Data Lake Experts in Berlin

• Optimized the data architecture (medallion) to better decouple processing stages and improve transparency and reproducibility
• Ensured technical quality of data processing in Databricks by introducing schema enforcement, data quality checks and a structured data architecture
• Orchestrated pipelines with Azure Data Factory
• Professionalized and automated the development and deployment process by integrating Git and GitHub Actions
• Led the Data Engineering team (3 members) in a functional role
• Conducted workshops to optimize and stabilize the data platform and the development process
• Collected and prioritized new requests, maintained the product backlog
• Technologies: Microsoft Azure (Data Lake, Data Factory), Databricks, Apache Spark (PySpark), Python, SQL, Git, Confluence, Power BI, Power Apps, Dataverse, MS SharePoint, Mural

• Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
• Leading the “Identity & Directory Management” product (8 people) as Product Owner.
• Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
• Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
• Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.

• Leading the product lifecycle for sovereign AI platform and operating system teams for enterprise & government clients and internal stakeholders (infra, solution delivery, support, revenue)
• Built and scaled the platform from a 200-user beta to a full rollout of 70K+ members at the Bundesagentur für Arbeit (BA), secured with ISO 42001 and EU AI Act compliance
• Architected the shift to a multi-tenant shared inference, increasing GPU cluster utilization from 20% to 85% and reducing infrastructure cost-to-serve by 40% for SaaS clients
• Shipped model quantization, allowing clients to run advanced LLMs on legacy hardware (A100s GPUs) instead of the H100s, saving upwards of 70% cost per enquiry
• Abstracted complex Helm configurations into a dynamic model manager, reducing the time to install or swap models by ~80%
• Killed an expensive move to build own dashboard service, pivoting to an API-first data strategy that clients can consume directly and saving €100Ks in opex and capex
• Built a safety-first agent marketplace and control plane lighthouse project for a Tier-1 bank, allowing internal teams to deploy autonomous agents within strict regulatory guardrails

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Leading architecture and delivery of AI-powered educational content platform, managing two development teams with full technical ownership.

• Designed and architected the Content Hub platform replacing legacy SiteFusion systems, enabling professors to create AI-assisted learning materials for improved student outcomes.

• Established technical strategy, defined architecture requirements, and aligned two cross-functional teams (AI Media Team, TEAQ Team) on a unified delivery roadmap.

• Implemented Clean Architecture principles and AI-agent-friendly documentation standards across the engineering organization.

• Drove adoption of modern development workflows including CI/CD automation and MongoDB-based content management solutions.

• Business intelligence development in the logistics sector.
• Migrating existing reporting and analysis solutions from Cognos to Microsoft BI.
• Using Microsoft SQL Server, SSAS, Power BI, and other Microsoft BI platform components.

• Contributed to over 20 successful projects

• Active sourcing (Europe & Asia)
• End-to-end recruiting (Europe & Asia): coordinating recruitment processes; advising on recruitment strategy
• Collaborating with hiring managers including C-level and Global Vice Presidents
• Preparing contracts and discussing all questions with candidates
• Providing training and mentoring on interview techniques, active sourcing, self-organization, pipeline building
• Many years of comprehensive experience with staffing service providers
• Working with global HR departments including works council
• Very good user skills with MS Office 2011 (Word, PowerPoint, Excel)
• Very good user skills in CRM/ATS systems (Salesforce, Personio, iCIMS, HCL Notes)

• Designed a platform based on IoT, Azure, Kubernetes, and Postgres for an existing application
• Migrated from "click-ops" and UI-defined CI/CD pipelines to infrastructure-as-code with Terraform, enabling complete redeployment of multiple environments
• Technologies: Terraform, OpenTofu, Azure, Azure DevOps, Kafka, IoT, Kubernetes, Grafana, Prometheus, GitOps, relational databases