GitHub Actions Experts in Germany

Product:

• Built a production-ready AI platform for generating brand-aware marketing images and videos from product data, user requirements, and uploaded media.
• Own the platform architecture, technical roadmap, API design, security, deployment workflow, operational reliability, and model-provider strategy.
• Developed the core platform in .NET and built supporting AI and workflow prototypes in Python, applying language-independent API contracts and structured interfaces between services and model providers.
• Implemented reliable background processing with RabbitMQ, persisted workflow state, idempotent handling, retries, failure recovery, logging, secure storage, authorization, and credit accounting.
• Made pragmatic build-versus-buy and model-routing decisions based on reliability, latency, cost, and maintainability rather than novelty.

Agent Orchestration & RAG Systems

• Built and compared agent workflows using Microsoft Agent Framework, LangGraph, and LangChain, including tool use, conditional routing, clarification steps, state management, and hand-offs between agents.
• Implemented reusable .NET components for agents, prompts, tools, model providers, structured responses, and retrieval with pyvector, making it easier to change AI providers without rewriting the core workflow.

• Analysis of the existing CAN communication between microcontrollers
• Analysis of the sensors used and the measured values collected
• Planning the CAN messages for transmitting the measured values
• Iterative adjustment of the microcontroller code to the new CAN messages
• Cross-compilation from x64 to arm64

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

• Development of scalable backend applications with C#/.NET and Java
• Design and implementation of distributed microservice architectures
• Development and integration of REST APIs for industrial applications
• Development of modern web applications with React, Angular, and TypeScript
• Implementation of MQTT-based communication solutions
• Integration of industrial protocols such as OPC UA and Modbus TCP
• Development of batch, process control, and HMI components
• Containerization and deployment of applications with Docker
• Conducting code reviews and supporting architecture decisions
• Close collaboration with product owners, QA, and interdisciplinary teams
• Analysis of business requirements and implementation of technical solutions
• Further development of existing software architectures with a focus on maintainability and performance

Technologies: C#, .NET, ASP.NET Core, Java, C++, React, Angular, TypeScript, Vue.JS, MQTT, OPC UA, Modbus TCP, Docker, GitLab, MariaDB, MySQL, Linux

• Ride-sharing and bus platform, live and working. Backend Spring Boot 4.1 on Java 21, PostgreSQL with Flyway, Testcontainers integration tests. Running in my own AWS account (ECS Fargate, ALB, ECR, IAM least privilege) with CI/CD via GitHub Actions and OIDC federation without static credentials. Development throughout AI-assisted with Claude Code, including my own skills and project-specific memory. Spring Boot · Java 21 · PostgreSQL · Flyway · Docker · AWS ECS/ALB/ECR · CI/CD · GitHub Actions · Claude Code

• Designed and developed a multi-tenant SaaS platform enabling organizations to build their own knowledge bases and chat with brand-customized AI assistants (white-label approach with dynamic branding per organization).
• Implemented a scalable RAG architecture with a GPT-4o tool-use loop, hybrid semantic search, and strict tenant isolation at database and search index level.
• Built persistent, project-like chat sessions including a streaming API (SSE), multilingual support, and speech input/output (STT/TTS).
• Delivered the cloud infrastructure as Infrastructure-as-Code, fully automated per-customer CI/CD pipelines, and an onboarding process for new tenants.

Technologies used: Python, FastAPI, Pydantic (v2 noted), Next.js, React, TypeScript, Tailwind CSS, OpenAI / LLMs (GPT-4o), Azure AI Search, Cosmos DB, Azure Blob Storage, Azure Cognitive Services Speech, Azure App Service, Azure Container Registry, Retrieval-Augmented Generation (RAG), Server-Sent Events (SSE), Docker, Terraform, GitHub Actions, REST, OpenID Connect (OIDC), Multi-Tenancy

• Short description: Leading a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations management while preserving the autonomy of decentralized business units within regulatory frameworks.

• Tasks and activities:

• Overall responsibility for designing, building, and implementing a company-wide cloud governance structure (Azure), including target picture, roadmap, and operating model.

• Managing internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps), including decision and escalation management.

• Planning and facilitating workshops on cloud strategy, governance principles, and the design of areas such as identity, connectivity, and platform management.

• Defining, implementing, and rolling out cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework based on the Azure Cloud Adoption Framework (CAF), including landing zone and guardrail concepts.

• Introducing automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementing cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishing and operationalizing FinOps in an enterprise environment (central and decentralized FinOps teams), including cost management strategies, reporting, and guardrails.

• Integrating governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementing access concepts including RBAC design and breaking-glass mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud use in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risk.

• Improved operational and decision-making capability across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance during lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure Networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, breaking-glass concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Focus: system architecture, cloud-native platforms, microservices, API design
• Product: Pflege-Pfad is a digital matchmaking platform that connects relatives of people in need of care directly with verified care services and caregivers - without an agency and without ongoing fees.
• Business analysis & process design:
• Analysis of the German care market and identification of the key pain points of both target groups.
• Modeling of the core business processes: registration, verification, care request, application, placement, and rating.
• Definition of the business model as a freemium/premium model with optional contact unlocking.
• Creation of user stories and requirements documentation for relatives, care services, and administrators.
• Design of trust and quality assurance mechanisms with document upload, admin review process, and rating system.
• Coordination with stakeholders and validation of product decisions with potential users.
• Technical implementation:
• Design and implementation of the entire platform architecture as a solo developer.
• Design and implementation of a REST API with Spring Boot and Kotlin, including JWT-based authentication.
• Development of the frontend as a single-page application with Angular 17.
• Implementation of the AWS infrastructure with EC2, RDS PostgreSQL, S3, CloudFront, and IAM.
• Document upload with AWS S3 via presigned URLs for verification of care services.
• Email notifications via Resend API.
• AI-supported care service search via OpenAI API.
• Implementation of complete user flows such as registration, login, password reset, and placement process.
• Building an admin panel for user and care service management as well as analytics.
• CI/CD with GitHub Actions and containerized deployments with Docker.
• End-to-end tests with Playwright.

Technologies: Kotlin, Spring Boot 3, Spring Security, JWT, JPA/Hibernate, PostgreSQL, Angular 17, TypeScript, RxJS, AWS (EC2, ECS, S3, CloudFront CDN, RDS PostgreSQL, IAM), nginx, GitHub Actions, Playwright, Maven, Git, OpenAI API, Resend API, Docker, Scrum, i18n (DE/EN/TR), Kiro, feature-flag architecture.

Scope: Embedded as FP&A Data & AI Architect within the Finance function of a major European refrigeration manufacturer, leading the transformation of manual, fragmented financial reporting into an automated, governance-driven intelligence platform. Driving the shift from Excel-based controlling to structured data architecture, Power BI analytics, and AI-assisted financial operations.

Financial Data Integrity & ERP Governance

• Initiated and led GL vs. subledger reconciliation investigations, identifying and resolving structural mismatches between General Ledger and subledger data that had gone undetected prior to engagement
• Conducted asset analysis to identify items missing from General Ledger postings, surfacing gaps in fixed asset tracking and period-end completeness
• Validated SAP reports, establishing baseline data quality standards for Finance team consumption
• Established systematic SAP data validation framework ensuring ongoing integrity between ERP postings and downstream reporting outputs

Finance Reporting Transformation

• Designed and implemented a structured Transformation Project approach for converting manual Finance reports into fully automated processes
• Created and owns the Data Reporting Audit Log; a centralized tracking system capturing report owners, stakeholders, data sources, manual effort estimates, and automation opportunity scores across the Finance function
• Mapped the full reporting landscape identifying quick-win automation targets and strategic Power BI migration candidates
• Actively reducing manual Excel and PowerPoint dependency across FP&A workflows; replacing point-in-time snapshots with live, governed data models

Power BI & Analytics Enablement

• Introduced and presented Power BI as the strategic reporting platform to Finance leadership, building internal buy-in for the BI transformation roadmap
• Designed initial Power BI architecture aligned with SAP, Salesforce and Oracle data structures and FP&A reporting requirements
• Established report ownership, governance documentation, and data lineage standards enabling sustainable self-service analytics across the Finance team

Transformation Infrastructure & Collaboration

• Configured and deployed Jira as the transformation project management hub, establishing structured sprint workflows, backlog management, and progress visibility for Finance IT initiatives
• Proposed and initiated a dedicated FP&A Communication & Transformation Hub, a structured cross-functional forum aligning Finance, IT, and business stakeholders around the reporting transformation roadmap
• Positioned the Finance function as an active driver of data governance and digital transformation within the broader organization

Outcomes

• GL/subledger reconciliation gaps identified and investigation framework established within first two weeks of engagement
• Data Reporting Audit Log deployed; first structured inventory of Finance reporting landscape in company history
• Power BI transformation roadmap presented and approved by Finance leadership
• Jira-based project governance live; Finance transformation now tracked with full sprint visibility

Technologies: SAP FI/CO · Power BI · DAX · SQL · Excel (advanced) · Power Query (M) · Power Automate · VBA · Jira · Microsoft 365 · SharePoint · Salesforce (Sales Data) · Oracle HCM · Python

Enhancement and modernization of a mature Aspire backend application in the environment of a utility company, focusing on new business requirements, testing, legacy code cleanup, and stable backend delivery.

Core contributions & results Implemented new business requirements in the context of customer orders, subcontractors, and cross-company backend processes, and ensured consistent workflows in a distributed system landscape. Modernized existing backend components step by step and reduced technical debt through targeted legacy code cleanup, refactoring, and structured code reviews. Improved the testability of business-critical services by expanding automated tests with xUnit, AutoFixture, and clearer validation structures. Supported the further development of workflow automations and integration processes via microservices, messaging, and API-based communication. Took over source code from external firms, systematically checked code quality, and derived technical improvements for maintainability, stability, and integration. Worked in agile development processes with Jira, Confluence, and Azure DevOps and supported cross-team alignment on architecture, quality, and implementation. Technical metrics Technologies & methods C#, .NET, ASP.NET, ASP.NET Core, Aspire, Docker, RabbitMQ, gRPC, REST API, Swagger, Microservices, NServiceBus, AutoMapper, Autofac, xUnit, AutoFixture, FluentValidation, Entity Framework Core, MediatR, Redis, Consul, Serilog, SonarQube, Azure DevOps, Azure Monitor, GitLab, Google Protocol Buffers, IronPDF, Mailjet, Jira, Confluence, Miro, agile development, Scrum, code reviews, refactoring, legacy code cleanup, workflow automation, power grids

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, acceptance, and compliance tests for safety-critical brake control units in the rail industry
• Software test application & integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies, and component interactions
• Test automation (FEAT framework): Co-development and further development of an automated test framework for test execution, reporting, and result analysis
• Functional safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage, as well as standards compliance according to EN50126/28/29
• Test automation for communication components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements analysis & shift-left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities, and redundancies early in the SDLC
• Test design & test case development: Derivation of test conditions, coverage strategies, and implementation of data-driven test cases (DDT), including reusable test data fixtures
• CI/CD & automation (Python, PowerShell, Jenkins, SVN): Automation of build, test, and HIL deployment processes as well as integration into CI/CD pipelines
• Test data & configuration management (XML): Maintenance and adaptation of XML test vectors and system configurations with automated integration into test environments
• Non-functional testing: Execution of performance and load tests to assess stability and system behavior
• Agile development & defect management (JIRA, Confluence): Participation in Scrum teams, test coordination, review of test artifacts, as well as defect tracking and root-cause analysis
• Error analysis & debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system layers (application to bus)
• Model-based analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & test documentation: Creation of integration and test documentation according to internal quality and certification requirements

maturing their API Practices on both, a Business and Technology level. My role encompasses strategy, architecture, developer advocacy as well as hands on software engineering, enabling both technical teams and business leadership to adopt and act on API- centric principles effectively. Coincidentally, we also establish GitOps, DX and Platform Best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, react, nodejs, typescript, redocly, reactive programming, CDC, golang, gingonic, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

Conversational AI assistant for cloud infrastructure and security queries

• Designed FastAPI backend with multi-turn conversation handler, token budgeting, and context window management.
• Integrated Amazon Bedrock (Claude 3 Sonnet/Haiku); built RAG pipeline with MongoDB chat history and semantic search.
• Implemented Factory Pattern for modular LLM provider switching; reduced model onboarding effort by 60%.
• Reduced LLM inference cost by 35% through model tiering (Haiku vs Sonnet) and prompt/entity consolidation.

Tech: Python, FastAPI, Amazon Bedrock, MongoDB, Streamlit, Pydantic.

• Conceptual design and implementation of modular AI assistants for sales and business processes in the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP server, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting as well as mentoring in the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure