GitLab Experts in Austria

• Design and implementation of new functionalities in the areas of Lifecycle Management (LCM), Role Management (RLM) and Access Governance

• Adjustment of the company-wide Segregation of Duties (SoD) matrix to ensure regulatory and internal compliance requirements

• Further development and configuration of recertification processes

• Creation and adaptation of custom workflows, rules and tasks in SailPoint IdentityIQ (BeanShell, XML, Java)

• Use of static code analysis with SonarQube to ensure code quality and compliance with defined development standards

• Regular code reviews within the development team to ensure quality, share knowledge and follow clean code principles

• Work in an agile Scrum team with daily communication, sprint planning and reviews

• Coordination with testers, test managers and business departments to ensure quality and smooth production rollout

• Active involvement in release planning and deployment coordination, including test preparation, cutover activities and rollback strategies

• Analysis and sustainable resolution of issues in the IAM production environment (2nd- and 3rd-level support)

• Reproduction of complex errors, identification of root causes and implementation of lasting fixes

• Creation of technical analyses and recommendations for operations and further development

Project Tech Stack: Python, AWS, Azure, FastAPI, openai, pandas, unittest/pymock

Achievements:

• Engineered automated data extraction pipelines to transform complex Excel datasets into structured formats via LLM-driven workflows.
• Architected a generative slide-deck engine that translates natural language prompts into formatted presentation assets.
• Integrated advanced LLM capabilities with the OpenAI Response API, implementing sophisticated tool-calling and structured output logic.
• Developed and containerized scalable backend microservice using FastAPI, Docker, and OpenShift to host and serve agentic skills.

• Teaching & presenting
• Communication
• Effectively communicate complex technical topics to non-technical audiences through lectures
• Guided non-technical students from zero knowledge to confidently understanding and applying algorithms to achieve business outcomes

• Lead software architect in a greenfield MES project (Manufacturing Execution System / factory control system), responsible for architecture decisions, technology selection, and technical direction throughout the entire development lifecycle
• Designed and built the core framework from scratch, including several reusable Spring Boot starters (e.g., OPC-UA integration, messaging, security) that enable flexible composition of the individual system modules
• Introduced Keycloak as the central authentication and authorization system with SSO across all MES components
• Created and owns the full CI/CD pipeline covering Java, NPM and Docker – automating build, test, containerisation and deployment across all project components
• Set up the architecture documentation space in Confluence as the single source of truth for all architecture decisions, component designs, and integration patterns
• Defined and enforced naming conventions and coding standards to ensure consistency in the growing codebase
• Conducted regular code reviews for quality assurance, knowledge sharing, and adherence to architecture guidelines
• Created and maintained technology roadmaps to guide future development priorities and infrastructure investments

• Planning and implementation of IT infrastructures for clients
• Automating deployments with AWS CloudFormation and AWS CDK
• Monitoring and optimizing cloud environments and the entire IT infrastructure
• Providing technical support and troubleshooting infrastructure issues
• Collaborating with development teams on CI/CD processes

• Development of a Custom Jenkins Shared Library (Groovy)

• Integration of security checks in CI/CD pipeline (Shift-Left Approach)

• Automated vulnerability scanning and remediation workflows

• GitOps-based deployments with ArgoCD

• Semantic versioning automation with Git integration

• Container lifecycle management (Build/Scan/Tag/Push)

• ArgoCD webhook integration for event-driven deployments

• Complete cluster automation with Ansible

• Bare-metal Kubernetes installation from scratch

• High-availability control plane setup

• Unified deployment system for multi-application orchestration

• Configuration management according to NIST SP 800-128

• Host security: Linux hardening, SELinux/AppArmor

• Network security: NetworkPolicies, micro-segmentation

• Application security: RBAC, Pod Security Standards

• Data security: Encryption at rest and in transit

• Defense-in-depth principles

• Certificate management with cert-manager

• Secrets management with External Secrets Operator connected to Vault

• Infrastructure monitoring with Checkmk

• Prometheus/Grafana monitoring stack

• Security event detection and logging

• Automated health checks and incident response procedures

• MetalLB load balancing for bare-metal

• Nginx ingress controller with SSL passthrough

• NetworkPolicies for security zones

• Rook-Ceph distributed storage, CNI configuration (Weave Net)

• Container & orchestration: Kubernetes (bare-metal), Docker, Helm

• CI/CD & GitOps: Jenkins (Custom Shared Library), ArgoCD, Groovy

• Automation: Ansible, Bash, Python

• Security: nftables, RBAC, NetworkPolicies, cert-manager, Vault, Sealed Secrets

• Monitoring: Checkmk, Prometheus, Grafana

• Storage & networking: Rook-Ceph, MetalLB, Nginx Ingress, Calico

• Collaboration: Jira, Confluence

• OS: Debian, Ubuntu

• I am responsible for providing solution architecture and technical assistance for a migration initiative aimed at transitioning to a new core banking system.
• The project involves replacing in-house development with a commercially available off-the-shelf core banking system operated as SaaS on AWS.
• Duties encompass solution design, technical coordination, supporting development teams, and providing IT support and troubleshooting.
• Managing over 10 global vendors and partners is crucial to project success.
• Technologies: VMWare ESXi, AWS, EKS Kubernetes, Mastercard Payment Transaction Service, Avaloq, A1 Telekom Austria infrastructure, CheckPoint FW, F5, Site-to-Site VPNs, PingID, Futurae SDK, Airlock, UC4/Automic, Firebase, iOS/Android lifecycle management, AWS IAM, AWS AppStream, AWS S3, AWS Transfer Family, QlikView, OpenAPI.

• Developed Taranis AI, an advanced open-source intelligence (OSINT) tool, leveraging artificial intelligence to revolutionize information gathering and situational analysis.
• Created cybersecurity trainings and a cyber range to provide hands-on learning experiences for SOC teams and IT management.
• Designed and implemented a hybrid cloud infrastructure using OpenStack, Terraform, and Ansible, improving the scalability and performance of the infrastructure and led the migration from an on-site only infrastructure to the hybrid cloud environment.
• Some of my current work can be found on GitHub.

• Development of a power distribution solution for motorhomes
• Extension and adaptation of the existing prototype software for some parts of the power distribution system
• Development of missing firmware for other modules of the system
• Automation of the firmware build process through continuous integration (CI)
• Technologies used include C, Jira, Confluence, Git, GitHub, STM32, ESP32, CAN, CANopen, UART, and Zephyr

• Architecture and development of enterprise React 19 based documentation platform for automotive software systems
• Full-stack implementation of visualization tools & interactive diagram viewers
• Performance optimization initiatives including virtual rendering for 10,000+ node trees and Web Worker-based search functionality
• Designed and implemented modular plugin architecture enabling extensible document rendering system
• Technical consultation on Git-based architecture-as-code workflows and modern design patterns
• Ownership of critical features from design through deployment, collaborating with cross-functional enterprise teams

• Infrastructure automation with Ansible, AWX, Docker/DockerCompose/Kubernetes, GitLab, Bash, Python (Ubuntu)
• Infrastructure monitoring with Icinga2
• Software development in Python
• Qemu, KVM, libvirt

• Creating test scenarios, manual test cases and test data using boundary value analysis and equivalence classes
• Executing functional and non-functional tests (manually with Postman and web application, automated with WebDriver, JUnit and NUnit)
• Setting up, automating and maintaining the test automation framework with Java, Spring Boot, Selenium and Cucumber in IntelliJ (system, regression, smoke, UI and integration tests for web front-end and SOAP API backend interfaces)
• Automating backend NUnit test cases in Visual Studio
• Test management: developing and implementing test strategy and test plans, controlling tests, quality ownership and prioritizing risk-based tests, as well as maintaining documentation in Confluence
• Detailed analysis and quality assurance of requirements
• Creating and maintaining Jenkins pipelines, ensuring quality in build & deployment
• Close collaboration with business analysts, developers, testers and test management
• Identifying, creating and tracking defects/bugs, with thorough test documentation
• Reporting test results and defect reports
• Monitoring test processes and continuous improvements
• Reviewing test data and test results in PostgreSQL database via pgAdmin
• Supporting effort estimation and backlog prioritization
• Analyzing and debugging development code System environment: Java, JUnit, Spring Boot, Selenium, Cucumber, JavaScript, Jenkins, C#, NUnit, Postman, Bitbucket, Confluence, Jira, xRay, pgAdmin, PostgreSQL, SonarQube, Maven, IntelliJ, Visual Studio, CI/CD, SOAP API interfaces

• I offer project-based short and long-term freelance services for Linux and open source projects
• DevOps/SecOps/Sysadmin for Linux operating systems with a strong focus on idempotent automation and high availability
• Migration projects: on-site to cloud (and vice versa) and cloud-to-cloud migrations between providers
• Development environments: standardizing customers' development and sysadmin workstations/clients
• Digital sovereignty solutions (independent of hyperscalers): Linux desktop (Ubuntu/SUSE), mail and communications (groupware mail/calendar/contacts), file sharing and collaboration (Nextcloud)

• Tech stack: Flutter/Dart, Unity3D, React, NextJS, JavaScript, TypeScript, HTML, CSS, SASS, SCSS, Tailwind, Bootstrap, Ollama, llama.cpp, LangChain, MCP, RAG, n8n, Node-Red, PlatformIO, Arduino, ESP, C, C++, Python/Django, NodeJS, C#, .NET, PostgreSQL, MySQL, MS-SQL, MongoDB, AWS, Azure, GCP, GitHub Actions, GitLab CI, Azure Pipelines, Ansible, Terraform, Docker, Postman, REST, WebSocket, Figma, Penpot, Adobe Illustrator, Adobe InDesign, VS Code, Android Studio, Visual Studio, Unity3D, Jira, Confluence, Traefik, Rclone, Authentik, pfSense, Cloudflare, Proxmox, MQTT

• Previous projects:

• n8n automation that reads incoming emails from an Office mailbox and routes them to stakeholders

• FastMCP 2 server exposing internal services via REST API to an LLM

• Terraform migration of cloud infrastructure with Azure VMs, network, blob, storage and cloud-init

• Azure Pipelines for automated testing, deployment, and artifact management

• Terraform, Ansible, Cloudflare Tunnel integration with Docker container provisioning and backups

• GitHub Actions CI/CD for Flutter app builds, testing, automated screenshots, and App Store deployment

• Flutter app with SSO, local database, backend integration, BLE synchronization

• GCP setup with Cloud DNS, App Engine, Cloud SQL

• AWS environment with EC2, S3, Route 53, ECS

• Workshops delivered on Docker, Git, Terraform, Ansible, Cloudflare, DevOps, modern software development practices

• Backend development with Python Django REST Framework, PostgreSQL, MQTT

• SSO identity provider with OIDC, OAuth, LDAP, Cloudflare Tunnels, Authentik