Azure Kubernetes Service Experts in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• Design, extension, and implementation of interfaces (REST, GraphQL, Kafka)
• Architecture and implementation of cloud-native microservices on Azure Kubernetes Service
• Domain-Driven Design, Event-Driven Architecture with Kafka
• Development of an extensive query engine for REST endpoints based on business objects
• Design and implementation of master data classification using machine learning algorithms (Weka library, Spotify Voyager)
• Analysis and evaluation of complex load test scenarios and derivation of optimizations
• Increase in system resilience (Kafka error handling, circuit breaker, sidecar service mesh in Go)
• Integration with CIAM systems (asynchronous real-time synchronization and definition of data ownership, authorization, authentication)
• Connection to Azure ServiceBus (AMQP protocol)
• Design and implementation of complex authorization concepts (including delegated administration)
• Documentation of the results (Confluence, architecture descriptions, architecture decisions)

• Designed and implemented the agent-based AI architecture for a company-wide platform to securely deploy LLM-based agents
• Designed and implemented end-to-end RAG pipelines from multiple sources: document preprocessing, chunking strategies for different document types, embeddings, retrieval with re-ranking, and robust prompt orchestration
• Developed a modular context engineering framework with skill architecture, context isolation, and dynamic resource management; human-in-the-loop control for enterprise tool integrations
• Built the CI/CD pipeline, testing strategy, tracing on the software side as well as automated LLM and agent evaluations, red team testing and tracing, and handed over to a reproducible production environment (ISO27001 and SOC2 compliant)

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

Led the overall SAP S/4Hana cloud migration program across 8 teams with direct management responsibility for 4 teams on data migration and business cockpit creation incl stakeholder management, and configured Jira and Sharepoint workflows.

• Rolled out the first S/4Hana cloud product iteration by the end of 2025 improving client response rate by 25% and on-time delivery of FMCG by 40%.
• Implemented AI-assisted coding tools that reduced average story point completion time by 30% through automated code generation and testing, validated by team velocity metrics.
• Led three development and one data migration team consisting of 5 developers, SAP consultants and several business key user each by adapting Scrum and Kanban frameworks and managed a budget of €5.5m.
• Managing three external services providers consisting of different SAP consultants and developer incl budget and resource allocation management.
• Set up the overall project scaling framework with Nexus for the whole migration project incl general feature deployment plan, 8 team paths and iterations in Jira, risk register and resource planning.
• Defined the data migration approach for business partner and material domains through two scoping workshops, establishing the full project plan plus pricing and logistics cockpit scope.

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Implementation of complex Azure resources using Terraform IaC and Azure DevSecOps pipelines with network security and zero-trust governance policies

• Optimization of the existing network design, firewall and database migration

• Implementation of governance and network policies as Policy as Code (PaC)

• Establishment of company-wide Azure connectivity using Azure VPN as an IPSec tunnel

• Implementation of hybrid on-premises multi-cloud connectivity (GCP, Azure) using Terraform

• Development of Azure Functions for scheduled cron jobs and Service Bus message queuing with topics

• Optimization of messaging with Service Bus premium features and IP whitelisting

• Stakeholder management, customer communication and creation of Architectural Decision Records (ADR)

• Responsible for cost-efficient quick wins in Azure and on-premises systems