Datadog Experts in Germany

• Led migration to GCP using Terraform, GKE, and GitOps, improving deployment consistency and scalability
• Implemented Datadog observability stack via Terraform and datadog-operator
• Established automated end-to-end tests and on-call processes, improving incident response and service reliability
• Migrated from NGINX Ingress Controller to Kubernetes Gateway API (NGINX Gateway Fabric)
• Migrated stateful services (PostgreSQL and Redis) to GCP, improving scalability and operational reliability

• Development and introduction of operations processes
• Preparation of complete documentation packages (including incident management and operations support) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Technical consulting for the project security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Hybrid cloud architecture design (on-prem, Hetzner, AWS)
• Analysis and troubleshooting of incidents and system outages
• Network adjustments for firewall rules, gateways, OpenVPN settings, and IPsec tunnels (pfSense)
• Technical consulting on Bitbucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• Onboarded and conducted comprehensive documentation and system analysis to assess the existing data infrastructure, facilitating rapid integration and collaboration across functional data teams (modelling, processing, reporting).
• Collaboratively defined the architecture and project structure for a central data pipeline repository, including hierarchical standards, knowledge management strategies, and role-specific responsibilities, enhancing maintainability and onboarding speed.
• Evaluated and validated open-source data routing tools (Airbyte, Apache NiFi, Dragster) for ingest and sync requirements in retail analytics, including local benchmarking and error-state testing.
• Led the design and deployment of Airbyte in Kubernetes, creating customized Helm charts, securing secrets handling, and configuring Ingress with TLS and internal DNS routing, ensuring full API and UI accessibility.
• Troubleshot and resolved Ingress controller issues, iterating through multiple stages of debugging and testing, and documented setup and replication steps for scalable reuse.
• Mapped data models to ARTS standard, supporting schema alignment for ERP and reporting use cases, and coordinated review loops to align future data processing logic.
• Drafted strategic 1-pagers comparing MinIO, Pub/Sub, and routing architectures, providing technical guidance for architectural decisions and investment planning.
• Enabled secure access and authentication mechanisms, including initial evaluation for SAML integration, cluster-level configuration reviews, and service annotation improvements.

• Designed, built, and launched an internal event planning web application used by over 100 department leads for a large event, despite having no dedicated testing phase.

• Ensured smooth, failure-free operation during first production use, leading to the tool being adopted for future events.

• Automated catering calculations and related workflows, significantly reducing email communication and manual computation effort for meal planning.

• Managed deployment and hosting on a Linux server using Coolify, including application setup and runtime operations.

• Hired and guided a communication designer on UX while independently owning all technical decisions and implementation.

• Complete greenfield rebuild across the whole stack — built AI-native: backend in Go and NestJS, PostgreSQL (CNPG) on K3s with GitOps/Terraform; frontend on Angular 22, zoneless.
• Orchestrated coding agents (e.g. Claude Code, Cursor) across the entire lifecycle — architecture, implementation, testing, reviews, documentation — driven by Specification-Driven Development (SDD).
• “Bruno” — LLM commentator persona backed by RAG and MCP for a personality that stays consistent across all generations (match previews, post-match reports, his own virtual bets).

Angular 22 (zoneless, without Zone.js), Claude Code, Claude Code Skills, CNPG, Cursor, Design Tokens (Spec for Code), Docker, Gherkin, Git, GitLab, GitOps, Go, Google Gemini, Grafana, Hetzner Cloud, K3s, Keycloak, Kubernetes, Lighthouse, LLM Integration, Model Context Protocol (MCP), NestJS, Node.js, NPM, Playwright, PostgreSQL, Prometheus, RAG, REST, Specification-Driven Development (SDD), Structured Outputs, Terraform, TypeScript, Vitest

• Design and build of a fully isolated AWS offline environment with no outbound internet access for running a browser-based business application
• Design and implementation of a proxy and response service that terminates all external application calls inside the VPC and serves them from locally stored content; identification of the actual communication needs through measurement-based DNS query logging
• Creation of architecture designs and decision papers including a comparison of options (Application Load Balancer with Lambda and S3, reverse proxy on EC2, private API Gateway) assessed by operational effort, cost, and availability
• Transfer of the solution and operations documentation previously available only for Azure to an AWS target architecture, including reassignment of all services and operational processes
• Automated rollout as Infrastructure as Code (Terraform, CloudFormation) with CI deployment via GitHub Actions, plus setup of private DNS zones and an internal certificate chain for operation without internet access
• Creation of architecture, deployment, and operations documentation and handover to the customer
• Build-up of a private cloud platform on OpenStack at provider TelemaxX with Terraform, including FortiGate HA clusters, FortiManager, and Kubernetes
• Introduction of Policy as Code (Open Policy Agent, Conftest) as well as development of MCP servers (Model Context Protocol) to connect AI assistants to operations and project tools

Successes:

• Made the business application fully operable without internet access for the first time; the cause of the loading error was narrowed down systematically to missing CORS headers after the likely certificate issue was ruled out
• Fully transferred an existing Azure concept to AWS and replaced the manually created environment with a reproducible, CI-based rollout

Technology stack: AWS (VPC, Application Load Balancer, Lambda, S3, Route 53 private hosted zones and Resolver query logging, IAM, CloudWatch, EC2, CloudFormation), Infrastructure as Code (Terraform, CloudFormation, Remote State), CI/CD (GitHub Actions with OIDC, Azure DevOps Pipelines), OpenStack, FortiGate, FortiManager, Kubernetes, Policy as Code (Open Policy Agent, Conftest), offline and air-gap architectures, PKI & certificates (internal CA, TLS, CRL/OCSP), DNS, network segmentation, Linux, Windows Server, Python, Bash, PowerShell, YAML, JSON, architecture design & decision papers, documentation (Confluence, Markdown), Generative & Agentic AI (Model Context Protocol, Agentic AI Coding Tools)

• Freelance product owner, scrum master and agile coach in various projects spanning from local agencies to multinational corporations in diverse industries.

• Last projects:

• Adevinta: Technical Project Manager responsible for coordination of several sub-workstreams building the world’s largest classifieds multi-tenant platform.

• Aroundhome (a ProSiebenSat.1 company): Product Manager implementing and verifying on the business side a concept for digital qualification of user requests for matching service providers.

• Peek & Cloppenburg Düsseldorf: Product Manager Mobile advising on and guiding the rebuild of Android and iOS apps.

• Visual Meta GmbH (an Axel Springer company), Berlin: Director Product co-leading the Product & Engineering department together with the Director Engineering.

• Responsibilities at Visual Meta GmbH:

• Define and deliver a 3–5 year horizon product strategy including a product vision & mission connecting to existing company strategy and strategies from adjacent departments.

• Refine an existing OKR process together with OKR master and directors of other departments to increase focus and outcome.

• Support the Director Engineering in creating a platform transformation strategy to transform a monolithic on-premise tech stack into a service-oriented, cloud-based architecture and establish a domain-based organizational setup.

• Accountability for a motivated and talented team of 5 head-level colleagues and 17 operational team members from product management, data and UX/UI design.

• Key achievements at Visual Meta GmbH:

• Defined and delivered a 3–5 year horizon product strategy including a product vision & mission.

• Increased focus within OKR process by moving from 10 company-level objectives to 2 and from several hundred team-level key results to a few dozen.

• Created a career path framework for the product team defining roles and responsibilities from junior to head level positions.

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Drive migration of enterprise authorization platform from Styra DAS to open-source OPA via Skipper (Zalando's Golang-based ingress proxy) integration
• Optimise k8s resources and integrate native Prometheus metrics with OPA
• Migrate from internal monitoring solution to Prometheus CRs + Dash0

Tech Stack: Java/Kotlin, Golang, Python, Spring Boot, AWS, Kubernetes, Docker, OpenTofu, Prometheus, Grafana

• Build and operate an end-to-end MLOps platform on Azure ML and Kubernetes (Kubeflow) for the automated deployment, monitoring, and scaling of forecasting models (including Temporal Fusion Transformer, Informer, Autoformer).
• Implement CI/CD pipelines in Azure DevOps for the full ML lifecycle – from resource provisioning (Terraform), data transformation (Hugging Face Datasets, Pandas, PyTorch, CUDA cluster) through training and evaluation to model registry and endpoint deployment.
• Integrate MLflow for experiment tracking, model versioning, performance monitoring, and automated registration in the Azure Model Registry.
• Develop and containerize PyTorch training jobs (Azure Notebook, Jupyter Notebooks) for price and time series forecasting (PFC models) with automatic rollout via Azure ML Endpoints and REST/gRPC interfaces, Docker containerization, secured with OAuth 2.0.
• Set up monitoring and alerting mechanisms (Prometheus, MLflow Metrics), log centralization, and cost monitoring.
• Automate infrastructure provisioning and model deployment using Terraform, Helm, and Azure CLI; connect to existing market data systems and event pipelines.
• Migrate existing workloads and databases (IONOS → Azure, MongoDB) with integration into central MLOps workflows and internal networks.
• Extend the platform with LLM-based tools (LangChain, LangServe) to integrate GPT-based analysis modules into existing Spring Boot services for market anomaly detection and automated reports.
• Analyze and architect a software solution to process large volumes of data efficiently (>3000 messages/sec.) (market data store).
• Spring Boot / Java 21 container development with RabbitMQ for distributing stock market data via MongoDB (Kubernetes) with fast storage of data in Redis RMaps, deduplication, forwarding messages to Read Model queues, and building Read Models for UI display in MongoDB.
• Integration of RESTHeart to create a REST API for MongoDB.
• Build an Angular frontend to simplify data queries and master data maintenance.
• Agentic coding with remote and local LLMs (Claude Sonnet, Ollama Qwen) and MCP servers.
• Develop Python scripts for transforming and cleaning incoming stock market data (Pandas, scikit-learn).

• Implementing cross-industry applications with LLMs
• Developing cloud infrastructure for clients
• Implemented end-to-end data pipeline to deploy models in real time
• Managed overall IT system administration and desktop support

• Fractional leadership; consulting growth-stage startups and scale-ups on data strategy, ML products, and platform foundations
• Building decisioning systems for growth, personalization, & product experimentation, across e-Commerce, Digital Health, Energy, and Logistics
• Exploring Agentic AI & LLM-based tooling for production readiness patterns

• Remodeling of the system architecture for an Azure-based platform aimed at rapid development of new functionalities
• Modeling of a staging concept for the fulfillment of diverse customer and QA needs
• Creation of requirements for, and oversight of, a proof-of-concept supplier project for a Flutter app with highly advanced BLE functionalities
• Comparison of multiple observability platforms for feasibility and requirements fit within the project environment
• Creation of a mobile app architecture based on domain-driven architecture
• Position of technical advisor and accountable solution architect for two development teams
• Execution of architecture reviews and alignment of changes with architectural expectations
• Skills & Technologies: Microsoft Azure , App Services, NodeJS Mono-repository, microservice architecture, domain driven design, self contained systems, requirements engineering, CI/CD, DevOps, API design, solution architecture

• Developed and deployed microservices in Kotlin and Spring Boot, integrated AWS Secrets Manager to secure credentials and decreased network calls using Spring cache.
• Refactored Kafka consumer using Spring Kafka with semaphore-based backpressure to cap records and keep heap memory stable under spikes; switched to batch upserts to cut down on database invocations; added Testcontainers integration tests for Kafka and database to pave the way for future changes.
• Automated the financial reconciliation workflow in Spring Boot (Kotlin) using Spring Scheduler, transactional boundaries, JPA/Hibernate on MySQL, and Flyway migrations, saving the accounts team 16+ hours per week.
• Designed and dockerized payments end-to-end test framework in Robot (Python) with reusable keyword libraries and profiles; integrated with GitLab CI (JaCoCo XML and HTML reports) to accelerate releases and lift code coverage to 80%.
• Implemented end-to-end observability on Datadog by instrumenting services with Datadog APM, correlating metrics and logs, provisioning dashboards, and creating monitors with burn-rate alerts and anomalies to harden reliability and give stakeholders clear visibility.