IT Consultants in Germany

• Booking and payment platform for event organizers, live with paying customers, bootstrapped
• Product owner from day one: roadmap, prioritization, requirements from customer feedback, releases
• AI-native delivery: development largely with Claude Code, custom skills, agents and MCP servers, plus a pipeline that fixes production errors and submits the fix for review
• LLM features in production, e.g. extracting event data from flyers and texts
• Architecture and operations: Laravel, Livewire, MariaDB, Stripe Connect with payouts to organizers, PayPal, invoicing with DATEV export, around 1,200 PHPUnit test classes, CI with automated deployment

Fuel cell system – Technical feasibility study

Assessment of converting a passenger car fuel cell system for alternative applications, especially stationary ones. Analysis of control units, sensors, actuators, HV and hydrogen components, and technical feasibility.

SIEM/SOC Wazuh Implementation

Logistics

Wazuh | OpenSearch | Use Cases | Dashboards | Training

• Advised and provided technical support for the implementation of Wazuh as a SIEM solution
• Prepared and coordinated with teams involved in firewall, network, and IT operations
• Installed and configured Wazuh on the designated server infrastructure
• Developed security-related use cases and dashboards for centralized monitoring
• Delivered employee training on using and analyzing data from the SIEM solution

System Transformation Audit

Supporting a project-related IT audit of a system transformation within the financial services sector, focusing on controls associated with different types of system migrations. The work involves reviewing migration-specific documentation and supporting evidence to assess whether the controls for each migration type are adequately evidenced and sufficient to address the associated migration risks. Particular emphasis is placed on the adequacy of control measures, the reliability of supporting evidence, and safeguards relating to data integrity and migration-related risks.

Team Size: 2 project managers, 1 delivery manager, 2 senior consultants

Tasks & Responsibilities:

• Reviewing documentation and supporting evidence for different types of system migrations.
• Assessing migration-specific control procedures and evaluating whether the controls are appropriate and sufficient to address the associated risks.
• Evaluating the adequacy and completeness of evidence provided to demonstrate that migration controls have been performed as intended.
• Reviewing relevant control measures designed to safeguard data completeness, accuracy, and integrity during migration, where applicable.
• Identifying potential control gaps, insufficient evidence, and areas requiring further clarification or additional audit procedures.
• Assessing whether the documented migration approach and associated controls adequately address the risks arising from the respective migration type.
• Coordinating with relevant project stakeholders to clarify migration procedures, obtain supporting documentation, and follow up on open audit questions.
• Documenting audit procedures, evidence reviewed, control assessments, and observations in accordance with the engagement's audit methodology.

Audit Standards, Methodologies and Regulatory Frameworks: Migration Controls Assessment, Migration Risk Assessment, Evidence Review, Control Testing, IT Audit Documentation.

Areas of Expertise: System Transformation, System Migration Controls, Migration Risk Assessment, Control Evaluation, Evidence Assessment.

Main Results & Achievements:

• Contributing to the assessment of migration controls and the identification of potential control gaps.
• Identifying evidence deficiencies and areas requiring further clarification.
• Documenting audit observations and supporting the evaluation of migration-related risks and control effectiveness.

• End-to-end ownership of client projects, from requirements to rollout
• CTO of Edumix, a platform for interactive learning content (not yet released)
• CTO of a B2B AR app with indoor navigation and a digital twin (Matterport)
• OnePortrait: migration from Node.js/Nuxt to React, Next.js and Go
• Interactive Three.js mosaic featuring thousands of images
• Daily use of AI tools and coding agents (agentic coding)

Technologies: React, Next.js, Go, Node.js, Unity (Editor Extensions, UaaL), Flutter, iOS, .NET MAUI, Supabase/PostgreSQL, Three.js

Projects: Edumix, AR Indoor Service App, OnePortrait

Designed a global SD-WAN / SASE solution (Paloalto Prisma Access or Cisco Secure Connect) and integrated it with the data center infrastructure (Cisco ACI, Cisco Catalyst/Nexus Switches, Cisco WLAN Controller, Cisco ISE)

Goal:

Protect customer domains from spoofing by establishing and securing DMARC compliance, and ensure secure and stable operation of the Exchange and Microsoft 365 environment while keeping legitimate mail flows running smoothly.

Responsibilities:

• Project management, including reporting, customer coordination and budget responsibility
• Set up and secure DMARC, including DKIM and SPF
• Ongoing analysis of DMARC reports to detect and resolve issues early
• Replace EWS connections before Microsoft's shutdown on 01.10.2026 by switching to Microsoft Graph
• Introduce sensitivity labels in Microsoft Purview to protect sensitive information
• Automate recurring administrative tasks with PowerShell
• 3rd Level Support and ongoing administration of Exchange Online and Exchange on-premises

Technologies: Exchange Online, Exchange Server (on-premises), Microsoft 365, Microsoft Graph API, EWS, Microsoft Purview / Sensitivity Labels, DMARC, DKIM, SPF, RUA-Reporting, PowerShell, HCL Notes

DOKKI

AI-powered digital health product development

• Shaped the product vision, requirements, priorities, and technical target architecture of an AI-powered solution for processing medical documents.
• Designed LLM evaluation, data processing, data protection/governance aspects, and subsequent product development; technical prototyping with Codex.

Full overall responsibility: product, technology, compliance and go-to-market

• Delivered an enterprise MVP in 54 days, exceeding scope and schedule.
• Won a 250k € ARR anchor customer and built a sustainable enterprise sales pipeline in the first quarter.
• Paid PoCs with Zalando (35k €) and tesa (26k €), validating product-market fit with Tier-1 enterprise customers.
• Initiated ISO-27001 and TISAX certification processes. Left when the venture entered its next organizational phase.

MOVE-ZPD – Strategic Infrastructure Project | Total Program Budget 48 Mio. € | Data Center Migration Hannover → Hamburg

Responsibility for a central subproject for migrating business-critical specialist applications to a highly available data center architecture.

• Management of a central subproject for migrating business-critical specialist applications to a highly available data center architecture.
• Independent management of around 30 of approximately 100 business-critical specialist applications, including Exchange (approx. 30'000 users), LDAP, DNS and cross-state applications.
• Management of project structure, milestones, dependencies, risks and escalations, as well as coordination of the required business and technical stakeholders.
• End-to-end coordination of the managed migrations, from planning and structuring through environment provision, testing and acceptance to production deployment and go-live.
• Stakeholder management between business units, Product Owners, data center operations, program organization and external service providers.
• Development and implementation of a standardized server request and change process to speed up VM provisioning and reduce manual coordination.
• Management reporting as well as preparation and moderation of steering and decision-making bodies and workshops.

Technologies & Tools: MS Project, MS Teams, SharePoint, Oracle APEX, CA Automation Manager, Visio, MindManager

Business and IT analysis as well as implementation consulting for an e-invoicing project (eInvoicing) for a state-owned bank

• Professional management and coordination of the external service provider
• Business support for the introduction and integration of an e-invoicing solution into existing system landscapes
• Design and validation of electronic invoice formats (XRechnung, ZUGFeRD), including business terms and business rules
• Definition and coordination of business validation logic, mandatory fields, and tax requirements
• Analysis and coordination of business edge cases together with business departments and the tax department
• Support with connecting invoice-generating systems as well as with integration and mapping processes
• Translation of business requirements into technical implementation requirements

• Create and lead roadmap forecasting of support opportunities, including colleague training, process design and improvement, and new hire onboarding.
• Collaborate seamlessly with cross-functional teams including Professional Services, Support, Product, Sales, and Solution Engineering.
• Manage business and financial KPIs in alignment with overall business objectives.
• Industrial IT & Data Integration: Implement, configure, and integrate OT/IT systems and data flows, connecting control-layer sources (DCS, PLC, SCADA) to historians, data platforms, and enterprise systems through APIs and standard interfaces.
• AVEVA PI & Historian: Configure, maintain, and extend AVEVA PI (PI Data Archive, Asset Framework, interfaces/connectors) to capture, contextualize, and serve real-time and historical operational data.
• Alarm Management: Support and optimize alarm management systems – e.g. Honeywell Alarm Management – including alarm rationalization, classification, and the analysis of alarm performance, critical alarms, and alarm floods.
• Connectivity & Protocols: Set up and troubleshoot industrial connectivity using OPC UA and OPC A&E, including the configuration of tunnelers / wrappers to bridge OT data sources securely and reliably.
• Production Data Flow: Ensure seamless, secure, and well-structured data flow across the industrial IT landscape, transforming raw operational data into meaningful information for operations and decision-making.
• System Support & Troubleshooting: Provide ongoing support for OT/IT applications, troubleshooting issues across networks, software, and data integrations to keep systems running efficiently.
• Knowledge Management & Best Practices: Contribute to internal documentation, best practices, and troubleshooting guides, and help continuously improve how we deliver industrial IT and data solutions.

Tools & Software: Aveva PI, Salesforce, Active Directory, Microsoft Dynamics 365, Jira, Microsoft, Scrum, DevOps, Docker, CI/CD, Jenkins, GitHub.

• IT Sourcing & Carve-out: RFP management for IT client hardware and services as part of the Rheinmetall carve-out.
• Contract Management: Drafting of MSAs and SOWs taking into account AVB, BVB and LSA as well as Service Delivery Contracts.
• Vendor Transition: Strategic transition management to replace legacy contracts and establish new supplier relationships.
• SaaS Procurement: Negotiation of SaaS license agreements based on TCO and cost-effectiveness analyses.
• KPI: On-time transition of all 12 global group contracts, achieving 18 % cost savings on the IT hardware basket and 20 % cost avoidance for SaaS licenses – measured against the critical carve-out project plan and achieved through structured transition management.

AI Assistance and Target Vision for Partially Autonomous Energy Portfolio Management

Building an AI control layer directly on the up-to-date daily live portfolio of a large energy provider — not as an isolated pilot, but as an operational extension of the existing DB1 and portfolio management. The goal is the gradual development from assistance through monitoring/alerting to analysis agents with Human-in-the-Loop approvals, supplemented by a role-specific System of Engagement alongside the BI System of Record. At the same time, the business case, target vision and management pitch compared with static monthly reporting are being developed.

• AI control layer: Design and build on the existing live portfolio data product (several million contracts) — development stages assistance → monitoring/alerting → agents with Human-in-the-Loop approvals.
• LLM-supported data analysis: Semantic queries, SQL/tool integration and additional RAG components based on portfolio, plan-versus-actual and data quality data (Azure OpenAI, Snowflake), with drill-downs to individual contract level.
• Analysis agents: Multi-stage agents for variance and driver analyses of churn, price adjustments, volumes and procurement costs.
• Views concept: Role-specific interfaces for business units, management and C-level as a System of Engagement alongside the BI System of Record.
• Business case & pitch: Target vision and cost-benefit argumentation compared with static monthly reporting.
• LLM setup (privacy & security): Coordination with IT Security and Data Protection — EU region, data separation and approval processes.
• Agent architecture: Multi-stage agent pipelines (analysis → validation → summary) with documented data sources, tool calls, review steps and source references for each statement.
• Data foundation: Built on the up-to-date daily DB1 data product (Snowflake, dbt) — portfolio, plan-versus-actual and data quality metrics as the common basis for all AI analyses.
• Guardrails & evaluation: Evaluation and approval processes for LLM responses relating to management-relevant statements — test sets, metrics and human review.
• Prototyping & validation: Iterative validation of agent responses with the business unit — test question catalogue, feedback loops and response quality for each release.
• Roadmap & development stages: Detailed stages from assistance → monitoring/alerting → partially autonomous management, including transition criteria and governance for each stage.
• Integration: Integration into the existing BI and data landscape — BI remains the System of Record, while the AI layer provides interactive drill-down paths as the System of Engagement.
• Enablement: Enablement of business users — prompting guides, training and an operating model for ongoing use.
• Management: Coordination of business units, Data Engineering, IT Security and Data Protection.
• Change Management: Communication and expectation management with business units and management throughout the development stages.

Results:

• Built on an existing up-to-date daily data product with several million contracts
• Established an LLM setup coordinated with Data Protection and IT Security in the EU region, including data separation and approvals
• Defined three development stages through to partially autonomous management
• Designed role-specific views for business units, management and C-level
• Developed the business case and management pitch for the development stages
• Established an iterative response-quality validation process with the business unit
• Designed the operating model for assistance operations and initiated validation

Stack: Azure OpenAI, Azure AI Foundry, Snowflake, dbt, React, TypeScript, Entra ID, RAG, Agentic AI, analysis agents, Human-in-the-Loop, Prompt Engineering, LLM Evaluation, LLMOps, GDPR / EU region, Azure DevOps, Python, SQL, Change Management