Google Cloud Platform Experts

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

Led the end-to-end integration and migration architecture for decommissioning SAP IS-U market communication and transitioning to Salesforce Marketing Cloud (SFMC) with E.ON IT Services — covering regulated EDIFACT market messaging, a three-phase data migration (transfer of market message inventory after cutover), redesign of market communication processes, and full GDPR and German energy-market compliance.

• Designed the three-tier target architecture (SAP IS-U → NScale B2B gateway → SFMC) processing 50,000–100,000 EDIFACT messages daily within sub-5-minute SLAs.
• Architected the three-phase data migration: 36 months of historical data, zero-loss cutover of in-flight market messages, and near-real-time CDC synchronization.
• Delivered secure, BDEW/GDPR-compliant integration (AS2/OFTP2, RFC/IDoc, REST APIs, OAuth 2.0, Azure AD, AWS S3) achieving >99.5% uptime, <0.1% migration discrepancy, and RTO <4 hours.
• Applied BPMN to model and optimize the market communication processes.

Technologies: SAP IS-U, NScale, Salesforce Marketing Cloud, EDIFACT, OAuth 2.0, Azure AD, AWS S3, BPMN, Jira, Confluence, Draw.io

• Advise early-stage startups on product vision, roadmapping, and GTM strategy, combining PMP and Stanford PM training with hands-on technical execution.
• Lovable: built and led a 200+ member community program for AI-native founders, bridging real-time founder feedback into product roadmap decisions.
• Lead customer discovery and OKR design engagements, scoping AI integration opportunities across client products.

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

• Built a data integration platform for high-, medium- and low-voltage assets to enable contextual analysis of time series with master data from SCADA control systems (IEC 60870 104), INIS and SAP.
• Responsible for the architecture and implementation of the solution, and acted as a sparring partner for the Product Owner.
• Technologies used: Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter and various API gateways.

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

• Project management and consulting services with a focus on IT interim management: digitalization of corporate management, including processes and applications
• Assessment of the entire IT infrastructure, including applications, core processes and contracts, including cost optimization
• Evaluation and implementation of solutions to promote digitalization in the company in the areas of property management, CRM, invoice review and approval processes, smart metering, DMS and time tracking
• Digitization of file folders and introduction of SharePoint and Microsoft Teams as central document and communication platforms
• Design and delivery of an AI workshop, including the rollout of AI tools to increase efficiency and transparency in key business processes
• Preparation of training materials and delivery of user training for newly introduced digital processes and solutions

• Developed and managed content across diverse platforms, adapting tone, structure, and style to meet audience expectations and editorial standards
• Conducted in-depth research to ensure content accuracy, relevance, and alignment with client objectives and subject-matter requirements
• Edited and refined client manuscripts and drafts to improve clarity, narrative flow, coherence, and reader engagement
• Managed multiple concurrent content projects, prioritizing tasks and meeting tight deadlines while upholding high-quality standards
• Provided uncredited editing support for various publications, ensuring polished, consistent, and publication-ready final manuscripts

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

Stabilization of a critical logistics outsourcing setup in the context of an SAP S/4HANA transformation. The focus was on restoring a reliable operational fact base between the client, logistics service provider, international supplier plants and the SAP/IT organization.

• Coordination between the client, global logistics service provider, international supplier plants, SAP/IT teams, Quality Management and the operational shop floor.
• Management, monitoring and operational correction of Inbound Deliveries; integration of Outbound Delivery processes.
• Analysis of interface, posting, batch and master data errors between SAP S/4HANA, logistics service provider, supplier plants and internal business functions.
• Significant reduction of critical inventory differences between the client and logistics service provider.
• Improved operational management capability in the logistics environment and creation of a common fact base.
• Reduction of recurring error patterns in the areas of Inbound Deliveries, inventory, interfaces, batch/posting logic and service provider processes.

• Standardization and further development
• Application monitoring
• Incident handling
• Change management
• Interface and integration operations
• Testing, acceptance and transition to operations

• Claude Code subagents, MCP, Pydantic V2, pytest, bandit

• Designed and shipped 3 specialized agents that hand work down a line: a research agent writes a cited implementation spec, a coding agent builds the modular code and its tests, a review agent ranks findings by severity and applies the fixes. Each handoff is a structured document, so no stage depends on another agent's context window.

• Connected the research agent to an academic-research MCP server (Semantic Scholar, ArXiv, Hugging Face Hub, citation snowballing) so every reference traces to a tool result rather than the model. Gated commits behind ruff, mypy, pytest and bandit, required human sign-off before installs and commits, and persisted session state on disk so long runs survive a context reset.

• Act as project manager and first point of contact on the project side
• Coordinate with teams to ensure required information is available for project completion
• Ensure both general contractors and internal teams store information correctly
• Monitor compliance with the project checklist and follow-up
• Plan and execute the project plan
• Perform budget and project calculations based on expected price calculations and estimated effort
• Participate in project meetings
• Review progress of Actoom (external partner handling data)
• Answer queries from Actoom regarding data migrations to retrieve data from internal partners or general contractors
• Contact subcontractors to obtain missing information
• Communicate with insolvent companies to obtain missing information

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK