Access Control List Experts in Berlin

• Architected and deployed private cloud data platform on VMware vSphere, integrating Greenplum MPP, Apache Kafka, Kubernetes, and Apache Solr, and developed real-time ingestion pipelines with Kafka Connect and Schema Registry.
• Led Oracle Exadata to Greenplum migration, rearchitected data models, optimized storage, implemented RabbitMQ with Debezium for CDC, and deployed VectorDB for Generative AI.
• Designed and executed multi-cloud migration PoC across AWS, Azure, and GCP, defined KPIs for throughput, latency, and cost efficiency, executed bulk data transfers, validated analytics and streaming workloads, and delivered full-scale architecture recommendations.
• Assessed legacy on-premises infrastructure and designed modern cloud-native data platforms using Greenplum and containerized microservices, advising on scalability, disaster recovery, and high-availability.

• Work within time-critical operating procedures; coordinate issues with customers, partners and central support.
• Maintain reliable handovers and concise incident communication when service, equipment or routing issues occur.

• Lecturer for the GenAI Track at the Master School Institute of Technology
• Development of a full-stack AI application (React + Python/FastAPI) for automated supplier product import with intelligent column and category classification (4-layer hierarchical) including human-in-the-loop validation

• Manage the development release and update process for a digitized nationwide trade register project "AuRegis".

• Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.

• Oversee system release of microservice architecture.

• Craft the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.

• Automate deployment onto OpenShift using Kustomize.

• Establish infrastructure components for development, code review, and code quality analysis including SonarQube.

• Integrate GitOps tools such as Kustomize and ArgoCD, leveraging both Azure and private cloud for sensitive data handling.

• Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.

• Automate delivery to customers and deployment on test systems.

• Craft Kustomize manifests for microservices and develop accompanying automation, treating documentation as code for clarity and reproducibility.

• Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.

• Opt-in RAG extension over tenant-owned data sources (SharePoint, Confluence) on existing multi-tenant enterprise AI platform
• Architecture: ADRs, solution evaluations, permission strategy, cost modeling
• End-to-end SharePoint and Confluence connectors: OAuth consent flows, token refresh, metadata sync, search integration
• Permission resolution: ACL indexing at ingestion and query-time verification (document-level security)
• Elasticsearch hybrid search (semantic + keyword) with RRF scoring
• RAG chat with context injection and source citations
• Stack: Elastic Cloud, Elasticsearch, Docker, Northflank, Next.js, React, TypeScript, Prisma, Microsoft Graph API, Atlassian REST API, OAuth 2.0

• Too Good To Throw (AI powered social impact webapp focused on reducing food waste in Nigeria):

• Integrated Paystack Split Payments to automatically route payments between the platform and partner vendors.

• Configured automated subaccount creation workflows so new businesses get a settlement account instantly.

• Setup a scalable cloud backend using Supabase.

• Implemented role-based access control (RBAC) for Users, Partners, and Admin.

• FaithFlow (AI powered webapp supporting Christian teens on their spiritual journey):

• Designed and implemented an AI-driven scripture search engine that interprets natural language questions and maps them to relevant Bible texts, commentary, devotionals, and cross-references.

• Designed a spiritual growth dashboard enabling users to track reading progress, prayer streaks, and devotional completion milestones.

• Optimized the data architecture (medallion) to better decouple processing stages and improve transparency and reproducibility
• Ensured technical quality of data processing in Databricks by introducing schema enforcement, data quality checks and a structured data architecture
• Orchestrated pipelines with Azure Data Factory
• Professionalized and automated the development and deployment process by integrating Git and GitHub Actions
• Led the Data Engineering team (3 members) in a functional role
• Conducted workshops to optimize and stabilize the data platform and the development process
• Collected and prioritized new requests, maintained the product backlog
• Technologies: Microsoft Azure (Data Lake, Data Factory), Databricks, Apache Spark (PySpark), Python, SQL, Git, Confluence, Power BI, Power Apps, Dataverse, MS SharePoint, Mural

• Own strategy and roadmap for the payment orchestration and risk intelligence products serving enterprise subscription customers.
• Conduct deep workflow discovery and user interviews to redesign onboarding experience, resulting in 5× funnel throughput and 70% reduction in manual steps.
• Define PRDs for scalable data pipelines, fraud signals, and automation logic, improving insight accuracy and speed of decision-making by 30%.
• Partner with engineering, data, design, and security to ship 15+ enterprise features with 100% successful release quality.
• Introduce risk analytics dashboards and performance KPIs, reducing investigation time by 40% and improving visibility across teams.
• Lead prioritization of new capabilities, tech debt, and security initiatives (PCI DSS, access controls, auditability).
• Lead development of ML-based fraud detection models (regression, decision trees) to identify high-risk transactions, reducing chargebacks by 20%.
• Design end-to-end analytics dashboards (Tableau, Redshift) to visualise global risk exposure, cutting onboarding SLA from 2.4 days to 3 minutes.
• Partner with engineering and data teams to deploy scalable payment risk frameworks, enhancing compliance visibility and decision speed.
• Mentor analysts and data scientists through agile sprint cycles, embedding a data-driven culture across risk operations.

• Defined and executed a comprehensive security roadmap: integrated Shift-Left Security, CNAPP, and DevSecOps principles to streamline secure product development and reduce risk exposure.
• Established a robust threat modeling framework: embedded security into design processes, enabling early identification of vulnerabilities and reducing potential risks.
• Developed a scalable Vulnerability Management program: accelerated detection and remediation of new vulnerabilities, significantly shortening the risk response cycle.
• Enhanced cloud and container security: leveraged advanced tools such as Tetragon to achieve deeper visibility and implement a defense-in-depth strategy.
• Automated security controls within CI/CD pipelines: integrated security measures into the development lifecycle to maintain continuous delivery with robust safeguards.
• Championed cross-functional collaboration: partnered with developers and infrastructure teams to prioritize threats and align remediation efforts, fostering a unified security culture.
• Ensured regulatory compliance and audit readiness: collaborated closely with the InfoSec team to adhere to internal policies and successfully support audits for standards like PCI-DSS and SOC2.

• Configuration and management of routers and switches (e.g., Cisco, HP)
• Design and expansion of networks in corporate environments
• WLAN site surveys and optimization (e.g., with Ekahau, NetSpot)
• Implementation of security policies and access controls

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Analysis and harmonization of master data
• Analysis of product and customer portfolios and KPI identification
• Preparation and harmonization of raw material master data for migration
• Marketing and customer support as well as organization at real estate agencies

• Support Tchibo design team in redesigning the shopping app to enhance the user experience, make it accessible, and drive engagement.