CI/CD Experts in Germany

I designed and built a self-service AWS platform for Data Science teams with little or no infrastructure-as-code experience. A team writes about 10 lines of Python and gets a deployable stack with full SDLC release cycle that already follows the governance rules. Networking, encryption, IAM and tagging are decided by the platform, not by each team.

New teams or AWS accounts are onboarded with one pull request. Waste prevention and cost control is built into the defaults: Data scientists don't need infrastructure skills.

• Construct library (AWS CDK, Python). Built a versioned catalog of about 20 hardened constructs for being used in data-science projects with ML context
• Governance as code
• Multi-account, multi-tenant
• Golden-path scaffolding
• CI/CD and supply chain. Built reusable GitHub Actions workflows
• Release engineering
• QA with e2e, contract testing and unit test coverage with each release candidate

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

AI Readiness - Part 3: Creating an e-book on the use of AI in software testing

• Designed and created an e-book on the sensible and safe use of AI in software testing from the perspective of an experienced test expert.
• Used generative AI (ChatGPT, Perplexity Pro) as a sparring partner for structuring, wording suggestions and creating variations, with all content finally reviewed and approved using my own expertise.
• Developed practical insights into the opportunities and risks of AI in testing, with a special focus on collaboration between testers and AI instead of “tester vs. AI”.
• Title: “11 starke Gründe: Dream-Team statt Rivalen - Tester und KI sind gemeinsam unschlagbar”
• Subtitle: “Wie Mensch und Maschine im Softwaretest das perfekte Team bilden – und warum reines KI-Testing riskant ist.”
• Planned use of the e-book as a basis for workshops, customer meetings or internal training.
• Technology: Generative AI, ChatGPT, Perplexity Pro, Microsoft Word, Adobe Acrobat, many years of hands-on professional testing experience, common sense.

Led the end-to-end integration and migration architecture for decommissioning SAP IS-U market communication and transitioning to Salesforce Marketing Cloud (SFMC) with E.ON IT Services — covering regulated EDIFACT market messaging, a three-phase data migration (transfer of market message inventory after cutover), redesign of market communication processes, and full GDPR and German energy-market compliance.

• Designed the three-tier target architecture (SAP IS-U → NScale B2B gateway → SFMC) processing 50,000–100,000 EDIFACT messages daily within sub-5-minute SLAs.
• Architected the three-phase data migration: 36 months of historical data, zero-loss cutover of in-flight market messages, and near-real-time CDC synchronization.
• Delivered secure, BDEW/GDPR-compliant integration (AS2/OFTP2, RFC/IDoc, REST APIs, OAuth 2.0, Azure AD, AWS S3) achieving >99.5% uptime, <0.1% migration discrepancy, and RTO <4 hours.
• Applied BPMN to model and optimize the market communication processes.

Technologies: SAP IS-U, NScale, Salesforce Marketing Cloud, EDIFACT, OAuth 2.0, Azure AD, AWS S3, BPMN, Jira, Confluence, Draw.io

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

TOURISM

colle-il-diaccino.de · Holiday Accommodation

• Designed and developed the website: interactive site map, accommodation comparison, and image galleries.
• Implemented German, English, and Italian language versions. Set up inquiry forms with input validation and spam protection, language-specific SEO metadata, and automated tests.

Stack: Next.js, React, TypeScript, Tailwind, next-intl, React Hook Form, Zod, Resend, Playwright, Vitest

• Create and lead roadmap forecasting of support opportunities, including colleague training, process design and improvement, and new hire onboarding.
• Collaborate seamlessly with cross-functional teams including Professional Services, Support, Product, Sales, and Solution Engineering.
• Manage business and financial KPIs in alignment with overall business objectives.
• Industrial IT & Data Integration: Implement, configure, and integrate OT/IT systems and data flows, connecting control-layer sources (DCS, PLC, SCADA) to historians, data platforms, and enterprise systems through APIs and standard interfaces.
• AVEVA PI & Historian: Configure, maintain, and extend AVEVA PI (PI Data Archive, Asset Framework, interfaces/connectors) to capture, contextualize, and serve real-time and historical operational data.
• Alarm Management: Support and optimize alarm management systems – e.g. Honeywell Alarm Management – including alarm rationalization, classification, and the analysis of alarm performance, critical alarms, and alarm floods.
• Connectivity & Protocols: Set up and troubleshoot industrial connectivity using OPC UA and OPC A&E, including the configuration of tunnelers / wrappers to bridge OT data sources securely and reliably.
• Production Data Flow: Ensure seamless, secure, and well-structured data flow across the industrial IT landscape, transforming raw operational data into meaningful information for operations and decision-making.
• System Support & Troubleshooting: Provide ongoing support for OT/IT applications, troubleshooting issues across networks, software, and data integrations to keep systems running efficiently.
• Knowledge Management & Best Practices: Contribute to internal documentation, best practices, and troubleshooting guides, and help continuously improve how we deliver industrial IT and data solutions.

Tools & Software: Aveva PI, Salesforce, Active Directory, Microsoft Dynamics 365, Jira, Microsoft, Scrum, DevOps, Docker, CI/CD, Jenkins, GitHub.

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

Product:

• Built a production-ready AI platform for generating brand-aware marketing images and videos from product data, user requirements, and uploaded media.
• Own the platform architecture, technical roadmap, API design, security, deployment workflow, operational reliability, and model-provider strategy.
• Developed the core platform in .NET and built supporting AI and workflow prototypes in Python, applying language-independent API contracts and structured interfaces between services and model providers.
• Implemented reliable background processing with RabbitMQ, persisted workflow state, idempotent handling, retries, failure recovery, logging, secure storage, authorization, and credit accounting.
• Made pragmatic build-versus-buy and model-routing decisions based on reliability, latency, cost, and maintainability rather than novelty.

Agent Orchestration & RAG Systems

• Built and compared agent workflows using Microsoft Agent Framework, LangGraph, and LangChain, including tool use, conditional routing, clarification steps, state management, and hand-offs between agents.
• Implemented reusable .NET components for agents, prompts, tools, model providers, structured responses, and retrieval with pyvector, making it easier to change AI providers without rewriting the core workflow.

• Optimized the data architecture (Medallion) to better decouple processing steps and improve transparency and reproducibility

• Ensured the technical quality of data processing in Databricks by introducing schema enforcement, data quality checks, and a structured data architecture

• Pipeline orchestration with Azure Data Factory

• Improved and automated the development and deployment process by integrating Git and GitHub Actions

• Technical leadership of the Data Engineering team (3 employees)

• Led workshops to optimize and stabilize the data platform and development process

• Collected and prioritized new requests and maintained the product backlog

• Technologies: Microsoft Azure (Data Lake, Data Factory), Databricks, Apache Spark (PySpark), Python, SQL, Git, Confluence, Power BI, Power Apps, Dataverse, MS Sharepoint, Mural

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Analysis of existing microservice structures and integration into the event-driven architecture
• Design and implementation of prototypes
• Introduction of structured workflows and integration into a solid testing strategy
• Team: Small specialized team (3-5 people) from analysis through implementation readiness
• Documentation of architectural decisions and definition of interfaces
• Integration of the event-driven pipeline into the existing landscape
• Technologies: Kafka, Docker, Microservices, Event-Driven Architecture, Java, Liquibase

SAP Data Migration Greenfield QM

In the QM module project, the focus was on migrating inspection plans and transferring Dynpro applications from the ECC system to the HANA system while adhering to development guidelines and clean code principles. The project involved the use of technologies and concepts such as ABAP Objects (ABAP OO), Clean Code practices, SMOD/CMOD enhancements, User Exits, Function Exits, BAdIs, interfaces, and classes. Writing complex reports for download and upload of change pointer information of inspection plan header.

• Architected an enterprise Fabric-based data-product governance framework, authoring data contracts and schema-validation KPIs to enforce completeness, freshness and SLA standards across reporting data products.
• Operationalized pipeline observability by integrating Dagster orchestration data into automated data-health reporting, proactively validating data integrity and pipeline reliability before production reporting layers refresh.
• Established BI-as-Code and end-to-end governance through Git-based version control, CI/CD and Alpha→GA release management, strengthening lineage, schema-drift detection and production change traceability.