Amazon CloudFront Experts in Germany

• Optimization of software lifecycle processes for SAP platform apps (BTP CAP)
• Development of template MCP servers for S/4 CALM systems of Porsche AI (BTP)
• Design, development, and IT product management for two MS CoPilot custom agents supporting SAP systems (incl. MCP integration)
• Lead Center of Practice: AI-assisted ABAP development
• Initiation and coordination of the proof of concept implementation of conduct.ai
• Advising application teams on software and integration architecture, clean core principles and implementation, as well as AI use on the SAP platform

• Designing new apps as well as enhancing and running 29 Angular apps for digital claims in an Nx monorepo
• Maintaining and improving a shared component library with ~300 libraries for multiple product teams
• Migrating all apps to a new design system including its component library and systematic refactoring
• Developing and maintaining the CI/CD pipelines (Jenkins, Azure DevOps, Terraform, AWS)
• Managing releases independently including branch handling, versioning, PR coordination and production deployment
• Implementing and maintaining tracking (Adobe Analytics)
• Ensuring accessibility according to BFSG/WCAG
• Test-driven development (TDD) with Jest and Cypress
• Code reviews, mentoring and setting up best practices in the team
• Technologies: TypeScript, Angular 16-20, RxJS, NgRx, Nx (Monorepo), npm, HTML, (S)CSS, Storybook, Jest, Cypress, Cucumber, Husky, Node.js, Git, AWS, Azure DevOps (Repos & Pipelines), Jenkins, Terraform, TDD, BFSG, WCAG, Nexus, IntelliJ, Adobe Analytics

• Held direct line management responsibility for a team of 4 Platform Engineers — owning hiring, performance reviews, and career development — while establishing a shared engineering standards framework and coaching culture that accelerated delivery across client engagements.
• Led a team of engineers to architect a cloud-native voice AI system for a major inspection client, enabling 2,500 field inspectors to document work fully hands-free via real-time transcription and AI agents — eliminating manual data entry across 440,000 inspections per month and reducing per-user cost from $9 to $1. Stack: AWS (DynamoDB, S3, Transcribe, CloudFront, API Gateway, Bedrock), ElevenLabs, Claude.
• Led a team of engineers to automate multi-region Kubernetes cluster management for a global SaaS leader, reducing provisioning time from 3 weeks to under a day and eliminating 90% of configuration errors. Stack: EKS, Terragrunt, Python, Bash, ArgoCD.
• Accelerator - Cloud-Agnostic AI Platform: Architected and delivered a cloud-agnostic, Kubernetes-native platform as an accelerator, enabling multi-tenant, enterprise-scale management of self-hosted LLMs with concurrent deployment of multiple base models and dynamic LoRA adapter serving. Designed production infrastructure using open-source tooling (ArgoCD, Karpenter, vLLM, SGLang) with automated model lifecycle management, API security (Keycloak + LiteLLM), and cost-optimized GPU provisioning.

• Independently designed, developed, published, and maintained mobile games for iOS and Android.
• Implemented application architecture, gameplay systems, UI, monetization, analytics, and platform integrations.
• Managed the complete release lifecycle, including testing, store publication, production monitoring, and iterative improvements based on analytics.

Conceptual design and implementation of a modular customer portal based on Laravel.

The focus was on defining a maintainable system architecture with broad use of Domain-Driven Design principles (within the Laravel architecture), introducing automated quality assurance processes (test strategy, CI integration), and preparing an auditable operation (logging, traceability of changes) in an AWS-based infrastructure, taking IT security standards according to NIST and process requirements according to ISO 9001 into account.

Achievements:

• Analysis and structuring of business requirements in close coordination with stakeholders
• Documentation of the system architecture and infrastructure incl. change and release management
• Design and implementation of an interface for integrating SAP systems
• Planning and implementation of automated tests for quality assurance
• Implementation of security and compliance requirements, including SBOM generation, software license management, and QA processes
• Technical consulting and support for the internal IT team
• Introduction and establishment of AI-supported development processes (Spec-Driven Development), including AI-readable specifications, integration of AI instructions into the development environment, and training developers for productive use

Technologies and tools: SAP, Docker, ddev, PHP 8.4, Laravel, Filament, C4 Model, Architecture Decision Records (ADR), Mermaid, PlantUML, Spec-Driven Development, Claude, GitHub Copilot, Codex

• Helped to design the AWS infrastructure, integrated services and backend architecture for use cases of an on-premise solution and partial migrations to AWS with fast response times
• Implemented automated AWS integration test suites
• Implemented mission-critical components and delivered them before the deadline in a production-ready state with operation and monitoring concepts
• This 2-month subproject was about building a data-intense pipeline (5 TB) to be enriched continuously with data
• Designed and implemented reusable AWS CDK constructs to be used across the company’s teams to enable faster onboarding with AWS
• Coached on AWS topics, distributed software patterns, security, domain-driven design, agile collaboration and documentation to improve performance and collaboration
• Technologies: AWS, GitHub Actions, ETL, monitoring, operations, TypeScript, Python, AWS CDK, CloudFormation, Java, Docker, AWS ECS, AWS Lambda, serverless, Jenkins, DevOps principles

• Implementation of Infrastructure as Code (IaC) with Terraform to ensure a scalable, repeatable, and secure Azure infrastructure
• Implementation and optimization of CI/CD pipelines with Azure DevOps
• Management of container and server environments and AKS

• Designed and developed a high-performance internal resource management platform using React and TypeScript, optimizing dynamic data rendering and state management.
• Built a React Native application to support mobile access to internal tools, enabling on-the-go project tracking for field teams.
• Developed custom 2D canvas-based visualizations using Pixi.js to simulate material flows and refractory layer behaviors.
• Integrated Pixi.js with React components for interactive diagrams and real-time UI updates.
• Developed interactive 3D visualizations using React.js for displaying refractory product layouts and simulations, supporting engineering and sales teams with dynamic product previews.
• Integrated Three.js within the React ecosystem to allow manipulation of 3D models in real-time via browser, enhancing user engagement and field configurability.
• Integrated a headless CMS to enable dynamic content updates by non-technical users, reducing content deployment time by 40%.
• Led AWS CloudFront optimization initiatives, improving portal load speeds by 30% globally.
• Actively collaborated with cross-functional Agile teams and product owners to deliver prioritized features with a fast feedback loop.
• Key Technologies: React.js, React Native, Three.js, TypeScript, Contentful CMS, AWS S3/Lambda/CloudFront, Cypress, Agile Scrum

• Setup and operation of a multi-cluster AWS EKS platform for banking workloads with a unified network and security architecture across 45 AWS accounts.
• Developed and standardized a unified AWS network and security architecture for 45 AWS accounts, enabling consistent governance, connectivity, and compliance for enterprise customer environments.
• Developed and operated a multi-cluster AWS EKS platform to support production workloads, significantly improving scalability, availability, and operational reliability.
• Implemented a GitOps deployment model using ArgoCD and Helm, enabling fully automated, auditable deployments and reducing manual release errors.
• Automated infrastructure provisioning using Terraform and Terragrunt at scale, reducing environment setup time by up to 70% and eliminating configuration drift.
• Established enterprise-grade backup and disaster recovery strategies using Velero and AWS Backup, ensuring reliable multi-cluster recovery and business continuity.
• Introduced Rancher as a self-service Kubernetes platform, accelerating developer onboarding while maintaining centralized security and governance.
• Designed and implemented detailed AWS IAM concepts (roles, policies, trust relationships) to enforce the principle of least privilege for access to accounts, workloads, and CI/CD pipelines.
• Developed AWS Lambda-based pre-provisioning workflows for databases, automating initialization, configuration, and access setup to support secure and consistent application integration.
• Delivered consistent, high-quality results as part of a 5-person AWS Solutions Architecture team, resulting in three consecutive contract renewals.

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

• Analysis of legacy codebase and identification of architectural issues, implementing improvements in coordination with the Product Owner.
• Development of clean, efficient, and fully documented code following established software engineering practices and standards.
• Analysis of Erlang components in backend and device layers to provide recommendations for ensuring stable system operation.
• Setup and optimization of CI/CD pipelines on client infrastructure, including testing, debugging, and certificate management quality assurance.
• Participation in planning, design, and implementation of epics and stories according to Product Owner specifications.
• Technical consultation for Product Owner regarding Erlang codebase management and best practices.
• Collaboration with Product Owner, Scrum Master, and development team to ensure timely delivery of features.
• Elixir & Phoenix + PostgreSQL
• Erlang
• IoT
• CI/CD
• Git
• Agile/Scrum
• Docker
• Kubernetes
• Frontend (VueJS)
• Embedded Devices

• Project 1: Multi-Tenant SaaS Platform: Data Integration & Pricing Management
• Objective: New development of ELT pipeline (replacement for Java 6 legacy), integration of heterogeneous source systems (CSV, Excel, Email, external DBs), event-sourcing for complete auditability, multi-tenant architecture for tenant-capable data processing
• Challenge: Processing millions of records daily, audit compliance, data isolation between different tenants
• Solution: Stakeholder workshops for requirements analysis, event-driven architecture with Axon Framework and Apache Kafka, AWS services (EC2, S3, Lambda, SQS, API Gateway) for cloud integration, PostgreSQL with tenant-specific schemas for multi-tenant data isolation, REST API design with Spring Boot for external system integrations, comprehensive testing strategy (JUnit, Spring Test, Postman, PACT, ArchUnit)
• Results: ELT performance improved from 30+ min to 1-5 min; 2-3 hours daily saved through workflow automation; 10-20 hours/week saved through event-sourcing auditability; 100% audit compliance; secure multi-tenant data isolation for 10+ tenants
• Project 2: Multi-tenant CRM System Modernization
• Objective: Migration of CRM system (20+ years PHP/MySQL) to Java microservices, Domain-Driven Design implementation, establishment of Test-Driven Development, multi-tenant-capable SaaS architecture for multiple customer tenants
• Challenge: Remodeling complex business logic, no existing test culture, scalable tenant management with data isolation
• Solution: Comprehensive testing strategy (JUnit, Spring Test, Postman, PACT, ArchUnit), multi-tenant architecture with tenant-specific databases, REST API design with Spring Boot for cross-tenant integration, Kubernetes and Docker for container orchestration
• Results: 2× performance improvement; deployment time reduced from 40+ min to 5-7 min; migration without production outages; scalable multi-tenant solution for 15+ customer tenants
• Technologies: Java, Spring Boot 3.x, Angular, Apache Kafka, AWS (EC2, S3, Lambda, SQS, API Gateway), PostgreSQL, Axon Framework, Kubernetes, Docker, GitLab CI, REST API

• Further development and maintenance of a complex sales platform focused on digital closing processes, customer portal interactions, and document generation for financial and insurance products
• Development and maintenance of microservices with Spring Boot 3 and Kotlin
• Frontend development with Angular 20 to display products, applications, and documents
• Conducting end-to-end tests with Playwright and integration tests with WireMock
• Creating and optimizing Quartz jobs and CronJobs
• Refactoring the security configuration in a multi-realm Keycloak setup with custom FilterChain, permission evaluator, and factory routing
• Creating dynamic emails with Thymeleaf
• Extensive error analysis with Application Insights, Log Analytics, and direct SQL debugging
• Introducing a dynamically controllable security architecture with flexible token processing based on path and realm
• Stabilizing and clearly structuring the closing process for complex product models
• Significantly increased maintainability and readability of code through modular refactorings
• Improved test stability and depth by combining Playwright, WireMock, and integration tests
• Targeted performance optimization through analysis of Hibernate statistics, query tuning, and use of SQL execution plans
• Technologies used: Java 21, Kotlin, Spring Boot 3, Angular, TypeScript, REST API, JSON, Kubernetes, Docker, PostgreSQL, Liquibase, Keycloak, OAuth2, GitHub Actions, Testcontainers, Azure Application Insights, Thymeleaf, Tilt, Microsoft SQL Server

• Contributed to the design of the new financial services integration layer and moderated the architectural discussions
• Oversaw the security concept and approval of the application
• Prepared infrastructure setup and best practices for the Kotlin backend