Containerization Experts in Frankfurt

Europe-wide re-platforming & centralization

• Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
• Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
• Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
• Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
• Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
• Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
• Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
• Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.

• Porsche ID is a unified digital identity platform providing secure authentication and seamless access across Porsche’s online services, mobile apps, and connected vehicle features
• Designed and implemented new authentication and authorization functionalities for both users and systems
• Ensured high availability, security, and performance to deliver a flawless digital experience for Porsche customers
• Technologies: Auth0, Angular, Tailwind, AWS, Terraform, Github
• Methodologies: Scrum and SAFe

Project: SCS (Settlement / Clearing Services)

Settlement platform serving multiple trading and clearing venues — counterparty risk safeguarding, settlement volume reduction, central risk management, and post-trade anonymity.

Technologies: Java 17, Spring Boot 3, Microservices, Spring Data JPA, SonarQube, Fortify (SCST), Mockito, Jenkins, OpenShift, Maven, Podman, GitHub, JIRA, Liquibase, Swagger, AMQP, Apache Camel, Terraform, PostgreSQL, Instana, Graylog.

• Identified and remediated CVEs in third-party libraries using SCA tooling, strengthening the security posture of production components.
• Maintained 90% code coverage with SonarQube, improving code quality and reducing production defects.
• Built and customized Helm charts and values.yaml configurations across 3 environments (ACT, SIMU, PROD), increasing deployment flexibility and consistency.
• Enabled mTLS for database authentication and message broker connections, enforcing encrypted, certificate-validated communication.
• Designed and deployed microservices with asynchronous, REST-based communication between components.
• Automated build and continuous integration pipelines using Maven and Jenkins.
• Used Podman and OpenShift for container orchestration and Liquibase for database version control.
• Optimized Java code and implemented EHCache-based caching, improving application performance.
• Managed application images, JAR versions, and dependencies via DBAG Artifactory Repository Manager.

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Co-founded the Real-Time Data team, which grew to 10 members over time.
• Developed and delivered core data products.
• Optimized real-time application performance and implemented monitoring, alerting and logging solutions to ensure system stability.
• Created and maintained deployment pipelines.
• Collaborated with teammates, architects and experts in an agile Scrum environment.
• Operated applications, analyzed, tested and troubleshot software solutions.

• Provided consulting for modernizing legacy applications
• Delivered critical features under tight deadlines for backend and frontend
• Technologies: C#, .NET, WPF, WCF, REST, Angular, MS SQL Server

• Database design with Oracle DB, JPA and Flyway considering high performance requirements
• Analysis of multiple architecture drafts and identification of technical risks
• Design and implementation of various interfaces and integrations, especially REST APIs and Kafka topics
• Setup of Elasticsearch for monitoring and analyzing log data
• Establishment of an iterative work approach in the project team facing complex business requirements

• Founded and lead a cybersecurity advisory firm focused on virtual CISO services for financial, SaaS, and critical infrastructure clients.
• Advise executive teams on cyber risk, regulatory compliance (DORA, NIS2, ISO 27001), and incident preparedness.
• Built and executed security programs from scratch, driving measurable maturity improvements.
• Delivered tailored risk assessments, policies, and cloud security guidance (AWS, Azure).
• Scaled the business through client acquisition, partnerships (Vanta, AWS, etc), and a network of senior consultants.

AI-powered platform for automated UX validation and designer support

• Designed and led technical implementation of an enterprise-wide AI solution for automated UX review that improved design quality and significantly reduced manual review processes in teams
• Developed an automated UX validation tool as a Figma plugin and web application that generates test cases based on internal guidelines and reliably checks current designs for consistency and standard compliance
• Implemented an interactive designer chat based on RAG that answers questions about the current design and the company's UX guidelines, and designed the deployment architecture using containerized services
• Python, Azure OpenAI, PostgreSQL, REST API, Docker, OpenShift, Helm, CI/CD, Figma MCP, LLM, RAG, Prompt Engineering, GenAI, XAI, AI Architecture, AI Strategy

• Engineered production-ready Azure environments using Terraform, ensuring consistent infrastructure parity across VNets and Resource Groups
• Implemented Microsoft Fabric tenant and workspace architecture for multi-stage Medallion data processing pipelines
• Designed secure data pathways using Managed Private Endpoints for isolated Azure Storage access
• Managed Service Principals and authentication tokens for secure REST API integrations

• ABAP developments for rku.it GmbH, Agena GmbH, Koenig & Bauer AG, Salzgitter AG, duagon AG
• Redesigned material configuration data mass maintenance Fiori app for Siemens AG Engineering to resolve system resource issues
• Conducted S4Hana ABAP code remediation, ATC checks, and implemented ABAP parallel processing for Voestalpine AG

• Built an API to ingest, clean, translate, and index EU tenders documents in Neo4j, enabling hybrid search with RAG and Cypher queries via a Streamlit dashboard
• Deployed the API on AWS Lightsail container services with CI/CD automation via GitHub Actions, ensuring stability through pytest unit and integration tests
• Designed and developed a comprehensive online course on data analysis using ChatGPT for professionals and learners, creating instructional videos and interactive Jupyter notebooks
• Utilized OBS and professional audio equipment to ensure high-quality video and audio content
• Led a CRM data normalization and cleaning project visualized via a Sankey diagram to aid customer understanding and pipeline development
• Implemented and validated a genAI-driven web crawling strategy on AWS, ensuring data quality, scalability, and CRM data augmentation

• Tech Stack: Java 17, Spring Boot, Microservices, REST, GraphQL, Spring AI, Jenkins, Docker, Git/Bitbucket, JUnit, Splunk
• Led a team of 6 to deliver policy, claims, and onboarding modules serving 50k+ users, maintaining 99.9% uptime
• Cut release cycle time by 35–40% by automating CI/CD with Jenkins and Docker
• Implemented trunk-based branching in Git/Bitbucket
• Integrated 10+ REST APIs and streamlined customer workflows, boosting process automation by 40%
• Increased system stability with proactive Splunk alerting and runbooks, reducing outages by ~25%
• Driven quality with JUnit tests (92% coverage) and code reviews; enforced standards with static checks such as SonarQube

• Built scalable Flutter apps (mobile & web) using BLOC and Clean Architecture, improving app performance and maintainability.
• Delivered advanced AI & agentic AI features with real-time communication and personalized user flows.
• Developed backend services in Ktor (Kotlin) and ensured quality via testing, CI/CD, code reviews, and Scrum practices.