GitLab Experts in Austria

• Planning and implementation of IT infrastructures for customers
• Automation of provisioning with AWS CloudFormation and AWS CDK
• Monitoring and optimization of cloud environments and the entire IT infrastructure
• Technical support and troubleshooting for infrastructure issues
• Collaboration with development teams on CI/CD processes

• Design and implementation of new functionalities in the areas of Lifecycle Management (LCM), Role Management (RLM) and Access Governance

• Adjustment of the company-wide Segregation of Duties (SoD) matrix to ensure regulatory and internal compliance requirements

• Further development and configuration of recertification processes

• Creation and adaptation of custom workflows, rules and tasks in SailPoint IdentityIQ (BeanShell, XML, Java)

• Use of static code analysis with SonarQube to ensure code quality and compliance with defined development standards

• Regular code reviews within the development team to ensure quality, share knowledge and follow clean code principles

• Work in an agile Scrum team with daily communication, sprint planning and reviews

• Coordination with testers, test managers and business departments to ensure quality and smooth production rollout

• Active involvement in release planning and deployment coordination, including test preparation, cutover activities and rollback strategies

• Analysis and sustainable resolution of issues in the IAM production environment (2nd- and 3rd-level support)

• Reproduction of complex errors, identification of root causes and implementation of lasting fixes

• Creation of technical analyses and recommendations for operations and further development

• Development of a power distribution solution for motorhomes
• Extension and adaptation of the existing prototype software for some parts of the power distribution system
• Development of missing firmware for other modules of the system
• Automation of the firmware build process through continuous integration (CI)
• Technologies used include C, Jira, Confluence, Git, GitHub, STM32, ESP32, CAN, CANopen, UART, and Zephyr

Project Tech Stack: Python, AWS, Azure, FastAPI, openai, pandas, unittest/pymock

Achievements:

• Engineered automated data extraction pipelines to transform complex Excel datasets into structured formats via LLM-driven workflows.
• Architected a generative slide-deck engine that translates natural language prompts into formatted presentation assets.
• Integrated advanced LLM capabilities with the OpenAI Response API, implementing sophisticated tool-calling and structured output logic.
• Developed and containerized scalable backend microservice using FastAPI, Docker, and OpenShift to host and serve agentic skills.

• Teaching & presenting
• Communication
• Effectively communicate complex technical topics to non-technical audiences through lectures
• Guided non-technical students from zero knowledge to confidently understanding and applying algorithms to achieve business outcomes

• Creation of test scenarios, manual test cases and test data using boundary value analysis and equivalence partitioning
• Execution of functional and non-functional tests (manual with Postman and web application, automated with WebDriver, JUnit and NUnit)
• Setup, automation and maintenance of the Test Automation Framework with Java, Spring Boot, Selenium and Cucumber in IntelliJ (system, regression, smoke, UI and integration tests for web frontend and SOAP API backend interfaces)
• Automation of backend NUnit test cases in Visual Studio
• Test management: development and implementation of the test strategy and test plans, test coordination, quality responsibility and prioritization of risk-based tests, as well as documentation management in Confluence
• Detailed analysis and quality assurance of requirements
• Creation and maintenance of Jenkins pipelines, quality assurance during build & deployment
• Close cooperation with business analysts, developers, testers and test management
• Identification, creation and tracking of errors/defects, as well as careful test documentation
• Reporting of test results and defect reports
• Monitoring of test processes and continuous improvement
• Verification of test data and test results in a PostgreSQL database in pgAdmin
• Support with effort estimates and backlog prioritization
• Analysis and debugging of development code

System environment: Java, JUnit, Spring Boot, Selenium, Cucumber, JavaScript, Jenkins, C#, NUnit, Postman, Bitbucket, Confluence, Jira, xRay, pgAdmin, PostgreSQL, SonarQube, Maven, IntelliJ, Visual Studio, CI/CD, SOAP API interfaces

• Lead software architect in a greenfield MES project (Manufacturing Execution System / factory control system), responsible for architecture decisions, technology selection, and technical direction throughout the entire development lifecycle
• Designed and built the core framework from scratch, including several reusable Spring Boot starters (e.g., OPC-UA integration, messaging, security) that enable flexible composition of the individual system modules
• Introduced Keycloak as the central authentication and authorization system with SSO across all MES components
• Created and owns the full CI/CD pipeline covering Java, NPM and Docker – automating build, test, containerisation and deployment across all project components
• Set up the architecture documentation space in Confluence as the single source of truth for all architecture decisions, component designs, and integration patterns
• Defined and enforced naming conventions and coding standards to ensure consistency in the growing codebase
• Conducted regular code reviews for quality assurance, knowledge sharing, and adherence to architecture guidelines
• Created and maintained technology roadmaps to guide future development priorities and infrastructure investments

• Architected and deployed a highly available, multi-tenant Kubernetes platform on Google Kubernetes Engine (GKE) for business-critical microservices.
• Designed and implemented a comprehensive Infrastructure-as-Code strategy using Terraform for managing GKE clusters, networking (VPCs, Subnets), and IAM policies.
• Engineered optimized storage solutions for stateful workloads (MongoDB) using GKE PersistentVolumes, enhancing performance and data resiliency.
• Established a full-stack observability framework using Google Cloud Monitoring, Logging, Prometheus, and Grafana.

• Foundational work for new hardware series “tado° line X”
• Interview & onboard new iOS Engineers
• Reduce release time from 1 in 2 months to 1 per week
• Maintain and improve high user satisfaction: 4.6+ Stars
• Setup secure & encrypted Handshake with bluetooth device
• Reduce merge conflicts by setting up the project via tuist
• Convert monolithic codebase to Modules by leveraging SPM
• Use state of the art technology, like Codable & async/await
• Maintain & improve custom view accessibility
• Reduce tech debt
• Gradually convert to webviews while maintaining high quality
• Ship highly requested features like “dark mode”
• Increase unit test code coverage and rewrite parts of code base

• Developed Taranis AI, an advanced open-source intelligence (OSINT) tool, leveraging artificial intelligence to revolutionize information gathering and situational analysis.
• Created cybersecurity trainings and a cyber range to provide hands-on learning experiences for SOC teams and IT management.
• Designed and implemented a hybrid cloud infrastructure using OpenStack, Terraform, and Ansible, improving the scalability and performance of the infrastructure and led the migration from an on-site only infrastructure to the hybrid cloud environment.
• Some of my current work can be found on GitHub.

• Development of a Custom Jenkins Shared Library (Groovy)

• Integration of security checks in CI/CD pipeline (Shift-Left Approach)

• Automated vulnerability scanning and remediation workflows

• GitOps-based deployments with ArgoCD

• Semantic versioning automation with Git integration

• Container lifecycle management (Build/Scan/Tag/Push)

• ArgoCD webhook integration for event-driven deployments

• Complete cluster automation with Ansible

• Bare-metal Kubernetes installation from scratch

• High-availability control plane setup

• Unified deployment system for multi-application orchestration

• Configuration management according to NIST SP 800-128

• Host security: Linux hardening, SELinux/AppArmor

• Network security: NetworkPolicies, micro-segmentation

• Application security: RBAC, Pod Security Standards

• Data security: Encryption at rest and in transit

• Defense-in-depth principles

• Certificate management with cert-manager

• Secrets management with External Secrets Operator connected to Vault

• Infrastructure monitoring with Checkmk

• Prometheus/Grafana monitoring stack

• Security event detection and logging

• Automated health checks and incident response procedures

• MetalLB load balancing for bare-metal

• Nginx ingress controller with SSL passthrough

• NetworkPolicies for security zones

• Rook-Ceph distributed storage, CNI configuration (Weave Net)

• Container & orchestration: Kubernetes (bare-metal), Docker, Helm

• CI/CD & GitOps: Jenkins (Custom Shared Library), ArgoCD, Groovy

• Automation: Ansible, Bash, Python

• Security: nftables, RBAC, NetworkPolicies, cert-manager, Vault, Sealed Secrets

• Monitoring: Checkmk, Prometheus, Grafana

• Storage & networking: Rook-Ceph, MetalLB, Nginx Ingress, Calico

• Collaboration: Jira, Confluence

• OS: Debian, Ubuntu

• I am responsible for providing solution architecture and technical assistance for a migration initiative aimed at transitioning to a new core banking system.
• The project involves replacing in-house development with a commercially available off-the-shelf core banking system operated as SaaS on AWS.
• Duties encompass solution design, technical coordination, supporting development teams, and providing IT support and troubleshooting.
• Managing over 10 global vendors and partners is crucial to project success.
• Technologies: VMWare ESXi, AWS, EKS Kubernetes, Mastercard Payment Transaction Service, Avaloq, A1 Telekom Austria infrastructure, CheckPoint FW, F5, Site-to-Site VPNs, PingID, Futurae SDK, Airlock, UC4/Automic, Firebase, iOS/Android lifecycle management, AWS IAM, AWS AppStream, AWS S3, AWS Transfer Family, QlikView, OpenAPI.

• Project Manager / Business Requirements Engineer
• Digital Business Developer
• Concept development and requirements management
• Process optimization
• Advertising effectiveness measurement
• Status reporting and stakeholder management to owners
• Systems: WordPress, sevDesk