CI/CD Expert in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self hosted solutions
• Development of reusable agentic workflows and mini applications that enable non technical employees to solve business problems independently
• Implementation of internal business applications with Single Sign On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers
• Implementation of nine mini applications with Single Sign On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers
• Techstack: Python, Nextjs, Typescript, Streamlit, Anthropic SDK (Claude), Azure, Linux Ubuntu, PostgreSQL, MS SQL, Angular, Authentik

The Base Services of DB InfraGO form a central data hub between the company’s IT systems. Common Data Services are developed that distribute data from source systems to a variety of downstream systems (via JMS) and make them available (via REST API). The existing service landscape based on TIBCO is being migrated to DB InfraGO’s cloud-native platform.

• Architecture design and implementation for performance-optimized bulk data processing of several million datasets at specific times during the day
• Technical specification and documentation of business requirements
• Integration of various subsystems (including SAP and Salesforce) through the reimplementation of more than 40 microservices based on Spring Boot
• Migration of TIBCO Based microservices from the Enterprise Integration Platform to the Cloud Native Platform using Spring-Boot
• Establishment of a deployment pipeline using GitLab CI/CD, Artifactory, and automated deployment to a Kubernetes environment with the help of ArgoCD
• Definition and implementation of automated unit, integration, and regression tests

Team Size: 9

Technologies/Tools: Java, Spring Boot, ActiveMQ(JMS), JUnit, Tibco Business Works, Gitlab (CI/CD), Kubernetes (Amazon AWS), ArgoCD, postgreSQL, Oracle, Postman, Hoppscotch, openAPI, Sonarqube

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

Participation in the EU-funded MORANE-2 project to validate the Future Railway Mobile Communication System (FRMCS) in real-life use cases: creation of the requirement specifications for TOBA as well as the associated test specifications.

Technologies: 5GS (Radio & Core), FRMCS, MCx (MCPTT, MCData, MCVideo), MC Gateway UE, MCx Priority/Security/QoS Management, ETCS, SIP, IMS

• Development and optimization of the RTL+ frontend application for SmartTV and set-top box platforms with React and Next.js.
• Key role in the technical coordination of developers within the team and in coordinating implementation.
• Central interface to adjacent teams to simplify development processes and improve cross-team alignment.
• Improved frontend performance, stability, and rendering behavior on low-powered devices in a restricted runtime environment.
• Implemented a frontend testing strategy with Jest, React Testing Library, and Playwright.
• Implemented accessibility improvements according to WCAG 2.2 and WAI-ARIA.
• Integrated Didomi Consent Management as a contribution to increasing ad monetization on streaming platforms.
• Used AI-supported engineering workflows with Cursor for structured implementation, refactoring, and faster problem solving.

Technologies used: React, Next.js, TypeScript, JavaScript, GraphQL, Apollo Gateway, Zustand, Tailwind CSS, Styled Components, React Testing Library, Playwright, Jest, HTML5, CSS3, AWS Lambda, EC2, CloudFront, S3, GitLab CI/CD, NX, Cursor

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Conceptual design and implementation of modular AI assistants for sales and business processes in the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP server, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting as well as mentoring in the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

• Agile coach and scrum master in property insurance/underwriting for Allianz Technology
• Team 1: Kanban/Scrumban team in DevOps mode – new features, distributed monolith to microservices, reduction of technical debt & refactoring, implementation of CI/CD, expansion of automated testing
• Team 2: SAFe team – greenfield service for global software and German adaptation, AI integration (Cythora)
• Scrum trainings, scrum manuals in Confluence, all ceremonies, establishment of an experimental just culture, team replacement and scaling from 7 to 20
• Requirements engineering, prioritization via business value for product owners, risk identification
• Project budget management, JIRA monitoring and automation, steering committee support, test strategy
• SAFe integration, PI planning, flight levels and road mapping

• Built an MCP (Model Context Protocol) layer for Mwanachama's agency service, turning domain manager methods into callable AI-agent tools. This included a composite tool that builds a full organization design (org chart, goals, workflows, RACI matrix) from one specification.
• Built the chat-driven agency builder (Wakala Studio and API), where an organization describes its structure in natural language and an AI agent uses those tools to construct and modify the live design.
• Added an insights service so an organization can review AI-agent interactions and completed work. Insights from that review feed back into solution design, gated by architect and user sign-off.
• Alongside this, designed and built the platform itself: ~20 Go microservices on PostgreSQL, Flutter and React clients, deployed on Kubernetes.
• AI agents scan the platform autonomously for security gaps and run scripted tests, covering API (Postman-style) and UI testing. The rest of the work stays supervised. No rogue agents, promise.

Lead project manager for live seminars and hybrid implementation. Creation of the run-of-show, definition of all on-site designs in line with corporate identity, and optimization of the digital setup. On-site show direction.

• Platform established and running stably; deliberately reducing my involvement to refocus on an engineering mandate in the financial sector.
• Built an own SaaS learning platform from the ground up and scaled it to over 20,000 users (over 6,000 courses sold, B2C and B2B); end-to-end ownership from development through infrastructure to operations.
• Built a lab environment that provisions an isolated Linux container per user (Docker, Traefik, Go), including automatic provisioning and a dedicated subdomain per user.
• Integrated LLM features into the product and accelerated development end-to-end with AI-assisted workflows (Claude Code, Codex); CI/CD with automated tests.

Project: SCS (Settlement / Clearing Services)

Settlement platform serving multiple trading and clearing venues — counterparty risk safeguarding, settlement volume reduction, central risk management, and post-trade anonymity.

Technologies: Java 17, Spring Boot 3, Microservices, Spring Data JPA, SonarQube, Fortify (SCST), Mockito, Jenkins, OpenShift, Maven, Podman, GitHub, JIRA, Liquibase, Swagger, AMQP, Apache Camel, Terraform, PostgreSQL, Instana, Graylog.

• Identified and remediated CVEs in third-party libraries using SCA tooling, strengthening the security posture of production components.
• Maintained 90% code coverage with SonarQube, improving code quality and reducing production defects.
• Enabled mTLS for database authentication and message broker connections, enforcing encrypted, certificate-validated communication.
• Designed and deployed microservices with asynchronous, REST-based communication between components.
• Optimized a high-volume REST API (~200K requests) by reducing response time from 3s to 2s (33% improvement), boosting throughput and reliability under production load.
• Automated build and continuous integration pipelines using Maven and Jenkins.
• Orchestrated containerized workloads on Podman/OpenShift and governed schema evolution with Liquibase, ensuring reliable, repeatable deployments across all environments.
• Optimized Java code and implemented EHCache-based caching, improving application performance.
• Streamlined release management by governing application images, JAR versions, and dependencies through DBAG Artifactory, ensuring version consistency and audit traceability across environments