Software Architect

Development and implementation of the website onecept.at using React/Next.js. Focus on responsive web design, high-performance component structure, basic SEO optimization, and technical deployment.

Technologies: React, Next.js, TypeScript / JavaScript

• Create requirements for the modularization of the promotion forecast.
• Set up and expand the various competitions for 2024.
• Customize and test the CICS dialog.
• Create various reports for the department using SQL.
• Implement and test new requirements in batch processes with IWS.
• Update documentation for the new requirements.
• Provide on-call support for daily and monthly production.
• Technologies used: SCRUM, Jira, Confluence, Windows 11, Unix, Enterprise Developer, z/OS, GIT, Mineral, Moped, IWS/TWS, JES, COBOL, CICS, DB2, SQL, Rocket, FortiClient, Citrix.

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Design and implementation of new functionalities in the areas of Lifecycle Management (LCM), Role Management (RLM) and Access Governance

• Adjustment of the company-wide Segregation of Duties (SoD) matrix to ensure regulatory and internal compliance requirements

• Further development and configuration of recertification processes

• Creation and adaptation of custom workflows, rules and tasks in SailPoint IdentityIQ (BeanShell, XML, Java)

• Use of static code analysis with SonarQube to ensure code quality and compliance with defined development standards

• Regular code reviews within the development team to ensure quality, share knowledge and follow clean code principles

• Work in an agile Scrum team with daily communication, sprint planning and reviews

• Coordination with testers, test managers and business departments to ensure quality and smooth production rollout

• Active involvement in release planning and deployment coordination, including test preparation, cutover activities and rollback strategies

• Analysis and sustainable resolution of issues in the IAM production environment (2nd- and 3rd-level support)

• Reproduction of complex errors, identification of root causes and implementation of lasting fixes

• Creation of technical analyses and recommendations for operations and further development

• Scalable platform for child- and parent-friendly exploration of future skills and technologies
• React web front end with microservice architecture in the backend (.Net Core, Azure Storage, Azure Entra ID, REST API)

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Project goal: Introduce OpenShift as the run-time platform and migrate all applications to OpenShift.

My contribution: Make sure logging and monitoring for the applications were in place. Set up and put into operation the OpenShift components for logging and monitoring (Elasticsearch, Prometheus, and Grafana). Develop and implement the security concept for OpenShift. Work with developers to define and carry out the application changes needed for the OpenShift migration. Integrate monitoring into the applications.

Technical environment: Java, WebSphere Liberty, OpenShift components, Elasticsearch (ELK stack), Prometheus, Grafana.

• Deployment of a Customer Engagement & Loyalty solution in the cloud (AWS) and integration into the existing on-premise system landscape.

• Technology: AWS EKS - Kubernetes, Helm, AWS EC2, AWS S3, PostgreSQL, SAP GLIF, RabbitMQ, Git, GitLab, ArgoCD, GitOps, CI/CD, Terraform, HashiCorp Vault, JFrog Artifactory, Splunk, Prometheus, Grafana, Linux, bash, IntelliJ, draw.io, Confluence

• Result: Deployment of a cross-product bonus program for retail banking, embedded into online and mobile banking; actual and emotional customer engagement; improved profitability and loyalty; support for cross- and upselling; long-term improvement in customer satisfaction and positive impact on the company image.

• Developed a browser-based platform for Kubernetes no-code deployment and cluster management
• Developed a CLI in TypeScript to deploy resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security, and used Kyverno. Implemented IAM integration for the command-line utility tool.
• Designed role and permission models for Keycloak, OAuth/OIDC, and social login flows.
• Used LLMs to convert user intent into diagrams.
• Worked on integration with multiple sovereign clouds like StackIT, Hetzner, CIVO, UpCloud, plus public clouds like AWS, GCP, and Azure
• The technology stack includes Java, Spring Boot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

• Develop a concept for the analysis of sensor data.
• Assess implementation options, products, and pricing in Azure.
• Present and advocate the solution concept to the client.
• Implement an ETL pipeline for processing sensor data.
• Integrate BI solutions with the data repository.
• Provide documentation and support for end users.

• Greenfield project M-Zollmanager: Development of an internal platform to support users in booking requirement areas on line items in assessment notices.
• Greenfield project M-Deliveryplan: Development of an internal platform for planning and tracking deliveries in the international transport sector.
• Created functions to predict the estimated arrival time of container ships and goods from the port of loading to the port of destination, considering potential events.
• Developed the TrackAndTrace add-on for M-Deliveryplan to track and plan goods and containers.
• Built a generic AI chatbot for Migros app infrastructure, including ChatGPT integration and creating AI workflows with N8N.
• Developed AI assistants to automate repetitive tasks, such as creating release notes or processing Jira tasks based on N8N workflows.
• Further development and maintenance of the M-LFS, M-Vehicleaccess and M-Worklog apps.
• Used C#, Angular 18, DevOps practices, N8N, Kubernetes, Docker, Jira, Confluence and Azure.
• Ongoing project with continuous development of platforms and workflows.

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

• Lead software architect in a greenfield MES project (Manufacturing Execution System / factory control system), responsible for architecture decisions, technology selection, and technical direction throughout the entire development lifecycle
• Designed and built the core framework from scratch, including several reusable Spring Boot starters (e.g., OPC-UA integration, messaging, security) that enable flexible composition of the individual system modules
• Introduced Keycloak as the central authentication and authorization system with SSO across all MES components
• Created and owns the full CI/CD pipeline covering Java, NPM and Docker – automating build, test, containerisation and deployment across all project components
• Set up the architecture documentation space in Confluence as the single source of truth for all architecture decisions, component designs, and integration patterns
• Defined and enforced naming conventions and coding standards to ensure consistency in the growing codebase
• Conducted regular code reviews for quality assurance, knowledge sharing, and adherence to architecture guidelines
• Created and maintained technology roadmaps to guide future development priorities and infrastructure investments

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest