Azure Monitor Experts in Germany

Architected and maintained data products for renewable energy operations, covering wind turbine, grid-meter, and weather data. Built scalable ETL/ELT pipelines in Azure Databricks using Delta Lake (bronze/silver/gold layers) and processed data in various formats, including structured and semi-structured data. Contributed to a data quality framework supporting table and column documentation, outlier detection, and completeness metrics across all datasets within a data product. In addition, implemented a DORA KPI Databricks dashboard used across all data products. Optimized CI/CD processes in Azure DevOps to streamline deployment across development, test, and production environments.

Technology stack: Azure Databricks, PySpark, SQL, Delta Lake, Unity Catalog, Azure Data Lake, APIs, Dremio, Azure DevOps, YAML, Git, Databricks Workflows, Application Insights, Terraform, OpenAI API, Codex, LLM-assisted workflows

• Azure Landing Zone architecture: Design and implement a hub-spoke, multi-region-capable Azure landing zone that provides the secure, scalable and highly available foundation for autonomous driving and parking data/ML platforms.
• Compliance through Azure Policy: Enforce security and compliance standards across Azure subscriptions via Azure Policy (guardrails, deny/audit/deploy-if-not-exists), consistently achieving top-tier infrastructure security scores.
• Infrastructure-as-Code: Automate provisioning and configuration of Azure resources with Terraform and Bicep, with changes delivered through reviewed CI/CD pipelines.
• Azure Databricks and Unity Catalog: Extensive experience operating Azure Databricks with Unity Catalog for centralized data governance, access control, lineage and auditing across workspaces.
• Monitoring and observability: Built and run infrastructure monitoring and logging with Azure Monitor, Prometheus, Grafana and Loki, covering platform health, alerting, troubleshooting and capacity trends.
• Platform at scale: Architected and operate cloud data/ML platforms supporting multi-PB vehicle data ingestion and simulation; orchestrate Argo Workflow-based recompute and autolabeling services scaling to 100k+ concurrent pods on AKS.
• Reproducible ML: Established reproducible training environments with dataset versioning and provenance tracking, enabling auditing and experiment reliability.
• Operational excellence: Automated GitHub organization management and CI/CD pipelines, improving developer productivity and deployment reliability; automated recurring operational processes.
• FinOps: Developed transparent resource utilization and cost-tracking for multi-project Azure environments.
• Leadership: Technical lead for infrastructure topics, collaborating with development, DevOps and security teams; technical interviewer and recruitment panel member for scaling the engineering team.

• Drive migration of enterprise authorization platform from Styra DAS to open-source OPA via Skipper (Zalando's Golang-based ingress proxy) integration
• Optimise k8s resources and integrate native Prometheus metrics with OPA
• Migrate from internal monitoring solution to Prometheus CRs + Dash0

Tech Stack: Java/Kotlin, Golang, Python, Spring Boot, AWS, Kubernetes, Docker, OpenTofu, Prometheus, Grafana

Building an observability and alerting solution for Business Central Job Queue Monitoring

• Built a central monitoring solution to monitor the Business Central Job Queue in a multi-organization environment in Azure DevOps
• Integrated Azure Application Insights and Log Analytics for the structured collection and analysis of job runtimes and error events
• Developed KQL queries for targeted analysis of failed jobs and detection of error patterns
• Connected Grafana and Power BI to visualize operational metrics and job statuses in real time
• Implemented an automated alerting workflow with Power Automate – an email notification is triggered immediately when a job fails
• Ensured transparency into the status of productive background processes during ongoing operations

Result: Full transparency into failed Business Central jobs · Significant reduction in response time through automated email alerting · Stable foundation for the proactive operation of productive background processes

Technologies: Azure DevOps | Application Insights | Log Analytics | KQL | Grafana | Power Automate | Power BI | Business Central | Azure Monitor

Clients: CARIAD, AUDI AG

• Built and deployed enterprise MLOps pipelines using Azure Machine Learning and Databricks. Reduced model release cycles by 95 percent, from four weeks to two days, through automated CI CD workflows.
• Delivered cloud native DevOps platforms for ADAS programs using Azure data services, Kubernetes, and Terraform based infrastructure provisioning.
• Designed high availability architectures with automated failover. Cut system downtime by 85 percent for mission critical energy trading platforms.
• Developed and integrated AI agents and enterprise chatbots using LangChain, AutoGPT, and GPT models. Enabled autonomous workflows and decision driven automation.
• Reduced cloud infrastructure spend by 40 percent through autoscaling strategies, spot instance usage, and policy driven resource governance across Azure and AWS.
• Partnered with Data Scientists, ML Engineers, Product Managers, and executive stakeholders to deliver large scale automotive and energy solutions.
• Implemented GitOps driven CI CD pipelines supporting automotive software delivery for over 500 engineers across distributed product teams.
• Designed and operated Kubernetes platforms on Azure AKS. Improved deployment stability and reduced rollback events by 70 percent.
• Implemented observability and monitoring stacks using Prometheus, Grafana, and Azure Monitor. Achieved 99.9 percent service availability targets.

Further development and modernization of a mature Aspire backend application in the energy utility sector, focusing on new business requirements, testing, legacy code cleanup, and stable backend delivery.

Key Contributions & Results Implemented new business requirements in the context of customer orders, subcontractors, and cross-company backend processes, ensuring consistent workflows across a distributed system landscape. Gradually modernized existing backend components and reduced technical debt through targeted legacy code cleanup, refactoring, and structured code reviews. Improved the testability of business-critical services by expanding automated tests with xUnit, AutoFixture, and clearer validation structures. Supported the further development of workflow automation and integration processes through microservices, messaging, and API-based communication. Took over source code from external companies, systematically assessed code quality, and derived technical improvements for maintainability, stability, and integration. Worked in agile development processes with Jira, Confluence, and Azure DevOps and supported cross-team coordination on architecture, quality, and implementation. Technical Metrics Technologies & Methods C#, .NET, ASP.NET, ASP.NET Core, Aspire, Docker, RabbitMQ, gRPC, REST API, Swagger, Microservices, NServiceBus, AutoMapper, Autofac, xUnit, AutoFixture, FluentValidation, Entity Framework Core, MediatR, Redis, Consul, Serilog, SonarQube, Azure DevOps, Azure Monitor, GitLab, Google Protocol Buffers, IronPDF, Mailjet, Jira, Confluence, Miro, Agile Development, Scrum, Code Reviews, Refactoring, Legacy Code Cleanup, Workflow Automation, Power Grids

• As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.

• I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.

• I managed user accounts, implemented security policies, and monitored system performance.

• I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.

• I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.

• I managed file servers and NTFS permissions to ensure secure and efficient data access management.

• I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.

• I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.

Technologies used:

• Citrix XenApp and XenDesktop
• Microsoft Windows Server 2012R2 and 2022
• Exchange 2016 and Exchange Online
• Entra ID (Azure AD)
• Entra ID Connect
• BitLocker
• PowerShell scripting
• Microsoft Intune
• LDAP (Lightweight Directory Access Protocol)
• DNS services (Domain Name System)
• Active Directory Certificate Services (AD CS)

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

• Took on the role of Service Manager for Microsoft 365 and Azure services
• Coordinated service providers in the areas of collaboration and security (Exchange Online, Teams, Azure AD)
• Monitored and optimized SLA-compliant operating processes (Incident, Change, Problem)
• Worked closely with internal IT management and integrated ITIL processes into Azure DevOps
• Microsoft Azure, Exchange Online, Teams, Azure AD, ITIL v4, Azure DevOps, Power BI, ServiceNow

• Design and provide best practices on data modeling for dbt, including changing dimensions, late arriving data handling, and testing
• Design the ingestion flow from other systems into S3 and Redshift
• Design and implement new partitions for Dagster and incremental loading with dbt
• Map business requirements to technical architectures
• Instruct junior team members

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Extended the document management system with a standard CMIS (Content Management Interoperability Services) interface
• Implemented CMIS core services like navigation, access rights, search, CRUD operations, and versioning in Java
• Implemented based on RESTful / OpenAPI services
• Delivered as a fat-jar and native container image
• Deployed on-premises and serverlessly as an Azure Container Application using Terraform
• Improved team autonomy through infrastructure engineering and short feedback loops
• Established observability with OpenTelemetry, Azure Monitor, and Azure Logic Apps
• Introduced Terraform and trunk-based development processes
• Ensured quality with BDD tests in C# using SpecFlow and Testcontainers
• Created Azure DevOps pipeline integration tests
• Introduced cloud deployment processes
• Trained staff in cloud and Terraform

• Complete conception, design, implementation, and operations of a voice chatbot
• Evaluation of various implementation concepts (STT, TTS, speech-to-speech)
• Integration into telephone platforms
• Implementation of dashboards and KPIs
• Definition and coordination of customer requirements
• Technologies used: FastAPI, Deepgram, ElevenLabs, LangChain, LangGraph, GitHub Actions, Streamlit, Vonage

• Provision and operation of Oracle databases within the agreed service levels.
• Storage administration using Oracle ASM feature.
• Oracle Grid Infrastructure and database patching.
• Ensure SLAs and operational KPIs are met, coordinating internal and external support during major incidents.
• Create and exercise reliable backup strategies and periodic restorations.
• Plan and execute migrations from non-multitenant to multitenant architectures and consolidate databases into multiple containers.
• Configure Oracle database authentication with Kerberos.
• Deploy and administer Azure Database for PostgreSQL (Flexible Server) including configuration, scaling, and high availability setup.
• Migrate on-premises PostgreSQL databases to Azure using pg_dump/pg_restore, pg_dumpall, and Azure Database Migration Service.
• Configure backup and point-in-time restore policies for compliance and recovery objectives.
• Implement monitoring and alerting with Azure Monitor, Log Analytics, and custom dashboards.
• Perform query performance tuning by analyzing execution plans, optimizing indexes, and adjusting parameters (work_mem, shared_buffers, autovacuum).
• Collaborate with developers to implement schema design improvements, partitioning, and connection pooling (PgBouncer) for scalability.