Apollo GraphQL Experts in Germany

• Complete greenfield rebuild across the whole stack — built AI-native: backend in Go and NestJS, PostgreSQL (CNPG) on K3s with GitOps/Terraform; frontend on Angular 22, zoneless.
• Orchestrated coding agents (e.g. Claude Code, Cursor) across the entire lifecycle — architecture, implementation, testing, reviews, documentation — driven by Specification-Driven Development (SDD).
• “Bruno” — LLM commentator persona backed by RAG and MCP for a personality that stays consistent across all generations (match previews, post-match reports, his own virtual bets).

Angular 22 (zoneless, without Zone.js), Claude Code, Claude Code Skills, CNPG, Cursor, Design Tokens (Spec for Code), Docker, Gherkin, Git, GitLab, GitOps, Go, Google Gemini, Grafana, Hetzner Cloud, K3s, Keycloak, Kubernetes, Lighthouse, LLM Integration, Model Context Protocol (MCP), NestJS, Node.js, NPM, Playwright, PostgreSQL, Prometheus, RAG, REST, Specification-Driven Development (SDD), Structured Outputs, Terraform, TypeScript, Vitest

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Tech stack: Python, Qt, tensorflow.js, plotly, Angular, TypeScript, HTML, CSS, Git

• DTO class generator: In-house development of a tool for the automatic generation of classes, functions, and methods for use in .NET Core projects based on SAP Business One Service Layer metadata
• E-invoice import add-on: Development of a SAP Business One add-on / coresuite module for the automated import of ZUGFeRD e-invoices as incoming invoices – with configurable mapping to flexibly control the import logic across four mapping types (DIRECT, SQL, FIXED, EXPR). The add-on is available as a licensed product for SAP Business One customers.

Stack: SAP Business One, SAP Business One Service Layer, coresuite Country Package, C#

• Designed and developed the "Credit Risk Engine" using Camunda, Node.js and Typescript
• Greenfield project for credit card credit assessment for existing and new customers, including EBA KPIs, SCHUFA and CRIF scorings
• Built and modeled workflows (BPMN) and decision logic (DMN) with Camunda Modeler in close collaboration with stakeholders
• Implemented service tasks, user tasks and jobs with Nest.js, Node.js and Typescript, including exception handling
• Backend-for-Frontend (BFF), frontend with React, Tailwind and Ant Design UI library
• CI/CD with GitLab, Kubernetes/Rancher

• Frontend modernization (multiple client engagements): Angular version upgrades, architecture refactoring, performance optimization, state management restructuring, and UI library consolidation resulting in faster load times and improved end-user experience across all projects.
• Web development: High-performance landing pages and company websites for SMB clients built with Next.js, SvelteKit, PayloadCMS, and TailwindCSS optimized for speed, SEO, and conversion.
• SaaS product development: Architecting and building an AI-powered platform for photography studio operators (PoC phase) with full-stack TypeScript: Angular frontend, NestJS backend, PostgreSQL, LLM integration (Gemini/Claude) for intelligent workflow automation.
• AI integration: Developed a PoC for AI-generated podcast avatars using the Gemini API for content production workflows.
• Angular deep dive workshops: Delivered 20+ workshops (3–5 days each, 8–10 participants) in a hands-on format where participants build a demo application modeled after their real business domain.

• Development of a CMS-based online platform as a central hub for multimedia brand communication, focusing on accessibility, web performance, and data protection.
• Technologies: PHP, Craft CMS, Twig, HTML, CSS, JavaScript, Alpine.js, htmx.

• Implemented a completed section in the refactoring of the existing portal
• Client-side: React, TypeScript, JEST, SASS, Node.js, Accessibility, React Server Side Rendering
• Server-side: PHP, Symfony, MariaDB
• Infrastructure: Docker/Docker Compose, Bitbucket, Jira
• UI / UX: Figma
• DevOps

• Significantly enhanced user experience and application performance through spearheading the development of frontend components, emphasizing native JavaScript, Vue.js, and UI implementation.
• Ensured efficient data flow and content management by seamless integration of backend APIs (REST) with frontend components and successful connection to CMS Hippo elements.
• Increased sales volume on the customer page through the development and implementation of new components, leading to improved user engagement and conversion rates.
• Worked in an Agile Scrum environment.
• Utilized technologies such as JavaScript, Vue.js, Node.js, Azure DevOps, Azure Functions, Next.js, and more.

• Working on the klar.land platform that helps companies showcase their work with many tools (3D, workshops, etc.)
• Developing features and improvements to the platform in a secure and performant way
• Collaborating with backend and DevOps teams
• Solving technical problems
• Technologies: JavaScript (ES6), TypeScript, HTML, CSS/Sass, GraphQL, Node.js, PHP, React, React Native, Gatsby, Next.js, WordPress, Docker

• Own Azure-hosted ASP.NET Core microservices for chronic-care workflows, sustaining 99.8% uptime across 3,000+ patient interactions.

• Shape HL7 FHIR-based patient, encounter, and observation profiles delivering a unified source of truth for clinical teams and integrations.

• Implement SignalR telemetry, Application Insights alerting, and automated pipelines that surface deteriorating vitals in under three seconds.

• Automated consultant outreach by orchestrating Twilio voice campaigns via n8n workflows and VAPI AI assistants, boosting successful client contacts by 55%.

• Entlass Manager: Led the end-to-end build of the chronic-care coordination platform, standing up Azure-native microservices, clinical data flows, and patient-facing tooling from initial requirements through production release.

• Power Dialer: Built the Twilio-driven consultancy auto-dialer and n8n workflows, raising client reachability to 85%.

Working on our inhouse React-Native based platform / ecosystem of tools and integrations (GoodNews, BetterPlace etc.) for social sharing, donations, ethic news and organisation of initiatives centered around charity work.

• React Native + Web (Typescript)
• Webpack