GitLab Experts in Germany

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

Project: Defect Generation on Test-Bench Images of Metal Surfaces Environment: Automated Visual Inspection (AVI), Metallurgy & Manufacturing

• Objective & Implementation: Designed, architected, and trained Generative Adversarial Networks (Pix2PixHD / SPADE) for image-to-image transformation. Targeted generation of synthetic material defects (e.g., cracks, inclusions, scale) on rough metal surfaces under real test-bench lighting conditions for privacy-compliant and efficient dataset expansion (data augmentation).
• Technical Design: Implemented robust Generative AI and computer vision pipelines in Python and PyTorch. Used semantic segmentation approaches for mask-controlled defect synthesis and subsequent evaluation with EfficientDet object detection models.
• Business Impact: Massive dataset upscaling (10x) without time-consuming and costly physical test-bench runs, while significantly improving the detection performance of automated inspection systems.

Technologies & Skills Used: Python | PyTorch | SPADE | Pix2PixHD | EfficientDet | Machine Learning | Semantic Segmentation | Computer Vision

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Developed a browser-based platform for Kubernetes no-code deployment and cluster management
• Developed a CLI in TypeScript to deploy resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security, and used Kyverno. Implemented IAM integration for the command-line utility tool.
• Designed role and permission models for Keycloak, OAuth/OIDC, and social login flows.
• Used LLMs to convert user intent into diagrams.
• Worked on integration with multiple sovereign clouds like StackIT, Hetzner, CIVO, UpCloud, plus public clouds like AWS, GCP, and Azure
• The technology stack includes Java, Spring Boot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self hosted solutions
• Development of reusable agentic workflows and mini applications that enable non technical employees to solve business problems independently
• Implementation of internal business applications with Single Sign On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers
• Implementation of nine mini applications with Single Sign On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers
• Techstack: Python, Nextjs, Typescript, Streamlit, Anthropic SDK (Claude), Azure, Linux Ubuntu, PostgreSQL, MS SQL, Angular, Authentik

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

The Base Services of DB InfraGO form a central data hub between the company’s IT systems. Common Data Services are developed that distribute data from source systems to a variety of downstream systems (via JMS) and make them available (via REST API). The existing service landscape based on TIBCO is being migrated to DB InfraGO’s cloud-native platform.

• Architecture design and implementation for performance-optimized bulk data processing of several million datasets at specific times during the day
• Technical specification and documentation of business requirements
• Integration of various subsystems (including SAP and Salesforce) through the reimplementation of more than 40 microservices based on Spring Boot
• Migration of TIBCO Based microservices from the Enterprise Integration Platform to the Cloud Native Platform using Spring-Boot
• Establishment of a deployment pipeline using GitLab CI/CD, Artifactory, and automated deployment to a Kubernetes environment with the help of ArgoCD
• Definition and implementation of automated unit, integration, and regression tests

Team Size: 9

Technologies/Tools: Java, Spring Boot, ActiveMQ(JMS), JUnit, Tibco Business Works, Gitlab (CI/CD), Kubernetes (Amazon AWS), ArgoCD, postgreSQL, Oracle, Postman, Hoppscotch, openAPI, Sonarqube

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• Recurring problem in my own AI-assisted projects: requirements analysis, use cases, and architecture decisions can be created quickly with AI support, but remain difficult to follow and scattered across Markdown files – knowledge is lost as soon as it is no longer in the context window. arknet turns requirements engineering and architecture knowledge into structured, verifiable data instead of plain text: requirements, use cases, and architecture decisions form a consistently linked knowledge graph, traceable from requirement to architecture decision – queryable by both people and AI agents. Technically based on RDF/OWL and a custom MCP server.

• Result: Working MCP daemon, Docker image published automatically to GHCR, nine hexagonal modules, eleven ADRs (including an Open-Core licensing model). Requirements engineering and Ubiquitous Language hexagons are active. Public as a Community Edition under Apache-2.0 since 07/2026 (github.com/kogn-io/arknet), together with the Claude Code plugin and GHCR image; Open-Core model.

• Label: Java, Maven, RDF, RDF4J, OWL, SPARQL, Model Context Protocol, Spring AI, Docker, GitHub, Git, Claude Code, Obsidian, DDD, Hexagonal Architecture, ArchUnit, JUnit, AssertJ, Interface Development, Software Architecture, Continuous Integration, Knowledge Management

Sub-project lead in an agile IT environment

Leading a software development team (10 employees)

• Leading a software development team with 10 employees
• Budget responsibility approx. 3 million euros per year
• Conducting employee and job interviews
• Responsibility for resource planning (budget and employees)
• Digitalization of a web interface
• Regular reporting to customers and stakeholders (C-level)
• Product management: developing and implementing product strategies; defining requirements to guide product development
• Structuring product development & continuous testing efficiently to quickly incorporate feedback & compliance points
• Close collaboration with stakeholders & various teams to understand requirements, set priorities, ensure rollout, and increase user-friendliness
• Project experience in an energy industry company, including the functioning of energy markets, the basics of energy generation and distribution, as well as current challenges and developments in the industry
• Project experience in the railway sector - including the structure and operation of railway systems.
• Project experience within the 16.7 Hz traction power sector incl. knowledge of regulatory processes
• Formulating the sub-project charter and the project profile according to the project standard together with the project management
• Controlling service delivery according to the project charter
• Planning and controlling human resources including budget planning for the sub-project
• Ensuring the work capacity of the sub-project participants, e.g. by requesting access rights and documents for the sub-project team
• Planning and control for the respective sub-project (time, scope, budget) including the creation of necessary documents
• Alignment with the business department and Product Owners to plan the sub-project scope and the corresponding implications
• Executing milestone planning according to the agreed process model
• Effort estimation and support of sub-project controlling as well as overall project controlling in forecasting and planning
• Reporting sub-project status (according to status slide template) including progress (according to progress measurement)
• Analyzing, preparing, and addressing action and decision requirements
• Escalating sub-project issues to the project management
• Creating and managing Change Requests (CR)
• Quality assessment of completed task packages from a project management perspective (time, scope, and budget)
• Implementation management of the overarching guidelines and requirements in the sub-project, supported by cross-functional roles on the functional and technical side.
• Identifying, managing, documenting, and communicating opportunities, risks, and dependencies within and across sub-projects
• Supporting project management in creating the overall project plan and overall status reports
• Preparing and managing commissioning including the required documents and protection needs assessment

Scrum Master in an agile IT environment supporting a software development team in the full-stack area (7 people)

• Close collaboration with stakeholders & various teams to understand requirements, set priorities, ensure rollout, and increase user-friendliness
• Implementation of the selected Scrum method, including the required events, meetings, artifacts (product backlog, sprint backlog, burndown charts), metrics, as well as conducting required training in an agile IT environment
• Preparation of Scrum events such as Daily, retrospectives, Review, Sprint planning, estimation, and refinement (agile way of working)
• Moderation of retrospectives and elimination of obstacles to move the team and product forward
• Preparation of action items and retros via whiteboard and Figma
• Application and improvement of agile methods such as Kanban, Scrum, SAFe, or Scrum of Scrums
• Tracking the "Definition of Done" and "Definition of Ready" for all work results of the development team
• Advising on information flow and communication improvements between Product Owner and project team
• Experience with automation, validation such as mandatory field checks, notification functions, creation of filters, boards, and reports via JQL, and setting up cycle time
• Use of Jira & Confluence
• Setting up a progress measurement for project management to transparently map planned vs. actual team capacities and actual efforts for user stories
• Measuring team progress: creating team KPIs: "velocity", "burn-down chart", "throughput", "costs", "quality", "scope"
• Evaluation of agile metrics, process management, and process modeling methods (BPMN, EPC, UML)
• Communication and moderation know-how
• Methodological competence proven in conflict discussions