DevOps Experts in Germany

• Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
• Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
• Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
• Advised business units and IT on information security, security requirements, and risk-appropriate measures.
• Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
• Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
• Monitored and assessed current security advisories and security-related metrics (KPIs).
• Reviewed, assessed risks, and approved exception requests (Security Exceptions).
• Independently analyzed and handled Security Events and supported the handling of security incidents.
• Planned and supported awareness initiatives to strengthen security awareness.
• Created, implemented, and reviewed information security policies and standards.
• Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
• Defined and reviewed technical and organizational risk treatment measures.
• Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.

Agile Transformation: introducing agile principles and transforming traditional IT departments into Scrum and Kanban teams

IT Operating Model: redesigning the IT organization and introducing modern delivery structures and roles

Flight Levels: building up Flight Levels practices within IT to align strategy, coordination and operational execution

Leadership & Coaching: recruiting Agile Coaches and coaching Scrum Masters and IT leaders

ERP Operations: acting as Interim Product Owner for the existing ERP landscape and ensuring business continuity

ERP Transformation: reorganizing and supporting the ERP migration as a Project Manager; Phase 1 (financial accounting) live since October 2025

Operational Core (ERP): establishing dedicated teams for ERP Support, Feature Development, and ERP Migration

Modern Workplace: initiating the transition towards a Microsoft 365-based cloud workplace environment

Integration: establishing a dedicated team to drive integration and connectivity initiatives

Warehouse Operations: building a cross-functional team to support logistics and warehouse-related capabilities

Maintenance & Operations (M&O): introducing a dedicated team for system engineering, security, stable operations and continuous improvement

AI Initiatives: identifying and promoting practical Artificial Intelligence use cases across the IT department

As Interim Head of IT for a German medium-sized industrial distributor, I am responsible for 31 IT employees and lead the digital and organizational transformation, reporting directly to executive leadership. I took over an IT department with almost no basic structures – no clear roles, processes, documentation or ticket system – and with significant technical debt that tied up most of its capacity. Introduced agile principles and ways of working in the IT organization and transformed the traditionally structured IT department into cross-functional Scrum and Kanban teams focused on transparency, collaboration, and customer value delivery.

Redesigned the entire IT organization by establishing a modern operating model, introducing new roles such as Product Owner, Scrum Master and Solution Architect and strengthening the organization through strategic hiring and targeted capability development. Recruited and onboarded Agile Coaches to accelerate the transformation and personally managed and coached Scrum Masters as well as IT department leaders to foster servant leadership, self-management and a culture of continuous improvement.

Aligned IT-internal planning across eight teams to three Flight Levels based on Klaus Leopold (strategy, coordination, team), laying the foundation for later company-wide portfolio management. Consolidated the backlog of more than 10 workstreams and prioritized it by business value and cost of delay. Introduced a ticketing system to increase transparency and enable data-driven decision-making, flow-based work management, and greater accountability at all levels.

Established and supported multiple cross-functional teams, including the Operational Core (ERP) domain with dedicated streams for Support, Feature Development and ERP Migration, as well as teams responsible for Warehouse Operations, Maintenance & Operations (M&O) including system engineering and security, Modern Workplace, Data Quality and integration initiatives. Worked closely with Agile Coaches to support team development, remove impediments, and continuously improve delivery effectiveness.

Acted as Interim Product Owner for the operation and enhancement of the existing ERP landscape while supporting the ERP migration as a Project Manager. Reorganized the project organization and had the already negotiated contract with the implementation partner realigned with a focus on approach and overall responsibility; Phase 1 (financial accounting) has been live since October 2025. Collaborated with the selected implementation partner to design and establish the project organization and target operating model for the ERP transformation, introducing agile delivery structures and ways of working. Facilitated the alignment between business, IT and the external vendor and played a key role in negotiating the contractual framework and delivery model to ensure a sustainable foundation for the transformation program.

Initiated the strategic modernization of the workplace environment through the adoption of Microsoft 365 cloud capabilities, establishing the foundation for enhanced collaboration, scalability and future digital services.

Launched AI initiatives to identify practical business use cases and promote the responsible adoption of Artificial Intelligence across the IT department. Encouraged self-management and empowered teams to take ownership of decisions, delivery and continuous improvement.

I designed and built a self-service AWS platform for Data Science teams with little or no infrastructure-as-code experience. A team writes about 10 lines of Python and gets a deployable stack with full SDLC release cycle that already follows the governance rules. Networking, encryption, IAM and tagging are decided by the platform, not by each team.

New teams or AWS accounts are onboarded with one pull request. Waste prevention and cost control is built into the defaults: Data scientists don't need infrastructure skills.

• Construct library (AWS CDK, Python). Built a versioned catalog of about 20 hardened constructs for being used in data-science projects with ML context
• Governance as code
• Multi-account, multi-tenant
• Golden-path scaffolding
• CI/CD and supply chain. Built reusable GitHub Actions workflows
• Release engineering
• QA with e2e, contract testing and unit test coverage with each release candidate

Project – Evaluation and development of databases for a new product line for a measuring equipment manufacturer

• Current-state analysis
• Requirements analysis of the data storage layer
• Writing benchmark tests
• Design of the new database schema
• Database migrations
• Development of audit logging and Part11
• Creation of backup and recovery concepts
• Design of the persistence layer API
• Writing unit tests
• Creating requirements in Azure

Tools: C#, Visual Studio 2022, Azure DevOps, SonarQube, Git, RestSharp, WebServer, PostgreSQL, MS SQL, SQLite, MinIO, Podman, Docker, DataGrip, SQL Management Studio, HeidiDB, pgAdmin

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

• Create and lead roadmap forecasting of support opportunities, including colleague training, process design and improvement, and new hire onboarding.
• Collaborate seamlessly with cross-functional teams including Professional Services, Support, Product, Sales, and Solution Engineering.
• Manage business and financial KPIs in alignment with overall business objectives.
• Industrial IT & Data Integration: Implement, configure, and integrate OT/IT systems and data flows, connecting control-layer sources (DCS, PLC, SCADA) to historians, data platforms, and enterprise systems through APIs and standard interfaces.
• AVEVA PI & Historian: Configure, maintain, and extend AVEVA PI (PI Data Archive, Asset Framework, interfaces/connectors) to capture, contextualize, and serve real-time and historical operational data.
• Alarm Management: Support and optimize alarm management systems – e.g. Honeywell Alarm Management – including alarm rationalization, classification, and the analysis of alarm performance, critical alarms, and alarm floods.
• Connectivity & Protocols: Set up and troubleshoot industrial connectivity using OPC UA and OPC A&E, including the configuration of tunnelers / wrappers to bridge OT data sources securely and reliably.
• Production Data Flow: Ensure seamless, secure, and well-structured data flow across the industrial IT landscape, transforming raw operational data into meaningful information for operations and decision-making.
• System Support & Troubleshooting: Provide ongoing support for OT/IT applications, troubleshooting issues across networks, software, and data integrations to keep systems running efficiently.
• Knowledge Management & Best Practices: Contribute to internal documentation, best practices, and troubleshooting guides, and help continuously improve how we deliver industrial IT and data solutions.

Tools & Software: Aveva PI, Salesforce, Active Directory, Microsoft Dynamics 365, Jira, Microsoft, Scrum, DevOps, Docker, CI/CD, Jenkins, GitHub.

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

• Independently designed, conducted and evaluated a research project examining dynamic management capabilities (DMCs) in the implementation of HR practices at different management levels (top, middle and frontline management).
• Focus on the strategic role of frontline management in implementing effective HRM measures.
• Self-initiated project with academic collaboration involving York St John University, Robert Kennedy College and the University of Cambridge.

Further Development of the Integrated Capacity Management Platform InKa

Rail Infrastructure

• Power BI shared datasets and reports via DirectQuery on Amazon Redshift (timetable, construction and capacity data)
• Automated report testing with Playwright in Docker containers, version control with GitLab
• Concept and implementation of user communication (information page, changelog, known bugs)

Initial Situation:

The integrated capacity management platform (InKa) is a monitoring and analysis platform for data from timetable and capacity management: customer orders, infrastructure, timetable operations, construction, as well as route capacity and width. The data is stored and linked in a structured data warehouse. This makes it possible to create complex KPIs across different source systems and display current and future route utilization as well as construction activity across the network. The goal is to improve strategic, medium-term and intra-year planning and provide users with easy access to capacity management analyses.

Measures:

• Enablement: Introduction of Power BI with training and workshops for development teams.
• Consulting & Design: Problem analysis, concepts and solution consulting for reporting requirements; implementation of reporting solution plans.
• Data Model: Development of shared datasets with DirectQuery on Amazon Redshift and import tables; DAX measures for utilization and capacity KPIs.
• Development: Data analysis, data transformation and visualization in Power BI; extension and migration of business applications to Power BI; AI-supported development in VS Code with GitHub Copilot.
• Test Automation: Automated testing of Power BI reports with Playwright; setup of the test environment in Docker containers.
• User Communication: Concept and implementation of a central information page with hot news, changelog and known bugs, access from reports with report filters, updates via Power Automate.
• Deployment: Management of Power BI Deployment Pipelines across the DEV, TEST and PROD environments.
• Agile Working: Work in an agile team according to SAFe (Scaled Agile Framework); refinement of user stories and features including effort estimates in Jira; version control with Git and GitLab.
• Quality & Documentation: Reviews for quality assurance, error analysis and resolution, technical documentation in AsciiDoc and Confluence.

Technologies: Power BI, DAX, Power Query, DirectQuery, Amazon Redshift, Git / GitLab, Deployment Pipelines, Playwright, Docker, AsciiDoc, Power Automate, Jira, Confluence, VS Code with GitHub Copilot, SAFe

Results:

• Capacity management KPIs from multiple source systems combined on one platform
• Transparency regarding current and future route utilization and construction activity across the network
• Easy access to analyses for users
• Automated regression testing of Power BI reports
• User communication implemented: central information page with hot news, changelog and known bugs, directly accessible from the reports

• Electronics – Surface Solutions | Carve-out of IT, data and system landscape*

• Separation of a full business division's IT, data and system landscape following divestment across cloud, on-premises and connected laboratory systems; centrally governed investment envelope in the three-digit m€ range

• Laboratory notebook and laboratory analytics platform stream: Palantir Foundry, Snowflake, Signals Notebook, Power BI and connected laboratory instrumentation; SharePoint and JIRA; site transition completed without interruption to laboratory operations

• Decision authority and escalation point for business, IT infrastructure, IT security and vendors; separation executed across globally distributed users and systems and handed over on schedule, avoiding a contractual penalty for the client

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

• Analysis of existing microservice structures and integration into the event-driven architecture
• Design and implementation of prototypes
• Introduction of structured workflows and integration into a solid testing strategy
• Team: Small specialized team (3-5 people) from analysis through implementation readiness
• Documentation of architectural decisions and definition of interfaces
• Integration of the event-driven pipeline into the existing landscape
• Technologies: Kafka, Docker, Microservices, Event-Driven Architecture, Java, Liquibase