Google Cloud Platform Experts in Germany

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

Led the end-to-end integration and migration architecture for decommissioning SAP IS-U market communication and transitioning to Salesforce Marketing Cloud (SFMC) with E.ON IT Services — covering regulated EDIFACT market messaging, a three-phase data migration (transfer of market message inventory after cutover), redesign of market communication processes, and full GDPR and German energy-market compliance.

• Designed the three-tier target architecture (SAP IS-U → NScale B2B gateway → SFMC) processing 50,000–100,000 EDIFACT messages daily within sub-5-minute SLAs.
• Architected the three-phase data migration: 36 months of historical data, zero-loss cutover of in-flight market messages, and near-real-time CDC synchronization.
• Delivered secure, BDEW/GDPR-compliant integration (AS2/OFTP2, RFC/IDoc, REST APIs, OAuth 2.0, Azure AD, AWS S3) achieving >99.5% uptime, <0.1% migration discrepancy, and RTO <4 hours.
• Applied BPMN to model and optimize the market communication processes.

Technologies: SAP IS-U, NScale, Salesforce Marketing Cloud, EDIFACT, OAuth 2.0, Azure AD, AWS S3, BPMN, Jira, Confluence, Draw.io

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

• Project management and consulting services with a focus on IT interim management: digitalization of corporate management, including processes and applications
• Assessment of the entire IT infrastructure, including applications, core processes and contracts, including cost optimization
• Evaluation and implementation of solutions to promote digitalization in the company in the areas of property management, CRM, invoice review and approval processes, smart metering, DMS and time tracking
• Digitization of file folders and introduction of SharePoint and Microsoft Teams as central document and communication platforms
• Design and delivery of an AI workshop, including the rollout of AI tools to increase efficiency and transparency in key business processes
• Preparation of training materials and delivery of user training for newly introduced digital processes and solutions

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

Stabilization of a critical logistics outsourcing setup in the context of an SAP S/4HANA transformation. The focus was on restoring a reliable operational fact base between the client, logistics service provider, international supplier plants and the SAP/IT organization.

• Coordination between the client, global logistics service provider, international supplier plants, SAP/IT teams, Quality Management and the operational shop floor.
• Management, monitoring and operational correction of Inbound Deliveries; integration of Outbound Delivery processes.
• Analysis of interface, posting, batch and master data errors between SAP S/4HANA, logistics service provider, supplier plants and internal business functions.
• Significant reduction of critical inventory differences between the client and logistics service provider.
• Improved operational management capability in the logistics environment and creation of a common fact base.
• Reduction of recurring error patterns in the areas of Inbound Deliveries, inventory, interfaces, batch/posting logic and service provider processes.

• Claude Code subagents, MCP, Pydantic V2, pytest, bandit

• Designed and shipped 3 specialized agents that hand work down a line: a research agent writes a cited implementation spec, a coding agent builds the modular code and its tests, a review agent ranks findings by severity and applies the fixes. Each handoff is a structured document, so no stage depends on another agent's context window.

• Connected the research agent to an academic-research MCP server (Semantic Scholar, ArXiv, Hugging Face Hub, citation snowballing) so every reference traces to a tool result rather than the model. Gated commits behind ruff, mypy, pytest and bandit, required human sign-off before installs and commits, and persisted session state on disk so long runs survive a context reset.

• Act as project manager and first point of contact on the project side
• Coordinate with teams to ensure required information is available for project completion
• Ensure both general contractors and internal teams store information correctly
• Monitor compliance with the project checklist and follow-up
• Plan and execute the project plan
• Perform budget and project calculations based on expected price calculations and estimated effort
• Participate in project meetings
• Review progress of Actoom (external partner handling data)
• Answer queries from Actoom regarding data migrations to retrieve data from internal partners or general contractors
• Contact subcontractors to obtain missing information
• Communicate with insolvent companies to obtain missing information

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Product Analytics, Mobile App Tracking & Tracking Governance (B2C Mobility App) – agile project management (Scrum/Kanban)
• Product Ownership for Product Analytics and Mobile App Tracking of the EnBW mobility+ app; gathering, prioritizing, and translating business requirements into actionable concepts and Azure DevOps user stories with acceptance criteria.
• Derivation of tracking requirements when introducing new app features (including Resilient Map), definition of tracking parameters (screens, events, custom definitions), and ensuring privacy-compliant tracking (Firebase, GA4, Adjust) based on the tracking concept.
• Design and adaptation of dashboards and funnel reporting for campaigns (GA4 validation, onboarding and order flow analyses, conversion funnels, charging start flow) to identify drop-off points and optimization potential.
• Management of the technical raw data export (Adjust to BigQuery) and connection to the data warehouse/data lakehouse, including data mapping; collaboration with international development teams, Data Engineering, Marketing/Sales, and Product Management.
• Establishment of standardized tracking architecture, naming conventions, and governance; analysis and expansion of tracking (new features and “blind spots”), test design, handover to testers, and quality assurance and approval before releases; documentation in Conceptboard.

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Evidence-led health intelligence platform turning published research into personal health protocols. It scores 430 habits, foods, and supplements against the studies behind them, and moves the score when the evidence moves. Built solo.

• Built the daily ingestion pipeline across PubMed, bioRxiv, and medRxiv: 43,000+ papers from 3,400+ journals processed into 230,000+ typed evidence claims, each one traceable back to the study it came from.
• Designed the six-factor evidence scoring model and the public changelog behind it, so no recommendation ever appears without the papers underneath it. 23,000+ grade changes recorded and explained to date.
• Shipped an entity information model connecting every intervention to its mechanisms, biomarkers, and outcomes: 118 biomarkers with region-specific reference ranges, 77 mechanisms, 32 graded outcomes.
• Built the personalisation layer: blood panel ingestion that reads lab PDFs with a vision model and corrects results for draw time against the user's wake anchor, plus Oura, WHOOP, and Withings integration for daily readiness context.
• Operate eleven specialised review agents over the corpus and codebase, covering paper curation, retrieval quality, health-claim compliance across EU and US regimes, and security.
• Shipped the Evidence Assistant, a RAG assistant that answers from the claim database and cites the underlying papers, plus a B2B practitioner tier, an Expo React Native app, and localisation across 3 languages and 7 markets.

Stack: Next.js 16, TypeScript, Supabase, pgvector, Anthropic Claude, Vercel, DeepInfra.

• Supporting the International Web Presence of the BA (IntWeb) project in the area of quality management, with the aim of taking responsibility for the quality of processes and project results while considering BA standards. The main objectives of the project are to give professionals abroad a quick overview of their opportunities for moving to Germany and to enable them to take the necessary steps consistently and with digital support by providing access to services.

• Defining the general guidelines in the QA handbook

• Summarising test results in QA reports for PLA

• Analysing project results for improvement opportunities

• Quality management of requirements analysis (particularly processes, methods, and tools)

• Ensuring compliance with SERA requirements

• Creating a cross-project test concept

• Agreeing on sprint completion reports

• Formal review of work results in accordance with requirements and/or the project plan

• Contact person for internal audit, external audits by auditors, or BRH (Federal Court of Audit)

• Technologies: JIRA, Confluence, MS Office, GitLab, Kubernetes