Google Cloud Platform Experts in Frankfurt

• Architected the Yatta Integration Layer – a config-driven integration platform on Java 25, Spring Boot 4 (WebFlux), Temporal, gRPC and Kafka, enabling new third-party integrations (e.g. AVS fulfillment) via declarative JSON configs with zero code changes.
• Designed and implemented Tink integration with 0Auth IBAN verification to enhance fraud prevention and account validation workflows with Adyen payByBank.
• Architected and implemented an OpenFGA-based authorization model for centralized management of users, groups, and fine-grained access control in the vendor portal.
• Architected and led delivery of the Yatta API Gateway platform using GraphQL Federation, providing a unified enterprise API layer across distributed microservices with centralized authentication, authorization and request orchestration.
• Replaced NGINX + NLB with Istio service mesh and AWS ALB; rolled out WAF, OAuth (Cognito), IP whitelisting and RBAC across environments.
• Migrated CDC from Confluent Cloud connectors to a self-hosted Kafka Connect + Debezium stack, reducing operational cost by ~80% across multiple environments.
• Implemented the Transactional Outbox pattern with Debezium for reliable, exactly-once event publishing to Kafka with Avro and Schema Registry.
• Migrated dunning/payment-recovery workflows from Airflow to Temporal, achieving 99.9% reliability for settlement handling.
• Optimised Apache Airflow with deferrable sensors to handle 1000+ concurrent DAG runs without scaling the worker pool.
• Refactored a monolithic Terraform codebase into 3 modular projects, cutting deployment time by ~45%.
• Stood up full observability with OpenTelemetry, Tempo, Prometheus and Loki; automated dev/staging/prod with ArgoCD, Image Updater and Helm.
• Collaborated with product, operations and engineering stakeholders to define scalable platform architecture and integration standards aligned with long-term business and operational goals.

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• Analysis of the existing reporting platform including processes and governance topics with stakeholders from sales and marketing.

• Detailed analysis and evaluation of client-defined requirements for existing reporting and new dashboards.

• Supporting stakeholders in managing sales processes and early detection of KPI trends.

• Use of Microsoft Power BI as central analysis and reporting platform.

• Developing a proposal for the necessary evolution of processes and the Power BI platform.

• Gathering current business processes and defining company-wide KPIs in coordination with stakeholders.

• Analysis and inventory of the client's Power BI platform.

• Analysis of processes and data governance.

• Recording and documenting current business processes.

• Developing recommendations for process and reporting platform improvements.

• Designing and implementing dashboards in Power BI.

• Defining company-wide KPIs and aligning them with stakeholders.

• Microsoft Power BI.

• Data analytics.

• KPI definition and reporting.

• Dashboard design and data visualization.

• Stakeholder management and requirements management.

Project: SCS (Settlement / Clearing Services)

Settlement platform serving multiple trading and clearing venues — counterparty risk safeguarding, settlement volume reduction, central risk management, and post-trade anonymity.

Technologies: Java 17, Spring Boot 3, Microservices, Spring Data JPA, SonarQube, Fortify (SCST), Mockito, Jenkins, OpenShift, Maven, Podman, GitHub, JIRA, Liquibase, Swagger, AMQP, Apache Camel, Terraform, PostgreSQL, Instana, Graylog.

• Identified and remediated CVEs in third-party libraries using SCA tooling, strengthening the security posture of production components.
• Maintained 90% code coverage with SonarQube, improving code quality and reducing production defects.
• Built and customized Helm charts and values.yaml configurations across 3 environments (ACT, SIMU, PROD), increasing deployment flexibility and consistency.
• Enabled mTLS for database authentication and message broker connections, enforcing encrypted, certificate-validated communication.
• Designed and deployed microservices with asynchronous, REST-based communication between components.
• Automated build and continuous integration pipelines using Maven and Jenkins.
• Used Podman and OpenShift for container orchestration and Liquibase for database version control.
• Optimized Java code and implemented EHCache-based caching, improving application performance.
• Managed application images, JAR versions, and dependencies via DBAG Artifactory Repository Manager.

• Enterprise-grade multi-agent AI orchestration platform built with Go and Kubernetes for scalable, secure agent coordination in cloud-native environments.
• Multi-agent orchestration with intelligent workload distribution and dynamic scaling.
• Cloud-native architecture with Kubernetes deployment and horizontal auto-scaling.
• Real-time coordination with sub-100ms agent communication using Go channels.
• Enterprise security with zero-trust architecture, RBAC, and comprehensive audit trails.
• Visual workflow engine with monitoring, observability, and API gateway integration.
• Technologies: Go, Kubernetes, ArangoDB, gRPC, Prometheus, Grafana.

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Founding and overall responsibility: Built a B2B SaaS platform for craft and construction businesses from the first line of code to the live launch with the first paying customer; solo founding including full establishment of the company and all business processes.
• Product and technology responsibility: Designed and developed the entire product.
• Infrastructure & DevOps: Managed a Kubernetes/Helm environment including CI/CD, monitoring, and security architecture; GDPR-compliant platform decisions and evaluation of EU-hosted LLM providers.
• Agentic coding as a productivity multiplier: Set up a productive multi-agent environment with Claude Code: up to eight parallel agents in isolated Git worktrees, Telegram-based remote control and monitoring, MCP integrations (e.g., Context7, Playwright for E2E tests), and a builder-critic pattern with custom slash commands (/research, /plan) and compressed project contexts. Result: development throughput on par with a small team while working solo.
• Go-to-market: Independently developed positioning, SEO and direct mail playbook, as well as target group analysis.
• Regulation & finance: Implemented e-invoicing requirements (ZUGFeRD/XRechnung), set up accounting and payment infrastructure, and managed funding and financing options.

• Supported the International Web Presence project of the Federal Employment Agency (IntWeb) in quality management, taking on responsibility for the quality of processes and project deliverables while adhering to BA standards. The project's main goals are to give professionals abroad a quick overview of their chances to move to Germany and to enable them to take the necessary steps in a consistently digital way.

• Set the fundamental guidelines using the QA handbook

• Summarized test results in QA reports for PLA

• Analyzed project outcomes for improvement opportunities

• Quality management of requirements analysis (especially processes, methods and tools)

• Ensured compliance with SERA guidelines

• Created a cross-project test concept

• Agreed on sprint completion reports

• Conducted formal reviews of deliverables according to guidelines and/or project plan

• Acted as contact person for internal audit and external audits by auditors or the Federal Audit Office (BRH)

• Technologies: JIRA, Confluence, MS Office, GitLab, Kubernetes

• Main developer in an online retail company
• Built an online shop using the Next.JS React framework
• Integrated the site with dozens of third-party apps using REST and GraphQL APIs
• Built a backend for order management, warehouse management (with iPhone app), and supply management
• Automated invoicing and finances with QuickBooks

• Datastage 11.7, dbt, Oracle 19, Python 3.12 / PySpark 3.5, Azure GitHub, Azure DevOps, Automic
• Development of migration jobs to transfer data from the collection DWH to the new Risk Mart, as well as development of ETL pipelines to migrate historical data from the old Mart to the new Risk Mart.
• Storage of the silver layer on Hadoop and the gold layer in Oracle.
• Translation of DataStage jobs into dbt to publish reporting data in Google Cloud to a PostgreSQL database.
• Creation and optimization of complex SQL queries for data extraction from a data vault, taking into account historical data in the point-in-time tables.
• Creation of Oracle table definitions (DDL) and adjustment of existing stored procedures.
• Versioning changes in GitHub and deployment via the CI/CD portal.
• Refactoring long-running DataStage jobs into Python using PySpark to reduce server load.
• Migration of SAS scripts to PL/SQL, including new development of distribution functions that have no direct equivalent in Oracle.
• Development of Automic jobs to run DataStage pipelines and Python scripts (PySpark jobs) that control the population of the SME and institutional risk tables in the Risk Mart and perform business calculations.
• Participation in the agile process, including creating user stories, estimations, and planning in Azure DevOps.
• Handling Azure DevOps tickets and close collaboration with testers and business teams for error analysis and resolution.

• Provided coaching and support to Scrum teams to adopt and implement agile practices effectively
• Analyzed business requirements and identified IT solutions to support business goals
• Evaluated existing IT systems and processes to identify optimization opportunities
• Managed stakeholder relationships and coaching
• Facilitated Scrum ceremonies and ensured adherence to Scrum principles and practices
• Identified and implemented lean startup process optimizations to improve efficiency and effectiveness of development and business processes
• Developed and monitored daily business strategies to ensure development goals were met
• Developed and implemented OKR strategies to align team goals with company objectives
• Tools/Methodology: Jira, Confluence, Miro, PowerBI, team building & mentoring, conflict resolution, impediment resolution

• Founded and lead a cybersecurity advisory firm focused on virtual CISO services for financial, SaaS, and critical infrastructure clients.
• Advise executive teams on cyber risk, regulatory compliance (DORA, NIS2, ISO 27001), and incident preparedness.
• Built and executed security programs from scratch, driving measurable maturity improvements.
• Delivered tailored risk assessments, policies, and cloud security guidance (AWS, Azure).
• Scaled the business through client acquisition, partnerships (Vanta, AWS, etc), and a network of senior consultants.

• Responsibility for the specialist department
• Effective stakeholder management
• Management and prioritization of the backlog
• Resource and capacity planning
• Risk management
• Cost calculation and budget control
• Compliance with security guidelines and data protection regulations in a high-security environment (Bank regulations)
• Creation and monitoring of project timelines
• Planning and execution of workshops as well as the creation of user manuals
• Development and coordination of architecture maps with service providers and internal IT
• Creation and tracking of milestone plans
• Recording, analysis, and documentation of defects, including retesting until final approval for launch
• Coordination and execution of penetration tests
• Organization and management of User Acceptance Tests (UAT)
• Definition of Go / No-Go criteria for the launch
• Collaboration and organization of multinational teams