Backup Expert

• Creating concepts and architecture for domain integration (SEAT into the VW structure)
• Domain trusts and administration
• Operation and administration of Windows 2022/ 2025 servers and domains
• Domain restructuring
• GPO and SG editing and migration
• DNS restructuring and migration

Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users

Description of duties “Atruvia / HCL International” Role: HCL Notes Banking Support, Domino Administration / Migration / Operations Operations, administration and technical support of the HCL Notes/Domino environment in the Atruvia banking environment on behalf of HCL. As part of an international support team, the focus was on second- and third-level support as well as the processing, management and monitoring of SLA tickets in categories 1, 2 and 3. Duties included the technical analysis and resolution of incidents in the Notes/Domino environment, system administration, and the development and modification of Lotus Notes /Domino applications and LotusScript agents when a programming solution was required. Another focus was ticket dispatching: analysing and assessing incoming tickets, assigning them to the responsible departments and specialist teams, and subsequently coordinating and tracking processing within the agreed SLA periods. There was also direct communication and coordination with subject-matter experts, departments and end customers of the connected banks. In particular, when language or technical communication problems arose within the international support team, German-language customer communication was handled and mediation between customers and technical specialists was provided. Objective Ensuring stable and reliable operation of the HCL Notes/Domino landscape in the Atruvia banking environment and the timely processing of business-critical support cases in line with the agreed Service Level Agreements. Incidents were to be analysed as early as possible and either resolved directly through administrative measures or suitable LotusScript/Notes solutions, or forwarded specifically to the responsible specialist teams. As of: 25.09.2026 (Version 2.10 LITE) including project times Page: 3 of 32 SPO-SOFT EDV Beratung, Dipl.-Ing. Klaus Kano, Tel.: +494532-2767682, Mail: [email], [link] At the same time, qualified preliminary analysis and targeted ticket dispatching were intended to ensure that every ticket reached the technically and professionally responsible department immediately and that unnecessary transfers, processing times and associated costs were reduced. Result Operational Notes/Domino support for the banks served was reliably ensured throughout the entire project period. SLA-relevant tickets were systematically analysed, prioritised, assigned to the responsible departments and tracked through to resolution. Some incidents were resolved directly through administration, technical error analysis and the development of suitable LotusScript agents and modifications to Notes/Domino applications. By directing tickets specifically to the relevant expert and specialist teams, incorrect assignments and unnecessary processing loops were reduced and compliance with the agreed SLA times was supported. Direct communication with the banks and mediation between German-speaking end customers and the international support team also contributed to efficient problem resolution and high customer satisfaction.

I designed and built a self-service AWS platform for Data Science teams with little or no infrastructure-as-code experience. A team writes about 10 lines of Python and gets a deployable stack with full SDLC release cycle that already follows the governance rules. Networking, encryption, IAM and tagging are decided by the platform, not by each team.

New teams or AWS accounts are onboarded with one pull request. Waste prevention and cost control is built into the defaults: Data scientists don't need infrastructure skills.

• Construct library (AWS CDK, Python). Built a versioned catalog of about 20 hardened constructs for being used in data-science projects with ML context
• Governance as code
• Multi-account, multi-tenant
• Golden-path scaffolding
• CI/CD and supply chain. Built reusable GitHub Actions workflows
• Release engineering
• QA with e2e, contract testing and unit test coverage with each release candidate

• Development of a system for capturing, storing, and using knowledge
• Assessment of the current status and requirements for capturing employees’ tacit knowledge
• Creation of the appropriate taxonomy for the individual specialist areas
• Establishment of a suitable technical architecture
• Conducting expert interviews with the help of Artificial Intelligence (AI)
• Concept for data backup
• Analysis and evaluation of the approach and results
• Incorporation of organizational changes

• Overall leadership of several strategic operations projects focusing on Workplace Services, SLA Framework, access management, certificate management, e-learning, backup & recovery, test management, and capacity management, as well as the introduction of system monitoring and feasibility studies for 24x7 operations, in some cases including implementation in ServiceNow
• Creation of various ServiceNow operating concepts covering training, access rights, and emergency management as part of a new cloud hosting initiative for the ServiceNow platform
• Executive board reports and leadership of steering committees as part of company-wide strategic objectives, as well as the establishment of new balanced scorecards for measuring KPIs related to optimization-driven project results

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

• Customer Service Reorganization at DCS Digital Charging Solutions, Munich

• Management of nearshore service providers

• Implementation of scorecard, Q-management and CSAT management definition, customer loyalty

• Customer Service Reorganization Strategy at TWS Total Webhosting Solutions Group, Amsterdam

• Brand consolidation

• Webhosting mass market customer service strategy

• Q-management and CSAT management definition, upselling

• Provider Strategy Nearshore Customer Service, RFP process at Advanzia Bank, Luxembourg

• Definition of upsell campaigns for business customers from ISDN to NGN (VOIP) at 1&1 Versatel GmbH

• Customer approach, switching terms, order entry, service delivery, end-to-end processes, customer communication

• Definition of customer service processes (telecom, mass market, use cases) at E.ON Broadband, Avacon Connect GmbH, Berlin and Sarstedt

• Order entry, field sales processes, commission settlement, requirements for the CRM system (MS Dynamics), service provider management

• Definition of statement of work for phone and written contacts (skill definition, forecast process, SL measurement, quality measurement, scorecard, bonus-malus) at Lechwerke, LEW, Augsburg

• Support of tender process for service provider selection

• Functional management and further development of a team of 28 IT employees (internal & external) in the areas of HelpDesk / HelpLine, RHEL (Red Hat), MUREX (trading system & applications), SAP basic operations
• Management of external service providers (including FI-TS for SAP basic operations)
• Personnel, resource and budget planning for the IT department and projects
• Introduction and establishment of regular communication formats (regular meetings, team and cross-departmental meetings)
• Ensuring application operations in a hybrid environment (Windows / Linux with database and web/application servers)
• Support for transformation projects to modernize the application landscape (e.g. DevOps approaches)
• Building and introducing digital IT procurement for hardware & software (e.g. with DELL)
• Development and management of the „IT Operations DOS" department based on the company strategy
• Preparation of management reports & decision papers on IT projects, optimization potential and automation opportunities
• Representing the department in Rentenbank committees and ensuring regulatory compliance (BaFin §44, DSGVO, BSI, MaRisk)

• Built a customized MediaWiki instance, including installation, MySQL database, SSL, and automatic backups
• Set up user roles (Admin, Mod, Verified, User) and a permissions system
• FlaggedRevisions for editorial review workflows · Commenting and rating extensions

• Expert in the company's architecture management area

• Support for standardizing the company's IT landscape

• Further development of architecture management

• Shaping the company's business architecture

• Restructuring, administration and maintenance of all IT assets

• Support in creating a unified software asset management and CMDB

• Creation of unified document management (e-file)

• Transition of documents into a central DMS structure

• Link between architecture management and the department's internal business process management

• Support in developing strategic and tactical development plans

• Organizing communication with key stakeholders

• Support in the conception, organization and coordination of the architecture office to be built up

• Accompanying and advising the entire architecture management process

• Advising the company's business units on architectural topics and their framework conditions

• MS Office, Windows 10, VBA

• ITIL, TOGAF, PowerBi, Kanban, Scrum

• Internal agency tools

• Open Touch Conversation, Webex, wire, bdbos

• MS Sharepoint, JIRA, Confluence

• ARIS, Archimate, BPMN

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Built and scaled a 35-member engineering team (Core Engineering, QA, and SRE) in 12 months, accelerating Midnight’s blockchain development on Parity’s Substrate framework.
• Defined strategic direction and aligned technology development with business objectives as a key member of the leadership.
• Optimized software development processes and implemented agile methodologies, enhancing operational efficiency and code security.
• Delivered projects in a fast-paced startup environment through effective project management and resource allocation.

• Introduction of an access control solution and preparation of a tender for a visitor management system.
• As project manager, I am responsible for the successful introduction of a cloud-based access control system at two sites with approximately 4000 employees.
• Responsible for the successful implementation of the project.
• Preparation and coordination of project plans and status reports with all stakeholders.
• Preparation/coordination of an initial effort or cost estimate and related planning for the implementation of operational services.
• Identification of interfaces.
• Compliance with the budget and schedule.
• As Tender Manager / Demand Manager, I am responsible for the following specific tasks:
• Analysis of potential providers.
• Elicitation of requirements.
• Preparation and coordination of the requirements catalog.
• Preparation of an evaluation matrix.
• Preparation of tender documents.