Confluent Experts in Germany

• Taught ML, BI, and Big Data to Master's students.

Tech: Python, Power BI, SQL, ML, SnowflakeDB, databricks, MS Fabric, MongoDB, LLM

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• Overall responsibility for platform transformation across ERP, CRM, PIM and AI-supported process automation
• ERP transformation: Introduction and migration to Microsoft Dynamics 365 Business Central
• CRM & Growth Stack: Implementation of HubSpot as the central CRM and platform for lead and marketing automation
• Product data & Commerce Enablement: Introduction of an ePIM to scale Category Management and digital Commerce processes
• AI-supported process automation: Design and introduction of agent-based AI workflows to automate processes in Business Services, Accounting, Tender Management and Marketing
• Building a scalable platform organization consisting of Product Development, DevOps, UX, Cloud Engineering and Corporate IT
• Introduction of modern product and portfolio governance (e.g. OKRs, portfolio boards, value-based roadmaps) to manage technology-driven initiatives
• Harmonization of heterogeneous system landscapes and transformation into a modular, scalable platform architecture (ERP, CRM, PIM, integrated customer journeys)
• Coaching and development of Product Owners, Tech Leads, Delivery Managers and UX teams in building a scalable product organization

• Implementing and extending an Electron app based on TypeScript, React and Node.js to display stream content and technical data
• Extending a Kotlin backend for message processing via Kafka
• Extending various React modules
• Programming custom solutions for customers, including testing
• Creating documentation
• Development in accordance with Scrum processes

Used skills: React, React Hooks, Jest, Vitest, Typescript, Electron, IntelliJ, Vite, Github, Jira, Node.js, yarn, npm, pnpm, Swagger, OpenAPI, Storybook, Docker, Prettier, Eslint, tailwindcss, i18n, GraphQL, CoPilot, Postgres, JSON, Sqlite, trpc, influxdb, Java, Spring, Kotlin, Kafka, Git, Sonarcube

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

(Maternity/Parental Leave: July 2023 – Aug 2024)

• Domain: Payment Domain | Client: Telefonica Germany
• Project: General Payment Service

The General Payment Service is responsible for processing of online payments via external payment service provider like Safer pay and PayPal

• Developed Design of Use (DOU) and interface contract documentation, ensuring clarity and compliance across system integrations
• Designed and delivered REST/SOAP web services with Spring Boot and Spring Data JPA, publishing Swagger contracts through WSO2 API Gateway to improve accessibility and governance.
• Spearheaded the on-premises to AWS Cloud migration, re-platforming from Oracle to PostgreSQL on AWS RDS and deploying services on EC2, improving scalability and cost efficiency.
• Containerized microservices using Docker and orchestrated deployments with Kubernetes, streamlining deployment pipelines and improving system reliability.
• Implemented proactive monitoring and logging via AWS CloudWatch and Kibana, ensuring stability and performance during cutover.
• Enhanced collaboration through code reviews and peer reviews, promoting maintainability and clean coding standards.
• Strengthened quality by writing comprehensive JUnit tests and preparing detailed test cases enabling early defect detection
• Delivered automated API testing with Ready API, Postman, and SOAPUI, and conducted performance testing with JMeter, ensuring reliability in high-transaction environments.

• Consultant for system architecture, AI agents & integration, coach for data & process logic, Graph-RAG approaches, security and data protection.
• On-premise AI solutions with high compliance and performance requirements.
• Architecture decisions, operational setup, strategic prioritization & deployment.
• Technologies: LiveKit JS SDK, LiveKit Agents, Web Audio API, JS, AudioWorklet, Loki, vLLM, Zscaler, Docker, Neo4j, MySQL, Python.
• Models: GPT-OSS 20B, Whisper large v3 turbo, Qwen3-TTS.

• Team leadership: Prioritization and coordination of four cross-functional teams.
• Platform strategy: Development and implementation of strategies to optimize existing IT platforms.
• Stakeholder management: Active management of expectations and communication with internal and external stakeholders.
• Program and innovation management: Prioritization and coordination of cross-department projects as well as innovation initiatives.
• Product Owner consulting: Advising Product Owners with a focus on product development and continuous product improvement.
• Organizational development: Improving communication and decision-making structures across all organizational levels.
• Change management: Implementing best-practice change management methods to ensure continuous optimization and innovation.
• Quality assurance: Ensuring high quality standards in processes, services, and deliverables.

• Development of microservices according to the TMF standard
• Adaptation of existing workflows to microservices (PNMGT, RADIUS, WBCI, ACS, VOIP, P2P)
• Migration of communication from RabbitMQ/REST to Kafka
• Development of Camunda processes for billing leased infrastructure
• Implementation of Kafka connectors for billing and inventory data systems
• Automation of the workflow for WBCI preliminary coordination
• Execution of unit and integration tests as well as acceptance tests with the business departments
• Setup of CI/CD pipelines
• Error analysis for support tickets
• Execution of larger refactorings of legacy code to adapt it to new microservices
• Participation in meetings to gather and clarify requirements
• Technologies: Kubernetes, AWS-DevOps, Apache Camel, Debezium, Python, TMF, Confluent, Kafka, OpenAPI, Java 21, Spring Boot, Docker, MapStruct, PostgreSQL, Maven, Camunda, Keycloak

• Bootstrapping a CloudOps team and building a multi-cloud provider backend for a low-code Internal Developer Platform (IDP) with env zero

• Introducing user story mapping, ADRs, milestones, and backlog management

• Designing and developing core APIs, setting up CI/CD pipelines, OpenTofu/Terraform scripts

• Representing and communicating the team with third-party stakeholders (e.g. env zero)

• (Cross-)team coaching on DevOps, software design, Terraform, Golang, and agile practices

• Cloud Computing Fundamentals & Architecture: Expertise in core cloud concepts, including the three main Service Models (IaaS, PaaS, SaaS) and diverse Deployment Models (Public, Private, Hybrid, Multi-cloud).
• Modern Application Deployment Strategies (GCP Focus): Instruction on the GCP Application Hosting Spectrum, covering Virtual Machines, Containers (Kubernetes and Cloud Run), Platform as a Service (App Engine), and Serverless Computing (Functions as a Service - FaaS).
• Data Management & Big Data Analytics: Comprehensive coverage of Cloud Storage options (Object, Block, File) and Database solutions, including Relational (Cloud SQL), NoSQL (Firestore, BigTable, Memorystore), and serverless enterprise data warehousing (BigQuery).
• DevOps and Infrastructure Automation: Skills in DevOps principles, including Continuous Integration (CI), Continuous Delivery (CD), Infrastructure as Code (IaC) using tools like Terraform, and implementing effective Monitoring and Logging for system observability.
• Emerging Technologies & Responsible Cloud Use: Focus on crucial topics like Cloud and IoT Security, Identity and Access Management (IAM), data privacy, and the ethical considerations of cloud and massive data collection.

Project: Tax Exemption Order Application

The client has an existing application for creating and maintaining tax exemption orders for end customers; design and implementation of a comparable application for internal employees.

• Design and implementation of microservices and the UI for the business area "tax exemption orders" using Domain Driven Design as well as Spring Boot and Angular.
• Implementation of reactive, non-reactive, and asynchronous APIs (Spring REST, WebFlux, GraphQL).
• Development of the Angular application, including state management using Signals, RxJS Observables, and subscriptions.
• Securing the API and the application using OAuth2, JWT, and OpenID Connect.
• Configuration and setup of CI/CD pipelines with Jenkins.
• Collaboration with cross-functional teams and conducting code reviews.

Environment: Java, Spring Boot, Angular 18 & 19 (standalone, signals), RxJs, Bootstrap CSS, Vitesting, OpenShift, Istio, microservices, Kafka, Dynatrace, Jenkins, GitLab, Graylog, Sonar, Oauth2, OracleDB

Java 21 · Spring Boot 3 · Keycloak · PostgreSQL · Docker · Nginx · GitHub Actions · DigitalOcean · React 18 · TypeScript · Plasmo

• Architected and shipped a production-ready Job Application Tracker end-to-end: REST API with 5-stage workflow, pagination, sorting, and dynamic filtering — full ownership from design to live cloud deployment on DigitalOcean.
• Implemented production-grade identity management: OAuth 2.0 / OpenID Connect / JWT / RBAC via Keycloak, applying Hexagonal Architecture and DDD principles.
• Built automated CI/CD pipeline (GitHub Actions); containerised with Docker; Nginx reverse proxy with path-based routing and SSL termination.
• Developed a Chrome Extension (Plasmo framework, Manifest V3) that auto-fills job applications directly from LinkedIn into the tracker — demonstrates full product thinking across backend API and browser client.

• Led end-to-end implementation of the Miles and More Credit Card Service integrating with TSYS systems on Microsoft Azure
• Architected secure, scalable APIs and microservices using Spring Boot, Camunda, and Apache Kafka (Confluent Platform) for real-time event streaming and process automation on Azure Kubernetes Service
• Managed full development lifecycle of the credit card system on Azure Cloud including fraud detection, payment processing, account management, and Kafka-based event-driven data pipelines
• Designed and implemented Kafka Connect integrations and Schema Registry for seamless data flow between microservices and legacy systems
• Introduced Agile best practices, improving team efficiency by 30% and reducing project delivery time
• Directed and mentored a team of 15+ developers fostering a collaborative, cloud-first, and innovation-driven culture
• Managed client relationships achieving 95% satisfaction and securing follow-up projects through consistent delivery excellence
• Designed and deployed BPMN/DMN models in Camunda for complex business workflows and automation
• Configured Camunda Engine with advanced features such as error handling, RPA integration, and multi-version deployments
• Integrated Camunda and Kafka-based messaging with core banking systems ensuring high availability and data consistency
• Managed multi-database schema configurations on Azure and optimized system performance for high throughput and fault tolerance
• Designed and implemented cloud architecture patterns on Azure focusing on multi-region resilience, data sovereignty, and event-driven scalability for critical financial workloads