GitLab Experts

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Developed a browser-based platform for Kubernetes no-code deployment and cluster management
• Developed a CLI in TypeScript to deploy resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security, and used Kyverno. Implemented IAM integration for the command-line utility tool.
• Designed role and permission models for Keycloak, OAuth/OIDC, and social login flows.
• Used LLMs to convert user intent into diagrams.
• Worked on integration with multiple sovereign clouds like StackIT, Hetzner, CIVO, UpCloud, plus public clouds like AWS, GCP, and Azure
• The technology stack includes Java, Spring Boot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest

• Analysis, documentation, and alignment of requirements. Conducting stakeholder analyses, interviews, and workshops for requirements gathering and validation. Carrying out requirements reviews and working closely with business units and development teams.

Techniques & tools: requirements engineering, stakeholder management, workshop facilitation, system context modeling, requirements reviews, quality scenarios, Miro, Jira, Confluence

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

Sub-project lead in an agile IT environment

Leading a software development team (10 employees)

• Leading a software development team with 10 employees
• Budget responsibility approx. 3 million euros per year
• Conducting employee and job interviews
• Responsibility for resource planning (budget and employees)
• Digitalization of a web interface
• Regular reporting to customers and stakeholders (C-level)
• Product management: developing and implementing product strategies; defining requirements to guide product development
• Structuring product development & continuous testing efficiently to quickly incorporate feedback & compliance points
• Close collaboration with stakeholders & various teams to understand requirements, set priorities, ensure rollout, and increase user-friendliness
• Project experience in an energy industry company, including the functioning of energy markets, the basics of energy generation and distribution, as well as current challenges and developments in the industry
• Project experience in the railway sector - including the structure and operation of railway systems.
• Project experience within the 16.7 Hz traction power sector incl. knowledge of regulatory processes
• Formulating the sub-project charter and the project profile according to the project standard together with the project management
• Controlling service delivery according to the project charter
• Planning and controlling human resources including budget planning for the sub-project
• Ensuring the work capacity of the sub-project participants, e.g. by requesting access rights and documents for the sub-project team
• Planning and control for the respective sub-project (time, scope, budget) including the creation of necessary documents
• Alignment with the business department and Product Owners to plan the sub-project scope and the corresponding implications
• Executing milestone planning according to the agreed process model
• Effort estimation and support of sub-project controlling as well as overall project controlling in forecasting and planning
• Reporting sub-project status (according to status slide template) including progress (according to progress measurement)
• Analyzing, preparing, and addressing action and decision requirements
• Escalating sub-project issues to the project management
• Creating and managing Change Requests (CR)
• Quality assessment of completed task packages from a project management perspective (time, scope, and budget)
• Implementation management of the overarching guidelines and requirements in the sub-project, supported by cross-functional roles on the functional and technical side.
• Identifying, managing, documenting, and communicating opportunities, risks, and dependencies within and across sub-projects
• Supporting project management in creating the overall project plan and overall status reports
• Preparing and managing commissioning including the required documents and protection needs assessment

Scrum Master in an agile IT environment supporting a software development team in the full-stack area (7 people)

• Close collaboration with stakeholders & various teams to understand requirements, set priorities, ensure rollout, and increase user-friendliness
• Implementation of the selected Scrum method, including the required events, meetings, artifacts (product backlog, sprint backlog, burndown charts), metrics, as well as conducting required training in an agile IT environment
• Preparation of Scrum events such as Daily, retrospectives, Review, Sprint planning, estimation, and refinement (agile way of working)
• Moderation of retrospectives and elimination of obstacles to move the team and product forward
• Preparation of action items and retros via whiteboard and Figma
• Application and improvement of agile methods such as Kanban, Scrum, SAFe, or Scrum of Scrums
• Tracking the "Definition of Done" and "Definition of Ready" for all work results of the development team
• Advising on information flow and communication improvements between Product Owner and project team
• Experience with automation, validation such as mandatory field checks, notification functions, creation of filters, boards, and reports via JQL, and setting up cycle time
• Use of Jira & Confluence
• Setting up a progress measurement for project management to transparently map planned vs. actual team capacities and actual efforts for user stories
• Measuring team progress: creating team KPIs: "velocity", "burn-down chart", "throughput", "costs", "quality", "scope"
• Evaluation of agile metrics, process management, and process modeling methods (BPMN, EPC, UML)
• Communication and moderation know-how
• Methodological competence proven in conflict discussions

• Recurring problem in my own AI-supported projects: requirements analysis, use cases, and architecture decisions can be created quickly with AI support, but they remain hard to trace and are scattered across markdown files – knowledge is lost as soon as it is no longer in the context window. arknet turns requirements engineering and architecture knowledge into structured, testable data instead of plain text: requirements, use cases, and architecture decisions as a consistently linked knowledge graph, traceable from the requirement to the architecture decision – queryable for humans and AI agents alike. Built technically on RDF/OWL and its own MCP server.

• Result: MCP daemon running, Docker image automatically published on GHCR, nine hexagonal modules, eleven ADRs (including an open-core license model). Requirements engineering and ubiquitous language hexagon active. Publicly available as a Community Edition under Apache-2.0 since 07/2026 (github.com/kogn-io/arknet), together with the Claude Code plugin and the GHCR image; open-core model.

• Label: Java, Maven, RDF, RDF4J, OWL, SPARQL, Model Context Protocol, Spring AI, Docker, GitHub, Git, Claude Code, Obsidian, DDD, Hexagonal Architecture, ArchUnit, JUnit, AssertJ, interface development, Software Architecture, Continuous Integration, Knowledge Management

• Modernization of a large-scale Java enterprise application*

The project is modernizing a complex enterprise application that has grown over many years. The existing Spring-based legacy system runs on Java 8, OSGi, and Eclipse RCP and is being gradually migrated to a modern, maintainable architecture with Java 25 and Quarkus.

Marcus works on analysis, architecture, refactoring, and implementation. One focus is on untangling historically grown structures and dependencies and on building a clean, sustainable Java and Quarkus technology stack.

Tools & technologies: Java 8, Java 25, Quarkus, Hibernate ORM with Panache, EclipseLink, OSGi, Eclipse RCP, Maven, JUnit, Mockito, REST, JSON, Git, Eclipse IDE, IntelliJ IDEA Ultimate, Jira, Confluence

• Analysis of the existing CAN communication between microcontrollers
• Analysis of the sensors used and the measured values collected
• Planning the CAN messages for transmitting the measured values
• Iterative adjustment of the microcontroller code to the new CAN messages
• Cross-compilation from x64 to arm64

• Further development of the existing e-commerce platform based on SAP Commerce (Hybris) to meet the growing demands of digital commerce.
• Ensuring the scalability and performance of the backend, so the platform remained stable and efficient even under heavy user load.
• Development and integration of new OCC REST APIs and services for modular extensions and flexible adjustments, to implement new features quickly.
• Optimization of data flows and interfaces, which significantly improved platform efficiency and system performance.
• Ensuring a maintainable and scalable code base by using Clean Code principles, proven design patterns, and a future-proof architecture.
• Reduction of errors through extensive testing with JUnit, Mockito, and load tests with Gatling, supported by the introduction of automated test processes.
• Improved system performance through targeted refactoring measures and efficient database queries, especially to handle peak loads.
• Use of modern cloud and monitoring tools such as Kubernetes, Google Cloud Platform (GCP), and Grafana to ensure a stable and monitored infrastructure.
• Clear improvement in efficiency, scalability, and reliability of the platform, which now meets the demands of a dynamic and growing e-commerce market.

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

Project goal: Carrying out system tests and validating industrial communication and control systems, including requirements definition and verification.

Responsibilities:

• Test planning, test execution
• Test strategy, test cases, and test specifications
• Requirements analysis
• Ensuring traceability between requirements, test cases, and defects
• Carrying out regression and integration tests
• Defect analysis
• Simulation and validation
• NetSniffer Wireshark
• Supporting test automation (Python, CI/CD)
• Reporting
• Stakeholder coordination and agile collaboration (Scrum / SAFe / Kanban)
• V-Model
• CI/CD automation with Python, Groovy, and frameworks (Selenium, PyTest)

Technologies:: CAN, Modbus, Ethernet, PLC, PROFINET, Codebeamer ALM, Scrum, SAFe, MS Teams, Git, CI/CD with GitLab CI and TeamCity, Windows Batch, FAS, Wireshark, Python, Enterprise Architect (EA), AI tools (e.g. ChatGPT, Microsoft Copilot), VS Code, Tia Portal, SCL, Python (Selenium, PyTest)

• Building a data integration platform for high, medium, and low voltage assets for contextual analysis of time series with master data from the SCADA control system (IEC 60870 104), INIS, and SAP.
• Responsibility for the architecture and implementation of the solution, as well as sparring partner for the Product Owner.
• Use of Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter, and various API gateways.