Docker Compose Experts in Berlin

• Design of an LLM-based agent system to control the ERP software
• Development of agent workflows with LangGraph and PydanticAI
• Planning interfaces between business logic and language models
• Planning agent orchestration
• Prototype development and demonstration

Tools: Python, Pydantic, React, LangChain, LangGraph, Linux

• Developed a SolidJS frontend UI for a spectrometric water analysis system on an ARM-based embedded Linux platform
• Prototyped UI in TypeScript React/Nx with LitElements and MQTT integration
• Built production UI using SolidJS, SUID, i18next, Ajv, MQTT.js, C3.js
• Refined requirements with UX team and water analysis system engineers
• Defined and documented system architecture, MQTT message formats, frontend architecture, and development setup
• Set up frontend system from scratch, implemented domain-oriented type system, UI components, and application state
• Managed MQTT pub/sub services and schema-based message validation in frontend
• Coached two junior frontend developers
• Worked in an agile remote team using JIRA, Git, and Bitbucket

• Refactored the mobile app by reimplementing stores, models, API client, screens and components using Typescript
• Added performant on-device storage for stores as preparation for offline mode
• Integrated RNUILib to achieve a minimal and modern UI design quickly
• Implemented native packages to provide additional features such as displaying of caller IDs
• Planned feature development and UX improvements following initial refactoring and redesign

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

Geeks Ltd is a UK-based technology company; WordUp is its AI-driven language-learning product focused on personalized vocabulary learning and intelligent educational experiences.

• Coordinate AI product delivery across Product, Engineering, Data, Operations, and leadership, translating user needs into scoped initiatives, sequencing work, surfacing blockers, facilitating hand-offs, and communicating progress.
• Own search, recommendation, retrieval, and content-enrichment features end to end, from requirements and architecture through Python/FastAPI implementation, testing, deployment, monitoring, and rapid iteration.
• Developed low-latency retrieval, ranking, and personalization services using AWS, OpenSearch, DynamoDB, embeddings, and reusable APIs, achieving <1s latency, 22% higher engagement, and 12% higher premium conversion.
• Use AI coding assistants for codebase analysis, scaffolding, refactoring, tests, debugging, and documentation while reviewing every output for correctness, architectural fit, security, maintainability, and user value.
• Represent technical work in planning and stakeholder discussions, gather requirements first-hand, challenge priorities constructively, explain delivery trade-offs, and help teammates make outcome-focused decisions.

• Built full CI/CD pipelines using GitHub Actions, Docker Compose, PostgreSQL, PHPStan, Newman, Gitleaks, Trivy, SQL validation, and HTMLExtra reporting.
• Implemented automated SQL import in CI (docker-entrypoint-initdb.d) and custom Postman collection merging with Node.js for deterministic API testing.
• Created organization wide PR auto labeling workflow and a Developer Mapping System (GitHub, Developer, Discord) for targeted CI notifications.
• Developed full local DevOps environment (Dockerfile.local, Nginx and Supervisor) and a 400+ line Makefile supporting CI2, local CI replication, testing, monitoring, and pre-commit checks.
• Built strict SQL validation system enforcing safe migration rules and blocking unsafe PRs.
• Automated QA reporting: HTMLExtra, GitHub Pages deployment and auto pruning.
• Implemented production API monitoring (Bash, Python, cron and Telegram alerts).
• Built and deployed Mintbot automation (GraphQL queries, retries, logging, cron).
• Designed backend and database deployment automation (SQL diff detection, DB cloning, SSH ProxyJump deployment, rollback logic, Discord notifications).
• Created reusable workflow library (Discord messaging, artifact upload, Trivy, Gitleaks, branch sync, auto update PR, auto label).
• Designed internal DevOps Dashboard architecture for CI health, PR freshness, repo analytics.
• Built GHCR base image pipelines with FFmpeg, Rust, and PHP extensions for faster CI builds.
• Standardized .github/ documentation, naming conventions, workflow structures.
• Introduced Dependabot for the backend repository and built Cloudflare Worker for CVE alerts to Discord.
• Implemented GitHub Actions enforcement: required checks, blocked outdated PRs, protected branches, mandatory reviews.

• Provisioned a Kubernetes platform on Open Telekom Cloud CCE with comprehensive network isolation
• Built a VPC architecture with public, private, and data subnets
• Integrated managed services: RDS PostgreSQL, DCS Redis, DMS Apache Kafka
• Implemented monitoring with Cloud Eye and Log Tank Service

IMPACT: Cloud Infrastructure Engineer delivered a production-ready platform in 5 days with full network security isolation

• Owning, designing, securing, maintaining reliability of the cloud based platform environments
• Increasing developer productivity and growing the infrastructure team horizontally and vertically to 5 engineers
• Realised infrastructure cost reduction of 50% by utilizing efficient spot instances
• Improved PE developer efficiency by 15% with survey led development process

• Implemented a command line interface (CLI) for integration of REST APIs of various microservices for end users
• Centralized and simplified interaction with services through the CLI
• Implemented a REST microservice for custom data schemas based on an API-first approach
• Developed event-driven control with RabbitMQ to connect to other services
• Deployed services using Docker and Kubernetes and extended the CLI
• Managed complexity and data volume handling through the microservice

• Support daily bakery operations by maintaining hygiene standards.
• Collaborate effectively within a team to ensure smooth production flow.