Software Developers

Development and implementation of the website onecept.at using React/Next.js. Focus on responsive web design, high-performance component structure, basic SEO optimization, and technical deployment.

Technologies: React, Next.js, TypeScript / JavaScript

• Business analysis for risk controlling.

• Development of a data warehouse based on MS SQL Server with data from the FIS Cross-Asset Trading and Risk Platform (formerly Front Arena).

• Implementation of ETL and transformation logic with T-SQL and Python (Jinja2 template engine).

• Modeling and automation of data structures using Data Vault.

• Development of reporting and analysis reports with Microsoft Power BI, including user training and onboarding.

• Built a customized MediaWiki instance, including installation, MySQL database, SSL, and automatic backups
• Set up user roles (Admin, Mod, Verified, User) and a permissions system
• FlaggedRevisions for editorial review workflows · Commenting and rating extensions

Refactoring and improving core APIs; implementing client change requests. Setting up metrics, traces, and logs monitoring infrastructure to support operations. Designing GitOps deployment and infrastructure as code. Applications and systems configuration in ArgoCD and Openshift. Confluence documentation of design, approach, and solution. Tech Stack: Java 8 & 21, Spring framework, JSP, JavaScript, Bash scripts, SQL, Grafana Stack, OpenTelemetry, Docker, DB2, Maven, Kubernetes Kompose.

Reduced time-to-market by optimizing CI/CD pipelines. Employees without customer VM access can now deploy. Increased system stability and performance and reduced maintenance effort through systematic database cleanup. Restricted rights for Flyway migrations versus service users. Improved transparency and decision-making basis with enhanced Grafana dashboards for response times, optimized logging, and standardization with Loki. Reduced security risks by consistently applying security best practices such as removing the public schema in PostgreSQL, individual service user permissions, and Docker security context. Facilitated knowledge transfer and sustainable process improvements by creating process diagrams and implementing various concepts. Conducted code reviews across multiple repositories.

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

Complete build of a B2B SaaS platform for recruitment agencies

• Multi-source job aggregation via ATS APIs
• AI-assisted career page scraping
• Rule-based and AI-assisted matching
• Credit-based monetization model with Stripe integration
• Live in production since July 2026

Tech stack

• NestJS
• React
• PostgreSQL
• pgvector
• Claude AI
• Prisma

"ZLF – Future Billing Solution"

Cross-module S/4HANA

• Technical consulting and development in the area of S/4 Master Data Governance (MDG-BP)
• Various developments in HR-BP integration, order-to-cash, SAP CAR analytics data modeling, interfaces from and to third-party systems. (native HANA, CDS, RAP, Fiori Elements, OData)

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest

Migration preparation for the upcoming ERP system change: recording all ERP-related business processes, analyzing pain points, and consolidating them into process views. Ensuring that every process can be transferred to the target system or that an alternative exists. Result: a solid working basis for system integrators and a company ready for migration.

BPMN · Camunda

• Solely responsible for managing procurement operations
• WTO tenders in an open procedure
• Invitation process
• Direct call-offs and mini-tenders from framework contracts
• Simap.ch, SuisseOffer.ch, Confluence, Jira, Microsoft 365 applications

• Planned and developed a CPU monitoring application for monitoring system performance and resource utilization.
• Designed and implemented a Spring Boot backend providing a REST API for processing and exposing monitoring data.
• Developed the React frontend for presenting monitoring information in a clear and user-friendly interface.
• Integrated PostgreSQL for persistent storage and management of application data.
• Containerized the application and its services using Docker Compose.
• Automated infrastructure provisioning and deployment using Terraform on AWS.
• Structured the application as a modern, maintainable system using REST-based communication between frontend and backend.
• Designed and developed a secure, scalable CPU monitoring architecture (cpu-watcher) with a dedicated collector application that streams monitoring data to the backend, reducing direct exposure of system resources.
• Designed a secure cloud infrastructure with the database isolated within a private network and OIDC-based authentication.
• Implemented Infrastructure as Code with Terraform and integrated version-controlled CI/CD pipelines to automate testing, infrastructure changes, and application deployments.
• Designed and implemented the frontend delivery architecture using AWS CloudFront.

Stack: Spring Boot · React · PostgreSQL · REST API · Docker Compose · Terraform · AWS

• Extraction, transformation, and cleansing of data from Microsoft Dynamics AX
• Creation of sales reports in Power BI
• Training employees in business intelligence
• Technologies: Power BI, SQL, SQL Server Integration Services (SSIS)

• Support and further development of the Leegoo Builder
• Handling ad hoc requests
• Definition of rules/attributes and their rules
• Optimizing and managing SQL queries