CI/CD Experts

I designed and built a self-service AWS platform for Data Science teams with little or no infrastructure-as-code experience. A team writes about 10 lines of Python and gets a deployable stack with full SDLC release cycle that already follows the governance rules. Networking, encryption, IAM and tagging are decided by the platform, not by each team.

New teams or AWS accounts are onboarded with one pull request. Waste prevention and cost control is built into the defaults: Data scientists don't need infrastructure skills.

• Construct library (AWS CDK, Python). Built a versioned catalog of about 20 hardened constructs for being used in data-science projects with ML context
• Governance as code
• Multi-account, multi-tenant
• Golden-path scaffolding
• CI/CD and supply chain. Built reusable GitHub Actions workflows
• Release engineering
• QA with e2e, contract testing and unit test coverage with each release candidate

Agile Transformation: introducing agile principles and transforming traditional IT departments into Scrum and Kanban teams

IT Operating Model: redesigning the IT organization and introducing modern delivery structures and roles

Flight Levels: building up Flight Levels practices within IT to align strategy, coordination and operational execution

Leadership & Coaching: recruiting Agile Coaches and coaching Scrum Masters and IT leaders

ERP Operations: acting as Interim Product Owner for the existing ERP landscape and ensuring business continuity

ERP Transformation: reorganizing and supporting the ERP migration as a Project Manager; Phase 1 (financial accounting) live since October 2025

Operational Core (ERP): establishing dedicated teams for ERP Support, Feature Development, and ERP Migration

Modern Workplace: initiating the transition towards a Microsoft 365-based cloud workplace environment

Integration: establishing a dedicated team to drive integration and connectivity initiatives

Warehouse Operations: building a cross-functional team to support logistics and warehouse-related capabilities

Maintenance & Operations (M&O): introducing a dedicated team for system engineering, security, stable operations and continuous improvement

AI Initiatives: identifying and promoting practical Artificial Intelligence use cases across the IT department

As Interim Head of IT for a German medium-sized industrial distributor, I am responsible for 31 IT employees and lead the digital and organizational transformation, reporting directly to executive leadership. I took over an IT department with almost no basic structures – no clear roles, processes, documentation or ticket system – and with significant technical debt that tied up most of its capacity. Introduced agile principles and ways of working in the IT organization and transformed the traditionally structured IT department into cross-functional Scrum and Kanban teams focused on transparency, collaboration, and customer value delivery.

Redesigned the entire IT organization by establishing a modern operating model, introducing new roles such as Product Owner, Scrum Master and Solution Architect and strengthening the organization through strategic hiring and targeted capability development. Recruited and onboarded Agile Coaches to accelerate the transformation and personally managed and coached Scrum Masters as well as IT department leaders to foster servant leadership, self-management and a culture of continuous improvement.

Aligned IT-internal planning across eight teams to three Flight Levels based on Klaus Leopold (strategy, coordination, team), laying the foundation for later company-wide portfolio management. Consolidated the backlog of more than 10 workstreams and prioritized it by business value and cost of delay. Introduced a ticketing system to increase transparency and enable data-driven decision-making, flow-based work management, and greater accountability at all levels.

Established and supported multiple cross-functional teams, including the Operational Core (ERP) domain with dedicated streams for Support, Feature Development and ERP Migration, as well as teams responsible for Warehouse Operations, Maintenance & Operations (M&O) including system engineering and security, Modern Workplace, Data Quality and integration initiatives. Worked closely with Agile Coaches to support team development, remove impediments, and continuously improve delivery effectiveness.

Acted as Interim Product Owner for the operation and enhancement of the existing ERP landscape while supporting the ERP migration as a Project Manager. Reorganized the project organization and had the already negotiated contract with the implementation partner realigned with a focus on approach and overall responsibility; Phase 1 (financial accounting) has been live since October 2025. Collaborated with the selected implementation partner to design and establish the project organization and target operating model for the ERP transformation, introducing agile delivery structures and ways of working. Facilitated the alignment between business, IT and the external vendor and played a key role in negotiating the contractual framework and delivery model to ensure a sustainable foundation for the transformation program.

Initiated the strategic modernization of the workplace environment through the adoption of Microsoft 365 cloud capabilities, establishing the foundation for enhanced collaboration, scalability and future digital services.

Launched AI initiatives to identify practical business use cases and promote the responsible adoption of Artificial Intelligence across the IT department. Encouraged self-management and empowered teams to take ownership of decisions, delivery and continuous improvement.

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Analysis of existing microservice structures and integration into the event-driven architecture
• Design and implementation of prototypes
• Introduction of structured workflows and integration into a solid testing strategy
• Team: Small specialized team (3-5 people) from analysis through implementation readiness
• Documentation of architectural decisions and definition of interfaces
• Integration of the event-driven pipeline into the existing landscape
• Technologies: Kafka, Docker, Microservices, Event-Driven Architecture, Java, Liquibase

• Functional requirements management for DIVID, the Umweltbundesamt platform for administering the single-use plastics fund. Focus: entitled parties, sub-entitled parties, and benefit reports.
• Consolidation and analysis of specifications, Jira, Confluence, functional concepts, and UX designs. Independent structuring and delimitation of requirements, as well as identification of contradictions, gaps, and dependencies.
• Creation and quality assurance of implementable user stories with clear, testable acceptance criteria. Preparation of decision alternatives and coordination with business, development, UX, and QA through team refinement.
• Conducting manual and technically assisted accessibility tests. Coordinating findings with QA and the Product Owner for further planning and implementation.
• Result: more consistent requirements, clearly defined processes and stories, and transparent open decisions. Separation of assumptions from confirmed requirements; better basis for implementation, refinements, and QA test cases.

Tools used: Jira, Confluence

• Support for a data, analytics and AI initiative in a regulated enterprise environment by structuring, evaluating and prioritizing several data-driven use cases based on business impact, feasibility, scalability, data maturity and governance requirements.
• Translation of complex business and analytics requirements into clear product, data and implementation logic, as well as preparation of decision-ready documents, target visions and roadmap inputs for stakeholder and management discussions.

• Hands-on development of AI-native product prototypes with specialized AI agents for research, requirements, business logic, UX/flow design, test case generation and quality assurance.
• Structured use and orchestration of AI agents through clearly defined roles, inputs/outputs and handover points; breaking down complex product tasks into verifiable work packages and iterative prototyping cycles.
• Establishment of human-in-the-loop quality gates to validate AI-generated results for functional correctness, consistency, completeness and feasibility; targeted rework cycles in case of deviations.
• Development of a regulatory GenAI/rules prototype for CRD VI with a structured decision flow, web UI, rule-based validation and automated test cases; iteration of the business logic through to a pilot-ready POC.
• Design of an AI-to-Action banking prototype: AI intent → consent → bank/product logic → conversion including admin console; translating the product idea into MVP scope, role model, user flows and clickable prototypes.

• Claude Code subagents, MCP, Pydantic V2, pytest, bandit

• Designed and shipped 3 specialized agents that hand work down a line: a research agent writes a cited implementation spec, a coding agent builds the modular code and its tests, a review agent ranks findings by severity and applies the fixes. Each handoff is a structured document, so no stage depends on another agent's context window.

• Connected the research agent to an academic-research MCP server (Semantic Scholar, ArXiv, Hugging Face Hub, citation snowballing) so every reference traces to a tool result rather than the model. Gated commits behind ruff, mypy, pytest and bandit, required human sign-off before installs and commits, and persisted session state on disk so long runs survive a context reset.

Design, development, and market launch of digital products and platforms – from strategic alignment and agile implementation to Go-to-Market and Go-Live, integrating AI into processes and products

• Planned and developed a CPU monitoring application for monitoring system performance and resource utilization.
• Designed and implemented a Spring Boot backend providing a REST API for processing and exposing monitoring data.
• Developed the React frontend for presenting monitoring information in a clear and user-friendly interface.
• Integrated PostgreSQL for persistent storage and management of application data.
• Containerized the application and its services using Docker Compose.
• Automated infrastructure provisioning and deployment using Terraform on AWS.
• Structured the application as a modern, maintainable system using REST-based communication between frontend and backend.
• Designed and developed a secure, scalable CPU monitoring architecture (cpu-watcher) with a dedicated collector application that streams monitoring data to the backend, reducing direct exposure of system resources.
• Designed a secure cloud infrastructure with the database isolated within a private network and OIDC-based authentication.
• Implemented Infrastructure as Code with Terraform and integrated version-controlled CI/CD pipelines to automate testing, infrastructure changes, and application deployments.
• Designed and implemented the frontend delivery architecture using AWS CloudFront.

Stack: Spring Boot · React · PostgreSQL · REST API · Docker Compose · Terraform · AWS

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Reporting and controlling using Power BI for a production ERP system

• Analysis of ERP data and interfaces for use in Power BI dashboards
• Evaluation and migration of existing reports (e.g. Excel) to Power BI
• Development of an authorization concept for selective data access
• Documentation and training on the use and customization of Power BI dashboards

Label: Power BI, Excel, SelectLine ERP, Microsoft SQL, SQL Server Management Studio

AI-supported document processing and inventory management integration

Design and development of an AI-supported application for the automated processing of delivery and invoice documents, connected to SelectLine ERP. Documents are analyzed using AI, matched with orders and line items, and prepared for posting goods receipts.

IMPACT:

• Automated extraction of structured order, delivery and invoice data from PDF and image documents
• Automatic and manual mapping of documents to orders and order line items
• Integration with SelectLine ERP for order import, status synchronization and goods receipt postings
• Traceable processing through separate analysis, mapping and posting processes as well as technical logging
• Development of a containerized end-to-end architecture with AI analysis, workflow automation and relational data storage

KEYWORDS: AI, document analysis, OpenAI, n8n, SelectLine ERP, FastAPI, Python, JavaScript, MariaDB, Docker, REST API, PDF, OCR, mapping, inventory management, goods receipt, workflow automation

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.