Arm Experts in Berlin

• Development of control units for the automotive industry incl. embedded software
• CAN bus, Vector Tools, CANoe
• Support of the development process according to ISO 26262
• Ensuring cyber security standards:
• Key exchange (PKI) between vehicle and control units
• Hardware Security Module (HSM)
• Communication with external service providers (international)
• Development (PCB) of measuring adapters, statistical analysis of sensors
• IoT and embedded software development, backend administration

• Designed and implemented embedded firmware in C/C++ for ARM-based microcontrollers and SoCs (STM32, NXP, Infineon)
• Worked across bare-metal, FreeRTOS, and Embedded Linux environments, contributing to BSP-level functionality, driver bring-up, and system integration
• Built, configured, and validated Embedded Linux systems using Yocto, including image build, boot validation, and runtime debugging
• Developed and executed unit, integration, and system-level tests, including HIL and SIL test scenarios on real hardware and simulated environments
• Created Python and Bash scripts to automate build, test execution, simulation runs, and reporting within CI/CD pipelines (Jenkins, GitLab CI)
• Designed test cases from software and system-level requirements, covering normal operation, edge cases, and failure scenarios
• Performed low-level debugging using JTAG/GDB, analyzing boot issues, timing problems, interrupts, and peripheral behavior
• Developed and validated communication interfaces including UART, SPI, I2C, CAN using logs and external measurement tools
• Used simulation and virtual test environments to validate software behavior prior to hardware availability
• Read and interpreted hardware schematics to understand signal routing, pin multiplexing, and peripheral connections
• Supported PCB design and review activities using Altium tool, assisting with component selection, pin mapping, and bring-up readiness
• Collaborated with cross-functional hardware, firmware, and system teams to clarify requirements, document assumptions, and improve overall test coverage
• Developed web interfaces using HTML, CSS, and JavaScript (ES6) and basic REST API development with Node.js
• Experience testing web applications and building UI automation frameworks using Selenium WebDriver

• Developed a SolidJS frontend UI for a spectrometric water analysis system on an ARM-based embedded Linux platform
• Prototyped UI in TypeScript React/Nx with LitElements and MQTT integration
• Built production UI using SolidJS, SUID, i18next, Ajv, MQTT.js, C3.js
• Refined requirements with UX team and water analysis system engineers
• Defined and documented system architecture, MQTT message formats, frontend architecture, and development setup
• Set up frontend system from scratch, implemented domain-oriented type system, UI components, and application state
• Managed MQTT pub/sub services and schema-based message validation in frontend
• Coached two junior frontend developers
• Worked in an agile remote team using JIRA, Git, and Bitbucket

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

Led backend engineering across core domains (main backend, notifications, medical knowledge base, results processing), owning delivery quality, team growth, and engineering standards.

Signature Outcomes

Shipped a flexible, no-code membership platform (pricing, packages, duration), enabling commercial changes without engineering involvement and keeping membership tiers coherent over time.

Built a high-impact backend team through mentorship, coaching engineers into independent contributors and establishing onboarding documentation that enabled fast ramp-up.

Scaled the team from 2 → 5 engineers while maintaining delivery cadence and code quality; owned hiring pipelines and onboarding.

Partnered closely with Product during design to assess feasibility, sequence work, and make pragmatic trade-offs between speed, tech debt, and long-term maintainability.

Institutionalized testing and simplicity as defaults, enforcing high test coverage and a “simple-first” architecture approach.

Tech & Practices

Stack: Node.js (TypeScript), Express, PostgreSQL; microservices (Node & Go); event-driven async jobs.

Practices: Testing as a release gate, lightweight design reviews, iterative delivery, documentation-driven onboarding.

Compliance & Security: Led implementation of Privacy Officer recommendations (GDPR and German healthcare regulations).

• FPGA code conversion from AHDL to Verilog and SystemVerilog (Altera Cyclone)
• IDE: Intel Quartus Prime (Altera)
• Code simulation: QuestaSim
• Timing analysis

• Proficient in using JIRA for sprint planning, bug reporting, and task management.
• Modified and enhanced embedded C/C++ firmware code on STM32, ESP32 and ARM-based MCUs and SoCs.
• Debugged and fixed embedded software issues; managed code with Git/GitLab (commits, merge requests, reviews).
• Created and maintained test cases and test plans using Testmo.
• Debugged and validated firmware builds; provided detailed bug reports.
• Executed manual tests across development stages.
• Familiar with RTOS concepts and implementation, including task scheduling and interprocess communication for real-time embedded systems.
• Managed planning and execution of acceptance and regression testing.
• Supported mobile app and system-level testing for audio streaming device.
• Tested communication protocols (HTTP, I2C, SPI, UART) and API interactions.
• Used terminal tools and SSH to debug embedded Linux systems.

• Designed power PCBs, analog video boards, custom Linux-based embedded systems, and NATO-compliant electronics.
• Developed ARM C/C++ firmware for communication and real-time control.
• Implemented UART, SPI, I²C, PWM, ADC, Ethernet and CAN drivers, along with timing-critical modules.
• Optimized layouts for SI, EMI/EMC, protection and thermal performance.
• Contributed to AI-assisted signal processing and target tracking via Linux embedded preprocessing.

• Conducted research and development in the field of large-scale 3D reconstruction