Encryption Experts in Germany

• Operation and further development of the network and security infrastructure.

• Monitoring, analysis and resolution of network and security incidents.

• Cross-departmental collaboration with other teams on operations and further development, and reporting.

• Firewall vulnerability analysis.

• Firewall access requests.

• Troubleshooting IP communication issues on network and firewall infrastructure.

• Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.

• Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5

• Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI

I designed and built a self-service AWS platform for Data Science teams with little or no infrastructure-as-code experience. A team writes about 10 lines of Python and gets a deployable stack with full SDLC release cycle that already follows the governance rules. Networking, encryption, IAM and tagging are decided by the platform, not by each team.

New teams or AWS accounts are onboarded with one pull request. Waste prevention and cost control is built into the defaults: Data scientists don't need infrastructure skills.

• Construct library (AWS CDK, Python). Built a versioned catalog of about 20 hardened constructs for being used in data-science projects with ML context
• Governance as code
• Multi-account, multi-tenant
• Golden-path scaffolding
• CI/CD and supply chain. Built reusable GitHub Actions workflows
• Release engineering
• QA with e2e, contract testing and unit test coverage with each release candidate

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

• PMO Lead Security Clearance 2 (SÜ2) verified
• Reporting to the GMN sub-program management
• System maintenance 25+
• Functional management and coordination of the Jira setup
• Preparation of decision papers (e.g. project planning, governance model, communication plans, controlling models, roles and responsibilities matrices)
• Development of program-wide knowledge management using Confluence, creation of Jira concept
• Development of an access concept for all project tools
• Analysis of existing processes, identification of improvement potential, and design of solutions to increase efficiency and effectiveness
• Development of a concept for introducing automation approaches into existing tools
• Creation of intranet articles for project marketing
• Responsible for project governance through reporting and resource planning in the sub-program
• Agile development of the project methodology
• Gathering customer requirements (Requirements Engineering)
• Preparation and support of contract negotiations (7-year term, 500+ million budget)

• Opt-in RAG extension over tenant-owned data sources (SharePoint, Confluence) on existing multi-tenant enterprise AI platform
• Architecture: ADRs, solution evaluations, permission strategy, cost modeling
• End-to-end SharePoint and Confluence connectors: OAuth consent flows, token refresh, metadata sync, search integration
• Permission resolution: ACL indexing at ingestion and query-time verification (document-level security)
• Elasticsearch hybrid search (semantic + keyword) with RRF scoring
• RAG chat with context injection and source citations
• Stack: Elastic Cloud, Elasticsearch, Docker, Northflank, Next.js, React, TypeScript, Prisma, Microsoft Graph API, Atlassian REST API, OAuth 2.0

• Designed and implemented modular AI assistants for sales and business processes within the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, Hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP servers, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting, and mentoring within the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

• Designed a migration strategy for WLS applications to BKA Cloud and Stack IT

• Created a hybrid cloud for internal testing and development with Kubernetes

• Transformed the IT landscape from an outdated monolithic architecture to a cloud-based architecture

• Integrated new CI/CD processes using Azure Pipelines

• Quadrupled the processing throughput for personnel security checks

• Migrated personnel security screening applications to Docker-based applications

• Implemented CI/deployment pipelines using Azure DevOps

• Environment: Java Springboot, Kubernetes, Oracle Weblogic, OpenID, Camunda, JUnit, TOGAF

Participation in the EU-funded MORANE-2 project to validate the Future Railway Mobile Communication System (FRMCS) in real-world use cases: preparation of the requirements specifications for TOBA and the associated test specifications.

Technologies: 5GS (Radio & Core), FRMCS, MCx (MCPTT, MCData, MCVideo), MC Gateway UE, MCx Priority/Security/QoS Management, ETCS, SIP, IMS

CRM and revenue platform managing billing and subscription workflows.

• Scaled payments infrastructure across data products, direct debit expansion and automated abuse prevention, generating $416K in annualized operational savings ($8K/week) by eliminating redundant gateway calls.
• Owned backlog and sprint execution for autonomous checkout abuse detection pipelines, designing real-time risk guardrails and velocity heuristics that blocked card testing attacks.
• Architected enterprise billing migrator user stories and data reconciliation mechanisms, achieving zero-downtime subscription state transitions and cutting $60K in infrastructure overhead.
• Expanded European direct debit (SEPA) payment capabilities, managing cross-squad API dependencies and automated webhook error-handling to eliminate checkout friction.

Independent, part-time open-source engineering focused on build-time tooling for Next.js, React, MDX, and JavaScript/TypeScript compiler pipelines.

• Built next-slug-splitter to optimize content-driven Next.js applications. It analyzes MDX content at build time, resolves component usage, and generates route-specific handlers so pages avoid sharing the full catch-all component bundle.

• Created supporting plugins and utilities for scoped MDX transformations, nested component dependency resolution, compile-time refinement, safe ESTree evaluation, and object-graph diffing.

• Own architecture, API design, implementation, automated testing, npm publishing, documentation, demos, and performance benchmarking.

Building blocks:

• remark-scoped-mdx: Context-aware AST transformations with nested scope isolation, typed component registries, and prop inference.

• recma-component-resolver: Dependency-graph analysis and selective component forwarding across nested MDX includes.

• recma-static-refiner: Build-time prop extraction, schema validation, derivation, and pruning.

• estree-util-to-static-value and object-graph-delta: Safe static evaluation and deterministic, cycle-safe structural diffing.

Tech Stack:

• Frameworks: TypeScript · Next.js · React · MDX

• Compiler tooling: Unified · Remark · Recma · MDAST · ESTree · ts-morph · esbuild

• Competencies: Static analysis · AST traversal and transformation · dependency graphs · code generation · schema validation · route and bundle splitting

• Tooling: Vitest · tsup · npm · performance benchmarking

• Managed global large customer segment
• Acquired international projects
• Conducted key account management in IT lifecycle management
• Implemented IT remarketing and end-of-life asset return processes
• Oversaw certified data erasure and media destruction
• Provided IT asset management consulting
• Managed asset recovery, IT logistics, returns management, excess inventory and brokerage

PROFILE Senior Oracle specialist, consultant and DBA with many years of experience in planning, architecture, installation, migration, operations, performance tuning and troubleshooting of large Oracle database environments. Focus on Oracle Database 19c and enterprise architectures with RAC, Active Data Guard, Golden Gate, Exadata, RMAN and CDB/PDB. Experience in heterogeneous enterprise environments on Linux, AIX, Solaris, HP-UX and Windows, as well as in cloud and migration projects. Over many years, worked as a technical consultant, DBA, architect and project manager for banks, insurers, energy providers, public institutions, industry, automotive and aviation. Combining technical Oracle expertise with operations concepts, migration, project planning, documentation and customer consulting.

ORACLE FOCUS AREAS

• Oracle Database 19c – installation, upgrade, patch/RU management, operations and troubleshooting
• Oracle Database 21c / 23ai / 26ai – knowledge of current Oracle release lines
• Oracle RAC, Active Data Guard, Data Guard, Oracle GoldenGate
• CDB / PDB, multitenant architectures and enterprise database operations
• Oracle Exadata and highly available database environments
• RMAN – backup, restore, recovery, migration and disaster recovery scenarios
• Data Pump (EXPDP / IMPDP), Transportable Tablespaces (TTS) and database-based migrations
• Performance analysis, SQL / PL/SQL, tuning, troubleshooting and capacity planning
• Oracle Enterprise Manager / monitoring and technical operational support
• Oracle Security: Wallet, TDE, Database Vault, VPD / RLS
• Oracle DWH / BI: OBIEE, ODI, OWB and Discoverer
• Oracle Applications / E-Business Suite and Oracle-based application environments

CURRENT PROJECTS

Scope Solutions AG, Basel / CH | 08/2023 – ongoing Oracle Project Management and DBA

• Installation, maintenance and regular upgrades of Oracle database systems with a focus on Oracle 19c.
• Patch and release management including OPatch and Release Updates; operations on RHEL 8.x, SLES 15.x and Windows.
• DBA support for customers in DACH and Europe and support of production, load test and other CDB/PDB environments.
• Technical operating processes and documentation via Confluence; support and service requests via My Oracle Support / Metalink.

Federal Employment Agency, Nuremberg | 04/2022 – 10/2023 Oracle Operations Support / DBA

• Operations and regular upgrades of Oracle-19c database systems on SLES 15.x.
• DBA for around 2,100 PDBs on RAC and Exadata in production, integration, load test and other environments.
• Configuration management via ARS Remedy; workflows and technical documentation via Jira and Confluence.
• Operations support and processing of service requests via My Oracle Support / Metalink.

Federal Statistical Office, Wiesbaden | 09/2021 – 03/2022 Oracle Operations and Architecture – 2022 Survey

• Merging data into a central Oracle-19c database system.
• Design of import/export procedures for the central data structure.
• KPI and performance architecture for analyses.
• Training employees in Oracle performance and DBA topics.

E.ON Digital Technology, Landshut / KKI | 03/2019 – 12/2021 Oracle Operations, Architecture and DBA

• Patch concepts, technical documentation, installation, database administration and operations of Oracle 12c/19c.
• AIX 7.x, LPAR administration including VIO server and software distribution with NIM.
• Performance monitoring and monitoring.
• Backup and restore with TSM / IBM Spectrum Protect and Oracle RMAN.
• Installation of Enterprise Manager 13c with WebLogic Server 12.1x; employee training.

KaPe Munich – various end customers in DACH / Europe | ongoing / various projects Oracle DBA, architecture, migration, DWH consulting and project management

• Many years of consulting and operational DBA work in various Oracle architectures.
• DWH/CRM platforms: planning, analysis, performance and tuning, as well as business analysis.
• RAC, Data Guard, Transportable Tablespaces, RMAN and Oracle 11g/12c in enterprise environments.
• Customer projects including Burda, Deka, E.ON, Otto Group and Augsburger Allgemeine.

AXA, Germany / Europe | 09/2018 – 02/2019 Oracle DB Operations and Migration – Cloud Architectures

• Planning, methodology and execution of Oracle database migrations to IBM Private Cloud / Spectrum and AWS Public Cloud.
• Creation of Oracle databases in the cloud with SLES and Terraform templates.
• Technical architecture work and cloud KPIs.

RWE / SÜWAG / Syna, Germany | 07/2016 – 09/2018 Oracle DB Migrations 11g/12c and Project Management

• Design, planning and execution of Oracle database migrations 11g → 12c with platform and architecture changes.
• Windows Server 2012/2016 and setup and migration of Enterprise Manager/WebLogic-based monitoring environments.
• Use of Data Guard, TTS, EXPDP/IMPDP and RMAN based on analysis of application requirements.
• Performance and tuning for Oracle 11g/12c.

MTU Aero Engines, Munich | 01/2016 – 03/2017 Oracle DBA / Requirements Engineer

• Operations and development of Oracle 11g/12c databases and application workflows.
• Interfaces to SAP via BAPI.
• Design and management of APPS modules with Visual Basic / Visual Studio and PL/SQL; version control with SVN.

UBIS (HVB), Munich | 04/2012 – 08/2015 Oracle Operations, Architecture, DBA and Project Management

• Oracle-based operations and migration of MUREX and Sophis trading platforms.
• Oracle Security, Wallet, Tablespaces, RAC, Data Guard, Database Vault, GoldenGate and DWH.
• Project management for Oracle DWH migrations and release changes from 10g to 11gR2.
• Migration OWB 11gR2 → ODI 12c and introduction of Oracle Database 12c.
• Platforms: Red Hat, AIX and Solaris.

WWK Deutschland a.G., Munich | 09/2010 – 03/2012 Oracle DB and HP-UX → Linux Migration

• Architecture, planning, operations concept and migration of 104 databases from an HP-UX cluster to Red Hat Linux.
• Single Instance with Veritas Cluster and 2-node RAC 11.2.0.2; four Data Guard databases.
• Project management for OWB/DWH migrations (>1 TB), including tuning, PL/SQL, mappings and metadata.

Allianz Deutschland, ACAS Stuttgart | 03/2010 – 09/2010 Technical DWH Project Manager

• DWH project for processing European ETL data sources.
• Business analysis and requirements management for automated loading processes.
• OWB, PL/SQL, SQL*Loader, Oracle Advanced Security / TDE, Oracle BI and Database Vault.

NETMA, Munich-Taufkirchen | 08/2007 – 02/2010 Oracle Specialist and DBA for Oracle Applications 11i

• Operations of Oracle 9i/10g and Oracle Applications 11.5.10.
• Design and development of APPS modules with PL/SQL and SVN.
• Oracle RAC, Enterprise Manager, Oracle Application Server and migration tests.
• Platforms: AIX, SLES, Windows and HP-UX.

BT Germany, Munich | 11/2007 – 04/2008 Oracle DB Migration

• Migration from Oracle 8i to 10gR2 in a Solaris cluster environment.
• Preparing offers, project planning and process planning.

Itellium (KQ), Nuremberg | 02/2007 – 08/2007 Oracle DWH Specialist

• Design and analysis of a DWH focusing on master data and logistics.
• Oracle Designer, OWB, Oracle Database, ETL, PL/SQL and External Tables; data volumes up to approx. 5 TB.

Oracle Deutschland GmbH, Munich | 10/2006 – 02/2007 and further assignments Oracle Specialist / Consultant – Data Migration and DWH

• Consulting for customers such as Volkswagen, GE Money Bank, WeKa, KSB, Swisscom and British Telecom.
• Migration Discoverer EUL4 → EUL5i, database optimization, Data Guard and web/database analysis.
• Performance and tuning on Solaris and Linux.

HaSpa, Hamburg | 07/2006 – 10/2006 Oracle Specialist / Consultant – Data Migration and DWH

• Setup of an Oracle-10gR2 environment for banking applications.
• Data transfer from DB2 / OS390, architecture, sizing, tuning and performance.
• Data preparation and integration with OWB.

AUDI, Ingolstadt | 02/2005 – 06/2006 Oracle Consultant and DBA

• Operations, installation and maintenance of Oracle 9i/10g and IAS 10g.
• RMAN, Oracle RLS, Oracle HTMLDB, Veritas Cluster, Solaris and AIX / HACMP.
• Database cloning and migration 9i → 10g; approx. 200 systems up to 4.5 TB.

Photocolor, Kreuzlingen / CH | 11/2003 – 01/2005 Project Manager / Oracle

• Implementation, configuration, technical support and acceptance of an Oracle ERP/CRM solution.
• Oracle Applications, Oracle 9i, Solaris, HP-UX, OWB and Mercury TestDirector.
• Project scope approx. 2 TB; reporting to management.

ZPD NRW, Duisburg | 05/2003 – 10/2003 Oracle Consultant

• Consulting, PL/SQL training and project planning for a nationwide Oracle Forms integration.
• Oracle on HP Superdome / HP-UX; data volume 1.2 → 2.5 TB, sizing up to 5 TB.

Messe München GmbH | 11/2002 – 05/2003 Project Manager / Oracle

• MIS/DWH solution with OWB, Discoverer, Oracle 11i / 9i and RAC.
• Architecture, design, integration, troubleshooting and consulting for data volumes of 1.5–2 TB.

Aria SA Integration, Geneva / CH | 09/2002 – 11/2002 Oracle DBA and Consultant

• Oracle 8.1.7.4 / 9i; merging the Stuttgart and Geneva databases via replication.

• Analysis and optimization of the VMware environment for operation in a KRITIS environment
• Planning and implementation of updates to the VMware and hardware environment in a KRITIS environment
• Set up Skyline Health Diagnostics
• Review of the existing documentation
• Training and onboarding of new internal employees
• Support with migration and upgrade projects
• Preparations for moving scripts in the virtualization environment to GitLab
• Ticket processing with Service.Now

• Processing and coordination of IT tickets (Helix, Omnitracker) incl. VIP support and remote support (Microsoft Teams, RDP, FastViewer)
• Onsite support at the main location as well as support for modern conference and meeting room technology (e.g. MeetingBoard 75 Pro)
• User and rights management in Active Directory (Active Roles), Azure AD, Exchange and MDM
• VDI support and monitoring with Citrix Director and Aruba Networking
• Endpoint management and policy administration via Ivanti
• Deployment, configuration and lifecycle management of clients (Dell notebooks, iPhones, iPads)
• Hardware rollouts for new employees incl. shipping across Germany
• Asset and license management as well as organization of site migrations