CI/CD Experts in Switzerland

The insurance application service provider in Switzerland intended to develop a multi-channel output system to support their customers on their digital enhancement journey.

• Established an Agile Release Train based on SAFe 6.0
• Trained all ART leadership
• Coached the development of the solution intent
• Established 5 teams in the ART. Developed the Epic and Feature Backlog for the team.
• Planned and coached 2 PI planning sessions

The insurance application service provider in Switzerland intended to transform their claims management BPO and IT team into an agile delivery organization.

• Established an Agile Release Train based on SAFe 6.0
• Trained all ART leadership
• Coached the development of the solution intent
• Established 2 teams in an ART.
• Developed the Epic and Feature Backlog for the team.
• Planned and coached 2 PI planning sessions

• Since August 2025 I'm working on the Conversational AI team. We are developing an internal platform for the future of Conversational Ecommerce, powering other teams to use the Agents in their user experience. I'm deeply focused on the architecture of this project, with a particular focus on the monitoring and live evaluation of the agents.
• Played a pivotal role in business-critical operations, including Adyen client upgrades, multi-account configuration for app releases, domain migration support, and implementing a crucial BFCM hotfix to resolve a 10-minute update query (on the checkout workflow) that was blocking sales.
• Served as a key member of the On-Call rotation for over a year, leading >15 incidents, contributing to system stability, and enhancing distributed tracing via New Relic integration, deepening system-wide understanding and operational excellence.
• Conceived and delivered an MVP for a "Low Stock in Key Variants" (LSKV) index within two weeks as part of the Conversion Rate Taskforce, using statistical analysis of size curves to identify OOS products; this initiative led to a (0.9%) CVR improvement post-handover.
• Led major performance and stability initiatives, including a Ruby upgrade (YJIT, Jmalloc) that slashed average response times from 220ms to <100ms, and initiated an "Order Table Cleanup" project to manage 10M+ order records, ensuring SOX compliance and database health.
• Architected and delivered a scalable CloudFlare Worker solution for critical Apple Pay domain validation, mitigating operational risks and establishing a best-practice, automated workflow that was subsequently leveraged by multiple teams, demonstrating cross-functional impact
• Drove substantial evolution of the core e-commerce backend through consistent, high-impact contributions (130+ merged PRs), spanning critical feature delivery, complex system optimizations, and enhancing platform stability."

• Verified baseline compliance against MAS audit findings
• Developed technical architecture concepts for 30 technologies to create hardening standard artifacts
• Identified and developed automation opportunities for given technologies based on CIS
• Developed standard baseline configurations based on internal security standards
• Responsible for developing Cloud Native Application Protection Platform (CNAPP) architecture artifacts based on the Azure cloud platform
• Responsible for RFQs and RFPs for different CNAPP solutions (Qualys Total Cloud, CrowdStrike, Azure Security Center)
• Supported compliance verification and validation through automated scripts for a sample population of IT devices and instances
• Responsible for the full vulnerability management lifecycle using Nexpose, including remediation, reporting, and integrating results with Splunk, HPSM, and Tableau
• Supported MAS audits

• Led architecture and end-to-end engineering delivery for community-driven SaaS platforms serving 2M+ monthly active users.
• Architected and led the migration of a monolithic Python/FastAPI and PostgreSQL database and LangChain with codebase to an event-driven microservices architecture on AWS EKS, sustaining 10x traffic growth from ~150 RPS to 1,500+ RPS with zero re-architecture cycles.
• Defined and enforced engineering standards across services including API contracts, observability baselines, and deployment topology, reducing production incidents by 55% and MTTR from 2 hours to under 25 minutes within 9 months.
• Redesigned the caching and query layer using multi-tier Redis caching and database indexing/partitioning, cutting p95 API latency from 850ms to 180ms (78% reduction) and database CPU load by 45%.
• Built CI/CD platform on GitHub Actions, Terraform, and Kubernetes (EKS) with blue-green and canary rollouts, increasing deployment frequency from ~2/month to 8-12/day and reducing lead time from 10 days to under 6 hours.
• Implemented contract testing, automated load testing, and observability SLOs using Prometheus, Grafana, and OpenTelemetry, raising platform availability from 99.5% to 99.95% (10x reduction in error budget burn).
• Led and grew a cross-functional team of 8 engineers across backend, frontend, and DevOps, scaling headcount from 4 to 8 with 85% retention; owned hiring, onboarding, performance reviews, and career development.
• Partnered with Product, Design, and Client Success leadership as primary technical decision-maker; translated business goals into technical roadmaps and drove build-vs-buy decisions on authentication, search, and AI tooling.
• Introduced AI-assisted development workflows including automated code review and a RAG-based internal knowledge assistant using Graph (GraphRAG, Neo4J), increasing sprint throughput by 30% across two quarters.
• Owned incident command and production support rotation; established runbooks, postmortem culture, and on-call SLOs, reducing weekend paging incidents by 70%.
• Developed and optimized Algorithms using python libraries like Numpy and Pandas.

• Interface role with the SOC team; improved incident response time by 45% through structured escalation processes and proactive security monitoring.
• Defined technical standards for a multi-tenant enterprise platform (10+ services), resulting in a 30% shorter onboarding time for new clients in the public sector.
• Active knowledge transfer and mentoring of a 6-person team; increased team autonomy and established a sustainable engineering culture.
• Reduced time to market by 50% by optimizing CI/CD pipelines and establishing self-service deployments.
• Stack: GitLab CI/CD, Kubernetes, Nexus, Harbor, ArgoCD, HashiCorp Vault, Grafana, Python, PostgreSQL, Java, Spring Boot, Flyway, Quarkus, JBoss, Loki, Go, Kafka, Kustomize, MongoDB

Responsible for designing and delivering a company-wide, comprehensive Infrastructure-as-Code (IaC) transformation in a regulated banking environment.

• Conducted an assessment of the current infrastructure, processes, tools, teams, ways of working and skill profiles as a basis for the target architecture and a PDO (Product-Driven Organization)

• Defined a tailored, audit-ready Everything-as-Code infrastructure (including governance, security and compliance)

• Built a comprehensive IaC operating model, integrating and transforming internal teams

• Designed standardised, reusable Terraform modules for infrastructure and platform services

• Integrated secrets management, PKI and Encryption-as-a-Service to secure critical VMware and Kubernetes platform components and stored data

• Implemented the platform in line with regulatory requirements (DORA, BaFin, ACPR, CRA), with a focus on auditability and traceability

The initiative provides the foundation for standardised, automated and audit-ready infrastructure, reduces manual intervention and enables scalable, traceable delivery of IT resources in a banking environment.

• Created the MetX Assistant and was its primary driver from concept through production with real users; designed and oversaw telemetry and presented the system in demos.
• Built React, TypeScript and Python features for MetX, a scientific weather visualization platform; integrated internal data APIs and improved caching, request handling and rendering workflows.
• Contributed to company MCP tooling and led AI workshops and internal automation initiatives, including experiments connecting AI agents with Slack, Jira and Git.
• Acted as the team's Observability and DevOps subject matter expert, supporting service reliability, deployment workflows, monitoring and troubleshooting.
• Participated in Security, Observability and AI Communities of Practice.

• Main cloud solution architect on a banking SaaS offering hosted in Azure.
• Fully automated the Azure infrastructure in Terraform.
• Reduced cloud costs by 50%.
• Responded to incidents, found root-causes and closed with post-mortems.

• Highest level achieved: Certified Mid-Level Angular Developer
• 13 technologies newly learned or refreshed with (re-)certifications
• Current: Docker, Azure, Quarkus

Technologies: Confluence, PlantUML, BPMN

• As part of the modernization of ING DiBa, the master data management system is also being renewed. As the Domain Architect for this topic, I had to find a way to combine global solution approaches from the headquarters in Amsterdam with local requirements from the German branch in Frankfurt.

• Implementation and maintenance of highly critical IAM solutions for B2B clients (SSO, MFA, SAML/OIDC, Entra ID, PIM/PAM)
• Security administration of Linux systems (CentOS, Red Hat) in Docker and Kubernetes environments
• Migration from Docker Swarm to Kubernetes
• Infrastructure automation with Terraform
• Planning and execution of risk assessments, threat modeling, and compliance reports
• Development and management of B2B applications (Java, REST/SOAP, Angular) and CI/CD pipelines (Python, Ansible, Jenkins, GitLab)
• Leading integration tests and UAT (Cucumber, Selenium, Katalon)
• Implementing monitoring and observability strategies with Grafana, Prometheus, and Splunk
• Integrating SAST tools like Snyk and SonarQube
• Release management and project coordination according to Scrum and SAFe
• Mentoring and technical support of junior team members

• Built and explored applied GenAI, RAG, GraphRAG, local LLM, agentic AI and document-intelligence prototypes for structured analysis, evidence extraction, semantic search, technical reasoning and decision-useful reporting
• Developed private local-LLM workflows and AI system patterns focused on privacy, reproducibility, reviewability, low-cost inference and practical user control
• Built reproducible Python/R workflows for data analysis, automation, API-driven tooling, validation logic, technical documentation and AI-assisted software development
• Designed workflows around explicit assumptions, traceable inputs, reviewable outputs and failure-mode awareness rather than black-box “looks good” demonstrations
• Supported RAHN AG in a chemical/regulatory environment with data extraction and processing around WERCS, a regulatory application for chemical product and compliance data
• Explored complex application/database schemas and wrote nested SQL queries to extract information for mixture calculations, component relationships, regulatory rules and reporting logic
• Continued hands-on development in Git/GitHub/GitLab/Bitbucket, Docker/Linux deployment patterns, REST/API workflows, error handling, technical writing and fast AI-assisted prototyping
• Built technical writing and documentation workflows that turn complex systems into clear runbooks, checklists, decision notes and user-facing explanations

• Scalable platform for children and parents to discover future skills and technologies in a way that suits them
• React web frontend with microservice architecture in the backend (.Net Core, Azure Storage, Azure Entra ID, REST API)

• ZHAW CAS Secure Software Design and Development
• German C1 and Goethe Certificate C1
• ETH CAS Cloud and Mobile Computing at ETH Zurich
• Linux Foundation Linux System Administration LFS307
• Linux Foundation Kubernetes Fundamentals LFS258
• Linux Foundation Kubernetes for Application Developers LFD459
• Linux Foundation Kubernetes Security Fundamentals LFS460