Auto Scaling Experts in Germany

• Mentor team of 6 ML platform engineers through weekly 1:1s, technical design reviews, and best practices, improving team velocity by 35% through structured sprint planning and skill development programs
• Define 2025–2026 ML platform roadmap in collaboration with Data Science, Cloud Engineering, and Product teams, prioritizing automated model governance, cost attribution systems, and multi-environment deployment strategies
• Partner with Data Science, SRE, and Product stakeholders to align ML platform capabilities with business objectives, reducing data scientist deployment friction by 60% through self-service platforms
• Architect and deliver production-grade MLOps platform supporting 50+ models in production with automated promotion pipelines, versioning, and rollback capabilities, achieving 99.5% platform uptime SLA
• Design distributed ML pipeline architecture using Metaflow and Argo Workflows (Vertex Pipelines-compatible), reducing model training time by 30% and deployment cycles from 2 weeks to 3 days through full CI/CD automation
• Build containerized ML services on Kubernetes with auto-scaling policies, resource quotas, and multi-tenancy isolation, optimizing infrastructure costs by $180K annually (25% reduction)
• Implement monitoring, alerting, and performance tracking using Prometheus, Grafana, and custom instrumentation, reducing model debugging time by 50% and establishing model performance SLOs
• Lead development of RAG-based document intelligence platform using LangChain, LangGraph, and vector databases, implementing agentic AI workflows for automated financial document processing
• Implement Infrastructure-as-Code using Terraform for reproducible environment provisioning and GitOps workflows, reducing infrastructure drift incidents by 80%
• Design role-based access control for ML platform, implement model lineage tracking, and establish audit trails for regulatory compliance aligned with enterprise IAM best practices

• Understand the customer’s business & technical requirements and translate them into system / technical requirements
• Design and implement Schrodinger’s applications on cloud systems, and experience convincing senior management and senior technical staff of the benefits of their journey with Schrodinger on the cloud
• Provide exceptional technical design and thought leadership, especially around AWS, GCP, and K8s architecture reviews, performance, high availability, cost, and security
• Deep understanding of the Well-Architected pillars and all best practices for building a secure, performant Schrodinger’s applications on the cloud platforms
• Lead technical workshops and advise customers on architectural and strategic IT decisions
• Ensure success in designing, building and migrating applications, software, and services on the cloud platforms
• Educate customers on best practices to ensure their solutions are designed for successful deployment in the cloud
• Work with other team members to ensure quality and customer success
• Define the tickets, tasks, and timelines of projects
• Collaborate with account managers to ensure that the projects are executed according to the defined plan and timeline
• Monitor the progress of the projects, identify risks and issues, and take proactive measures to mitigate them
• Lead and inspire cloud architect teams, provide guidance, and make critical decisions
• Facilitate effective communication and collaboration among team members
• Collaborate with Schrodinger’s managers to improve deployment, support, and configuration of Schrodinger’s applications
• Lead weekly standups and define priorities

• Built an MCP (Model Context Protocol) layer for Mwanachama's agency service, turning domain manager methods into callable AI-agent tools. This included a composite tool that builds a full organization design (org chart, goals, workflows, RACI matrix) from one specification.
• Built the chat-driven agency builder (Wakala Studio and API), where an organization describes its structure in natural language and an AI agent uses those tools to construct and modify the live design.
• Added an insights service so an organization can review AI-agent interactions and completed work. Insights from that review feed back into solution design, gated by architect and user sign-off.
• Alongside this, designed and built the platform itself: ~20 Go microservices on PostgreSQL, Flutter and React clients, deployed on Kubernetes.
• AI agents scan the platform autonomously for security gaps and run scripted tests, covering API (Postman-style) and UI testing. The rest of the work stays supervised. No rogue agents, promise.

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

Conceptual design and implementation of a modular customer portal based on Laravel.

The focus was on defining a maintainable system architecture with broad use of Domain-Driven Design principles (within the Laravel architecture), introducing automated quality assurance processes (test strategy, CI integration), and preparing an auditable operation (logging, traceability of changes) in an AWS-based infrastructure, taking IT security standards according to NIST and process requirements according to ISO 9001 into account.

Achievements:

• Analysis and structuring of business requirements in close coordination with stakeholders
• Documentation of the system architecture and infrastructure incl. change and release management
• Design and implementation of an interface for integrating SAP systems
• Planning and implementation of automated tests for quality assurance
• Implementation of security and compliance requirements, including SBOM generation, software license management, and QA processes
• Technical consulting and support for the internal IT team
• Introduction and establishment of AI-supported development processes (Spec-Driven Development), including AI-readable specifications, integration of AI instructions into the development environment, and training developers for productive use

Technologies and tools: SAP, Docker, ddev, PHP 8.4, Laravel, Filament, C4 Model, Architecture Decision Records (ADR), Mermaid, PlantUML, Spec-Driven Development, Claude, GitHub Copilot, Codex

Clients: CARIAD, AUDI AG

• Built and deployed enterprise MLOps pipelines using Azure Machine Learning and Databricks. Reduced model release cycles by 95 percent, from four weeks to two days, through automated CI CD workflows.
• Delivered cloud native DevOps platforms for ADAS programs using Azure data services, Kubernetes, and Terraform based infrastructure provisioning.
• Designed high availability architectures with automated failover. Cut system downtime by 85 percent for mission critical energy trading platforms.
• Developed and integrated AI agents and enterprise chatbots using LangChain, AutoGPT, and GPT models. Enabled autonomous workflows and decision driven automation.
• Reduced cloud infrastructure spend by 40 percent through autoscaling strategies, spot instance usage, and policy driven resource governance across Azure and AWS.
• Partnered with Data Scientists, ML Engineers, Product Managers, and executive stakeholders to deliver large scale automotive and energy solutions.
• Implemented GitOps driven CI CD pipelines supporting automotive software delivery for over 500 engineers across distributed product teams.
• Designed and operated Kubernetes platforms on Azure AKS. Improved deployment stability and reduced rollback events by 70 percent.
• Implemented observability and monitoring stacks using Prometheus, Grafana, and Azure Monitor. Achieved 99.9 percent service availability targets.

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• Consulting an NGO in the field of data center sustainability in publicly funded projects (BMUKN with NADIKI and Umweltbundesamt with SIEC)
• Development of Python APIs and web applications, deployment on AWS/ECS with Terraform
• Collecting power consumption metrics for servers, CPUs, GPUs running AI workloads
• Technologies used: AWS, EC2, ECS, Fargate, CloudMap, VPC, Route53, Lambda, EventBridge, CodeBuild/CodePipeline/CodeDeploy, Terraform, Docker, Linux, Bash scripting, Python, Flask, SQLAlchemy, SQL, MariaDB, InfluxDB, Telegraf, Prometheus, Zabbix, Kubernetes, Letsencrypt, certificate management

• Too Good To Throw (AI powered social impact webapp focused on reducing food waste in Nigeria):

• Integrated Paystack Split Payments to automatically route payments between the platform and partner vendors.

• Configured automated subaccount creation workflows so new businesses get a settlement account instantly.

• Setup a scalable cloud backend using Supabase.

• Implemented role-based access control (RBAC) for Users, Partners, and Admin.

• FaithFlow (AI powered webapp supporting Christian teens on their spiritual journey):

• Designed and implemented an AI-driven scripture search engine that interprets natural language questions and maps them to relevant Bible texts, commentary, devotionals, and cross-references.

• Designed a spiritual growth dashboard enabling users to track reading progress, prayer streaks, and devotional completion milestones.

• Led engineering strategy development and execution across multiple teams (Engineering, DevOps, SysAdmin, QA), defining quarterly OKRs and roadmaps to align with business objectives.
• Established comprehensive engineering excellence framework including coding standards, career progression paths, and critical operational policies.
• Successfully conducted technical due diligence during investment rounds, presenting technology infrastructure to potential investors.
• Developed and implemented key organizational policies including incident management, deployment guidelines, and security protocols.
• Streamlined recruitment process and managed performance reviews, resulting in improved team composition and capabilities.
• Architected and implemented full-stack solutions using TypeScript, Node.js backend and Next.js frontend with Styled Components.
• Designed and optimized serverless architecture utilizing AWS Lambda, Step Functions, State Machine, ECS, API Gateway, and multiple databases (DynamoDB, MongoDB, Postgres, MariaDB, OpenSearch).
• Implemented GraphQL for frontend requests and REST APIs for backend services, improving system connectivity and data flow.
• Established robust CI/CD pipelines using GitHub Actions and Jenkins, incorporating quality gates and security checks.
• Integrated SonarCloud for static code analysis, enhancing code quality across all repositories.
• Spearheaded infrastructure stability and security improvements while optimizing operational costs.
• Implemented automated testing framework using Jest for backend/frontend and Playwright for E2E testing.
• Created reusable tooling modules for logging, database connectivity, parameter store integration and reusable libraries.
• Designed and implemented microservices architecture using AWS ECS, documented with OpenAPI specifications.
• Enhanced creation and deployment processes through standardized templates and automated pipeline creation.
• Successfully delivered multiple projects on schedule while maintaining high quality standards and best practices.
• Conducted regular 1-on-1s and mentoring sessions, fostering team growth and professional development.
• Participated in cross-functional management meetings, ensuring alignment between technical initiatives and business goals.
• Identified and addressed knowledge gaps through targeted mentoring and training programs.
• Implemented atomic design principles for frontend development, improving component reusability and maintenance.

• Design of a new cloud service
• Requirements Engineering
• API Design (REST API, Kafka)
• Consulting on architecture, feasibility and effort estimation
• Implementation of a microservice architecture
• Implementation of a Spring Boot web service
• Development of REST APIs including business and persistence logic
• Kafka consumers and producers
• Various Excel upload/download scenarios
• Change Data Capture
• Cloud provisioning with IaC/Terraform
• Go-live with 30,000 users
• Operation, support and bug fixing for other services

Environment/tools: GitLab, JIRA, Confluence, IntelliJ, Spring Boot, Java, Docker, Terraform, AWS ECS, Postgres, Apache Kafka, SAP Datasphere, JUnit, Debezium, Apache POI, Hibernate, JPA, Testcontainers

• Taking over operational acceptance tests for internal and external applications in a preproduction environment
• End-to-end tests across multiple systems
• Planning and implementation of acceptances based on expected loads and service levels
• Creation of test plans and automated tests
• Monitoring of systems, log analysis and creation of test reports, monitoring charts and acceptance documentation
• Support during rollouts of security and OS patches in preproduction
• Load and performance tests as well as failover/rollback tests
• Testing SOAP/REST APIs with JMeter, Grafana and Kibana
• Batch tests with Bash and log analysis
• Load and performance tests of own applications
• Test automation with JMeter and PyTest
• Maintenance and creation of Bash scripting tests
• Manual system integration tests

• Working with developers, security, and operations teams to align requirements
• Supporting product owners and development teams in using logging and monitoring solutions based on the Elastic Stack
• Developing and standardizing log schemas as well as defining practical standards for observability
• Designing and further developing logging architectures for complex, distributed multi-tenant environments
• Connecting application and infrastructure logs as well as security tools and metrics
• Optimizing data flows and modeling for analysis and reporting purposes
• Building automated infrastructures using Terraform/Terragrunt and Ansible
• Maintaining and further developing CI/CD pipelines in GitLab as well as automated development environments in Hetzner Robot
• Operating and automating Proxmox clusters including Ceph storage
• Setting up and operating Kubernetes (k3s) clusters on Fedora CoreOS including base services such as Vault, OpenLDAP, and HA Proxy
• Implementing security-critical infrastructures according to BSI baseline protection and securing existing systems
• Supporting the operation of solutions in cloud environments (including AWS)
• Working in agile teams using Scrum and Kanban
• Technologies/ applications: Elastic Stack (Elasticsearch, Logstash, Beats/Elastic Agent, Kibana), Terraform, Terragrunt, Ansible, GitLab CI/CD, GitOps, Proxmox, Proxmox Ceph, Kubernetes (k3s), OpenShift, Helm, Kustomize, Vault, OpenLDAP, HA Proxy, Hetzner Robot systems, AWS, Prometheus, Grafana, Syslog Linux/Windows, Docker, NGINX, Apache Security & Compliance (BSI baseline protection, SIEM/SOC)

• Building the strategy and managing the company.
• Consulting on cloud technologies with a focus on AWS and Kubernetes.
• Leading automation projects and CI/CD pipeline implementations.