Containerization Experts in Austria

• Designed and built a next-generation NLP platform to accelerate sales-driven customer service through intelligent request analysis and routing, reducing average customer query response time by 30%.
• Architected a hybrid NLP system combining Large Language Models (LLMs) with traditional NLP pipelines for robust, explainable results.
• Developed request classification and routing mechanisms to accelerate customer support teams in handling customer queries faster and more accurately.
• Optimized LLM based data extraction and classification with context engineering.
• Integrated the platform into customer service processes, reducing response times and enhancing workforce efficiency.

Migration preparation for the upcoming ERP system change: recording all ERP-related business processes, analyzing pain points, and consolidating them into process views. Ensuring that every process can be transferred to the target system or that an alternative exists. Result: a solid working basis for system integrators and a company ready for migration.

BPMN · Camunda

Project Tech Stack: Python, AWS, Azure, FastAPI, openai, pandas, unittest/pymock

Achievements:

• Engineered automated data extraction pipelines to transform complex Excel datasets into structured formats via LLM-driven workflows.
• Architected a generative slide-deck engine that translates natural language prompts into formatted presentation assets.
• Integrated advanced LLM capabilities with the OpenAI Response API, implementing sophisticated tool-calling and structured output logic.
• Developed and containerized scalable backend microservice using FastAPI, Docker, and OpenShift to host and serve agentic skills.

Project goal: Introduce OpenShift as the run-time platform and migrate all applications to OpenShift.

My contribution: Make sure logging and monitoring for the applications were in place. Set up and put into operation the OpenShift components for logging and monitoring (Elasticsearch, Prometheus, and Grafana). Develop and implement the security concept for OpenShift. Work with developers to define and carry out the application changes needed for the OpenShift migration. Integrate monitoring into the applications.

Technical environment: Java, WebSphere Liberty, OpenShift components, Elasticsearch (ELK stack), Prometheus, Grafana.

• Architected and deployed a highly available, multi-tenant Kubernetes platform on Google Kubernetes Engine (GKE) for business-critical microservices.
• Designed and implemented a comprehensive Infrastructure-as-Code strategy using Terraform for managing GKE clusters, networking (VPCs, Subnets), and IAM policies.
• Engineered optimized storage solutions for stateful workloads (MongoDB) using GKE PersistentVolumes, enhancing performance and data resiliency.
• Established a full-stack observability framework using Google Cloud Monitoring, Logging, Prometheus, and Grafana.

• Lead software architect in a greenfield MES project (Manufacturing Execution System / factory control system), responsible for architecture decisions, technology selection, and technical direction throughout the entire development lifecycle
• Designed and built the core framework from scratch, including several reusable Spring Boot starters (e.g., OPC-UA integration, messaging, security) that enable flexible composition of the individual system modules
• Introduced Keycloak as the central authentication and authorization system with SSO across all MES components
• Created and owns the full CI/CD pipeline covering Java, NPM and Docker – automating build, test, containerisation and deployment across all project components
• Set up the architecture documentation space in Confluence as the single source of truth for all architecture decisions, component designs, and integration patterns
• Defined and enforced naming conventions and coding standards to ensure consistency in the growing codebase
• Conducted regular code reviews for quality assurance, knowledge sharing, and adherence to architecture guidelines
• Created and maintained technology roadmaps to guide future development priorities and infrastructure investments

• Planning and implementation of IT infrastructures for clients
• Automating deployments with AWS CloudFormation and AWS CDK
• Monitoring and optimizing cloud environments and the entire IT infrastructure
• Providing technical support and troubleshooting infrastructure issues
• Collaborating with development teams on CI/CD processes

• Further development and ongoing maintenance of the existing WordPress site for EHF.at to revamp the responsive design and improve usability on mobile devices.
• Integration of WooCommerce into the existing site for full e-commerce functionality and digitization of the team sports apparel sales process.
• Implementation and configuration of an automated newsletter system to strengthen customer loyalty through regular updates and personalized offers.
• Ongoing maintenance including regular updates, performance optimizations, and security checks to keep the site up-to-date and functional.
• Project-related technical activities: PHP, CSS, and JavaScript.

• Development of a Custom Jenkins Shared Library (Groovy)

• Integration of security checks in CI/CD pipeline (Shift-Left Approach)

• Automated vulnerability scanning and remediation workflows

• GitOps-based deployments with ArgoCD

• Semantic versioning automation with Git integration

• Container lifecycle management (Build/Scan/Tag/Push)

• ArgoCD webhook integration for event-driven deployments

• Complete cluster automation with Ansible

• Bare-metal Kubernetes installation from scratch

• High-availability control plane setup

• Unified deployment system for multi-application orchestration

• Configuration management according to NIST SP 800-128

• Host security: Linux hardening, SELinux/AppArmor

• Network security: NetworkPolicies, micro-segmentation

• Application security: RBAC, Pod Security Standards

• Data security: Encryption at rest and in transit

• Defense-in-depth principles

• Certificate management with cert-manager

• Secrets management with External Secrets Operator connected to Vault

• Infrastructure monitoring with Checkmk

• Prometheus/Grafana monitoring stack

• Security event detection and logging

• Automated health checks and incident response procedures

• MetalLB load balancing for bare-metal

• Nginx ingress controller with SSL passthrough

• NetworkPolicies for security zones

• Rook-Ceph distributed storage, CNI configuration (Weave Net)

• Container & orchestration: Kubernetes (bare-metal), Docker, Helm

• CI/CD & GitOps: Jenkins (Custom Shared Library), ArgoCD, Groovy

• Automation: Ansible, Bash, Python

• Security: nftables, RBAC, NetworkPolicies, cert-manager, Vault, Sealed Secrets

• Monitoring: Checkmk, Prometheus, Grafana

• Storage & networking: Rook-Ceph, MetalLB, Nginx Ingress, Calico

• Collaboration: Jira, Confluence

• OS: Debian, Ubuntu

• Implementing a real-time procedural 3D/AR eyelash configurator using Three.js and MediaPipe
• Building a full-stack web application with React.js and Python
• Consulting on app and web development

Selected projects:

Kiosk platform – hospitality

• Led a 3-person team while hands-on architecting an edge computing infrastructure for over 15 self-service kiosks in Alpine hotels with unstable connectivity
• Designed a Nomad-based cluster with a WireGuard mesh network for fully automated OTA updates, even during local network outages and offline operation
• Integrated physical peripherals (hotel key card readers, thermal printers) into a containerized deployment pipeline
• Reduced on-site maintenance visits by ~40% through a resilient offline-first architecture and Prometheus-based hardware monitoring
• Tech: Nomad, Consul, WireGuard, NestJS, NextJS, Prometheus, Custom Hardware Provisioning

Multi-tenant SaaS platform – insurance claims processing

• Built and operated the Kubernetes infrastructure for a market-leading claims processing platform (acquired by an S&P 500 company) – with strict compliance and availability requirements
• Designed a multi-tenant EKS cluster with tenant isolation, enabling cost-effective single-instance hosting for multiple customers
• Implemented dynamic spot instance node pools, reducing infrastructure costs by ~20%
• Set up fully automated deployment pipelines (Terraform + GitHub Actions) for uninterrupted releases during business hours
• Tech: EKS, Terraform, GitHub Actions, Prometheus/Grafana/Loki, PHP, GraphQL

Legacy ERP integration – construction photo documentation

• Led a 2-person team in designing and implementing a real-time sync bridge between a legacy Microsoft Access ERP (without an API) and a modern mobile photo app for quality control on construction sites
• Developed a PostgreSQL pipeline with real-time listeners that extract data from 1990s Access databases – without disrupting existing workflows
• Built a resilient upload architecture with a circuit breaker pattern for unstable site connections (S3, NFS, Synology NAS)
• Saved each project manager 2–4 hours per week through automated photo sync instead of manual USB/SD card transfers
• Tech: NestJS, PostgreSQL, React Native (Expo), S3, Synology API, offline-first architecture

• Planning, monitoring, coordination, and documentation of the output project as part of the policy migration to the UNIQA Insurance Platform.
• Planning and design of new requirements.
• Designing a consistent, maintainable, and scalable application architecture.