Azure API Management Experts in Germany

Enterprise & Cloud Security Architect supporting the modernization of the SDK application landscape as part of the KVNeo transformation program. Responsible for enterprise architecture, cloud governance, security architecture, and the definition of technical standards for strategic business applications.

Key responsibilities include architecture governance, target architecture development, cloud and integration architecture, security-by-design, and the translation of regulatory requirements into sustainable technical solutions across multiple business domains.

Responsibilities and achievements

• Designed and reviewed target architectures for strategic insurance applications and enterprise services.
• Developed architecture documentation based on Arc42 and Architecture Decision Records (ADRs).
• Defined governance models, architecture principles, and technical guidelines for cross-domain initiatives.
• Supported the modernization of archive, document management, and output management platforms.
• Designed integration architectures using REST APIs and event-driven communication patterns.
• Led architecture discussions with enterprise architects, development teams, product owners, and business stakeholders.
• Translated regulatory requirements such as DORA and ISO/IEC 27001 into practical architecture decisions.
• Designed security concepts covering Identity & Access Management, authorization, authentication, auditability, and logging.
• Supported SIEM integration, security monitoring, and enterprise logging concepts.
• Evaluated technical risks, technical debt, and architecture improvements while providing decision papers for architecture boards.
• Established architecture governance processes and contributed to enterprise-wide transformation initiatives.
• Supported cloud governance activities and the definition of secure cloud architecture standards.
• Facilitated architecture workshops and coordinated cross-functional stakeholders across business and IT.

Technologies & Methods Microsoft Azure • Arc42 • Architecture Decision Records (ADR) • REST APIs • Event-Driven Architecture • Microsoft Entra ID • Active Directory • IAM • SIEM • Cloud Governance • Enterprise Architecture • Security Architecture • Azure API Management • Jira • Confluence • Draw.io • DORA • ISO/IEC 27001 • Agile • Scrum

• Built and operated an end-to-end MLOps platform on Azure ML and Kubernetes (Kubeflow) for automated deployment, monitoring and scaling of forecasting models (e.g. Temporal Fusion Transformer, Informer, Autoformer)
• Implemented CI/CD pipelines in Azure DevOps for the complete ML lifecycle – from resource provisioning (Terraform), data transformation (Hugging Face Datasets, Pandas, PyTorch, CUDA clusters) through training and evaluation to model registry and endpoint deployment
• Integrated MLflow for experiment tracking, model versioning, performance monitoring and automated registration in Azure Model Registry
• Developed and containerized PyTorch training jobs with CUDA (Azure Notebook, Jupyter Notebooks) for price and time series forecasting (PFC models) with automatic rollout via Azure ML endpoints and REST/gRPC interfaces, Docker containerization, secured with OAuth 2.0
• Set up monitoring and alerting mechanisms (Prometheus, MLflow metrics), centralized logging and cost tracking
• Configured security (OAuth2) and rate limiting via APIM
• Automated infrastructure provisioning and model deployment using Terraform, Helm and Azure CLI; integrated with existing market data systems and event pipelines
• Migrated existing workloads and databases (IONOS → Azure, MongoDB) integrating them into central MLOps workflows and internal networks
• Extended the platform with LLM-based tools (LangChain, LangServe) to integrate GPT-based analysis modules into existing Spring Boot services for market anomaly detection and automated reports
• Analyzed and designed a software solution to efficiently process high-volume data (>3000 messages/sec) (market data store)
• Developed Spring Boot / Java 21 containers with RabbitMQ to distribute market data via MongoDB (Kubernetes) with fast data storage in Redis RMaps, deduplication, forwarding of messages to read model queues and building read models for UI display in MongoDB
• Integrated RESTHeart to generate a REST API for MongoDB
• Migrated to MongoDB ClickHouse for mass ingests and automatic deduplication using the ReplicatedMergeTree engine in ClickHouse
• Built a Python Apache Arrow Flight service for querying the ClickHouse DB in milliseconds for complex queries (gRPC protocol / ClickHouse column-based queries)
• Developed an Angular frontend to simplify data queries and master data maintenance
• Used agentic coding with remote and local LLMs (Claude, Ollama Qwen, OpenLLM) and MCP servers
• Created Python scripts for transforming and cleaning incoming market data (Pandas, scikit-learn)

• Two-month modernization of the management UI for AI-powered cameras
• Rewrote a complex React application to Vue 3 with single file components
• Set up the core architecture of the Vue application and configured Vite, Pinia, Router, I18n, ESLint, and Prettier
• Custom integration of Leaflet to display detection zones on images
• Assisted with backend extension and authentication adjustments

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Realtime monitoring and analysis of individual devices, device groups, or the entire machine park

• Data evaluation of one or more measurement systems or a complete machine park to compare devices

• Data export as .csv file for: utilization, usage, collisions, measurement plans and temperatures

• Notifications via browser and email

• Analysis of project requirements and goals

• Implementation of UI components and features based on design specifications

• Development of RESTful APIs with C# .NET

• Implementation of business logic and server-side data processing

• Review of code changes by other developers

• Azure IoT infrastructure, Cosmos DB, Angular, .NET 6

• C#, Typescript, REST

• Led and coordinated consumption and price calculations for gas and electricity forecasts to ensure accurate and reliable pricing
• Implemented modern microservices and Web APIs based on .NET 7 in an Azure environment using Azure App Service, Azure Storage, and Azure Service Bus
• Built and managed infrastructure in Azure using Terraform, including resource deployment and automation of deployment processes
• Developed and maintained Azure DevOps pipelines to optimize build, test, and release workflows
• Optimized data management with SQL Server and ensured seamless integration across all services
• Developed the front end with Angular 16, TypeScript, CSS, HTML, and Kendo UI to deliver an intuitive and engaging user interface

• Responsible for the redevelopment of a billing and validation software for prescriptions to fully check and analyze e-prescriptions for correctness (content, billing)

• System consists of multiple contexts running as services (Docker containers):

• Checking and processing data deliveries via FTP and email

• Management of invoicing, clearings, deductions and offsets

• Management and execution of validation rules and test sets

• Analytics based on Metabase

• Developer Stack: Kotlin, Vue 3 / Vuetify 3, ANTLR, Spring Boot 3, REST API, Gradle, Docker, GitLab, PostgreSQL, Kafka, Keycloak, Scrum, Grafana, Loki, Testcontainers, Prometheus

• Supported an agile team in the development of a new CRM tool
• Web frontend development (Angular 17 with MDB-Bootstrap, microfrontends, DDD)
• Backend development (C# & .NET 7-9, MongoDB, MassTransit, RabbitMQ, Elasticsearch, microservices, DDD)
• Coordination with stakeholders & product owners
• Assisted in sprint planning