Azure Storage Experts in Germany

• Design and supervise implementation, testing and rollout of end-to-end processes and system integrations (frontend & backend)
• Integrate with OEMs (Daimler, BMW/MINI) and CPOs (Ionity and others)
• Introduce CPO discount packages with lifecycle processes
• Implement consenting process for GTC & tariff updates and marketing opt-ins via SAP Emarsys
• Automate blocking/unblocking of customers and integrate MS Dynamics CRM and proprietary 3rd level tool
• Coordinate migration and go-live of new fleet portal
• Migrate PSP from Datatrans to Adyen (credit card, PayPal) and integrate SEPA/BACS with Adyen via webhooks
• Support and enhance OpenInformer billing engine: Oracle→PostgreSQL migration, PostgreSQL upgrade, regression test suite, performance troubleshooting, invoice relocation to Azure Storage
• Identify and analyze fraud cases and implement countermeasures
• Provide problem management, incident support and hypercare after major rollouts

Task

• Further development of a new ERP system with Blazor
• Creation of e-invoices with the XRechnung and ZUGFeRD format
• UI/UX design Client-server system
• Windows 11 Technology
• Microsoft .NET 9, Git, Azure DevOps, ASP.NET, MSSQL, Blazor Programming languages
• C#, MVVM Development tools
• Microsoft Visual Studio .NET 2022 Database
• MSSQL Industry
• Other

• New development of project room functions
• Connection of REST API of a self-developed web service (.NET 7/8) as Azure App Service
• UI tests with Playwright
• Extension of Azure DevOps pipelines
• Migration to Azure SQL Server
• Software / technology: SharePoint Online, PowerShell scripts, SharePoint Framework, MobX, C#, Logic Apps, Playwright, Azure SQL Server, Graph API

• As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.

• I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.

• I managed user accounts, implemented security policies, and monitored system performance.

• I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.

• I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.

• I managed file servers and NTFS permissions to ensure secure and efficient data access management.

• I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.

• I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.

Technologies used:

• Citrix XenApp and XenDesktop
• Microsoft Windows Server 2012R2 and 2022
• Exchange 2016 and Exchange Online
• Entra ID (Azure AD)
• Entra ID Connect
• BitLocker
• PowerShell scripting
• Microsoft Intune
• LDAP (Lightweight Directory Access Protocol)
• DNS services (Domain Name System)
• Active Directory Certificate Services (AD CS)

• Architected ETL services for event-driven data exchange between enterprise systems on a Kafka streaming backbone.
• Optimized CI/CD pipelines for Azure AKS deployments and improved OpenSearch monitoring and alerting for proactive incident detection.

Tech: Java / Kotlin, Quarkus, Kafka / Avro, Azure / AKS, Azure Storage Container, ArgoCD, GitLab CI, OpenSearch, Terraform

• Engineered production-ready Azure environments using Terraform, ensuring consistent infrastructure parity across VNets and Resource Groups
• Implemented Microsoft Fabric tenant and workspace architecture for multi-stage Medallion data processing pipelines
• Designed secure data pathways using Managed Private Endpoints for isolated Azure Storage access
• Managed Service Principals and authentication tokens for secure REST API integrations

• Digitization and automation of internal business processes with the Microsoft Power Platform: analysis, design, and development of end-to-end solutions to increase company-wide efficiency
• Creating user-friendly interfaces with Power Apps
• Automating workflows and approval processes with Power Automate
• Visualizing process KPIs with Power BI

• Replacement of a Java application and the Oracle DB for loading the internal WerWasWo system using SSIS.
• Development of SSIS packages to load text files into the database (SQL Server)
• Development of a database project for deployment on various servers
• Creation of queries to monitor the loading runs
• Development of a PowerShell script to automate the deployment of the SSDT projects.
• Oracle, SQL Developer, Microsoft SQL Server 2022 on-premises, SQL Server Management Studio v21, Visual Studio 2022, SSIS, SSDT, PowerShell.

• Implementation of complex Azure resources using Terraform IaC and Azure DevSecOps pipelines with network security and zero-trust governance policies

• Optimization of the existing network design, firewall and database migration

• Implementation of governance and network policies as Policy as Code (PaC)

• Establishment of company-wide Azure connectivity using Azure VPN as an IPSec tunnel

• Implementation of hybrid on-premises multi-cloud connectivity (GCP, Azure) using Terraform

• Development of Azure Functions for scheduled cron jobs and Service Bus message queuing with topics

• Optimization of messaging with Service Bus premium features and IP whitelisting

• Stakeholder management, customer communication and creation of Architectural Decision Records (ADR)

• Responsible for cost-efficient quick wins in Azure and on-premises systems

• Creation of the profit center report and statistical metrics report
• Gathering and analysis of requirements regarding the forecast for revenue and costs
• Implementation of various time series analyses and optimization of forecasts
• SAP process knowledge, SQL, Python
• Python with various libraries for time series analysis and Machine Learning

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Complete conception, design, implementation, and operations of a voice chatbot
• Evaluation of various implementation concepts (STT, TTS, speech-to-speech)
• Integration into telephone platforms
• Implementation of dashboards and KPIs
• Definition and coordination of customer requirements
• Technologies used: FastAPI, Deepgram, ElevenLabs, LangChain, LangGraph, GitHub Actions, Streamlit, Vonage

• Led and coordinated consumption and price calculations for gas and electricity forecasts to ensure accurate and reliable pricing
• Implemented modern microservices and Web APIs based on .NET 7 in an Azure environment using Azure App Service, Azure Storage, and Azure Service Bus
• Built and managed infrastructure in Azure using Terraform, including resource deployment and automation of deployment processes
• Developed and maintained Azure DevOps pipelines to optimize build, test, and release workflows
• Optimized data management with SQL Server and ensured seamless integration across all services
• Developed the front end with Angular 16, TypeScript, CSS, HTML, and Kendo UI to deliver an intuitive and engaging user interface

• Migration of a mainframe application (PL/1, zOS) to the cloud (Azure)
• Data transfer from z/OS (USS) to Azure storage (blob containers, file shares)
• Implementation of the mainframe job control in Java
• Mapping of job network dependencies in Control-M
• Performance analysis and optimization measures
• DB2 (z/OS) migration to Postgres (Azure)
• Technologies: Azure (storage, VM, VMSS, Postgres), z/OS (USS), DB2, Postgres, Packer, Terraform, Docker, Jenkins, GitHub Actions, Control-M
• Tools: Eclipse, Visual Studio Code, IntelliJ