Data Lake Experts in Berlin

• Architected and deployed private cloud data platform on VMware vSphere, integrating Greenplum MPP, Apache Kafka, Kubernetes, and Apache Solr, and developed real-time ingestion pipelines with Kafka Connect and Schema Registry.
• Led Oracle Exadata to Greenplum migration, rearchitected data models, optimized storage, implemented RabbitMQ with Debezium for CDC, and deployed VectorDB for Generative AI.
• Designed and executed multi-cloud migration PoC across AWS, Azure, and GCP, defined KPIs for throughput, latency, and cost efficiency, executed bulk data transfers, validated analytics and streaming workloads, and delivered full-scale architecture recommendations.
• Assessed legacy on-premises infrastructure and designed modern cloud-native data platforms using Greenplum and containerized microservices, advising on scalability, disaster recovery, and high-availability.

• Advising companies on building, migrating and optimising BI and reporting landscapes (Power BI, SQL, Python, ETL)

• 5 client engagements in real estate and finance since 05/2025: taking over and stabilising existing reporting, automating recurring standard and management reports, building cash-flow models

• Proposal and feasibility assessments for BI and reporting projects

• Using AI-assisted development (Claude Code) to accelerate automation, tooling and web/app development

• Custom ERP system

• Problem: A client's core processes ran on scattered, siloed Excel files with no central data storage – error-prone, hard to scale and impossible to analyse end-to-end.

• Approach: Captured the business processes and requirements, modelled the data and developed iteratively together with the business team.

• Implementation: Built a tailored, web-based ERP system with a central database, role-based modules and automated reporting – delivered using AI-assisted development in Claude Code.

• Timesheet app

• Starting point: Time tracking based on an overgrown, macro-heavy Excel template – maintenance-intensive, single-user and error-prone.

• Implementation: Migrated all functionality and VBA macros into a standalone web app with central data storage, multi-user support and automated reporting.

• Cash-flow modelling

• Starting point: The existing cash-flow model covered standing investments only; project developments were missing from steering.

• Implementation: Built and extended the CF model to include project-development cash flows.

• Optimisation: Reviewed and optimised existing CF models and expanded the KPI outputs for reporting and steering.

• Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
• Leading the “Identity & Directory Management” product (8 people) as Product Owner.
• Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
• Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
• Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.

• Active Sourcing (Europe & Asia)
• End-to-end recruiting (Europe & Asia): coordination of recruitment processes; consulting on recruitment strategy
• Collaboration with hiring managers incl. C-level and Global Vice President
• Preparation of contracts and discussion of all questions with candidates
• Training and mentoring on interview techniques, active sourcing, self-organization, and pipeline building
• Many years of broad work experience with staffing and recruitment agencies
• Collaboration with global HR departments incl. works council
• Very good user knowledge of MS Office 2011 (Word, PowerPoint, Excel)
• Very good user knowledge of CRM/ATS systems (Salesforce, Personio, iCIMS, HCL Notes)

• Leading the product lifecycle for sovereign AI platform and operating system teams for enterprise & government clients and internal stakeholders (infra, solution delivery, support, revenue)
• Built and scaled the platform from a 200-user beta to a full rollout of 70K+ members at the Bundesagentur für Arbeit (BA), secured with ISO 42001 and EU AI Act compliance
• Architected the shift to a multi-tenant shared inference, increasing GPU cluster utilization from 20% to 85% and reducing infrastructure cost-to-serve by 40% for SaaS clients
• Shipped model quantization, allowing clients to run advanced LLMs on legacy hardware (A100s GPUs) instead of the H100s, saving upwards of 70% cost per enquiry
• Abstracted complex Helm configurations into a dynamic model manager, reducing the time to install or swap models by ~80%
• Killed an expensive move to build own dashboard service, pivoting to an API-first data strategy that clients can consume directly and saving €100Ks in opex and capex
• Built a safety-first agent marketplace and control plane lighthouse project for a Tier-1 bank, allowing internal teams to deploy autonomous agents within strict regulatory guardrails

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Leading architecture and delivery of AI-powered educational content platform, managing two development teams with full technical ownership.

• Designed and architected the Content Hub platform replacing legacy SiteFusion systems, enabling professors to create AI-assisted learning materials for improved student outcomes.

• Established technical strategy, defined architecture requirements, and aligned two cross-functional teams (AI Media Team, TEAQ Team) on a unified delivery roadmap.

• Implemented Clean Architecture principles and AI-agent-friendly documentation standards across the engineering organization.

• Drove adoption of modern development workflows including CI/CD automation and MongoDB-based content management solutions.

• Built an AI Research Assistant with RAG, LangChain, LangGraph, and OpenAI LLMs integrated with vector search; cut research time by 30%.
• Designed custom retrieval workflows with LlamaIndex, building a ReAct-style agent for dynamic chunking; improved query accuracy by 18%.
• Researched and optimized embedding strategies, reducing retrieval cost/query by 15%.
• Developed RAG evaluation frameworks using RAGAS and Langsmith with custom datasets; improved coverage by 40%.
• Fine-tuned LLMs (LLaMA 2 on Vertex AI with custom inference containers, dynamic batching, and quantization); reduced inference latency by 25%.
• Integrated AI agents in LangGraph with short-term & long-term memory (Mem0); increased task completion rate by 20%.
• Created schema-aware synthetic data generators; fine-tuned downstream models achieving +12% F1 score.

• Business intelligence development in the logistics sector.
• Migrating existing reporting and analysis solutions from Cognos to Microsoft BI.
• Using Microsoft SQL Server, SSAS, Power BI, and other Microsoft BI platform components.

• Contributed to over 20 successful projects

• Designed a platform based on IoT, Azure, Kubernetes, and Postgres for an existing application
• Migrated from "click-ops" and UI-defined CI/CD pipelines to infrastructure-as-code with Terraform, enabling complete redeployment of multiple environments
• Technologies: Terraform, OpenTofu, Azure, Azure DevOps, Kafka, IoT, Kubernetes, Grafana, Prometheus, GitOps, relational databases