials, and the business and technical assessment of customer requirements in the context of Quality Engineering & Testing and agentic AI-enabled test automation using modern quality assurance approaches.

SOGETI Projects:

• BMW: Developed a test strategy covering test management, test automation, and provision of a rightshore delivery model.
• GEA: SAP Business Assurance and Quality Engineering for an SAP rollout, including test governance, test automation, an AI agent layer, and a hypercare concept.
• AIXTRON: SAP S/4HANA Cloud Migration Explore Phase, including QA assessment, a testable blueprint structure, staffing, and a scalable Sogeti delivery approach.
• Deutsche Glasfaser: Quality Engineering & Testing for DG Development Squads, including ServiceNow and Salesforce, test automation, and governance.
• ERGO: RfP and proposal support for Managed Service Test Data Provisioning, as well as a Jira/Atlassian implementation covering assessment, target vision, MVP, rollout, and governance.
• Münchener Rück: Proposal and solution design in the insurance sector, focused on test data provisioning, process analysis, compliance, and automation.
• BWI: Project and proposal work in the public sector and IT services, related to Quality Engineering, Test Factory, and digital transformation support.
• Rolls-Royce: Proposal and project support in the Sogeti context, focused on structured RfP analysis, solution design, and customer-focused proposal development.

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

OpsWorker turns Kubernetes alerts into root-cause analyses, on top of the monitoring a team already runs. I lead the technical side: the agent architecture, the AWS infrastructure it runs on (fully inside EU regions), and the engineering decisions behind it, read-only in the cluster by default, human in the loop for judgment. The stack underneath: Amazon Bedrock and Bedrock AgentCore, agents built with the Strands Agents SDK, the Claude and OpenAI APIs, and the Kubernetes API.

Enterprise & Cloud Security Architect supporting the modernization of the SDK application landscape as part of the KVNeo transformation program. Responsible for enterprise architecture, cloud governance, security architecture, and the definition of technical standards for strategic business applications.

Key responsibilities include architecture governance, target architecture development, cloud and integration architecture, security-by-design, and the translation of regulatory requirements into sustainable technical solutions across multiple business domains.

Responsibilities and achievements

• Designed and reviewed target architectures for strategic insurance applications and enterprise services.
• Developed architecture documentation based on Arc42 and Architecture Decision Records (ADRs).
• Defined governance models, architecture principles, and technical guidelines for cross-domain initiatives.
• Supported the modernization of archive, document management, and output management platforms.
• Designed integration architectures using REST APIs and event-driven communication patterns.
• Led architecture discussions with enterprise architects, development teams, product owners, and business stakeholders.
• Translated regulatory requirements such as DORA and ISO/IEC 27001 into practical architecture decisions.
• Designed security concepts covering Identity & Access Management, authorization, authentication, auditability, and logging.
• Supported SIEM integration, security monitoring, and enterprise logging concepts.
• Evaluated technical risks, technical debt, and architecture improvements while providing decision papers for architecture boards.
• Established architecture governance processes and contributed to enterprise-wide transformation initiatives.
• Supported cloud governance activities and the definition of secure cloud architecture standards.
• Facilitated architecture workshops and coordinated cross-functional stakeholders across business and IT.

Technologies & Methods Microsoft Azure • Arc42 • Architecture Decision Records (ADR) • REST APIs • Event-Driven Architecture • Microsoft Entra ID • Active Directory • IAM • SIEM • Cloud Governance • Enterprise Architecture • Security Architecture • Azure API Management • Jira • Confluence • Draw.io • DORA • ISO/IEC 27001 • Agile • Scrum

• Devised a new Domain-Driven Design architecture for a core system: reverse-engineered a central component, refactored the data-access layer to minimise database round-trips (improving scalability) and migrated processing to async.
• Decomposed the platform into independent .NET Core microservices (database-per-service) with RabbitMQ pub/sub using the Outbox Pattern + Saga choreography, behind an Ocelot API Gateway (JWT, rate limiting, CORS, health checks).
• Delivered on .NET Core / Angular / SQL Server / EF Core with Docker and Azure DevOps CI/CD; implemented health checks and CORS; contributes technical designs for stories in agile Scrum.
• Sole ADR owner; mentored 3 engineers and presented architecture decisions directly to the Director of Corporate IT.

Conceptual design and implementation of a modular customer portal based on Laravel.

The focus was on defining a maintainable system architecture with broad use of Domain-Driven Design principles (within the Laravel architecture), introducing automated quality assurance processes (test strategy, CI integration), and preparing an auditable operation (logging, traceability of changes) in an AWS-based infrastructure, taking IT security standards according to NIST and process requirements according to ISO 9001 into account.

Achievements:

• Analysis and structuring of business requirements in close coordination with stakeholders
• Documentation of the system architecture and infrastructure incl. change and release management
• Design and implementation of an interface for integrating SAP systems
• Planning and implementation of automated tests for quality assurance
• Implementation of security and compliance requirements, including SBOM generation, software license management, and QA processes
• Technical consulting and support for the internal IT team
• Introduction and establishment of AI-supported development processes (Spec-Driven Development), including AI-readable specifications, integration of AI instructions into the development environment, and training developers for productive use

Technologies and tools: SAP, Docker, ddev, PHP 8.4, Laravel, Filament, C4 Model, Architecture Decision Records (ADR), Mermaid, PlantUML, Spec-Driven Development, Claude, GitHub Copilot, Codex

• Built a standalone corporate IT environment — cloud strategy, network, AWS Landing Zone, security requirements, contract negotiations.
• Migrated all applications, helping the client avoid significant contractual penalties.
• Onboarded and managed int...

Designed and developed an AI-powered automation platform using n8n to analyze social media niches, identify target audiences, and automate marketing strategy generation. The solution combined AI agents, workflow orchestration, and data analysis to automate research processes and generate data-driven insights.

• Designed and implemented complex automation workflows using n8n
• Developed AI-powered analysis agents for market and audience research
• Integrated multiple APIs and AI services into automated workflows
• Built automated market, competitor, and target audience analysis pipelines
• Leveraged Large Language Models (LLMs) for information summarization, classification, and prioritization
• Containerized and deployed the platform using Docker

Technologies: n8n, AI Agents, OpenAI APIs, Prompt Engineering, LLMs, Docker, Linux, REST APIs, Webhooks