CSS Expert in Hamburg

• Designed and moderated a NIS2 preparation workshop for RAS Reinhardt Maschinenbau GmbH and its IT service provider Catuno GmbH. Together with executive management and IT leadership, the current status was assessed, an initial GAP analysis was conducted and areas for action were prioritized based on ISO 27001.
• Developed an ISO-27001-based regulatory framework (ISMS) for NIS2 compliance, including a structured current/target GAP analysis, targeted improvement of the security maturity level and preparation of the organization for NIS2 audit readiness.

Co-founded a software agency building custom web and cross-platform products. I owned the technical decisions across the whole portfolio and led 12 people, while carrying delivery planning, process and client relationships for 11 clients across 3 industries.

• Technical leadership: owned the technical decisions for the codebase across every project — stack, architecture, code conventions and the tooling the team worked with — and led the developers on how work got built through code reviews, pair programming and mentoring across a team ranging from junior to senior, keeping the codebase coherent as the portfolio and the team grew

• Delivery planning against the financial plan: built the company's financial plan and derived from it the billable hours each developer had to reach per month and the hours each project could absorb to stay within budget; planned capacity and scope against those figures and negotiated budgets and delivery dates directly with clients

• Client ownership: technical contact across the portfolio — requirements gathering and prioritisation, scoping and estimates, timeline communication, budget negotiation, and consistent transparency throughout delivery

• Team and people: owned the hiring and interview process end to end and took responsibility for offboarding where it was needed; designed an onboarding that got new developers productive within 1–2 days; cleared blockers daily and kept a close eye on where effort was creating value and where it was not

• Process ownership: consolidated a micro-service landscape spread over 15+ repositories into a single monorepo, cutting backend development time by ~40% and simplifying releases for 6 engineers; set up deployment pipelines with GitHub Actions and GitLab CI; ran retrospectives and turned the feedback into concrete changes; introduced AI agents into day-to-day development

• Delivered short-staffed: when the team shrank from 8 developers to 2, restructured scope, introduced AI-assisted development to hold the schedule and took on Go backend work alongside my own frontend scope

• Architecture and code: defined the architecture for every project in the portfolio — the structure the rest of the team built within — and wrote roughly 90% of the frontend code myself, from SSR applications with Next.js and Remix to cross-platform apps with Capacitor

• From zero to production: took a practice management platform — administration, inventory, integrated online shop, chat messenger — from an empty repository to production. Live in 7 markets with at least 7 more coming up, serving tens of thousands of users

• Delivery under pressure: built and shipped a replacement online shop for a Fortune 250 client in 4 days, restoring order intake while their global shops had been offline for several weeks

• Design system: built a cross-project design system used across 7 products, so new projects and features started from a shared, consistent base

• Cross-platform and real-time: built iOS and Android apps with Capacitor for a client live event with 1,000+ participants — web sockets and push notifications for real-time content, Stripe payments supporting PayPal, Apple Pay, Google Pay and cards

Key technologies: React, TypeScript, Next.js, Remix, GraphQL, ConnectRPC, Redux, Zustand, Go, Node.js, Turborepo, Nx, Capacitor, Ionic, WebSockets, Stripe, PostgreSQL, Playwright, Cypress, Vitest, Storybook, GitHub Actions, GitLab CI, Claude Code, Cursor, GitHub Copilot

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

Technologies: n8n, Notion, OpenAI API, Claude, MS AI Foundry, MS CoPilot Studio, MS CoPilot, LLM, Node.js, Vercel, LangGraph, PostgreSQL, pgEdge, pgvector, Docker, LangChain, Ollama, Open WebUI

• Continuous evaluation and prioritization of internal automation needs
• ~20 AI agents in active use: research, content pipelines, document processing
• 5 n8n workflows for automated data and process control
• Architecture built on the same principles as in customer projects: state management, event-driven orchestration, API integration
• Ongoing operation and further development

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

• Industry: SaaS (Customer Success Management) – B2B

Comprehensive GEO implementation (Generative Engine Optimization) for a B2B CSM SaaS startup with a focus on AI Search Visibility and AI Citations in ChatGPT, Perplexity and Google AI Overviews – including a GEO workshop and a prioritized implementation roadmap.

• GEO Workshop & Roadmap: Conceptualized and delivered a GEO workshop (how LLMs work, AI Search Architecture, citation strategies); translated it into a prioritized implementation roadmap with impact/effort estimates
• Technical GEO Foundation: Robots.txt & llms.txt, Core Web Vitals & page speed, XML sitemaps for AI crawlers
• Schema & Structured Data: Gap analysis, implementation of Product/Service, FAQ, Article, Author and Organization schema, validation of coverage
• Content Architecture & GEO: Flat content architecture, topic clusters (pillar-and-spoke), 200–300 word chunks and answer-first content structure, E-E-A-T rollout through author pages
• Query Fan-Out & Prompt Anticipation: User prompt mapping, query fan-out, content gap analysis based on prompt coverage
• Citation & Backlink Strategy: AI citation analysis (news, Reddit, Wikipedia, listicles) and development of outreach and backlink strategies

Tools & technologies: Otterly.AI, PeecAI, Qforia (iPullRank), Schema Markup Validator, OpenAI Tokenizer, Prompt Coverage Monitor, ChatGPT, Perplexity AI, Semrush, Ahrefs, Framer CMS

• Environment: AWS, Ruby on Rails, GraphQL, React Native
• Penetration test for Backend, Android-App and iOS-App

• Development and further development of e-invoicing solutions, interfaces for invoice processing, and implementation of regulatory requirements

Technology & methods: XRechnung, ZUGFeRD, EN 16931, XML, API integration, backend development, cloud services, automation, compliance, AI-supported document analysis

• Several projects in a police context
• Model and document police procedures/projects with Archimate (as-is/to-be) in the context of P20 (BKA)
• Create software architectures with microservices
• POC development with Springboot/Docker/Kubernetes
• Project size: 10 people
• Enterprise architecture management with Togaf and Archimate
• Backend software development Springboot
• DevOps with Kubernetes
• Implemented using: Java 17/21, Springboot 3, P20 architecture, Togaf, Archimate

• Data-analysis, Preparation, gathering and coordination of business requirements for retrieval of monthly- and long term (CLV – relevant) cost- and revenue-components per contract for a customer–base–grouping project (HUB–Project) for B2C-Postpaid-Controlling
• Concept and Implementation of cost- and revenue-KPIs calculation and corresponding CLV–reports (Oracle, Perl, SVN, MS SQL Server, MS Power BI, Serviceware Performance Analytics)
• Operational support of the HUB-Project – various ad-hoc reports, deployments, job-scheduling etc. (Oracle, SVN, BICSuite–Scheduler, DWSODA etc.)
• Analysis, implementation, retrieval and reporting of various physical and financial KPIs for B2P-Prepaid Business on an existing data-mart (Oracle, Perl)

• Platform: Web.
• Technologies: HTML5, CSS, TypeScript.
• Programming.
• Various updates.

• Independent Software Engineer focusing mainly on complex backend architectures.

• Planning, steering, and monitoring the Corporate Responsibility Tech Enablement project for IT
• Concept and implementation of the EUDR (EU Deforestation Regulation)
• Concept and implementation of the Eco-Design Regulation
• Continued support of projects within the Corporate Responsibility strategy
• Definition and review of guidelines (e.g. governance, success metrics) and, if needed, analysis of issues and their solutions
• Overall project management, marketing, communication, and quality assurance for the projects
• Creation of the project plan including timeline/roadmap, budget, and resources
• Ensuring compliance with budget and deadlines
• Defining guidelines for project control, methods, and priorities
• Planning and tracking resources and effort, also together with other IT teams
• Evaluation of projects and preparation of results (reporting to management)
• Identification and reduction of risks
• Regular communication with stakeholders
• Steering internal and external stakeholders and service providers (Jira, Confluence, backlog management, task tracking, SharePoint, MS 365 platform etc.)
• Development of standards and process automation

Label: Azure Cloud, Jira, Confluence, Power BI, SAP BW, AWS, Miro, Bee360, Draw.io, SharePoint, MS 365 platform, Trello etc.

• Gathering requirements from business departments
• Developing mockups
• Maintaining the backlog and moderating sprint meetings
• Managing developers
• Stakeholder management
• Skills used: Scrum, Requirements Engineering, Requirements Management
• Technologies used: various
• IT environment: Microsoft Dynamics Business Central
• Industry: Real estate
• Role: Project lead, Product Owner