Google Cloud SQL Experts in Germany

• Extended a global large-scale project to improve the multi-tenant GCP data platform using FAST framework concepts, leveraging Terraform, Terraform Enterprise, and GitLab.
• Collaborated closely with security and governance teams to architect and implement secure and compliant GCP environments, focusing on VPC Service Controls, KMS, organizational structure, and guardrails to support the isolation of corporate entities.
• Enhanced the security posture of the enterprise GCP platform by implementing robust security measures, including GCP organization policies, deny policies, and VPC Service Controls to safeguard against potential exfiltration risks.
• Implemented controls based on CSA Cloud Controls Matrix (CCM v4) to secure the GCP cloud environment.
• Automated key components of the GitLab CI/CD pipeline by integrating OpenID Connect (OIDC) for workload identity federation, necessary for a large migration from GitHub.
• Implemented a YAML-based project factory to facilitate easy, secure, and governed provisioning of tenant projects, increasing speed, scalability, and usability while minimizing operational burden.
• Developed a dynamic approach for policy attachment to tenants using a YAML-based custom IAM template approach.
• Evaluated and implemented Google PAM (Privileged Access Manager) in a proof of concept for organization-wide just-in-time access.
• Set up CyberArk SCA and CEM tooling to ensure secure cloud access and provide visibility into the cloud environment.
• Handled GCP incidents, ensuring prompt resolution and operational stability.
• Authored and maintained extensive documentation within an Agile environment, utilizing Jira and Confluence for project tracking and knowledge management.
• Utilized HashiCorp Sentinel as a policy-as-code tool to shift-left cloud security by enforcing policies before infrastructure provisioning.
• Used Prisma Cloud to continuously monitor and secure GCP resources, ensuring compliance and risk mitigation across the organization.
• Developed a custom Org Policy Factory to standardize and automate custom governance across projects, ensuring enforcement of non-trivial organizational controls.
• Architected and built a cloud-agnostic credential lifecycle management platform with Python and GitLab to automate the secure handling of static credentials, improving governance, compliance, and audit readiness.
• Delivered an executive-level presentation on VPC Service Controls to C-level stakeholders, driving strategic awareness and alignment on cloud security posture.
• Led resolution of P1 incidents with high production impact, restoring services under critical time constraints.
• Architected and deployed a central monitoring and alerting solution using Cloud Monitoring and PromQL, providing real-time visibility into system health and proactive incident detection.
• Designed and developed a Python-based broker for self-service integration with an internal developer platform, streamlining onboarding and reducing manual effort.
• Implemented a templating approach for VPC Service Controls, enabling repeatable, secure, and consistent deployment patterns across tenants and environments.

In a lean, execution-focused environment, I took ownership beyond a narrow engineering lane, shaping and implementing systems across backend, data, and infrastructure. Partnered directly with the three founders in a fast-moving, high-stakes environment, turning strategic priorities into concrete technical decisions and production outcomes.

• Owned core platform development across backend (Django/Rest Framework/Postgres), ETL (Python/Dagster), infrastructure (Terraform/Kubernetes/AWS), and frontend (typescript/react) for a climate-tech SaaS product, driving continuous cross-stack development across five repositories from October 2021 to this day.
• Architected and owned a standalone internal Python scoring framework for CRC assessments, using YAML-driven rules and metaprogramming to enable non-technical users to define complex evaluation logic without hardcoded implementations.
• Built and stabilized ETL and scraping pipelines using Dagster and Scrapfly, improving document ingestion, tagging, retry behavior, deployment flow, and operational resilience.
• Contributed to platform modernization and reliability through Django/Python upgrades, Postgres/RDS and EKS changes, CDN/TLS updates, test and performance improvements, and observability hardening.
• Drove backend engineering for product features, translating requirements into technical specifications, API contracts, data structures, and scalable implementation plans.

• Self-employed work as a software developer

• Led development activities for enterprise applications, managing design, planning, and delivery to meet organizational goals.
• Constructed and deployed microservices using Java/JavaEE, Kotlin, Spring Boot, Kafka incorporating synchronous and asynchronous communication, achieving a 95% on-time delivery rate.
• Developed microservices in Golang utilizing frameworks such as Gin, GORM, and Viper for high-performance applications.
• Maintained RESTful and GraphQL APIs, enabling seamless integration with enterprise applications.
• Leveraged gRPC for secure, efficient service-to-service communication in microservices, reducing latency.
• Used SQL databases (MySQL, PostgreSQL) and NoSQL databases (MongoDB, Redis).
• Integrated publisher-subscriber systems and message queue architectures (SQS, Kafka).
• Configured secure authentication and authorization systems (OAuth 2.0, OpenID Connect) using AWS Cognito and Spring Security.
• Architected scalable patterns like API Gateway, Circuit Breaker, Saga, CQRS, and Event Sourcing to enhance reliability and performance.
• Built middleware solutions integrating complex APIs and third-party services for seamless system interactions.
• Achieved cloud-native architectures with AWS services, including S3, EC2, Lambda, API Gateway, RDS, DynamoDB, SNS, SQS, EKS, ECR, and ECS.
• Delivered a centralized CI/CD pipeline, reducing deployment time by 80% through automation and standardization.
• Integrated observability tools such as Prometheus, Grafana, Datadog, and CloudWatch, improving monitoring and troubleshooting capabilities.
• Automated IaC provisioning with Terraform, ensuring consistent and scalable environments across development, testing, and production.
• Enhanced logging and visualization using the ELK stack (Elasticsearch, Logstash, Kibana).
• Optimized release processes, ensuring efficient and error-free deployments, resulting in a 30% reduction in production bugs.
• Lifted services to the cloud, transitioning legacy systems to a cloud environment to improve scalability and performance.
• Automated infrastructure tasks with Python, streamlining workflows such as S3 file uploads and SQS event handling.
• Crafted Python scripts to test AWS services locally using LocalStack, achieving 98% accuracy.
• Designed and architected large-scale, scalable enterprise applications, performing end-to-end, unit, and integration testing, reducing production bugs by 25%.
• Designed and developed web applications using Angular, HTML, CSS, and JavaScript.
• Integrated advanced security measures into the DevSecOps pipeline, including SAST with SonarQube, DAST using OWASP ZAP, vulnerability scanning with Snyk, container image scanning via Trivy.
• Mentored 5+ junior developers in Java, Kotlin, and microservices, boosting team productivity by 20% within six months.
• Facilitated workshops on modern architecture, DevOps, and cloud integration practices, enhancing team proficiency.

• Further development of the online shop
• IT environment: Ruby on Rails, JavaScript, Postgres, AWS, Git, Continuous Deployment, Kubernetes, SLIM

• Languages: PHP7/8 (Shopware 5 & 6), Vue.js, Docker, Oracle, Apache, MongoDB (NoSQL)
• Infrastructure: ScaleCommerce (e-commerce cluster, container-based)
• Team: 3
• Development methodology: Kanban (Jira/Confluence)
• Planning and development of various client projects in an agency environment