Groovy Experts in Austria

Refactoring and improving core APIs; implementing client change requests. Setting up metrics, traces, and logs monitoring infrastructure to support operations. Designing GitOps deployment and infrastructure as code. Applications and systems configuration in ArgoCD and Openshift. Confluence documentation of design, approach, and solution. Tech Stack: Java 8 & 21, Spring framework, JSP, JavaScript, Bash scripts, SQL, Grafana Stack, OpenTelemetry, Docker, DB2, Maven, Kubernetes Kompose.

• Lead software architect in a greenfield MES project (Manufacturing Execution System / factory control system), responsible for architecture decisions, technology selection, and technical direction throughout the entire development lifecycle
• Designed and built the core framework from scratch, including several reusable Spring Boot starters (e.g., OPC-UA integration, messaging, security) that enable flexible composition of the individual system modules
• Introduced Keycloak as the central authentication and authorization system with SSO across all MES components
• Created and owns the full CI/CD pipeline covering Java, NPM and Docker – automating build, test, containerisation and deployment across all project components
• Set up the architecture documentation space in Confluence as the single source of truth for all architecture decisions, component designs, and integration patterns
• Defined and enforced naming conventions and coding standards to ensure consistency in the growing codebase
• Conducted regular code reviews for quality assurance, knowledge sharing, and adherence to architecture guidelines
• Created and maintained technology roadmaps to guide future development priorities and infrastructure investments

• Implemented and maintained 443 automated test cases with a 99% pass rate (441/443)
• Enabled CI for test automation: automated runs on review/merge, reporting via Xray
• Introduced accessibility and performance checks and established them in reporting
• Served as QA lead in daily operations with stand-ups, Kanban progress tracking, prioritization, and targeted task distribution
• Handled defect triage and stakeholder communication with daily triage, QA status analysis, and actionable recommendations
• Developed and maintained a stable regression suite for CRM/Salesforce flows (UI/E2E and near-API validations)
• Integrated CI/CD using Jenkins pipelines with Groovy (IaC)
• Maintained QA documentation, test conventions, and processes in Confluence, aligned across the team
• Conducted Salesforce Einstein chatbot testing with intent/topic validation and output checks, and used Robot Framework/Python suites for continuous quality monitoring
• Technology stack: Jira, Xray, Confluence, Jenkins, Groovy, Git, Java, Selenium, Playwright, Cucumber, TypeScript, Postman, REST, Salesforce, Google Cloud, Lighthouse, Evinced, Scrum/Kanban, BDD (Gherkin)

• Replacement of original Dopix documents and modules into the Quadient document environment
• Extension of document logic

• Development of a Custom Jenkins Shared Library (Groovy)

• Integration of security checks in CI/CD pipeline (Shift-Left Approach)

• Automated vulnerability scanning and remediation workflows

• GitOps-based deployments with ArgoCD

• Semantic versioning automation with Git integration

• Container lifecycle management (Build/Scan/Tag/Push)

• ArgoCD webhook integration for event-driven deployments

• Complete cluster automation with Ansible

• Bare-metal Kubernetes installation from scratch

• High-availability control plane setup

• Unified deployment system for multi-application orchestration

• Configuration management according to NIST SP 800-128

• Host security: Linux hardening, SELinux/AppArmor

• Network security: NetworkPolicies, micro-segmentation

• Application security: RBAC, Pod Security Standards

• Data security: Encryption at rest and in transit

• Defense-in-depth principles

• Certificate management with cert-manager

• Secrets management with External Secrets Operator connected to Vault

• Infrastructure monitoring with Checkmk

• Prometheus/Grafana monitoring stack

• Security event detection and logging

• Automated health checks and incident response procedures

• MetalLB load balancing for bare-metal

• Nginx ingress controller with SSL passthrough

• NetworkPolicies for security zones

• Rook-Ceph distributed storage, CNI configuration (Weave Net)

• Container & orchestration: Kubernetes (bare-metal), Docker, Helm

• CI/CD & GitOps: Jenkins (Custom Shared Library), ArgoCD, Groovy

• Automation: Ansible, Bash, Python

• Security: nftables, RBAC, NetworkPolicies, cert-manager, Vault, Sealed Secrets

• Monitoring: Checkmk, Prometheus, Grafana

• Storage & networking: Rook-Ceph, MetalLB, Nginx Ingress, Calico

• Collaboration: Jira, Confluence

• OS: Debian, Ubuntu

Further development, configuration and operation of DOXiS, a document management system at a large financial services company. Development of a document interface as a REST API to integrate with third-party systems using the Java Spring Framework. Programming client scripts in Visual Basic, as well as workflow and agent scripts in Groovy.

• Setup and maintain Prometheus and Grafana via Docker for more than 2.000 services.
• Setup CI/CD with Ansible to provision and maintain Prometheus and Grafana.
• Metrics visualization and segregation in multiple dynamic dashboards.
• Setup of real time alerting for critical services.

• Analysis, design and implementation of acceptance tests
• Test execution and reporting
• Defect reporting and retesting
• Tools: Xray, Jira, Confluence, OpenText Content Server, Scrum