Google Cloud Platform Experts in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Supporting the International Web Presence of the BA (IntWeb) project in the area of quality management, with the aim of taking responsibility for the quality of processes and project results while considering BA standards. The main objectives of the project are to give professionals abroad a quick overview of their opportunities for moving to Germany and to enable them to take the necessary steps consistently and with digital support by providing access to services.

• Defining the general guidelines in the QA handbook

• Summarising test results in QA reports for PLA

• Analysing project results for improvement opportunities

• Quality management of requirements analysis (particularly processes, methods, and tools)

• Ensuring compliance with SERA requirements

• Creating a cross-project test concept

• Agreeing on sprint completion reports

• Formal review of work results in accordance with requirements and/or the project plan

• Contact person for internal audit, external audits by auditors, or BRH (Federal Court of Audit)

• Technologies: JIRA, Confluence, MS Office, GitLab, Kubernetes

The Base Services of DB InfraGO form a central data hub between the company’s IT systems. Common Data Services are developed that distribute data from source systems to a variety of downstream systems (via JMS) and make them available (via REST API). The existing service landscape based on TIBCO is being migrated to DB InfraGO’s cloud-native platform.

• Architecture design and implementation for performance-optimized bulk data processing of several million datasets at specific times during the day
• Technical specification and documentation of business requirements
• Integration of various subsystems (including SAP and Salesforce) through the reimplementation of more than 40 microservices based on Spring Boot
• Migration of TIBCO Based microservices from the Enterprise Integration Platform to the Cloud Native Platform using Spring-Boot
• Establishment of a deployment pipeline using GitLab CI/CD, Artifactory, and automated deployment to a Kubernetes environment with the help of ArgoCD
• Definition and implementation of automated unit, integration, and regression tests

Team Size: 9

Technologies/Tools: Java, Spring Boot, ActiveMQ(JMS), JUnit, Tibco Business Works, Gitlab (CI/CD), Kubernetes (Amazon AWS), ArgoCD, postgreSQL, Oracle, Postman, Hoppscotch, openAPI, Sonarqube

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

Participation in the EU-funded MORANE-2 project to validate the Future Railway Mobile Communication System (FRMCS) in real-world use cases: preparation of the requirements specifications for TOBA and the associated test specifications.

Technologies: 5GS (Radio & Core), FRMCS, MCx (MCPTT, MCData, MCVideo), MC Gateway UE, MCx Priority/Security/QoS Management, ETCS, SIP, IMS

• Built an MCP (Model Context Protocol) layer for Mwanachama's agency service, turning domain manager methods into callable AI-agent tools. This included a composite tool that builds a full organization design (org chart, goals, workflows, RACI matrix) from one specification.
• Built the chat-driven agency builder (Wakala Studio and API), where an organization describes its structure in natural language and an AI agent uses those tools to construct and modify the live design.
• Added an insights service so an organization can review AI-agent interactions and completed work. Insights from that review feed back into solution design, gated by architect and user sign-off.
• Alongside this, designed and built the platform itself: ~20 Go microservices on PostgreSQL, Flutter and React clients, deployed on Kubernetes.
• AI agents scan the platform autonomously for security gaps and run scripted tests, covering API (Postman-style) and UI testing. The rest of the work stays supervised. No rogue agents, promise.
• Building an AI-native enterprise platform that structures organizational data, workflows and responsibilities for both people and AI agents.
• Models accountability through RACI, allowing human and AI participants to take different operational roles, including Responsible, Accountable, Consulted and Informed. AI agents can also take controlled approval roles where the organization assigns that responsibility.
• Extended the organizational and operational-risk themes from my Executive MBA thesis into software, making roles, processes and controls explicit and machine-readable.
• Structures enterprise context so LLM interactions use more relevant information instead of repeatedly processing large amounts of unstructured content.

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

• Analysis of the existing reporting platform, including processes and governance topics, with stakeholders from Sales and Marketing.

• Detailed analysis and evaluation of customer-defined requirements for existing reporting and new dashboards to be established.

• Support for stakeholders in managing sales processes and identifying KPI trends at an early stage.

• Use of Microsoft Power BI as the central analysis and reporting platform.

• Development of a proposal for the required further development of processes and the Power BI platform.

• Documentation of AS-IS business processes and derivation of company-wide KPIs, including coordination with stakeholders.

• Analysis and assessment of the customer's Power BI platform.

• Analysis of processes and data governance.

• Documentation of AS-IS business processes.

• Development of recommendations for further developing processes and the reporting platform.

• Design and implementation of dashboards in Power BI.

• Development of company-wide KPIs and coordination with stakeholders.

• Microsoft Power BI.

• Data analytics.

• KPI definition and reporting.

• Dashboard design and data visualization.

• Stakeholder management and requirements management.

• Quality assurance and management of bioanalytical study data in LIMS and ELN systems
• Ensuring compliance with GLP and GCP in clinical studies
• Supporting project teams with quality- and compliance-related questions
• Quality assurance and compliance with regulatory requirements
• Assessment of data integrity, traceability, and study processes
• Close collaboration with QA, laboratory, and study teams in the pharmaceutical environment
• Qualification and validation of various devices (e.g. air samplers, data loggers, freezers, refrigerators, incubators)
• Maintenance and calibration of various devices (e.g. air samplers, data loggers, sensors)
• Deviation management (Deviations)
• Qualification and maintenance of monitoring systems (sensors for pressure, temperature, room temperature, and humidity), including alarm systems
• Execution of qualification and validation activities: CC, CQ, IQ, OQ, PQ, RA, CR, CAPA, DQ
• Preparation and review of URS, RTM, test plans, and qualification documentation
• Checking, maintaining, and tracking quality-related documentation

Statistical Forecasting Algorithm

• Improvement of an statistical probabilistic forecasting algorithm for sales + evaluation
• Migration from R/On-premise to Python/Snowflake
• Productionalization on Snowflake in cooperation with data engineers & DevOps

Monitoring Dashboard

• Data engineering for preparation & provisioning of necessary data/resources on Snowflake
• Development & deployment of a Streamlit dashboard in Snowflake

ML-based Probabilistic Forecasting on Vertex AI

• Development of a ML-based probabilistic forecasting algorithm from scratch
• Implementation of MLOps pipeline in Kubeflow on Google Cloud Vertex AI

Tech Stack: Python, Snowflake/Snowpark, R, Streamlit, Gitlab/Gitlab CICD, Terraform, Google Cloud, Vertex AI (aiplatform SDK, gcloud CLI, feature store, model registry, etc), kubeflow

Project: SCS (Settlement / Clearing Services)

Settlement platform serving multiple trading and clearing venues — counterparty risk safeguarding, settlement volume reduction, central risk management, and post-trade anonymity.

Technologies: Java 17, Spring Boot 3, Microservices, Spring Data JPA, SonarQube, Fortify (SCST), Mockito, Jenkins, OpenShift, Maven, Podman, GitHub, JIRA, Liquibase, Swagger, AMQP, Apache Camel, Terraform, PostgreSQL, Instana, Graylog.

• Identified and remediated CVEs in third-party libraries using SCA tooling, strengthening the security posture of production components.
• Maintained 90% code coverage with SonarQube, improving code quality and reducing production defects.
• Enabled mTLS for database authentication and message broker connections, enforcing encrypted, certificate-validated communication.
• Designed and deployed microservices with asynchronous, REST-based communication between components.
• Optimized a high-volume REST API (~200K requests) by reducing response time from 3s to 2s (33% improvement), boosting throughput and reliability under production load.
• Automated build and continuous integration pipelines using Maven and Jenkins.
• Orchestrated containerized workloads on Podman/OpenShift and governed schema evolution with Liquibase, ensuring reliable, repeatable deployments across all environments.
• Optimized Java code and implemented EHCache-based caching, improving application performance.
• Streamlined release management by governing application images, JAR versions, and dependencies through DBAG Artifactory, ensuring version consistency and audit traceability across environments

• Presentation introducing generic A.I. and Large Language Models
• Explanation of legal frameworks (EU AI Act, US CLOUD Act, DSGVO)
• Systematic review of AI tools along the SDLC and holistic systems
• Comparison of on-prem LLMs vs. cloud-based solutions, as well as change management and works council considerations
• Moderation of the discussion and definition of next steps for introducing AI development tools

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• Founding and overall responsibility: Built a B2B SaaS platform for craft and construction businesses from the first line of code to the live launch with the first paying customer; solo founding including full establishment of the company and all business processes.
• Product and technology responsibility: Designed and developed the entire product.
• Infrastructure & DevOps: Managed a Kubernetes/Helm environment including CI/CD, monitoring, and security architecture; GDPR-compliant platform decisions and evaluation of EU-hosted LLM providers.
• Agentic coding as a productivity multiplier: Set up a productive multi-agent environment with Claude Code: up to eight parallel agents in isolated Git worktrees, Telegram-based remote control and monitoring, MCP integrations (e.g., Context7, Playwright for E2E tests), and a builder-critic pattern with custom slash commands (/research, /plan) and compressed project contexts. Result: development throughput on par with a small team while working solo.
• Go-to-market: Independently developed positioning, SEO and direct mail playbook, as well as target group analysis.
• Regulation & finance: Implemented e-invoicing requirements (ZUGFeRD/XRechnung), set up accounting and payment infrastructure, and managed funding and financing options.