Amazon Web Services Experts

Project: Digital Sovereignty – Toll Collect

Workshop: Digital Sovereignty Recognize dependencies, reduce risks, remain capable of acting

Format

• One-day practical seminar

Target group

• Executive management
• IT managers
• Data protection officers
• Compliance functions

Content and objectives

• Systematic analysis of digital dependencies
• Assessment of legal and operational risks
• Development of a concrete plan to increase digital sovereignty
• Mapping of the entire IT infrastructure by participants
• Identification of critical dependencies on non-European providers
• Creation of a prioritized risk matrix based on:
• GDPR
• NIS2
• EU AI Act
• Joint development of options for action – from a hybrid model to complete migration to European solutions
• Development of an individual sovereignty roadmap with:
• Responsibilities
• Milestones
• Budget framework

Agenda

• Preliminary self-assessment (current infrastructure)
• Digital sovereignty? Nothing but an illusion
• Digital sovereignty 2026 – Germany’s dangerous dependency in focus
• Digital sovereignty & open source
• What is digital sovereignty?
• Three questions raised by digital sovereignty
• Reflection: Digital sovereignty in your own life
• Why is digital sovereignty existential now?
• Practical examples of digital sovereignty
• Schleswig-Holstein initiative
• Benefits of digital sovereignty for your company
• Assessing strategy options (cost-benefit matrix)
• Sovereign provider? 10 questions
• What does digital sovereignty specifically mean for your company?
• How do you shape digital sovereignty?
• Digital sovereignty and psychological safety
• Psychological safety: The key to high-performing teams
• Why psychological safety in your company?
• Benefits of psychological safety
• Invitation to group work: PsySafety Check (PS-C)
• The “Braintrust” experiment
• Creating a risk matrix
• Creating a roadmap & project plan
• European alternatives to US Big Tech
• 10-point plans:
• NIS2
• EU AI Act
• GDPR
• ISO 27001

I designed and built a self-service AWS platform for Data Science teams with little or no infrastructure-as-code experience. A team writes about 10 lines of Python and gets a deployable stack with full SDLC release cycle that already follows the governance rules. Networking, encryption, IAM and tagging are decided by the platform, not by each team.

New teams or AWS accounts are onboarded with one pull request. Waste prevention and cost control is built into the defaults: Data scientists don't need infrastructure skills.

• Construct library (AWS CDK, Python). Built a versioned catalog of about 20 hardened constructs for being used in data-science projects with ML context
• Governance as code
• Multi-account, multi-tenant
• Golden-path scaffolding
• CI/CD and supply chain. Built reusable GitHub Actions workflows
• Release engineering
• QA with e2e, contract testing and unit test coverage with each release candidate

• Investigate the relationship between Eddy Current Testing (ECT) signals and microstructural properties
• Detect latent patterns in ECT data that reflect intrinsic material characteristics
• Develop and validate predictive models for microstructural classification and quantification, using hardness and case depth as benchmarks
• Apply Bayesian Structural Equation Modeling for advanced data analysis

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

Medical technology – Digital Technology | Medical imaging

• Integrated the acquired platform into clinical medical imaging processes, with an investment volume in the low double-digit m€ range
• Ensured interoperability of systems and processes across hospitals and outpatient facilities while customer operations continued; HL7, DICOM, Amazon S3 & Redshift, SharePoint, JIRA
• Led the programme across functions with product, technology and service teams, including cost control, synergy tracking and identification of further AI use cases in medical imaging

Led the end-to-end integration and migration architecture for decommissioning SAP IS-U market communication and transitioning to Salesforce Marketing Cloud (SFMC) with E.ON IT Services — covering regulated EDIFACT market messaging, a three-phase data migration (transfer of market message inventory after cutover), redesign of market communication processes, and full GDPR and German energy-market compliance.

• Designed the three-tier target architecture (SAP IS-U → NScale B2B gateway → SFMC) processing 50,000–100,000 EDIFACT messages daily within sub-5-minute SLAs.
• Architected the three-phase data migration: 36 months of historical data, zero-loss cutover of in-flight market messages, and near-real-time CDC synchronization.
• Delivered secure, BDEW/GDPR-compliant integration (AS2/OFTP2, RFC/IDoc, REST APIs, OAuth 2.0, Azure AD, AWS S3) achieving >99.5% uptime, <0.1% migration discrepancy, and RTO <4 hours.
• Applied BPMN to model and optimize the market communication processes.

Technologies: SAP IS-U, NScale, Salesforce Marketing Cloud, EDIFACT, OAuth 2.0, Azure AD, AWS S3, BPMN, Jira, Confluence, Draw.io

• Advise early-stage startups on product vision, roadmapping, and GTM strategy, combining PMP and Stanford PM training with hands-on technical execution.
• Lovable: built and led a 200+ member community program for AI-native founders, bridging real-time founder feedback into product roadmap decisions.
• Lead customer discovery and OKR design engagements, scoping AI integration opportunities across client products.

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

• Built a data integration platform for high-, medium- and low-voltage assets to enable contextual analysis of time series with master data from SCADA control systems (IEC 60870 104), INIS and SAP.
• Responsible for the architecture and implementation of the solution, and acted as a sparring partner for the Product Owner.
• Technologies used: Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter and various API gateways.

• Create and lead roadmap forecasting of support opportunities, including colleague training, process design and improvement, and new hire onboarding.
• Collaborate seamlessly with cross-functional teams including Professional Services, Support, Product, Sales, and Solution Engineering.
• Manage business and financial KPIs in alignment with overall business objectives.
• Industrial IT & Data Integration: Implement, configure, and integrate OT/IT systems and data flows, connecting control-layer sources (DCS, PLC, SCADA) to historians, data platforms, and enterprise systems through APIs and standard interfaces.
• AVEVA PI & Historian: Configure, maintain, and extend AVEVA PI (PI Data Archive, Asset Framework, interfaces/connectors) to capture, contextualize, and serve real-time and historical operational data.
• Alarm Management: Support and optimize alarm management systems – e.g. Honeywell Alarm Management – including alarm rationalization, classification, and the analysis of alarm performance, critical alarms, and alarm floods.
• Connectivity & Protocols: Set up and troubleshoot industrial connectivity using OPC UA and OPC A&E, including the configuration of tunnelers / wrappers to bridge OT data sources securely and reliably.
• Production Data Flow: Ensure seamless, secure, and well-structured data flow across the industrial IT landscape, transforming raw operational data into meaningful information for operations and decision-making.
• System Support & Troubleshooting: Provide ongoing support for OT/IT applications, troubleshooting issues across networks, software, and data integrations to keep systems running efficiently.
• Knowledge Management & Best Practices: Contribute to internal documentation, best practices, and troubleshooting guides, and help continuously improve how we deliver industrial IT and data solutions.

Tools & Software: Aveva PI, Salesforce, Active Directory, Microsoft Dynamics 365, Jira, Microsoft, Scrum, DevOps, Docker, CI/CD, Jenkins, GitHub.

Management of data protection & IT security-related projects. Adjustments to knowledge management and consulting processes.

Activities:

• Data protection consulting
• Process optimization in in-house consulting
• Interface to specialist departments, IT security, development and management

Development of AI and traditional models to analyze medical and patient data, including medication analyses, diagnosis analyses, forecasts, procedure analyses, dosage analyses, comorbidity analyses, prescription analyses, patient potential analyses, referral profile analyses, and prescription analyses. Analyses in the field of Real World Evidence.

Healthcare IT, pharmaceutical industry

Tasks, responsibilities:

• Gathering customer requirements
• Planning the subproject
• Designing and defining KPIs
• Designing and developing models and visualizations of results using customer dashboards
• Developing and implementing data warehouse adaptations
• Deriving recommendations for action

Methods, technologies:

• Simulation
• Artificial intelligence
• Python
• R
• SQL
• Microsoft Power BI
• Amazon Web Services
• Elasticsearch
• PostgreSQL
• Databricks
• Multivariate statistics

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

Product:

• Built a production-ready AI platform for generating brand-aware marketing images and videos from product data, user requirements, and uploaded media.
• Own the platform architecture, technical roadmap, API design, security, deployment workflow, operational reliability, and model-provider strategy.
• Developed the core platform in .NET and built supporting AI and workflow prototypes in Python, applying language-independent API contracts and structured interfaces between services and model providers.
• Implemented reliable background processing with RabbitMQ, persisted workflow state, idempotent handling, retries, failure recovery, logging, secure storage, authorization, and credit accounting.
• Made pragmatic build-versus-buy and model-routing decisions based on reliability, latency, cost, and maintainability rather than novelty.

Agent Orchestration & RAG Systems

• Built and compared agent workflows using Microsoft Agent Framework, LangGraph, and LangChain, including tool use, conditional routing, clarification steps, state management, and hand-offs between agents.
• Implemented reusable .NET components for agents, prompts, tools, model providers, structured responses, and retrieval with pyvector, making it easier to change AI providers without rewriting the core workflow.