Auto Scaling Experts in Germany

Halil Oeztoprak

Principal Cloud & DevSecOps Architect (AWS / Azure / Terraform / Kubernetes / CI-CD)

Bonn

Last position:

Senior Cloud Operations & DevSecOps Engineer (Azure / Terraform / CI-CD) at KfW Bankengruppe

Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).
Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.
Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.
Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.
Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.
Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.
Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.
CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.
Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.
Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.
OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.
Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).
Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.
Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.
Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.
SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.
Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.
Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.
CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.
Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.
Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

Deepak Mishra

Lead ML Platform Engineer

Last position:

Lead ML Platform Engineer at Billie GmbH

Mentor team of 6 ML platform engineers through weekly 1:1s, technical design reviews, and best practices, improving team velocity by 35% through structured sprint planning and skill development programs
Define 2025–2026 ML platform roadmap in collaboration with Data Science, Cloud Engineering, and Product teams, prioritizing automated model governance, cost attribution systems, and multi-environment deployment strategies
Partner with Data Science, SRE, and Product stakeholders to align ML platform capabilities with business objectives, reducing data scientist deployment friction by 60% through self-service platforms
Architect and deliver production-grade MLOps platform supporting 50+ models in production with automated promotion pipelines, versioning, and rollback capabilities, achieving 99.5% platform uptime SLA
Design distributed ML pipeline architecture using Metaflow and Argo Workflows (Vertex Pipelines-compatible), reducing model training time by 30% and deployment cycles from 2 weeks to 3 days through full CI/CD automation
Build containerized ML services on Kubernetes with auto-scaling policies, resource quotas, and multi-tenancy isolation, optimizing infrastructure costs by $180K annually (25% reduction)
Implement monitoring, alerting, and performance tracking using Prometheus, Grafana, and custom instrumentation, reducing model debugging time by 50% and establishing model performance SLOs
Lead development of RAG-based document intelligence platform using LangChain, LangGraph, and vector databases, implementing agentic AI workflows for automated financial document processing
Implement Infrastructure-as-Code using Terraform for reproducible environment provisioning and GitOps workflows, reducing infrastructure drift incidents by 80%
Design role-based access control for ML platform, implement model lineage tracking, and establish audit trails for regulatory compliance aligned with enterprise IAM best practices

Khaled Massad

Principal Cloud Solutions Architect II

Dresden

Last position:

Principal Cloud Solutions Architect II at Schrödinger GmbH

Understand the customer’s business & technical requirements and translate them into system / technical requirements
Design and implement Schrodinger’s applications on cloud systems, and experience convincing senior management and senior technical staff of the benefits of their journey with Schrodinger on the cloud
Provide exceptional technical design and thought leadership, especially around AWS, GCP, and K8s architecture reviews, performance, high availability, cost, and security
Deep understanding of the Well-Architected pillars and all best practices for building a secure, performant Schrodinger’s applications on the cloud platforms
Lead technical workshops and advise customers on architectural and strategic IT decisions
Ensure success in designing, building and migrating applications, software, and services on the cloud platforms
Educate customers on best practices to ensure their solutions are designed for successful deployment in the cloud
Work with other team members to ensure quality and customer success
Define the tickets, tasks, and timelines of projects
Collaborate with account managers to ensure that the projects are executed according to the defined plan and timeline
Monitor the progress of the projects, identify risks and issues, and take proactive measures to mitigate them
Lead and inspire cloud architect teams, provide guidance, and make critical decisions
Facilitate effective communication and collaboration among team members
Collaborate with Schrodinger’s managers to improve deployment, support, and configuration of Schrodinger’s applications
Lead weekly standups and define priorities

Anthony Mugwang'a

CodeValdCortex - Enterprise Multi-Agent AI Orchestration Platform

Frankfurt

Last position:

CodeValdCortex - Enterprise Multi-Agent AI Orchestration Platform at Personal Project

Enterprise-grade multi-agent AI orchestration platform built with Go and Kubernetes for scalable, secure agent coordination in cloud-native environments.
Multi-agent orchestration with intelligent workload distribution and dynamic scaling.
Cloud-native architecture with Kubernetes deployment and horizontal auto-scaling.
Real-time coordination with sub-100ms agent communication using Go channels.
Enterprise security with zero-trust architecture, RBAC, and comprehensive audit trails.
Visual workflow engine with monitoring, observability, and API gateway integration.
Technologies: Go, Kubernetes, ArangoDB, gRPC, Prometheus, Grafana.

Dimitri Wolinski

Senior IT Consultant, Software Architect, Pimcore Enterprise Consultant and Developer, Backend Web Developer

Mainz

Last position:

Software Architect at Environmental services company (cooperation with Sitegeist Media Solutions GmbH)

Conceptual design and implementation of a modular customer portal based on Laravel.

The focus was on defining a maintainable system architecture with broad use of Domain-Driven Design principles (within the Laravel architecture), introducing automated quality assurance processes (test strategy, CI integration), and preparing an auditable operation (logging, traceability of changes) in an AWS-based infrastructure, taking IT security standards according to NIST and process requirements according to ISO 9001 into account.

Achievements:

Analysis and structuring of business requirements in close coordination with stakeholders
Documentation of the system architecture and infrastructure incl. change and release management
Design and implementation of an interface for integrating SAP systems
Planning and implementation of automated tests for quality assurance
Implementation of security and compliance requirements, including SBOM generation, software license management, and QA processes
Technical consulting and support for the internal IT team
Introduction and establishment of AI-supported development processes (Spec-Driven Development), including AI-readable specifications, integration of AI instructions into the development environment, and training developers for productive use

Technologies and tools: SAP, Docker, ddev, PHP 8.4, Laravel, Filament, C4 Model, Architecture Decision Records (ADR), Mermaid, PlantUML, Spec-Driven Development, Claude, GitHub Copilot, Codex

Chiemela Ogu

Product Management Consultant

Last position:

AI Enthusiast – Independent Projects at Chiemela Ogu Consulting

Too Good To Throw (AI powered social impact webapp focused on reducing food waste in Nigeria):
Integrated Paystack Split Payments to automatically route payments between the platform and partner vendors.
Configured automated subaccount creation workflows so new businesses get a settlement account instantly.
Setup a scalable cloud backend using Supabase.
Implemented role-based access control (RBAC) for Users, Partners, and Admin.
FaithFlow (AI powered webapp supporting Christian teens on their spiritual journey):
Designed and implemented an AI-driven scripture search engine that interprets natural language questions and maps them to relevant Bible texts, commentary, devotionals, and cross-references.
Designed a spiritual growth dashboard enabling users to track reading progress, prayer streaks, and devotional completion milestones.

Benjamin Schaich

Design and implementation of a new cloud service

Esslingen am Neckar

Last position:

Design and implementation of a new cloud service at Porsche AG

Design of a new cloud service
Requirements Engineering
API Design (REST API, Kafka)
Consulting on architecture, feasibility and effort estimation
Implementation of a microservice architecture
Implementation of a Spring Boot web service
Development of REST APIs including business and persistence logic
Kafka consumers and producers
Various Excel upload/download scenarios
Change Data Capture
Cloud provisioning with IaC/Terraform
Go-live with 30,000 users
Operation, support and bug fixing for other services

Environment/tools: GitLab, JIRA, Confluence, IntelliJ, Spring Boot, Java, Docker, Terraform, AWS ECS, Postgres, Apache Kafka, SAP Datasphere, JUnit, Debezium, Apache POI, Hibernate, JPA, Testcontainers

Srecko Soric

Test Consultant

Bad Zwischenahn

Last position:

Test Consultant at PROSEQUM GmbH

Taking over operational acceptance tests for internal and external applications in a preproduction environment
End-to-end tests across multiple systems
Planning and implementation of acceptances based on expected loads and service levels
Creation of test plans and automated tests
Monitoring of systems, log analysis and creation of test reports, monitoring charts and acceptance documentation
Support during rollouts of security and OS patches in preproduction
Load and performance tests as well as failover/rollback tests
Testing SOAP/REST APIs with JMeter, Grafana and Kibana
Batch tests with Bash and log analysis
Load and performance tests of own applications
Test automation with JMeter and PyTest
Maintenance and creation of Bash scripting tests
Manual system integration tests

Michael König

Architect and Full-Stack Developer

Dresden

Last position:

Atruvia AG

Further development of framework components and services in the Enterprise Banking Control Platform (EGP Framework), a set of cross-cutting libraries and services for all bounded context scopes of the platform.
Migration from Java 17 to Java 21 and from Spring Boot 3.2 to 3.4 in about 80 library and service repositories (updating Maven POMs, Dockerfiles, Jenkins pipelines, source code migration, test updates).
Writing unit and integration tests with JUnit and JGiven.
Performing and analyzing performance measurements with Dynatrace.
Enhancing multi-stage CI/CD pipelines (unit tests, security analyses, Docker builds, Harbor deployments, ...).
Tech stack used: Java (90%), Python (10%), Spring Boot, JPA/Hibernate, JGiven, OpenAPI, Camunda 7, Podman, OpenShift/Kubernetes, Oracle DB, SonarQube, Dynatrace, Jenkins, Harbor, Bitbucket, Jira, Confluence.

Nikolay Tonev

Senior Cloud Data Architect

Unterhaching

Last position:

Senior Cloud Data Architect at Cloudreach/Eviden (an ATOS Company)

Architected a self-service Google Kubernetes Engine (GKE) platform for a major financial institution (Commerzbank), enabling 1000+ users across hundreds of product teams to autonomously provision resources and significantly accelerate development cycles.
Designed a data-product-oriented platform architecture for the UK Department for Transport (DfT) to serve over 1500 direct end-users and numerous connected third-party systems, enhancing data accessibility and governance.
Drove business growth by developing the strategic roadmap for the 'One Cloud' business line, targeting a 10% revenue increase.
Served as a key member of the CTO Authority, providing strategic guidance on internal cloud initiatives and best practices.

Daniel Boesswetter

Senior Cloud Consultant and Developer

Last position:

Senior Cloud Consultant and Developer at SDIA/Leitmotiv

Consulting an NGO in the field of data center sustainability in publicly funded projects (BMUKN with NADIKI and Federal Environment Agency with SIEC)
Development of Python APIs and web applications, deployment on AWS/ECS with Terraform
Collecting power consumption metrics for servers, CPUs, GPUs running AI workloads
Technologies used: AWS, EC2, ECS, Fargate, CloudMap, VPC, Route53, Lambda, EventBridge, CodeBuild/CodePipeline/CodeDeploy, Terraform, Docker, Linux, Bash scripting, Python, Flask, SQLAlchemy, SQL, MariaDB, InfluxDB, Telegraf, Prometheus, Zabbix, Kubernetes, Letsencrypt, certificate management

Santosh Kumar

AWS Devops Engineer

Augsburg

Last position:

AWS Devops Engineer at ETAS GmbH

Designed and provisioned full AWS infrastructure using Terraform, implementing containerized solutions with Docker Swarm and Kubernetes for scalability and reliability.
Built multi-environment CI/CD pipelines (Prod, Staging, Test) using Jenkins, GitLab CI, and Maven for automated builds, tests, and deployments.
Configured secure networking with VPCs, subnets, security groups, NAT gateways, and routing for high availability.
Integrated Prometheus, Alert Manager, and Grafana for real-time monitoring and proactive incident response.
Orchestrated deployment of microservices with Helm, ensuring zero-downtime releases and fast rollback capabilities.
Mentored junior DevOps engineers on best practices in IaC, Terraform, AWS security, and container management.

Nils Meyer

Database Architecture for PostgreSQL

Offenburg

Last position:

Database Architecture for PostgreSQL at ComputaCenter / Deutsche

Planning and documentation of database architecture and integration with other components provided by other teams and vendors
Extensive documentation for the architecture, security, access control, encryption, roles and user management, backup and restore, disaster recovery and general operations
Deployment of database clusters over 2 locations with 2 availability zones each
Automation of deployment and operations including backup using Ansible
Hardening of the database and operating system
Migration of existing stand-alone database systems to cluster setup
Technologies: PostgreSQL, Patroni, etcd, barman, RedHat Enterprise Linux 9 (RHEL), Ansible, Ansible Automation Platform, TLS, Hashicorp Vault, LUKS

Khaled Mohamed

Senior/Staff Backend Engineer

Last position:

Senior/Staff Backend Engineer at Heycar (Mobility Trader GmbH)

Heycar is a leading automotive platform redefining the used car market through intelligent data pipelines, multi-tenant services, and dealer-focused tooling. I led initiatives across backend architecture, data ingestion, and identity management to enhance scalability, reliability, and developer productivity.
Ingestion Platform: Designed a unified ingestion platform with YAML-based configuration, enabling new dealer data pipelines to be onboarded without code changes, cutting setup time from ~2 months to 2-3 days and improving scalability by 40%.
Keycloak Leadership: Acted as the company's Keycloak expert, scaling it for multi-tenant identity management and extending functionality with custom plugins and delegated admin APIs.
Back-Office Tooling: Developed a back-office application integrated with Salesforce, enabling dealers to manage inventory, convert leads, and handle support requests in real time.
Multi-Tenant Migration: Collaborated across backend teams to migrate Heycar's core services into a unified multi-tenant cluster, ensuring high availability.
Frontend CI Optimization: Optimized monorepo delivery by implementing CircleCI dynamic config with NX, deploying only affected UI projects and drastically cutting build times.
Observability & Mentorship: Enhanced monitoring and release reliability while mentoring backend engineers and improving code review standards.

Luis Alberto Peñafiel Palmer