Containerization Experts in Hamburg

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Several projects in a police context
• Model and document police procedures/projects with Archimate (as-is/to-be) in the context of P20 (BKA)
• Create software architectures with microservices
• POC development with Springboot/Docker/Kubernetes
• Project size: 10 people
• Enterprise architecture management with Togaf and Archimate
• Backend software development Springboot
• DevOps with Kubernetes
• Implemented using: Java 17/21, Springboot 3, P20 architecture, Togaf, Archimate

• Independent Software Engineer focusing mainly on complex backend architectures.

• Reviewing functional and technical requirements from a testing perspective
• Creating test cases and automated tests to validate requirements
• Performing manual and automated functional, end-to-end, and regression tests
• Documenting test results and tracking defects
• Using models like GPT-4, BERT, and Hugging Face Transformers for automated test case generation, analysis of test results, and improving test coverage, including bias checks and security reviews
• Techs: MS Office, Jira, Zephyr, Confluence, Tosca, stakeholder communication, Agile, Kanban, Scrum, OpenAI API, Hugging Face, PyTorch, LangChain.

• Prototyped LLM/RAG document assistant; trained transcriptomics and proteomic data; used Git/Docker for reproducibility.
• Strengthened ML fundamentals applicable to omics (feature engineering, validation, leakage control).

• Further development of a complex laboratory information system
• Development of new features including design
• Close collaboration with company leadership
• Embedded in a top team with consistently high performance under time pressure
• Agile approach, Kanban

• Working with developers, security, and operations teams to align requirements
• Supporting product owners and development teams in using logging and monitoring solutions based on the Elastic Stack
• Developing and standardizing log schemas as well as defining practical standards for observability
• Designing and further developing logging architectures for complex, distributed multi-tenant environments
• Connecting application and infrastructure logs as well as security tools and metrics
• Optimizing data flows and modeling for analysis and reporting purposes
• Building automated infrastructures using Terraform/Terragrunt and Ansible
• Maintaining and further developing CI/CD pipelines in GitLab as well as automated development environments in Hetzner Robot
• Operating and automating Proxmox clusters including Ceph storage
• Setting up and operating Kubernetes (k3s) clusters on Fedora CoreOS including base services such as Vault, OpenLDAP, and HA Proxy
• Implementing security-critical infrastructures according to BSI baseline protection and securing existing systems
• Supporting the operation of solutions in cloud environments (including AWS)
• Working in agile teams using Scrum and Kanban
• Technologies/ applications: Elastic Stack (Elasticsearch, Logstash, Beats/Elastic Agent, Kibana), Terraform, Terragrunt, Ansible, GitLab CI/CD, GitOps, Proxmox, Proxmox Ceph, Kubernetes (k3s), OpenShift, Helm, Kustomize, Vault, OpenLDAP, HA Proxy, Hetzner Robot systems, AWS, Prometheus, Grafana, Syslog Linux/Windows, Docker, NGINX, Apache Security & Compliance (BSI baseline protection, SIEM/SOC)

• Architected and deployed LLM based AI agents, RAG pipelines, and vector search solutions for decision support across retail banking department.
• Developed and shipped robust AI pipelines with guardrails, error handling, monitoring, and fallback logic ensuring high reliability outcomes and compliance with data privacy.
• Developed and deployed ML models to identify transactional anomalies, improving fraud detection and risk assessment in high-volume datasets for credit risk modelling.
• Built, evaluated and fine-tuned ML models to generate propensity scores for customers used to drive personalized targeting campaigns for credit cards and personal finance/loan products.
• Developed an NLP pipeline using BERT embeddings and spaCy NER for SMS/email analysis and customer query logs.
• Trained machine learning models using Isolation Forest to classify user behaviour and detect anomalies.
• Extracted, cleaned, enriched and feature engineered datasets from different sources to build feature stores that powered ML model training.
• Led development of dashboards using Power BI, Grafana, and Prometheus to monitor model performances, KPI trends, and marketing metrics.
• Built multi-touch attribution models using logistic regression and time-decay weights to evaluate lead quality.
• Developed scalable ETL pipelines from CRM, T24, SAP, and ERP, supporting millions of monthly transactions.
• Integrated testing and CI/CD workflows for robust data pipeline deployment.

• Conducted research on fluidized bed reactors, applying machine learning methods for process monitoring and predictive maintenance.
• Developed reproducible workflows for high-temperature process experiments, improving data reliability and lab efficiency.
• Collaborated with cross-disciplinary teams to integrate AI models into traditional engineering research.

• Conducting business analysis for battery energy storage systems and their marketing (BESS)
• End-to-end view of optimization and marketing processes including sales, technical qualification, implementation, optimization, marketing, billing, and cross-functional processes
• Designing and facilitating workshops with business units
• Preparing, aligning, and anchoring requirements
• Transitioning to the solution design phase and mapping requirements to IT solutions

• Consulting on a wide range of open science hardware projects in the fields of electronics, mechatronics, and optoelectronics
• Comprehensive system analysis and DFM optimization of a novel open hardware miniaturized two-photon microscope
• Exchange with scientists from renowned academic institutions to align the customer’s work in the best possible way
• Production coordination with local and international partners for PCB assembly, CNC machining, and optics
• Process analysis for product design, production planning/execution, product lifecycle, and product data management
• Coaching employees from all departments on the requirements that complex technical products place on business processes
• Development of a comprehensive PLM & PDM concept tailored to the needs of development and manufacturing
• Initiating intensive and direct cross-departmental exchange to identify improvement potential
• Planning shopfloor layout improvements with the production team and supporting the implementation process
• Quick onboarding of two new English-speaking colleagues in technical product management and development
• Ad-hoc and in-depth training of employees in the use of software tools such as KiCad or Autodesk Inventor
• Consulting on long-term development into a scalable, even stronger partner for the open science hardware community

• Electronic logbook app developed for research centers to maintain their investigations.
• Emphasizes user-driven organization of communication: experiment groups can configure information structure and notifications, while principal investigators maintain full access control.
• Real-time integration with the facility’s metadata catalogue, control system Karabo, and data analysis tool enables the automatic logging of key events, complemented by manual entries as needed.

• Building teams of data people - BI Analysts, Data Scientists, Data Engineers
• Defining data strategy across all business units to support short, mid & long-term business goals
• Collaborating with the product leads & management & heads of departments to provide data support
• Defining budget to make everything happen
• Aligning the data teams goals with company vision, strategy & objectives
• Responsible for the data governance as well as for the strategic development planning
• Defining and developing joint OKRs
• Reporting directly to the CTO & CEO

• Built backend APIs using Quarkus, Kotlin, MongoDB, Docker Compose and NGINX
• Developed frontend with React, TypeScript and Ant Design