Computer-Aided Design Experts

• Team leadership: Prioritization and coordination of four cross-functional teams.
• Platform strategy: Development and implementation of strategies to optimize existing IT platforms.
• Stakeholder management: Active management of expectations and communication with internal and external stakeholders.
• Program and innovation management: Prioritization and coordination of cross-department projects as well as innovation initiatives.
• Product Owner consulting: Advising Product Owners with a focus on product development and continuous product improvement.
• Organizational development: Improving communication and decision-making structures across all organizational levels.
• Change management: Implementing best-practice change management methods to ensure continuous optimization and innovation.
• Quality assurance: Ensuring high quality standards in processes, services, and deliverables.

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• Entrepreneur: Development of concept and 3D-print optimized design for a trigger point massage device "TriggaBuddy", German utility model certificate
• Consulting services in the fields of business analysis, transformation, innovative business and work structures, business development
• Reference projects as Business Analyst:
• E.ON – Introduction of a new product management IT system
• E.ON – End-to-end process management for product introduction (idea-to-market, in an agile environment)
• korero GmbH – Creation of a non-functional requirements specification
• Findos – Market analysis for investor acquisition
• Co.met GmbH – Business model, organizational structure, processes
• Transformation toward sustainability based on BMW experience
• Introduction and optimization of agile ways of working at E.ON and Co.met GmbH
• Business development: Head of Finance at Olao Health in the field of workplace health management; project lead for Stromnetz Hamburg "product for third-party customer business"
• Trainer for introductory JIRA/Confluence training (E.ON) and "Introduction to Purchasing" (BMW)

Built Python-based AI microservices and integrations for an AEC/VR Unity-based SaaS app, focusing on LLM/VLM capabilities, retrieval-backed systems, RESTful APIs, containerized deployment, and an automation microservice for the CAD-to-Unity pipeline.

• Developed a custom Hybrid A* based algorithm in C# to simulate hospital scenarios and detect early-stage design conflicts from collision/spatial data and generate structured reports.
• Solved and automated the time-consuming problem of converting CAD files to usable Unity environments with a custom-engineered and real-time pipeline using a ZeroMQ-based communication layer to distribute workloads across multiple processes and achieve real-time performance.
• Built a Dockerized FastAPI pipeline for CAD-to-Unity automation, combining vision-based object matching, image embeddings, and precomputed metadata to automatically map CAD objects to Unity behavior scripts, assign properties, and reduce repeated AI inference calls.
• Created documentation and examples to help technical users understand, configure, and extend the AI automation pipeline.

In this project, I was responsible for the design and implementation of a new, modular, and highly scalable test bench platform for an automotive supplier. My focus was on developing a robust system architecture and programming the associated software, with consistent use of UML modeling throughout. This structured approach made it possible to greatly increase the reusability of individual LabVIEW test modules and to significantly reduce development time for follow-up projects. I also integrated modern automotive standards such as CAN FD, LIN, and safety requirements, which made the solution future-proof.

Technologies: LabVIEW, Visio, UML, CAN FD, LIN, DMM, Safety, image processing, project management, HMI, C#, C++, Python, Rust, CI

• Optimization of business results and expansion of sales activities
• Responsible for personnel organization
• Introduction of a document management system (DMS)
• Introduction and optimization of the ERP, CMS and CRM landscape
• Introduction of digital signatures
• Increase in revenue, reduction in costs and increase in EBIT

• Engineered and validated a full-vehicle thermal management system in MiL simulation, achieving 95% correlation accuracy against real-world vehicle measurements, directly supporting virtual calibration and reducing dependency on physical test benches.
• Led end-to-end Model-in-the-Loop (MiL) simulation development using AVL CruiseM and MATLAB/Simulink, covering system architecture, parameterization, and validation.
• Acquired and analyzed vehicle sensor measurements (temperature, volumetric flow rate) using dSpace MicroAutoBox (HiL) and IPEmotion, translating raw data into actionable calibration insights.
• Calibrated and optimized critical actuators and thermal components - pumps, valves, electric heaters, heat exchangers, and refrigerant circuits and identified/integrated previously missing physical behaviors to close the gap between simulated and real vehicle performance.
• Designed and tuned an integrated actuator controller with precisely calibrated parameters, producing a high-accuracy virtual model adopted for downstream development use.

Project Manager Management, coordination and monitoring, as well as documentation and evaluation, of numerous multidisciplinary projects in the field of "production plants/plant engineering", in the gas and oil, chemical, and pharmaceutical industries QMB and Safety Officer Involved in the introduction of the quality management system and in the preparation and execution of the certification audit "energy, safety, and QM audit".

• Acquisition activities
• Reporting

UEF 3.0 · Semantic Government Overlay (SGO) · Autonomous Systems (UAS / dual use)

• Designed: Semantic Government Overlay (SGO) – AI-guided administration without replacing existing specialist procedures. Read-only semantic layer over registers and specialist processes based on the Federal Information Management (FIM). Decision authority remains with the case worker (architecture principle).
• Developed: Reference architecture with source-backed, derived statements (Executable Ontologies OWL/RDF/SHACL). Technically guaranteed purpose limitation and no-write-path principle in specialist data – auditable, without a central data pool.
• Anchored: Regulation as a design principle: EU AI Act (high-risk obligations for public-sector AI, fundamental rights impact assessment under Art. 27), GDPR, NIS2, and administrative automation limits (§ 35a VwVfG, § 31a SGB X) as technical control points in the architecture.
• Created: Methodical tool for pilot organizations: data pipeline assessment (phase 0), compliance blueprint, and management summary as a decision-ready package for public administration.
• Specified: UEF 3.0 as a successor architecture to TOGAF – decision paper, canonical ontology, six-layer architecture, read/actuate boundary, federation registry, terminology concordance, and release delta as a closed specification status.
• Architected: AI-native mission OS for autonomous UAS and ground robotics as a tactical layer on top of a separately approved autopilot. Run-time assurance according to ASTM F3269-21 (Simplex pattern): the verified safety controller keeps authority, the AI function provides suggestions.
• Designed: Three-tier architecture – Tier 0 autopilot with 650 Hz flight control on RTOS, Tier 1 AI OS with semantic world model and multi-agent cluster, Tier 2 swarm and ground mesh. Zenoh as the primary fabric, MAVLink as the only authenticated command path (single writer). Result: graceful degradation – loss of the mission, not of the aircraft.
• Secured: Two-gate chain on the read/actuate boundary – governance gate (can-question: AI Act risk class per actuation, enforced human oversight under Art. 14, immutable log) before the RTA safety monitor (is-it-correct question: flight envelope, geofence, energy reserve) with revert to the baseline controller.
• Anchored: Dual-use architecture with common core and build-time fork instead of runtime switch. Three separate legal levels: civil variant – UAS under the EASA Basic Regulation (EU) 2018/1139 with the limited applicability under Art. 2(2) of the AI Act, ground robotics under the Machinery Regulation 2023/1230 with the full high-risk obligation chain, Cyber Resilience Act for both; unarmed carrier variant as defense material under AWG/AWV and Dual-Use Regulation 2021/821 (BAFA approval); armed variant under KrWaffKontrG. Each variant lives under exactly one dominant legal regime. Evidence base: AI BOM, SBOM, and complete data lineage.
• Analyzed: System analysis and realignment of grown engineering system landscapes. Approach concept for consolidation without migration – semantic layer over the existing sources instead of data transfer. Result: decision-ready implementation concept including an evaluation model for the target architecture.

• Replacement and renewal of the existing client PCs with an upgrade to Windows 11 and mobile workstations with laptops and docking stations
• Introduction of Office365 with OneDrive use
• Introduction of e-invoicing with DATEV accounting software
• Revision of the standard office applications in daily use
• File storage in SharePoint instead of local data storage
• New authorization structure for users
• Use of Microsoft accounts to synchronize profiles
• Reorganization of the document scanning process with storage in SharePoint
• New backup concept in addition to the Microsoft cloud solution
• Introduction of new data structures: review and separation of data into active, inactive, private, business
• Simplification of processes
• Increased data security and improved security
• Permanent data availability at all internal and external workplaces

• Managing the operational back office
• Handling quotations and invoicing
• Supporting preparatory accounting
• Coordinating appointments and operational alignments
• Interface management between management, clients, and external partners
• Structuring administrative processes in day-to-day business

By taking over operational back office tasks, management is noticeably relieved. Administrative processes run in a more structured, reliable, and efficient way, creating more time for clients, projects, and entrepreneurial decisions.

• Development and validation of control concepts for grid stabilization with MATLAB/Simulink.
• Modeling of converters (VISMA), grids, and loads to study frequency and phase behavior during load steps.
• Analysis of the influence of inertia, damping, and controller parameters on stability, power output, and ROCOF.
• Development of adaptive control strategies to improve synchronization and dynamic grid support.
• Creation of automated simulation and evaluation tools to assess different scenarios and parameters.

Predapp is a Sovereign AI and Infrastructure company building AI systems that organisations can own, control, and deploy on their terms, with full data sovereignty. As CTO and investor since 2015, leading the development of the Sovereign AI Platform alongside an advisory practice spanning AI strategy for enterprises, fractional CTO engagements, and technical due diligence for VCs, PE, and family offices.

• Architected the Sovereign AI Platform from zero owning technical vision, infrastructure design, and engineering roadmap; currently deployed at a European hospital, an automotive client in Germany, and two US startups, with active commercial discussions with two leading European hosting providers
• Dubai Health Authority (DHA / Nabidh): Designed and trained AI symptom checker and triage system for national 'Doctor for Every Citizen' initiative under HH Sheikh Mohammed bin Rashid Al Maktoum
• Emirates Airlines: Designed and deployed AI agent for ground personnel accelerating training, improving issue handling, and reducing cost of liquid workforce
• Developed explainable AI triage system piloted at University Hospital Heidelberg and Famagusta Hospital (Cyprus); reduced patient wait times by up to 15% (validation ongoing)
• Built production scheduling engine for US industrial AI startup: RL + Monte Carlo tree search, reducing planning from hours to seconds
• Designed and led the development of semantic search engines using RAG + Knowledge Graphs; developed Agentic Text-to-SQL solution for citizen data scientists
• AI strategy advisory and readiness assessments for enterprise clients, including architecture reviews, maturity assessments, and AI roadmap development