Solution Architects in Munich

• Overall responsibility for the project lifecycle from scope definition to completion
• Close collaboration with platform teams, IT leaders, and external service providers
• Application of SAFe principles and structured sprint work
• Creation of a migration roadmap with clear milestones
• Monitoring of the lifecycle: onboarding, repository migration, replication of permissions, and system tests
• Visualization of the architecture with PlantUML and Gliffy as well as documentation in Confluence
• Regular status reports and running knowledge transfer sessions

• Redesign of a legacy Windows app for vehicle diagnostics as an AWS cloud application
• Creating build pipelines and conducting code reviews using Kotlin, Spring Boot, Micronaut, Jenkins, and GitHub

• Building an independent enterprise IT setup — cloud strategy, network, AWS landing zone, security requirements, contract negotiations.
• Migration of all applications; avoiding high contractual penalties for the client.
• Onboarding and coordination o...

• Coordinating several Pega projects being part of CoE
• Participating in major architecture meetings
• Running LSA coordination meetings
• Providing guidance to the project teams
• Helping with technical issues resolution including performance problems
• Contributing to improving developers best practices and guidelines
• Providing expertise in ensuring high system availability
• Running PoCs
• Responsible for deployment pipelines implementation
• Individual targets rated over 100% every year

As the Solution Architect for Agentic AI in auto claims processing, I led global customer delivery implementations, encompassing solution design and detailing, multi-tenancy, process flows, integration with third-party solutions, and localization requirements.

• Architectural Analysis: Conducted in-depth analysis of business requirements, managing requirements and creating detailed specifications.
• Service Definition: Developed comprehensive technical definitions for services and integration contracts.
• AI Process Management: Automated AI process management, focusing on analysis, optimization, and continuous improvement.
• Requirements Gathering: Facilitated requirement-gathering sessions and analyzed business processes to identify optimization opportunities.
• Agile Collaboration: Employed agile methodologies, working closely with stakeholders to ensure alignment and responsiveness.
• Technical Support: Assisted senior management with technical analyses and deliverability assessments.

• Integrated LangChain middleware between AEM and SAP PIM system
• Developed a FastAPI interface for system communication
• Implemented vector embeddings for semantic product search
• Evaluated LLM models (Vertex AI/Gemini, LM Studio, Hugging Face, OpenAI) for product analysis
• Developed an AEM component to display product recommendations and integrated the recommendation API into the AEM authoring process
• Designed and implemented Pinecone vector database for product embeddings
• Optimized response times and caching strategies
• Evaluated Vertex AI Studio for LLM testing and prompt workflows
• Implemented secure API routing and access control for AI components via FastAPI and gateway validation

• Understanding of bank’s fundamentals throughout analysis and writing specifications

• Deep analysis of security measurements to be transferred into new environment

• Process design and optimization

• Collecting requirements from different areas and processing them into agreement documentation, concepts and process description for internal and external partners

• Analysis of data delivery sources and transformation of relevant functions into new environment

• Analysis and prioritisation of value and benefits resulting from introducing smart data tools

• Mapping and migrating data within Power BI upgrade

• Change management support and evaluation

• Marketing automation and technology enablement

• Executing test and release support

• Creating training documentation for the client’s employees to understand value and benefits by using new technologies when acquiring new or creating benefits to their existing customers

• Creating a complete database of existing firewalls supporting the security of the client’s infrastructure

• Migration and re-architecture of reporting systems from multiple data sources into the cloud environment

• Clarification of project goals, scope, and functional target vision for building the AI-based knowledge base.
• Deriving the initial architecture and implementation strategy for the Zasterbot chatbot, including defining the MVP and expansion phases.
• Developing a functional target vision for building a structured knowledge base and integrating a future chatbot.
• Deriving and prioritizing use cases for information retrieval and provision by the chatbot.
• Modeling data structures and flows for effectively organizing the knowledge base on the Base44 platform.
• Designing and implementing data models for storing and linking relevant information.
• Developing processes for extracting, analyzing, and preparing raw data for the knowledge base.
• Ensuring data consistency and quality as the foundation for the future chatbot.
• Planning the integration of large language models (LLMs) and retrieval-augmented generation (RAG) for precise and context-aware responses.
• Implementing features for analyzing and visualizing data from the knowledge base.
• Using the Base44 platform with JSON-schema-based entities and a flexible permission model.
• Implementing Deno functions for backend logic, event processing, and external API integration.
• Integrating OpenAI services for initial data analysis.

• Support in building a modern and secure microservice architecture
• Creation of architecture documentation
• Analysis and definition of interfaces with OpenAPI
• Knowledge transfer on architecture
• Support in frontend architecture
• Implementation of rule sets
• Hands-on work in backend and frontend

• About 800 different server VMs, operation and lifecycle/asset management of about 40 ESXi hosts (Lenovo)
• Upgrade of all clusters to ESXi/VCSA 7.0U3 and 8. Planning patch management for all hosts
• Cleaning up the AD – many different domains that all needed to be migrated into the main environment. Planning/execution
• Veeam – check the configuration and migrate to a newer, partly virtual infrastructure to make the setup leaner and faster
• VMware – upgrades/updates, general maintenance
• Proxmox POC – evaluate if an alternative to VMware
• Documentation for Veeam/VMware/storage
• Implementation of the uniflow cloud solution
• NetApp migration to new storage, CIFS maintenance and administration of SVMs

• Setup and configuration of an M365 tenant on a hybrid basis
• SSO integration of the existing app infrastructure like Metamost, Huhu, etc.
• License consulting, Entra ID initial configuration, MFA, Conditional Access, Privileged Identity Management
• Intune: initial configuration, Windows 11 Autopilot, iPhone AES
• Takeover of the tenant and preparation of a security audit
• Rollout of iPhones with AES (formerly DEP) as COPE (Corporate Owned, Business Enabled)
• Connecting external customers with enhanced security through Conditional Access
• Consulting on cloud-first strategy and migration to a cloud-only business
• Connecting various apps via SSO/SCIM (e.g. Atlassian, Personio, Adobe)
• On-premises AD: security audit and project management for replacing the local AD (migration of file servers, Navision2016, user clients joined to Entra ID)
• Copilot rollout with connection to external data sources and configuration via Intune
• Support for TISAX and ISO27001 preparation
• Setup and hardening of Entra ID, switching MFA to phishing resistant via Conditional Access
• Intune management for Windows and Apple clients, web enrollment switch to AES, introduction of Autopilot, app management, integration of Microsoft Defender
• Building a device baseline for Windows (COBO) and iOS/Android (BYOD)
• Teams/SharePoint Online: access concepts and integration into Teams
• Maintenance and backup of Entra ID and Intune tenants (drift management)
• M365 backup with Veeam
• Extending Conditional Access policies, introduction of Privileged Identity Management with hardware tokens and an on-premises admin tier concept
• Revision of existing GPOs regarding structure, security, and compliance
• Security audit and hardening of on-premises Active Directory and cloud tenant, SAML VPN, PIM introduction
• Support for the HR department in introducing a booking portal and general system engineering administration & security
• Introduction of Conditional Access and passwordless MFA, platform SSO, Defender for macOS/iOS, macOS compliance with Intune, Code2 signature configuration

• Technical responsibility for the ConMod2.0 (Connectivity Module) product, which will connect future vehicles in the network as nodes with the Internet of Things blockchain.
• Lead technical discussions to define the specifications of various components (antennas, modems, Bluetooth chips, Wi-Fi chips, and microprocessors) with ConMod2.0 component suppliers (Quectel, Qualcomm, Marvell, and STMicroelectronics) and to discuss and plan system design iterations.
• Coordinate with other stakeholders, e.g., electronics system architect, software architect, software PMs, and software developers at Valeo Egypt, to define architecture concepts.