Consul Experts in Germany

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• Understand the customer’s business & technical requirements and translate them into system / technical requirements
• Design and implement Schrodinger’s applications on cloud systems, and experience convincing senior management and senior technical staff of the benefits of their journey with Schrodinger on the cloud
• Provide exceptional technical design and thought leadership, especially around AWS, GCP, and K8s architecture reviews, performance, high availability, cost, and security
• Deep understanding of the Well-Architected pillars and all best practices for building a secure, performant Schrodinger’s applications on the cloud platforms
• Lead technical workshops and advise customers on architectural and strategic IT decisions
• Ensure success in designing, building and migrating applications, software, and services on the cloud platforms
• Educate customers on best practices to ensure their solutions are designed for successful deployment in the cloud
• Work with other team members to ensure quality and customer success
• Define the tickets, tasks, and timelines of projects
• Collaborate with account managers to ensure that the projects are executed according to the defined plan and timeline
• Monitor the progress of the projects, identify risks and issues, and take proactive measures to mitigate them
• Lead and inspire cloud architect teams, provide guidance, and make critical decisions
• Facilitate effective communication and collaboration among team members
• Collaborate with Schrodinger’s managers to improve deployment, support, and configuration of Schrodinger’s applications
• Lead weekly standups and define priorities

Design and implementation of a compact ERP, CRM, accounting, and production-planning platform for a German food manufacturer. The system replaces Rechnung11, self-built Excel sheets, and manual processes for fewer than 10 internal users.

• Designed and implemented the full platform architecture as sole architect and developer.
• Built modules for customer management, B2B order handling, invoicing, production planning, and accounting support.
• Implemented DATEV export, ZUGFeRD/XRechnung e-invoicing, FinTS bank statement synchronization, and GoBD audit trail concepts.
• Used AI-supported workflows for prototyping, test support, and implementation acceleration while retaining full architecture, review, testing strategy, and technical ownership.

Technology: Java 23, Spring Boot 3, Spring Data JPA, Spring Security, Vue 3, TypeScript, PostgreSQL, Flyway, REST, OpenAPI, JWT, TOTP, RBAC, DATEV, FinTS, ZUGFeRD, XRechnung, GoBD, JUnit, Mockito, Testcontainers, Playwright, Docker, GitLab CI/CD

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

Infrastructure, automation, IT security

• Operation and modernization of business-critical Linux infrastructure for a public-sector client: RHEL migrations, Ansible automation, container rollout (since October 2025)
• Project lead for server upgrade from RHEL 7/8 to RHEL 9 in the financial sector: project management, stakeholder communication (May 2024 – Feb. 2025)
• Project support for IT security requirements in the financial sector: gap analyses, solution design with business units (March – May 2025)
• Setup of an IdM solution (FreeIPA/RHEL IdM) for a utility company (AT), including consulting and training (Apr. – Nov. 2023)
• IT infrastructure consulting for a research team: Proxmox, SSO architecture, data sovereignty, and local AI (since Feb. 2026)

• Implementation of an API for customers to provide NFS shares in the cloud
• Creating Kubernetes operators and services with REST APIs in Go
• Using LinuxKit for provisioning VMs

Further development of a software solution for managing test requests and test notifications according to §106d SGB V for the Hamburg Association of Statutory Health Insurance Physicians.

• Developed numerous features, performance optimizations, refactoring, error analysis
• Refactored the dev container setup
• Optimized the GitLab CI build pipeline
• Contributed optimizations to the team workflow

• Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering (SRE) team.
• Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts.
• Wrote documentation.

AWS Cloud migration:

• Design and implement CI/CD for deploying AWS resources using GitLab CI, Terraform, and GitOps.
• Create and configure DevOps toolchain including Jenkins, Harbor, and Vault.
• Deploy billing application, microservices, and supporting infrastructure services to Nomad clusters.
• Re-designed TLS/mTLS certificate management using Vault and Lambda.

Security (Infrastructure Hardening & Patch Management & Vulnerability Scanning):

• Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts (Harbor, Jenkins, Vault).
• Created hardened AMIs via Packer based on CIS benchmarks for Nomad, Jenkins, Harbor, and Vault; deployed using Terraform.
• Integrated Trivy via Harbor plugin for container image scanning.
• Implemented strict AWS VPC security group rules.
• Developed and maintained patching process across environments using Qualys and Wiz.
• Deployed Qualys Cloud Agent to all EC2 instances, tracked CVEs and tested patches in lower environments before rollout.
• Automated patch deployment across all AWS accounts using Terraform and GitLab CI and verified patch compliance via Qualys/Wiz dashboards.

• Remote learning with experts and 636 instructional units.
• Product management bootcamp teaching agile methods and software tools for modern product management in complex software projects.
• User experience (UX) · product management · Figma (software) · user-centered design · Scrum · agile project management · Jira · Confluence · product discovery · backlog management · user experience design (UED) · prototyping · lean thinking · product roadmapping · user stories · Miro collaboration platform · application monitoring tools · performance metrics · lean product management · product design kickoff indicators (KPI) & tracking events · product strategy · business modeling · product vision & goals · product discovery.

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Created internal web application to improve the salary process using a microservice interfacing with MSSQL
• Developed interactive web UI using Microsoft Blazor
• Integrated Azure AD for user authentication
• Designed and implemented roles and permissions in the database
• Developed progress page guiding users through each process step
• Processed bonus calculations by importing Excel files
• Configured email notifications using MSSQL Send Mail
• Tools and technologies: C#, ASP.NET 6, MS-SQL, REST API, Visual Studio 2022, TFS, microservices, Kanban Board, Azure DevOps

• Planning and documentation of database architecture and integration with other components provided by other teams and vendors
• Extensive documentation for the architecture, security, access control, encryption, roles and user management, backup and restore, disaster recovery and general operations
• Deployment of database clusters over 2 locations with 2 availability zones each
• Automation of deployment and operations including backup using Ansible
• Hardening of the database and operating system
• Migration of existing stand-alone database systems to cluster setup
• Technologies: PostgreSQL, Patroni, etcd, barman, RedHat Enterprise Linux 9 (RHEL), Ansible, Ansible Automation Platform, TLS, Hashicorp Vault, LUKS

• Design and implementation of a solution for managing projects, materials, and assets in field operations
• Development of a modern web application (Blazor) for project managers to track inventory, plan demand, and issue transport and purchase orders
• Delivery of a mobile MAUI app for field staff to store and retrieve materials with location-based photo documentation in map views
• Control of the full business logic through a central API
• Tech stack: .NET 9, C#, WebAPI, Blazor, MAUI, REST, PostgreSQL, Entity Framework, Docker, Docker Compose, Ansible, Keycloak, Aspire
• Identity and access management with Keycloak
• Deployment and orchestration via Docker Compose and Ansible
• Project in testing and evaluation phase

• Led the development of robust, scalable, and high-performance micro-services architecture.
• Migrated legacy monolith systems to Spring Boot with RESTful APIs.
• Designed, implemented, deployed, tested, and optimized scalable backend systems ensuring high availability and performance.
• Maintained and deployed Dockerized applications on Kubernetes integrated into CI/CD pipelines.
• Collaborated with cross-functional teams, including frontend developers, product managers, and designers, to translate business requirements into scalable and efficient backend solutions.
• Mentored team members and contributed meaningful code reviews.