Caching Experts in Germany

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• Shipped Recare Voice Desktop from 0 to 1 in two months, including multi-language clinical documentation that auto-transcribes into structured German medical notes.
• Reduced LLM inference costs by 60–70% across Docs and Extract through prompt caching architecture.
• Built the AI workbench used by PMs/engineers for prompt experimentation and the Langfuse eval stack (10k+ traces evaluated).

• Led migration to GCP using Terraform, GKE, and GitOps, improving deployment consistency and scalability
• Implemented Datadog observability stack via Terraform and datadog-operator
• Established automated end-to-end tests and on-call processes, improving incident response and service reliability
• Migrated from NGINX Ingress Controller to Kubernetes Gateway API (NGINX Gateway Fabric)
• Migrated stateful services (PostgreSQL and Redis) to GCP, improving scalability and operational reliability

• SPA for automated communication of medical findings with role-based access (Sanctum)
• Server-side LLM integration (OpenRouter) with structured processing
• Automated sending via SMS/voice call (Twilio, ElevenLabs) with queue + status retry
• Full test coverage with 80+ documented test cases

Technologies: PHP, Laravel, LLM API (OpenRouter), Twilio, ElevenLabs, Laravel Sanctum, PHPUnit, Playwright, Docker, REST

• Architected and deployed private cloud data platform on VMware vSphere, integrating Greenplum MPP, Apache Kafka, Kubernetes, and Apache Solr, and developed real-time ingestion pipelines with Kafka Connect and Schema Registry.
• Led Oracle Exadata to Greenplum migration, rearchitected data models, optimized storage, implemented RabbitMQ with Debezium for CDC, and deployed VectorDB for Generative AI.
• Designed and executed multi-cloud migration PoC across AWS, Azure, and GCP, defined KPIs for throughput, latency, and cost efficiency, executed bulk data transfers, validated analytics and streaming workloads, and delivered full-scale architecture recommendations.
• Assessed legacy on-premises infrastructure and designed modern cloud-native data platforms using Greenplum and containerized microservices, advising on scalability, disaster recovery, and high-availability.

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Own full-stack development of an AI-native enterprise platform built on TypeScript, React, Vite, tRPC, Hono, and PostgreSQL, delivering AI-powered consulting workflows to B2B clients.
• Designed and shipped a multi-agent AI system using ReAct framework and Claude skills-style workflow patterns, including an intelligent PM assistant with rich system prompts, slash commands, tool integrations, and streaming chat UI.
• Architected an LLM evaluation framework: rubric-based LLM-as-judge, golden datasets, regression testing, and automated quality gating — ensuring consistent AI output quality at scale.
• Integrated LangFuse for end-to-end LLM tracing, conversation replays, and evaluation pipelines, enabling data-driven prompt optimisation that reduced token costs and response variance.
• Built with Drizzle ORM, pgvector, and knowledge graphs for structured data access, semantic search, and relationship-aware AI reasoning across the platform.
• Led TanStack React Query migration across the application — replacing manual state management with centralised caching and automatic refetching, reducing data-fetching boilerplate significantly.
• Practiced AI-native development throughout: Claude Code, Codex, Perplexity SDK, and LLM-assisted testing across the full development lifecycle. Deployed on Vercel + Azure ACA with Biome for linting/formatting.

Independent engineering practice focused on custom AI systems, production delivery, and fractional technical leadership.

Selected client engagement: Scalutions

• Role: Serve as fractional CTO and hands-on technical lead, responsible for the architecture and agentic infrastructure behind its managed B2B outbound operation.

• Product: Designed and built OutboundLoop, an agentic SDR operating system for research, qualification, personalized outreach, campaign management, human approvals, measurement, and continuous improvement.

• Scope: Own the full system lifecycle—from business processes and agent behavior to context design, model routing, integrations, evaluation, telemetry, reliability, cost control, and production operations.

• Further development and operation of a central backend service for providing vehicle inventory for international Mercedes-Benz online shops
• Further development of a reservation service for vehicles as part of the checkout process
• Design and implementation of a highly scalable end-to-end test architecture with a focus on maintainability, reusability, and a high number of automated test cases
• Development of a multi-layer test infrastructure with a strict separation of test logic and access layers
• Development of an initialization and caching architecture to significantly speed up local and CI/CD-based test runs
• Development of an AI-supported review architecture for automated evaluation and quality assurance of end-to-end tests
• Development of a dashboard for consolidated display of a vehicle context across multiple backend systems, including AI-generated summaries and compact case analyses
• Integration and further development of connections to various reservation systems via Apache Kafka and REST
• Design of new microservices and support with architecture decisions
• Risk analysis and design of microservice migrations
• Technologies: Java, Spring, Spring Boot, Gradle, Maven, Apache Kafka, REST, OpenAPI, Swagger, Github, Confluence, CI/CD, Microservices, AI, LLMs

Manufacturing intelligence platform with enterprise workflows, RAG, real-time AI assistant features, and multi-repository backend architecture.

• Built and extended production AI/backend services with Django, DRF, FastAPI, GraphQL, Celery, PostgreSQL, MySQL, Redis, and WebSockets across a modular multi-repository platform.
• Contributed to ARIS V2, a real-time manufacturing AI assistant using LangChain, LangGraph, MCP tool orchestration, planning/execution flows, OpenAI, AWS Bedrock, Qdrant, and Elasticsearch/OpenSearch-backed retrieval.
• Supported rollout expansion from ARIS V1 in 4 of 17 client production plants to ARIS V2 currently active in 13 of 17 plants, increasing real-world deployment coverage to more than 50% of the client footprint.
• Worked on document-grounded RAG functionality including ingestion, OCR, chunking, embeddings, indexing, retrieval, reranking, and grounded answer generation for industrial workflows.

Stack: Python, Django, DRF, FastAPI, LangChain, LangGraph, GraphQL, Celery, WebSockets, OpenAI, AWS Bedrock, Qdrant, Elasticsearch/OpenSearch, PostgreSQL, MySQL, Redis, Docker.

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Provided technical leadership for a 4-engineer team delivering 3 major client platforms in 12 months with microservices architecture and scalability solutions — 100% of scoped majors shipped ahead of schedule vs. planned milestones (baseline: prior releases often slipped 1–2 sprints).
• Ran AI model evaluation and model outputs evaluation on LLM/AI vendor APIs: safety, completeness, instruction adherence, and groundedness review before go-live; cut escaped bad outputs in AI-integrated release checklists from recurring UAT findings to near-zero on final promote.
• Drove API development and performance optimization for payment, exchange, and AI services; fail-closed error handling and payload validation reduced integration rework cycles by ~35% vs. the first AI integration pass.
• Applied software testing, testing frameworks, code quality assurance, and code refactoring with continuous integration gates; first-pass PR acceptance improved across the team and production hotfixes on AI adapters dropped noticeably after review standards landed.
• Owned DevOps practices: Docker, GitHub Actions, Jenkins-compatible pipelines, and version control workflows — cut deployment time ~50% vs. pre-automation baseline and stabilized releases across 3 client environments.
• Implemented verifier/oracle-style pass-fail checks in container sandboxes (Harbor/Terminal-Bench aligned); wrote technical documentation so failures cleared in one review cycle.
• Led cross-functional collaboration with product and client stakeholders; translated AI evaluation scores and risk findings into plain-language briefs for non-technical partners, unblocking go/no-go decisions without extra engineering meetings.
• Used agile methodologies for sprint planning and backlog ownership; mentored engineers so mid-level contributors owned AI adapter modules independently by mid-engagement.

• Building an AI & Data Consultancy Practice with the goal of helping European companies adopt Artificial Intelligence and modern data platforms
• End-to-end further development of a production system using modified coding agents (OpenCode). Tech stack: Kubernetes, Argo, Keycloak, Typescript, Grafana, GitOps, DevOps, Playwright
• Internal research project on the use of coding agents in the field of mathematical logic for creating formal models. Use of Cursor IDE and Codex, Codex CLI. Architecture design, quality control and refactoring, as well as writing code and tests. Repository (open source) available pre-launch
• Research on the role of mathematical logic as a formal language that connects IT and AI with business processes
• Project lead for collecting and deploying parking recommendations for rail vehicles with significant savings potential based on real-time data in a mobility and transport company
• Project lead for collecting and distributing process measurement points for real-time control in a mobility and transport company
• Deputy application owner for an app used for communication in the dispatching and provision of rail vehicles