Azure Monitor Experts in Germany

• Drive migration of enterprise authorization platform from Styra DAS to open-source OPA via Skipper (Zalando's Golang-based ingress proxy) integration
• Optimise k8s resources and integrate native Prometheus metrics with OPA
• Migrate from internal monitoring solution to Prometheus CRs + Dash0

Tech Stack: Java/Kotlin, Golang, Python, Spring Boot, AWS, Kubernetes, Docker, OpenTofu, Prometheus, Grafana

Clients: CARIAD, AUDI AG

• Built and deployed enterprise MLOps pipelines using Azure Machine Learning and Databricks. Reduced model release cycles by 95 percent, from four weeks to two days, through automated CI CD workflows.
• Delivered cloud native DevOps platforms for ADAS programs using Azure data services, Kubernetes, and Terraform based infrastructure provisioning.
• Designed high availability architectures with automated failover. Cut system downtime by 85 percent for mission critical energy trading platforms.
• Developed and integrated AI agents and enterprise chatbots using LangChain, AutoGPT, and GPT models. Enabled autonomous workflows and decision driven automation.
• Reduced cloud infrastructure spend by 40 percent through autoscaling strategies, spot instance usage, and policy driven resource governance across Azure and AWS.
• Partnered with Data Scientists, ML Engineers, Product Managers, and executive stakeholders to deliver large scale automotive and energy solutions.
• Implemented GitOps driven CI CD pipelines supporting automotive software delivery for over 500 engineers across distributed product teams.
• Designed and operated Kubernetes platforms on Azure AKS. Improved deployment stability and reduced rollback events by 70 percent.
• Implemented observability and monitoring stacks using Prometheus, Grafana, and Azure Monitor. Achieved 99.9 percent service availability targets.

Enhancement and modernization of a mature Aspire backend application in the environment of a utility company, focusing on new business requirements, testing, legacy code cleanup, and stable backend delivery.

Core contributions & results Implemented new business requirements in the context of customer orders, subcontractors, and cross-company backend processes, and ensured consistent workflows in a distributed system landscape. Modernized existing backend components step by step and reduced technical debt through targeted legacy code cleanup, refactoring, and structured code reviews. Improved the testability of business-critical services by expanding automated tests with xUnit, AutoFixture, and clearer validation structures. Supported the further development of workflow automations and integration processes via microservices, messaging, and API-based communication. Took over source code from external firms, systematically checked code quality, and derived technical improvements for maintainability, stability, and integration. Worked in agile development processes with Jira, Confluence, and Azure DevOps and supported cross-team alignment on architecture, quality, and implementation. Technical metrics Technologies & methods C#, .NET, ASP.NET, ASP.NET Core, Aspire, Docker, RabbitMQ, gRPC, REST API, Swagger, Microservices, NServiceBus, AutoMapper, Autofac, xUnit, AutoFixture, FluentValidation, Entity Framework Core, MediatR, Redis, Consul, Serilog, SonarQube, Azure DevOps, Azure Monitor, GitLab, Google Protocol Buffers, IronPDF, Mailjet, Jira, Confluence, Miro, agile development, Scrum, code reviews, refactoring, legacy code cleanup, workflow automation, power grids

• As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.

• I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.

• I managed user accounts, implemented security policies, and monitored system performance.

• I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.

• I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.

• I managed file servers and NTFS permissions to ensure secure and efficient data access management.

• I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.

• I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.

Technologies used:

• Citrix XenApp and XenDesktop
• Microsoft Windows Server 2012R2 and 2022
• Exchange 2016 and Exchange Online
• Entra ID (Azure AD)
• Entra ID Connect
• BitLocker
• PowerShell scripting
• Microsoft Intune
• LDAP (Lightweight Directory Access Protocol)
• DNS services (Domain Name System)
• Active Directory Certificate Services (AD CS)

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

Building an observability and alerting solution for Business Central Job Queue monitoring

• Built a central monitoring solution to track the Business Central Job Queue in a multi-organization environment in Azure DevOps
• Integrated Azure Application Insights and Log Analytics for structured collection and analysis of job runtimes and error events
• Developed KQL queries for targeted analysis of failed jobs and detection of error patterns
• Connected Grafana and Power BI to visualize operational metrics and job status in real time
• Implemented an automated alerting workflow with Power Automate – when a job fails, a notification email is sent immediately
• Ensured transparency about the state of productive background processes during live operations

Result: Full transparency over failed Business Central jobs · Clear reduction in response time through automated email alerting · Stable foundation for proactive operation of productive background processes

Technologies: Azure DevOps | Application Insights | Log Analytics | KQL | Grafana | Power Automate | Power BI | Business Central | Azure Monitor

• Conceptualization and administration of Azure AD (app registrations, hybrid identities, group concepts)
• Azure Monitoring
• Design and building of Azure-based solutions (IaaS / PaaS)
• Consulting and technical support of internal cloud projects
• Automations for Azure solutions

• Took on the role of Service Manager for Microsoft 365 and Azure services
• Coordinated service providers in the areas of collaboration and security (Exchange Online, Teams, Azure AD)
• Monitored and optimized SLA-compliant operating processes (Incident, Change, Problem)
• Worked closely with internal IT management and integrated ITIL processes into Azure DevOps
• Microsoft Azure, Exchange Online, Teams, Azure AD, ITIL v4, Azure DevOps, Power BI, ServiceNow

• Design and provide best practices on data modeling for dbt, including changing dimensions, late arriving data handling, and testing
• Design the ingestion flow from other systems into S3 and Redshift
• Design and implement new partitions for Dagster and incremental loading with dbt
• Map business requirements to technical architectures
• Instruct junior team members

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Extended the document management system with a standard CMIS (Content Management Interoperability Services) interface
• Implemented CMIS core services like navigation, access rights, search, CRUD operations, and versioning in Java
• Implemented based on RESTful / OpenAPI services
• Delivered as a fat-jar and native container image
• Deployed on-premises and serverlessly as an Azure Container Application using Terraform
• Improved team autonomy through infrastructure engineering and short feedback loops
• Established observability with OpenTelemetry, Azure Monitor, and Azure Logic Apps
• Introduced Terraform and trunk-based development processes
• Ensured quality with BDD tests in C# using SpecFlow and Testcontainers
• Created Azure DevOps pipeline integration tests
• Introduced cloud deployment processes
• Trained staff in cloud and Terraform

• Complete conception, design, implementation, and operations of a voice chatbot
• Evaluation of various implementation concepts (STT, TTS, speech-to-speech)
• Integration into telephone platforms
• Implementation of dashboards and KPIs
• Definition and coordination of customer requirements
• Technologies used: FastAPI, Deepgram, ElevenLabs, LangChain, LangGraph, GitHub Actions, Streamlit, Vonage

• Provision and operation of Oracle databases within the agreed service levels.
• Storage administration using Oracle ASM feature.
• Oracle Grid Infrastructure and database patching.
• Ensure SLAs and operational KPIs are met, coordinating internal and external support during major incidents.
• Create and exercise reliable backup strategies and periodic restorations.
• Plan and execute migrations from non-multitenant to multitenant architectures and consolidate databases into multiple containers.
• Configure Oracle database authentication with Kerberos.
• Deploy and administer Azure Database for PostgreSQL (Flexible Server) including configuration, scaling, and high availability setup.
• Migrate on-premises PostgreSQL databases to Azure using pg_dump/pg_restore, pg_dumpall, and Azure Database Migration Service.
• Configure backup and point-in-time restore policies for compliance and recovery objectives.
• Implement monitoring and alerting with Azure Monitor, Log Analytics, and custom dashboards.
• Perform query performance tuning by analyzing execution plans, optimizing indexes, and adjusting parameters (work_mem, shared_buffers, autovacuum).
• Collaborate with developers to implement schema design improvements, partitioning, and connection pooling (PgBouncer) for scalability.

• Implementing secure cloud configurations with Azure Private Link, Network Security Groups, Microsoft Defender for Cloud, and Azure Regulatory Compliance for NIST 800-53, PCI DSS, and HIPAA/HITRUST, resulting in an 88% reduction in security incidents over the same period.
• Troubleshooting and supporting Microsoft Azure services, including Microsoft Sentinel (SIEM), Virtual Machines, Azure Monitor, and Azure Active Directory.
• Developing KQL queries to support the Log Analytics workspace and Microsoft Sentinel, resulting in 1 new SIEM dashboard and 4 workbooks.