Enterprise Architecture Experts in Germany

• AI product development: Design of an AI-supported GRC platform to automate compliance processes.
• AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
• IT interim management and strategic consulting

Stabilizing an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps

• Proactive support of management in business field development & innovation management

• New development of a suite of business applications for analyzing valuation, P&L, and market price risk data

• Automation of all internal and external business and work processes

• Development of AI-based and AI-supported ETL processes as well as data analysis

• Business use-case development

• Business and work process optimization

• Enterprise architecture management

• Sales data analysis and forecasting as well as capture

• Inventory management & reordering

• Supplier management and communication

• Customs processing & clearance

• Shipping handling & warehouse coordination

• Interface management

• Technologies used: Microsoft Office 365, Microsoft Teams, JTL-Wawi, JTL-WMS, OTTO Partner Connect (OPC), Amazon Seller Central, DHL Global Forwarding, Jira, Draw.IO, Java (8,17,21,25), Jenkins, SonarQube, Git, Gitea, Spring Boot, Spring Batch, Vaadin, H2, PostgreSQL, Docker, Local LLMs, Postman, JasperSoft Studio, JasperReports

• As part of the project, the further development of the identity management system was driven forward. This included a comprehensive refactoring of the interfaces to the connected target systems. In addition, several special systems were successfully connected to the IAM to ensure end-to-end identity and authorization management.
• Technical design and solution proposals for IAM system development
• Requirements analysis and requirements management (IREB, BABOK)
• Alignment of the strategy with the future target architecture (TOGAF)
• Prototyping of solutions
• Documentation of requirements (Innovator)
• Analysis and documentation of requirements and creation of process models (UML, BPMN, ArchiMate)
• Modeling of requirements and system functionalities (OOA/OOD, UML)
• Further development of interfaces (SOAP, REST)
• Carrying out architecture reviews

With project PRIZMA, DB will modernize its infrastructure on the one hand, and develop a fail-safe IT landscape on the other hand, which can be restored quickly and securely in case of a disaster.

• Capture current architectures of existing systems as well as methodical consulting and development of target architectures
• Deepen and maintain the building plan / target IT landscape
• Implement technical architecture concepts & architecture descriptions
• Implement migration concepts for updating and further developing the platform and information systems
• Assess submitted improvement suggestions as part of the project
• Capability management: identify capability gaps, develop target visions, and support transformation planning within the enterprise architecture.
• Create a compatibility matrix of the components in use and compare dependencies of specific versions
• Create an IT concept for extending the platform with the following topics: hardware and software requirements, security, licensing, high availability, load balancing, backup & recovery, update strategy, monitoring integration, etc.
• Coordinate with business architects as well as technical architects from the cross-functional architecture area of the PRISMA program for the topics (backup, Active Directory, monitoring, Citrix, and business applications ...)
• Status meetings and alignment of project planning with the Release Train Engineer / Project Manager
• Advise the Release Train Engineer / Project Manager in identifying project risks
• Advise the System Architect Engineers in steering the implementation of the concept
• Implement the IT concept
• Document the infrastructure

Label: MS Project, LINUX, Windows, ORACLE, Java, REST, SharePoint, Microsoft Exchange, UML, Enterprise Architect, BPMN, AZURE, AWS, V-MODEL, Micro Service, VisualStudio, SAP S/4HANA, SCRUM(SAFE), ESB (TIBCO), Python, Innovator, LeanIX (TOGAF), Ansible, Ansible Tower, Ansible Automation, ROBOT, SpringBoot

• Capturing the current processes Incident Management, IT Service Request Management, Problem Management, Change Management, Service Configuration Management (including CMDB)
• Carrying out maturity assessments for these processes based on the ITIL® 4 Maturity Model
• Analyzing the different service value streams based on the ITIL® 4 value stream model
• Agreeing maturity levels for the processes being reviewed
• Developing and approving a roadmap to achieve and measure the respective maturity levels
• Presenting the approach, including milestones, to management for approval
• Managing external service providers in 1st level support

• Architected the Yatta Integration Layer – a config-driven integration platform on Java 25, Spring Boot 4 (WebFlux), Temporal, gRPC and Kafka, enabling new third-party integrations (e.g. AVS fulfillment) via declarative JSON configs with zero code changes.
• Designed and implemented Tink integration with 0Auth IBAN verification to enhance fraud prevention and account validation workflows with Adyen payByBank.
• Architected and implemented an OpenFGA-based authorization model for centralized management of users, groups, and fine-grained access control in the vendor portal.
• Architected and led delivery of the Yatta API Gateway platform using GraphQL Federation, providing a unified enterprise API layer across distributed microservices with centralized authentication, authorization and request orchestration.
• Replaced NGINX + NLB with Istio service mesh and AWS ALB; rolled out WAF, OAuth (Cognito), IP whitelisting and RBAC across environments.
• Migrated CDC from Confluent Cloud connectors to a self-hosted Kafka Connect + Debezium stack, reducing operational cost by ~80% across multiple environments.
• Implemented the Transactional Outbox pattern with Debezium for reliable, exactly-once event publishing to Kafka with Avro and Schema Registry.
• Migrated dunning/payment-recovery workflows from Airflow to Temporal, achieving 99.9% reliability for settlement handling.
• Optimised Apache Airflow with deferrable sensors to handle 1000+ concurrent DAG runs without scaling the worker pool.
• Refactored a monolithic Terraform codebase into 3 modular projects, cutting deployment time by ~45%.
• Stood up full observability with OpenTelemetry, Tempo, Prometheus and Loki; automated dev/staging/prod with ArgoCD, Image Updater and Helm.
• Collaborated with product, operations and engineering stakeholders to define scalable platform architecture and integration standards aligned with long-term business and operational goals.

maturing their API Practices on both, a Business and Technology level. My role encompasses strategy, architecture, developer advocacy as well as hands on software engineering, enabling both technical teams and business leadership to adopt and act on API- centric principles effectively. Coincidentally, we also establish GitOps, DX and Platform Best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, react, nodejs, typescript, redocly, reactive programming, CDC, golang, gingonic, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

Evaluation and selection of a new endpoint management platform for an environment with around 50,000 clients. Support for a manufacturing company in evaluating a future endpoint management platform as a possible replacement for the existing client management solution. Conducting a structured software selection process including proof of concept as well as preparing the decision basis for the Enterprise Architecture Board (EAM). Defining the technical requirements and evaluation criteria and creating a short list of possible solutions (Tanium, Baramundi, Microsoft Intune / MECM). Planning and supporting the technical proof of concept as well as evaluating the architecture and operations aspects of the different platforms. In addition, evaluating tools for migrating existing software packages from the Ivanti DSM environment. Comparing and testing IDERI Move and PACE for the automated transfer of the existing package structure to the new platform, with the goal of significantly reducing migration effort. Support in selecting the required Tanium modules as well as preparing the decision documents for the Enterprise Architecture Board.

Tools: Tanium, Baramundi, Microsoft Intune, Microsoft MECM, Ivanti DSM, IDERI Move, Pace, Windows 10, Windows 11, Windows Server. VDI

• Administration and further development of the M365 environment including Teams, Exchange Online, Intune and SharePoint Online
• Development of dashboards for performance monitoring using Microsoft Power BI
• Implementation of user requirements and processes with low-code/no-code technologies (Power Apps, Power Automate)
• Use of Jira and Azure DevOps to plan and implement user stories in an agile project context
• Participation in daily stand-ups, sprint planning, sprint reviews and retrospectives as technical point of contact
• Planning and implementation of security policies using Azure Conditional Access and multi-factor authentication
• Configuration and deployment of clients and applications via MECM (SCCM) and Baramundi

• Responsible for the solution architectures of the eGov solution "e-Akte" for KRITIS authorities of the state of NRW, tailored to the specific needs of the customers, as well as ensuring that these solutions can be operated efficiently and reliably
• Modeling the KRITIS IT architecture (cloud infrastructure, cybersecurity and development) using Archimate
• Ensuring IT governance, compliance, data protection, and the establishment of standards in line with the business strategy
• Managing service providers for the eAkte product nscale from Ceyonic
• EAM and LeanIX, documentation of IT systems, interfaces, technologies
• Solution architecture & stakeholder management, including business units & IT teams

UEF 3.0 · Semantic Government Overlay (SGO) · Autonomous Systems (UAS / dual use)

• Designed: Semantic Government Overlay (SGO) – AI-guided administration without replacing existing specialist procedures. Read-only semantic layer over registers and specialist processes based on the Federal Information Management (FIM). Decision authority remains with the case worker (architecture principle).
• Developed: Reference architecture with source-backed, derived statements (Executable Ontologies OWL/RDF/SHACL). Technically guaranteed purpose limitation and no-write-path principle in specialist data – auditable, without a central data pool.
• Anchored: Regulation as a design principle: EU AI Act (high-risk obligations for public-sector AI, fundamental rights impact assessment under Art. 27), GDPR, NIS2, and administrative automation limits (§ 35a VwVfG, § 31a SGB X) as technical control points in the architecture.
• Created: Methodical tool for pilot organizations: data pipeline assessment (phase 0), compliance blueprint, and management summary as a decision-ready package for public administration.
• Specified: UEF 3.0 as a successor architecture to TOGAF – decision paper, canonical ontology, six-layer architecture, read/actuate boundary, federation registry, terminology concordance, and release delta as a closed specification status.
• Architected: AI-native mission OS for autonomous UAS and ground robotics as a tactical layer on top of a separately approved autopilot. Run-time assurance according to ASTM F3269-21 (Simplex pattern): the verified safety controller keeps authority, the AI function provides suggestions.
• Designed: Three-tier architecture – Tier 0 autopilot with 650 Hz flight control on RTOS, Tier 1 AI OS with semantic world model and multi-agent cluster, Tier 2 swarm and ground mesh. Zenoh as the primary fabric, MAVLink as the only authenticated command path (single writer). Result: graceful degradation – loss of the mission, not of the aircraft.
• Secured: Two-gate chain on the read/actuate boundary – governance gate (can-question: AI Act risk class per actuation, enforced human oversight under Art. 14, immutable log) before the RTA safety monitor (is-it-correct question: flight envelope, geofence, energy reserve) with revert to the baseline controller.
• Anchored: Dual-use architecture with common core and build-time fork instead of runtime switch. Three separate legal levels: civil variant – UAS under the EASA Basic Regulation (EU) 2018/1139 with the limited applicability under Art. 2(2) of the AI Act, ground robotics under the Machinery Regulation 2023/1230 with the full high-risk obligation chain, Cyber Resilience Act for both; unarmed carrier variant as defense material under AWG/AWV and Dual-Use Regulation 2021/821 (BAFA approval); armed variant under KrWaffKontrG. Each variant lives under exactly one dominant legal regime. Evidence base: AI BOM, SBOM, and complete data lineage.
• Analyzed: System analysis and realignment of grown engineering system landscapes. Approach concept for consolidation without migration – semantic layer over the existing sources instead of data transfer. Result: decision-ready implementation concept including an evaluation model for the target architecture.

• Close collaboration with executive management to further develop the company’s technology vision and strategy
• Shaping the product portfolio by implementing innovative technologies and improving existing IT architectures
• Technical Lead – Center of Excellence Intelligent Automation (especially AI)
• Global Competence Center Lead – steering technical implementations & rollouts
• Program Lead – managing key topics in delivery
• AI Architect & Solution Architect – supporting and advising projects on requirements, solutions, and architecture (technical and functional)
• Data Strategy & Data Stack Definition – establishing a data strategy for the entire company, including implementation concept and evaluation, pilot, and selection of the data stack