Azure Storage Experts in Germany

Development of an iOS app for virtual try-on and outfit suggestions

The goal of the project is to develop a mobile application for personalized, photorealistic outfit suggestions. Users should be able to upload their own photos, try on clothes virtually, and find products that can be bought directly in the generated suggestions.

• Planning and implementation of the onboarding and photo upload in the iOS app
• Development of the mobile application with Expo and React Native
• Implementation of a Hono/Node.js backend for user, product, and generation processes
• Building an asynchronous processing pipeline with BullMQ and Redis
• Connection of PostgreSQL/pgvector and S3 for product, image, and generation data
• Integration of Gemini and OpenAI for outfit generation and image processing
• Implementation of a credit system and integration of RevenueCat
• Integration of Stripe Connect and affiliate product feeds for products that can be bought directly

Label: TypeScript, React Native, Expo, Hono, Node.js, PostgreSQL/pgvector, BullMQ, Redis, S3, Gemini, OpenAI, RevenueCat, Stripe Connect, Docker

Tasks

• Further development of a new ERP system with Blazor
• Generation of e-invoices in the XRechnung and Zugferd formats
• UI/UX design Client-server system
• Windows 11 Technology
• Microsoft .NET 9, Git, Azure DevOps, ASP.NET, MSSQL, Blazor Programming languages
• C#, MVVM Development tools
• Microsoft Visual Studio .NET 2022 Database
• MSSQL Industry
• Other

• Led and coordinated consumption and price calculations for gas and electricity forecasts to ensure accurate and reliable price determination
• Implemented modern .NET 7-based microservices and Web APIs in an Azure environment using Azure App Service, Azure Storage and Azure Service Bus
• Created and managed infrastructure in Azure using Terraform, including resource provisioning and the automation of deployment processes
• Developed and maintained Azure DevOps pipelines to optimize build, test and release workflows
• Optimized data management with SQL Server and ensured seamless integration across all services
• Developed the frontend with Angular 16, TypeScript, CSS, HTML and Kendo UI to provide an intuitive and engaging user interface

• New development of project room functions
• Connection of REST API of a self-developed web service (.NET 7/8) as Azure App Service
• UI tests with Playwright
• Extension of Azure DevOps pipelines
• Migration to Azure SQL Server
• Software / technology: SharePoint Online, PowerShell scripts, SharePoint Framework, MobX, C#, Logic Apps, Playwright, Azure SQL Server, Graph API

• Replacement of a Java application and the Oracle DB for loading the internal WerWasWo system using SSIS.
• Development of SSIS packages to load text files into the database (SQL Server)
• Development of a database project for deployment on various servers
• Creation of queries to monitor the loading runs
• Development of a PowerShell script to automate the deployment of the SSDT projects.
• Oracle, SQL Developer, Microsoft SQL Server 2022 on-premises, SQL Server Management Studio v21, Visual Studio 2022, SSIS, SSDT, PowerShell.

• As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.

• I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.

• I managed user accounts, implemented security policies, and monitored system performance.

• I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.

• I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.

• I managed file servers and NTFS permissions to ensure secure and efficient data access management.

• I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.

• I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.

Technologies used:

• Citrix XenApp and XenDesktop
• Microsoft Windows Server 2012R2 and 2022
• Exchange 2016 and Exchange Online
• Entra ID (Azure AD)
• Entra ID Connect
• BitLocker
• PowerShell scripting
• Microsoft Intune
• LDAP (Lightweight Directory Access Protocol)
• DNS services (Domain Name System)
• Active Directory Certificate Services (AD CS)

• Architected ETL services for event-driven data exchange between enterprise systems on a Kafka streaming backbone.
• Optimized CI/CD pipelines for Azure AKS deployments and improved OpenSearch monitoring and alerting for proactive incident detection.

Tech: Java / Kotlin, Quarkus, Kafka / Avro, Azure / AKS, Azure Storage Container, ArgoCD, GitLab CI, OpenSearch, Terraform

• Engineered production-ready Azure environments using Terraform, ensuring consistent infrastructure parity across VNets and Resource Groups
• Implemented Microsoft Fabric tenant and workspace architecture for multi-stage Medallion data processing pipelines
• Designed secure data pathways using Managed Private Endpoints for isolated Azure Storage access
• Managed Service Principals and authentication tokens for secure REST API integrations

• Fullstack development based on Next.js and TypeScript
• Development and optimization of geospatial database queries for PostgreSQL/PostGIS
• Visualization of geospatial data using Mapbox
• Design and execution of load tests and performance optimizations
• Code reviews and documentation tasks
• Technologies: JavaScript, TypeScript, Next.js, React, Zod, tRPC, Storybooks, PostgreSQL/PostGIS, MicroORM, Knex, Material UI, Mapbox, BullMQ, Jest, Playwright, Artillery.io, K6, Sentry, Figma, GitLab, Grafana, GTFS

• Digitization and automation of internal business processes with the Microsoft Power Platform: analysis, design, and development of end-to-end solutions to increase company-wide efficiency
• Creating user-friendly interfaces with Power Apps
• Automating workflows and approval processes with Power Automate
• Visualizing process KPIs with Power BI

• Implementation of complex Azure resources using Terraform IaC and Azure DevSecOps pipelines with network security and zero-trust governance policies

• Optimization of the existing network design, firewall and database migration

• Implementation of governance and network policies as Policy as Code (PaC)

• Establishment of company-wide Azure connectivity using Azure VPN as an IPSec tunnel

• Implementation of hybrid on-premises multi-cloud connectivity (GCP, Azure) using Terraform

• Development of Azure Functions for scheduled cron jobs and Service Bus message queuing with topics

• Optimization of messaging with Service Bus premium features and IP whitelisting

• Stakeholder management, customer communication and creation of Architectural Decision Records (ADR)

• Responsible for cost-efficient quick wins in Azure and on-premises systems

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Creation of the profit center report and statistical metrics report
• Gathering and analysis of requirements regarding the forecast for revenue and costs
• Implementation of various time series analyses and optimization of forecasts
• SAP process knowledge, SQL, Python
• Python with various libraries for time series analysis and Machine Learning

• Complete conception, design, implementation, and operations of a voice chatbot
• Evaluation of various implementation concepts (STT, TTS, speech-to-speech)
• Integration into telephone platforms
• Implementation of dashboards and KPIs
• Definition and coordination of customer requirements
• Technologies used: FastAPI, Deepgram, ElevenLabs, LangChain, LangGraph, GitHub Actions, Streamlit, Vonage