GitLab Experts in Cologne

Project: Introduction of statutory-compliant electronic invoicing (outbound, Germany) in SAP for an international technology group.

• Project management: Planning, steering and reporting of the E-Invoicing outbound rollout across all affected business areas, including budget and resource coordination.
• UAT: Structured user acceptance test with key users per business area, test cases per invoice scenario, and consolidated test results for decision making.
• Defect management: Handover and tracking of defects in Jira, including validation of the generated invoices against the statutory schemas.
• Cutover, go-live and hypercare: Readiness checks and cutover planning aligned with the statutory deadlines, coordination of go-live and stabilization during hypercare.
• Stakeholder management and reporting: Alignment with Finance, Tax, business departments and IT, preparation of status reports and decision papers, and consistent follow-up of open items.
• Change management and documentation: Communicated process changes to the business departments, enabled key users, and created process and compliance documentation to ensure traceability and audit readiness.

• SPA for automated communication of medical findings with role-based access (Sanctum)
• Server-side LLM integration (OpenRouter) with structured processing
• Automated sending via SMS/voice call (Twilio, ElevenLabs) with queue + status retry
• Full test coverage with 80+ documented test cases

Technologies: PHP, Laravel, LLM API (OpenRouter), Twilio, ElevenLabs, Laravel Sanctum, PHPUnit, Playwright, Docker, REST

• Supporting the DevOps team in Terraform-managed, multi-region AWS infrastructure to achieve environment parity.
• Developed end-to-end CI/CD pipelines using AWS CodePipeline, CodeBuild, and CodeDeploy, automating the build and deployment.
• Maintained pre- and post-deployment scripts to automate critical tasks such as database schema migrations and environment sanity checks.
• Implemented CI/CD flow specifically for hotfixes via separate Git branches, managing back-merge activities from feature branches to release branches to ensure code integrity through automated conflict resolution.
• Deployed a dedicated, lightweight sanity check application hosted cost-effectively on Azure Container Apps to run automated health and basic functional checks as a post-deployment activity triggered via pipeline.
• Investigated production incidents through code changes and AWS CloudWatch logs.
• Coordinated integration of Dynatrace APM and its APIs for monitoring purposes.
• Full stack QA strategist for a high-traffic e-commerce platform built on a layered architecture for the back-end testing of core platform services, especially the order management system in Zed and Glue layers.
• Managed automation activities, testing process, and refactoring practices.
• Responsible for framework migrations, setup, and training for new automation frameworks.
• Promoted a shift-left approach within the QA team and created the test concept.
• Participated in meetings with IT managers, business owners, product owners, and team members.
• Designed and implemented contract testing to validate API schema compatibility between the order management system and the Zed and Glue layers, reducing production-relevant breaking changes by approximately 3%.
• Led the migration to a multi-environment framework that enabled test execution across 4 country configurations from a single codebase.
• Integrated automated unit and functional tests directly into the GitLab CI/CD pipeline, reducing pipeline runtime by 32%.
• Coached and trained 5 QA engineers across Germany and Hungary in test automation, framework architecture, and best practices.
• Architected a layered backend test automation framework separating business logic, API request builders, and the database layer.
• Piloted AI-assisted testing with Playwright Agents, the Playwright MCP Server, and GitHub Copilot for automated test generation, execution, and self-healing Playwright scripts.

• Member of the leadership team, 40 people across several international sites.

• Technical ownership of the shareholder's buy-and-build strategy: assessment of target companies and their subsequent integration.

• Platform, cloud infrastructure, information security and the engineering organisation.

Technologies: Java 25, Selenium, Insomnia, SSO, Gitlab, Jenkins, Docker, Kubernetes, Jira, IntelliJ, Nexus, Oracle, MariaDB, SpringBoot, Grafana, Concept Board, Vue.js, OpenApi, Kotlin. Implementation, maintenance, and enhancement of automated end-to-end regression tests for UI and API interfaces. Appropriate and targeted test automation involving multiple software products, including Java-based Windows applications. Automation of business processes with Selenium, reset jobs, and DB import jobs, as well as creation of test concepts, test case descriptions, and structured defect reporting.

• Created an application to control measurement hardware with a Tauri application using React.JS and TypeScript on Raspberry Pi
• Developed a cloud application for storing and analyzing measurement results using Spring Boot and React.JS
• Built a Tauri application for printing ZPL labels on Windows
• Technologies: Java, JavaScript, Tauri, Rust, React.JS, AWS, Kubernetes, Docker, GitLab CI/CD, REST API (JSON), Maven, CI/CD, PostgreSQL

Industry: digital sovereignty, public sector

Responsibilities:

• Project coordination (teams: consulting, development, testing, deployment/operations)

Products and standards:

• Jira, Confluence, Asana, Miro, Mural
• Open Source, Keycloak, Open Xchange, ownCloud

• Automation of the database major / minor releases for the TKeasy project

• Concept for database major / minor release automation

• Assessment of the current state

• Evaluation of Redgate Flyway functionalities

• Concept development

• Products: Redgate Flyway, GitHub, Quest, Erwin Data Modeller, Oracle, Atlassian Jira, Atlassian Confluence

• Knowledge: Docker, Continuous Delivery, Continuous Integration, Redgate Flyway, Major Releases, Minor Releases

• Developed a SCIM-compliant Python interface to connect external systems
• Expanded and enhanced UCS modules in Python
• Extended and newly developed Helm charts for container orchestration in Kubernetes
• Maintained and further developed CI/CD pipelines in GitLab
• Implemented automated tests with Pytest and Playwright

'Nubus' is based on a microservice architecture, relies on open source technologies, and runs in Docker containers.

UCS is an IAM complete solution based on Debian, used as an alternative to Microsoft's Active Directory. The work was characterized by the close integration of infrastructure and application logic.

• AWS
• Genedata Profiler
• Data Lake
• APIs
• Rstudio
• GitLab
• Python
• R
• Data acquisition, integration, and simulation
• Multiplex immunofluorescence
• Copy-number variation calling
• HLA typing and loss-of-heterozygosity analysis
• RNA expression analysis

• Further development of the existing e-commerce platform based on SAP Commerce (Hybris) to meet the growing demands of digital commerce.
• Ensuring the scalability and performance of the backend, so the platform remained stable and efficient even under heavy user load.
• Development and integration of new OCC REST APIs and services for modular extensions and flexible adjustments, to implement new features quickly.
• Optimization of data flows and interfaces, which significantly improved platform efficiency and system performance.
• Ensuring a maintainable and scalable code base by using Clean Code principles, proven design patterns, and a future-proof architecture.
• Reduction of errors through extensive testing with JUnit, Mockito, and load tests with Gatling, supported by the introduction of automated test processes.
• Improved system performance through targeted refactoring measures and efficient database queries, especially to handle peak loads.
• Use of modern cloud and monitoring tools such as Kubernetes, Google Cloud Platform (GCP), and Grafana to ensure a stable and monitored infrastructure.
• Clear improvement in efficiency, scalability, and reliability of the platform, which now meets the demands of a dynamic and growing e-commerce market.

• Design, planning and execution of complex acceptance tests for a document exchange platform for the German justice authorities.
• Validation of decrypted and certificate-based message exchange via web platform, mobile app, and Java API.
• Documentation of test cases, execution steps, and test results.
• Technologies: Windows 11/10, Ubuntu, iOS, Android, Bash for Windows, Java 17, IntelliJ, Git, Jira, Confluence, Citrix Server, xJustiz standard implementation, specific justice software.

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• Coordination and planning, execution, documentation, and analysis of test cases
• Development of test concepts considering best practices (e.g., test pyramid) with a focus on reliable, automatable test runs
• Implementation and maintenance of test cases according to the test concepts
• Technologies: Citrix Workspace, Shopify, Jira, Xray, MS Teams, MS SharePoint, Confluence, MS Office 365