Data Lake Experts in Hamburg

• Building a data integration platform for high, medium, and low voltage assets for contextual analysis of time series with master data from the SCADA control system (IEC 60870 104), INIS, and SAP.
• Responsibility for the architecture and implementation of the solution, as well as sparring partner for the Product Owner.
• Use of Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter, and various API gateways.

• Defined and established the areas of responsibility
• Built a governance model for the department and its areas of responsibility
• IT strategy, project management, process management, and quality and sustainability management
• Developed a communications strategy for the group
• Created the IT strategy
• Designed templates, guidelines, and processes for consistent ways of working
• Recorded strategic guidelines and grouped ongoing projects – derived a roadmap for strategic planning
• Reviewed ongoing projects
• Prepared staffing calculations and capacity planning
• Defined job profiles

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Development and implementation of custom IT solutions for key customers.
• More than 15 years of experience in IT and project management, disciplinary leadership of up to 80 employees.

• Steering the rebranding of more than 40 applications, over 300 user accounts, and over 150 group mailboxes
• Coordinated with business units, key users, and technical providers for scheduling and implementation
• Analyzed 12 audit findings, developed a transition roadmap, and executed all measures on time
• Defined the new scope according to BSI guidelines
• Supported auditor selection process and prepared status reports for BSI
• Designed a new role model in SAP, aligned with management, and implemented it
• Created and delivered target-group-oriented training for responsible specialists
• Coordinated requirements with network architects, evaluated vendors, and supported contract conclusion
• Managed pre-staging of 300 laptops including configuration management
• Ensured accessibility of critical TotalEnergies applications via VNext / Workspace Access with authentication strategy using Yubikey and Microsoft Authenticator
• Supported go-live while meeting compatibility, security, and availability requirements
• Shifted from a big-bang to an iterative rollout model to reduce risk
• Defined an IT-side on/offboarding process for dual identities (TotalEnergies & Circle K)
• Ensured technical data integrity between Workday, Entra ID, and O365
• Implemented SAP-JDE cost center logic for ServiceNow orders
• Managed the change of company data in over 40 applications, including web portals, templates, and communication
• Led the SEPA mandate changeover for more than 2000 customers
• Oversaw SAP billing logic implementation through an external development team, including testing and go-live validation by 2025-01-01
• Collected IT-related auditor queries, coordinated with internal stakeholders, and prepared response documentation
• Planned and managed migration of 1200 TB of data between two M365 tenants
• Ensured data integrity, access continuity, and minimal downtime across OneDrive, Teams, SharePoint, and mailboxes
• Migrated data lake solutions (AWS & Databricks) in coordination with cloud architects and business units
• Coordinated testing, bug fixes, and go-live in close collaboration with internal teams and external partners

• Build data pipelines for raw and curated data layers using AWS S3, Glue, Athena, and Lake Formation
• Establish CI/CD using GitHub Actions or GitLab CI with CodePipeline
• Prototype models into demo APIs packaged with Docker, versioned with Git, added basic tests with pytest, and assist deployments on AWS SageMaker Endpoint
• Perform exploratory data analysis and feature engineering with pandas and PySpark; track experiments in MLflow or Weights and Biases
• Design and execute A/B tests to optimize user engagement and drive data-informed decisions

• Attained AWS Certified Cloud Practitioner certification.

• Mastered Rust through self-study, including books, online courses, and open-source contributions.

• Developed a serverless web application using AWS (RDS, Lambda, Polly, Amplify) and TypeScript/React/D3, managed infrastructure with CDK.

• Continuously stayed updated with industry trends through self-education, webinars, and workshops, exploring Data Mesh and FastAPI.

• Built a Microsoft Azure Synapse Data Warehouse solution and developed ETL structures for an international insurance brokerage company
• Created tables, views, and pipelines in Azure Synapse
• Developed Power BI reports for controlling and tax reporting (BAB, IER)
• Technology stack: Microsoft Azure Synapse (Synapse SQL, Synapse Pipelines), Microsoft Power BI (semantic data model, reports), Azure DevOps (Boards, Repos)
• Development languages: DAX, M, SQL