DevOps Experts

The client operates a SaaS platform for managing rail and intermodal transport (Rail-Flow Transport Management Platform).

For two of its customers, it was looking for a 3-month project management replacement. Both customers offer rail and intermodal transport services. Implementation progress differs: one customer is already live and wanted its Phase 2 enhancements implemented; the other customer is implementing its MVP and entering an intensive testing phase.

As part of the assignment, project management was taken over, including management of the internal development team (offshore Turkey).

• Took over complete project management for 2 customer projects, including the roles of Product Owner and Co-Scrum Master
• Managed agile implementation teams consisting of business analysts, implementation consultants, developers (offshore) and QA staff
• Ensured compliance with and further development of project governance
• Planning and rollout management: creation and maintenance of project and rollout plans as well as coordination of role assignments with the client’s management
• Requirements and change management: management of contractual requirements, bugs and changes
• Customer and project communication: organization and moderation of status meetings and steering committees
• Identification of project risks, initiation of countermeasures and escalation
• Ensured correct and timely invoicing for project services together with Finance

Methods: Scheduling (forward- and backward-based), including milestone planning, structured interviews, multi-project management (in English)

Tools / Technologies: Jira, Confluence / Atlas, Claude (Skills, Artifacts), MS Outlook

• Introduction of a new digital product to the Chinese market as part of a global growth strategy.

• Point of contact and coordinating interface between central product management, local Chinese teams and international stakeholders.

• Management of the entire program to coordinate complex digital projects.

• Successful market launch of a digital product in China (including successful certification for the Chinese market).

• Balancing local requirements with global priorities while taking tax and regulatory requirements into account.

• Introduction of a new way of working to improve collaboration and coordination across locations.

• Development and implementation of a scaling strategy for the digital business model in China.

• Use of Jira, Confluence, Miro, Scrum, agile working, SAFe.

• Project language: English.

• Agile Transformation – introducing agile principles and transforming traditional IT departments into Scrum and Kanban teams

• IT Operating Model – redesigning the IT organization and introducing modern delivery structures and roles

• Flight Levels – implementing Flight Levels to align strategy, coordination and operational execution

• Leadership & Coaching – recruiting Agile Coaches and coaching Scrum Masters and IT leaders

• ERP Operations – acting as Interim Product Owner for the existing ERP landscape and ensuring business continuity

• ERP Transformation – supporting the migration from Microsoft Dynamics NAV to Microsoft Dynamics 365 Business Central as a Project Manager

• Operational Core (ERP) – establishing dedicated teams for ERP Support, Feature Development, and ERP Migration

• Modern Workplace – initiating the transition towards a Microsoft 365-based cloud workplace environment

• ConnectHub – establishing a dedicated team to drive integration and connectivity initiatives

• Warehouse Operations – building a cross-functional team to support logistics and warehouse-related capabilities

• Maintenance & Operations (M&O) – introducing a dedicated team focused on stable operations and continuous improvement

• AI Initiatives – identifying and promoting practical Artificial Intelligence use cases across the IT department

• As Interim Chief Digital Officer (CDO) for a leading industrial supplier with a strong e-commerce focus (often described as 'the Amazon for industrial goods') responsible for leading the digital and organizational transformation while reporting directly to executive leadership.

• Introduced agile principles and ways of working across the organization and transformed the traditionally structured IT department into cross-functional Scrum and Kanban teams focused on transparency, collaboration, and customer value delivery.

• Redesigned the entire IT organization by establishing a modern operating model, introducing new roles such as Product Owner, Scrum Master and Solution Architect and strengthening the organization through strategic hiring and targeted capability development.

• Recruited and onboarded Agile Coaches to accelerate the transformation and personally managed and coached Scrum Masters as well as IT department leaders to foster servant leadership, self-management and a culture of continuous improvement.

• Implemented Flight Levels practices based on Klaus Leopold to align strategic objectives, cross-functional coordination and operational execution across the organization.

• Introduced a ticketing system to increase transparency and enable data-driven decision-making, flow-based work management, and greater accountability at all levels.

• Established and supported multiple cross-functional teams, including the Operational Core (ERP) domain with dedicated streams for Support, Feature Development and ERP Migration, as well as teams responsible for Warehouse Operations, Maintenance & Operations (M&O), Modern Workspace and ConnectHub.

• Acted as Interim Product Owner for the operation and enhancement of the existing ERP landscape while supporting the migration from Microsoft Dynamics NAV to Microsoft Dynamics 365 Business Central as a Project Manager.

• Collaborated with the selected implementation partner to design and establish the project organization and target operating model for the ERP transformation, introducing agile delivery structures and ways of working.

• Facilitated the alignment between business, IT and the external vendor and played a key role in negotiating the contractual framework and delivery model to ensure a sustainable foundation for the transformation program.

• Initiated the strategic modernization of the workplace environment through the adoption of Microsoft 365 cloud capabilities, establishing the foundation for enhanced collaboration, scalability and future digital services.

• Launched AI initiatives to identify practical business use cases and promote the responsible adoption of Artificial Intelligence across the IT department.

• Encouraged self-management and empowered teams to take ownership of decisions, delivery and continuous improvement.

Project language: German

• Claude Code subagents, MCP, Pydantic V2, pytest, bandit

• Designed and shipped 3 specialized agents that hand work down a line: a research agent writes a cited implementation spec, a coding agent builds the modular code and its tests, a review agent ranks findings by severity and applies the fixes. Each handoff is a structured document, so no stage depends on another agent's context window.

• Connected the research agent to an academic-research MCP server (Semantic Scholar, ArXiv, Hugging Face Hub, citation snowballing) so every reference traces to a tool result rather than the model. Gated commits behind ruff, mypy, pytest and bandit, required human sign-off before installs and commits, and persisted session state on disk so long runs survive a context reset.

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Reporting and controlling using Power BI for a production ERP system

• Analysis of ERP data and interfaces for use in Power BI dashboards
• Evaluation and migration of existing reports (e.g. Excel) to Power BI
• Development of an authorization concept for selective data access
• Documentation and training on the use and customization of Power BI dashboards

Label: Power BI, Excel, SelectLine ERP, Microsoft SQL, SQL Server Management Studio

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• New development and further development of the existing MS Dynamics CRM

IT systems: Microsoft Dynamics Customer Service, SharePoint, DevOps, SAP IS-U

• CRM implementation / further development
• Taking over from the previous service provider
• Business process analysis
• Agile project organization
• Business analysis / requirements engineering with AI support
• Use of AI in development
• Analysis of master data processes
• CRM customer data management
• Requirements documentation
• Stakeholder management
• Workshop moderation

Project: Defect Generation on Test-Bench Images of Metal Surfaces Environment: Automated Visual Inspection (AVI), Metallurgy & Manufacturing

• Objective & Implementation: Designed, architected, and trained Generative Adversarial Networks (Pix2PixHD / SPADE) for image-to-image transformation. Targeted generation of synthetic material defects (e.g., cracks, inclusions, scale) on rough metal surfaces under real test-bench lighting conditions for privacy-compliant and efficient dataset expansion (data augmentation).
• Technical Design: Implemented robust Generative AI and computer vision pipelines in Python and PyTorch. Used semantic segmentation approaches for mask-controlled defect synthesis and subsequent evaluation with EfficientDet object detection models.
• Business Impact: Massive dataset upscaling (10x) without time-consuming and costly physical test-bench runs, while significantly improving the detection performance of automated inspection systems.

Technologies & Skills Used: Python | PyTorch | SPADE | Pix2PixHD | EfficientDet | Machine Learning | Semantic Segmentation | Computer Vision

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Developed a browser-based platform for Kubernetes no-code deployment and cluster management
• Developed a CLI in TypeScript to deploy resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security, and used Kyverno. Implemented IAM integration for the command-line utility tool.
• Designed role and permission models for Keycloak, OAuth/OIDC, and social login flows.
• Used LLMs to convert user intent into diagrams.
• Worked on integration with multiple sovereign clouds like StackIT, Hetzner, CIVO, UpCloud, plus public clouds like AWS, GCP, and Azure
• The technology stack includes Java, Spring Boot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

• Expert in the company's architecture management area

• Support for standardizing the company's IT landscape

• Further development of architecture management

• Shaping the company's business architecture

• Restructuring, administration and maintenance of all IT assets

• Support in creating a unified software asset management and CMDB

• Creation of unified document management (e-file)

• Transition of documents into a central DMS structure

• Link between architecture management and the department's internal business process management

• Support in developing strategic and tactical development plans

• Organizing communication with key stakeholders

• Support in the conception, organization and coordination of the architecture office to be built up

• Accompanying and advising the entire architecture management process

• Advising the company's business units on architectural topics and their framework conditions

• MS Office, Windows 10, VBA

• ITIL, TOGAF, PowerBi, Kanban, Scrum

• Internal agency tools

• Open Touch Conversation, Webex, wire, bdbos

• MS Sharepoint, JIRA, Confluence

• ARIS, Archimate, BPMN