Amazon ECR Experts in Germany

IT consulting, analysis, architecture design, new and further development, code review, test automation, continuous integration, continuous delivery in backend and frontend areas for Automotive Project Instavalo.

Frontend:

• Implementation of UI components according to specifications, especially style guides and responsive design eith React and Typescript
• Component testing
• Code documentation
• CI/CD with Gitlab Pipeline

Backend / IoT:

• Analysis and architectural design with AWS Greengrass IoT on Edge Devices
• Setting up Microservices containers with Docker Compose on Edge device with AWS Greengrass and AWS IoT IAM, Token Exchange Service, Ansible
• CI/CD with Gitlab Pipeline, Terraform, AWS ECR
• Logging with Fluentbit Lua Language for AWS Cloudwatch
• Python Lambda for AWS Greengrass Recipe deployment on Edge Devices
• Implementation of test-driven development with JUnit, Mockito, and code Coverage
• Jacoco
• Definition of REST interfaces with OpenAPI / Swagger
• Development and enhancement of software based on Java Quarkus, Typescript NestJs NodeJs and Python
• Authentication and authorization in Aws IAM
• Development of REST and gRPC interfaces for the frontend and backend
• Implementation of Maven dependencies with DevSecOps OWASP
• Spring AI, Jetbrains AI Assistant, Junie, Github Copilot, Claude Code, Agents, Skills, Command, Hooks, Subagents

Task:

• Design and build a proof of concept (PoC) for a future-proof virtualization platform, taking secure system architectures into account
• Assess the current state of existing infrastructures and develop selection and evaluation criteria for the right OS virtualization platform
• Carry out the requirements analysis and then create and prioritize tickets in the ticket system
• Complete and continuously update a tool evaluation matrix based on PoC results
• Support team knowledge building through clear documentation of the approach and results in Confluence
• Enterprise analysis of existing hardware (creating different BoMs)

Technologies: Vmware, Vmware Aria Operations, Osism, Canonical OpenStack, FishOs, Linux, Terraform, Ansible, Confluence, Alma

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

Designed and developed an AI-powered automation platform using n8n to analyze social media niches, identify target audiences, and automate marketing strategy generation. The solution combined AI agents, workflow orchestration, and data analysis to automate research processes and generate data-driven insights.

• Designed and implemented complex automation workflows using n8n
• Developed AI-powered analysis agents for market and audience research
• Integrated multiple APIs and AI services into automated workflows
• Built automated market, competitor, and target audience analysis pipelines
• Leveraged Large Language Models (LLMs) for information summarization, classification, and prioritization
• Containerized and deployed the platform using Docker

Technologies: n8n, AI Agents, OpenAI APIs, Prompt Engineering, LLMs, Docker, Linux, REST APIs, Webhooks

• Design and build of a fully isolated AWS offline environment with no outbound internet access for running a browser-based business application
• Design and implementation of a proxy and response service that terminates all external application calls inside the VPC and serves them from locally stored content; identification of the actual communication needs through measurement-based DNS query logging
• Creation of architecture designs and decision papers including a comparison of options (Application Load Balancer with Lambda and S3, reverse proxy on EC2, private API Gateway) assessed by operational effort, cost, and availability
• Transfer of the solution and operations documentation previously available only for Azure to an AWS target architecture, including reassignment of all services and operational processes
• Automated rollout as Infrastructure as Code (Terraform, CloudFormation) with CI deployment via GitHub Actions, plus setup of private DNS zones and an internal certificate chain for operation without internet access
• Creation of architecture, deployment, and operations documentation and handover to the customer
• Build-up of a private cloud platform on OpenStack at provider TelemaxX with Terraform, including FortiGate HA clusters, FortiManager, and Kubernetes
• Introduction of Policy as Code (Open Policy Agent, Conftest) as well as development of MCP servers (Model Context Protocol) to connect AI assistants to operations and project tools

Successes:

• Made the business application fully operable without internet access for the first time; the cause of the loading error was narrowed down systematically to missing CORS headers after the likely certificate issue was ruled out
• Fully transferred an existing Azure concept to AWS and replaced the manually created environment with a reproducible, CI-based rollout

Technology stack: AWS (VPC, Application Load Balancer, Lambda, S3, Route 53 private hosted zones and Resolver query logging, IAM, CloudWatch, EC2, CloudFormation), Infrastructure as Code (Terraform, CloudFormation, Remote State), CI/CD (GitHub Actions with OIDC, Azure DevOps Pipelines), OpenStack, FortiGate, FortiManager, Kubernetes, Policy as Code (Open Policy Agent, Conftest), offline and air-gap architectures, PKI & certificates (internal CA, TLS, CRL/OCSP), DNS, network segmentation, Linux, Windows Server, Python, Bash, PowerShell, YAML, JSON, architecture design & decision papers, documentation (Confluence, Markdown), Generative & Agentic AI (Model Context Protocol, Agentic AI Coding Tools)

• Architected and deployed end-to-end machine learning pipelines across classification and prediction datasets, ensuring robustness and reproducibility through MLOps best practices.
• Contributed directly to LLM model output accuracy improvement by designing and engineering specialised prompts grounded in end-to-end ML and SciML pipeline logic.
• Developed training data for large language models by formulating coding problems that models could not resolve and subsequently documenting the correct solutions.

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

• Developed end-to-end reproducible ML pipelines (PyTorch) with data versioning (DVC), experiment tracking (MLflow), automated testing (PyTest), and CI/CD across all training workflows.
• Scaled Vision Transformer and CNN training across NVIDIA A100 GPU clusters (CUDA, DDP, SLURM); applied hyperparameter optimization (W&B Sweeps) to reduce training overhead and identify optimal configurations.
• Developed a real-time 3D human motion generation system (ViT, VQ-VAE, SMPL-X/PIXIE) for personality-conditioned avatar synthesis; achieved state-of-the-art FID = 6.15 and P-FID = 10.31 on the UDIVA benchmark.
• Validated model expressiveness through structured user studies, achieving 86% accuracy in distinguishing extroverted vs. introverted avatar behaviors.
• Optimized inference pipelines by deploying PyTorch models via TensorRT and ONNX Runtime into native C++ code; benchmarked performance.

• It is like a startup within REWE, where we have to build a new forecasting system on Google Cloud Platform from the scratch. Although, officially my role is called MLOps, my actual tasks also include development of data processing pipelines (data engineering) and data scientists tasks such as feature engineering and model trainings.
• GCP: Terraform (tofu), Vertex AI (Kubeflow), Cloud Run, IAM, Google Cloud Storage, BigQuery, Artifact Registry
• Data engineering: Snowflake as the main data warehouse, Terraform, DBT for data model implementations
• CI/CD: GitLab. We have built a CI/CD pipeline that automates deployments of new releases up to production environment

• Test concept creation
• Creation of test processes
• Coordination of TC development: stress tests, functional tests, performance tests, high data rate tests, integration tests, etc.
• HW testing: FPGA, RF
• Test automation and regression tests
• Ensuring 24/7 operation of the test system
• Analysis & reporting
• Regular coordination of the test team, meetings with other stakeholders
• Communication and coordination with stakeholders and the project manager

• Led engineering strategy development and execution across multiple teams (Engineering, DevOps, SysAdmin, QA), defining quarterly OKRs and roadmaps to align with business objectives.
• Established comprehensive engineering excellence framework including coding standards, career progression paths, and critical operational policies.
• Successfully conducted technical due diligence during investment rounds, presenting technology infrastructure to potential investors.
• Developed and implemented key organizational policies including incident management, deployment guidelines, and security protocols.
• Streamlined recruitment process and managed performance reviews, resulting in improved team composition and capabilities.
• Architected and implemented full-stack solutions using TypeScript, Node.js backend and Next.js frontend with Styled Components.
• Designed and optimized serverless architecture utilizing AWS Lambda, Step Functions, State Machine, ECS, API Gateway, and multiple databases (DynamoDB, MongoDB, Postgres, MariaDB, OpenSearch).
• Implemented GraphQL for frontend requests and REST APIs for backend services, improving system connectivity and data flow.
• Established robust CI/CD pipelines using GitHub Actions and Jenkins, incorporating quality gates and security checks.
• Integrated SonarCloud for static code analysis, enhancing code quality across all repositories.
• Spearheaded infrastructure stability and security improvements while optimizing operational costs.
• Implemented automated testing framework using Jest for backend/frontend and Playwright for E2E testing.
• Created reusable tooling modules for logging, database connectivity, parameter store integration and reusable libraries.
• Designed and implemented microservices architecture using AWS ECS, documented with OpenAPI specifications.
• Enhanced creation and deployment processes through standardized templates and automated pipeline creation.
• Successfully delivered multiple projects on schedule while maintaining high quality standards and best practices.
• Conducted regular 1-on-1s and mentoring sessions, fostering team growth and professional development.
• Participated in cross-functional management meetings, ensuring alignment between technical initiatives and business goals.
• Identified and addressed knowledge gaps through targeted mentoring and training programs.
• Implemented atomic design principles for frontend development, improving component reusability and maintenance.

From Crude to Crafted: Refining Participatory Design Data into Stakeholder-Ready Outcomes

• Architected a production Document AI platform using Retrieval Augmented Generation (RAG) over 1,500+ participatory design artefacts to answer historical project queries with grounded responses.
• Designed LLM evaluation combining RAGAS, custom evaluation metrics and human-in-the-loop (HITL) validation workflows to evaluate factual grounding, response quality, and prompt performance.
• Built a React, TypeScript, and D3.js frontend for interactive exploration of AI-generated insights.
• Implemented input layer LLM safety controls and Guardrails, including PII redaction and foul language filtering.

Software solution company that offers tools for data-driven campaign management for Amazon Ads.

• From scratch, developed an insights tool for the Amazon DSP with several data pipelines to support reports
• Developed new backend features for the Ad Optimiser tool
• Developed and maintained data pipelines for the Ads reports
• Wrote unit tests and reviewed code from other developers
• Supported frontend developers and performed frontend development tasks