HashiCorp Vault Experts in Germany

The Base Services of DB InfraGO form a central data hub between the company’s IT systems. Common Data Services are developed that distribute data from source systems to a variety of downstream systems (via JMS) and make them available (via REST API). The existing service landscape based on TIBCO is being migrated to DB InfraGO’s cloud-native platform.

• Architecture design and implementation for performance-optimized bulk data processing of several million datasets at specific times during the day
• Technical specification and documentation of business requirements
• Integration of various subsystems (including SAP and Salesforce) through the reimplementation of more than 40 microservices based on Spring Boot
• Migration of TIBCO Based microservices from the Enterprise Integration Platform to the Cloud Native Platform using Spring-Boot
• Establishment of a deployment pipeline using GitLab CI/CD, Artifactory, and automated deployment to a Kubernetes environment with the help of ArgoCD
• Definition and implementation of automated unit, integration, and regression tests

Team Size: 9

Technologies/Tools: Java, Spring Boot, ActiveMQ(JMS), JUnit, Tibco Business Works, Gitlab (CI/CD), Kubernetes (Amazon AWS), ArgoCD, postgreSQL, Oracle, Postman, Hoppscotch, openAPI, Sonarqube

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

• Built and further developed an AWS landing zone based on Terraform / OpenTofu (multi-account structure, IAM baselines, network and security standards)
• Designed and operated platform-oriented AWS architectures to standardize infrastructure and operations processes
• Built and operated Kubernetes-based platforms (EKS) as a shared runtime environment for application teams
• Established GitOps-based deployments with Argo CD and FluxCD
• Developed and operated central CI/CD platforms (GitLab CI, GitHub Actions, Jenkins)
• Enabled development and project teams through reusable platform building blocks
• Introduced and implemented FinOps structures (AWS Cost Explorer, CUR + Athena, Infracost, Grafana dashboards)
• Built and operated central observability platforms (Prometheus, Grafana, Loki, Alertmanager, CloudWatch)

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, acceptance, and compliance tests for safety-critical brake control units in the rail industry
• Software test application & integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies, and component interactions
• Test automation (FEAT framework): Co-development and further development of an automated test framework for test execution, reporting, and result analysis
• Functional safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage, as well as standards compliance according to EN50126/28/29
• Test automation for communication components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements analysis & shift-left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities, and redundancies early in the SDLC
• Test design & test case development: Derivation of test conditions, coverage strategies, and implementation of data-driven test cases (DDT), including reusable test data fixtures
• CI/CD & automation (Python, PowerShell, Jenkins, SVN): Automation of build, test, and HIL deployment processes as well as integration into CI/CD pipelines
• Test data & configuration management (XML): Maintenance and adaptation of XML test vectors and system configurations with automated integration into test environments
• Non-functional testing: Execution of performance and load tests to assess stability and system behavior
• Agile development & defect management (JIRA, Confluence): Participation in Scrum teams, test coordination, review of test artifacts, as well as defect tracking and root-cause analysis
• Error analysis & debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system layers (application to bus)
• Model-based analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & test documentation: Creation of integration and test documentation according to internal quality and certification requirements

• Development and introduction of operations processes
• Preparation of complete documentation packages (including incident management and operations support) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Technical consulting for the project security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Hybrid cloud architecture design (on-prem, Hetzner, AWS)
• Analysis and troubleshooting of incidents and system outages
• Network adjustments for firewall rules, gateways, OpenVPN settings, and IPsec tunnels (pfSense)
• Technical consulting on Bitbucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

Design and implementation of a compact ERP, CRM, accounting, and production-planning platform for a German food manufacturer. The system replaces Rechnung11, self-built Excel sheets, and manual processes for fewer than 10 internal users.

• Designed and implemented the full platform architecture as sole architect and developer.
• Built modules for customer management, B2B order handling, invoicing, production planning, and accounting support.
• Implemented DATEV export, ZUGFeRD/XRechnung e-invoicing, FinTS bank statement synchronization, and GoBD audit trail concepts.
• Used AI-supported workflows for prototyping, test support, and implementation acceleration while retaining full architecture, review, testing strategy, and technical ownership.

Technology: Java 23, Spring Boot 3, Spring Data JPA, Spring Security, Vue 3, TypeScript, PostgreSQL, Flyway, REST, OpenAPI, JWT, TOTP, RBAC, DATEV, FinTS, ZUGFeRD, XRechnung, GoBD, JUnit, Mockito, Testcontainers, Playwright, Docker, GitLab CI/CD

Development and further development of an internal platform for managing and providing technical resources, virtual machines, and infrastructure services. The platform supports self-service processes and covers functions that are conceptually comparable to cloud management solutions like Azure or AWS.

• Responsible involvement in the design, development, and implementation of new backend and frontend features
• Hands-on development with Java, Spring Boot, Python, and Angular
• Implementation of REST interfaces, business logic, validations, and integrations into existing system landscapes
• Further development of modern web interfaces with Angular, including connection to backend services
• Participation in architecture and design decisions within the team, especially with regard to scalability, maintainability, and clean interfaces
• Containerization and deployment of applications with Docker, Kubernetes, and Helm
• Support with CI/CD processes and deployment to Kubernetes-based environments
• Work in the environment of vSphere, Broadcom, GitLab CI/CD, ArgoCD, Maven, npm, and NuGet
• Close collaboration with developers, business teams, DevOps, and other technical stakeholders
• Analysis of technical requirements, deriving suitable solutions, and independent implementation in an agile team
• Use of GitHub Copilot to support code generation, refactoring, test case creation, and technical documentation

Methods/ tools/ technologies: Languages & frameworks: Java (21), Spring Boot (4.x), Python, Angular, Robot Framework, Kubernetes, Helm Persistence: PostgreSQL, MongoDB, Hibernate, Liquibase Architecture & communication: REST, gRPC, GraphQL, Apache Kafka, OpenAPI, Microservices, Event Driven, Domain Driven Design Cloud & infrastructure: Terraform, Docker, Rancher, Helm, Ansible Security: OAuth2, MS (Entra ID), web security, Keycloak (extensions for detailed group rights) DevOps: GitLab CI/CD, Ansible, Maven, Gradle, Grafana, Prometheus, Git, GitHub Copilot Testing & QM: JUnit, Robot Framework, automated component and integration tests, E2E tests with Playwright, Testcontainers, EasyMock Methodology & approach: Kanban, JIRA, Confluence, Clean Code

• Designed and developed the architecture of an enterprise SCM/CI platform for Kubernetes-native delivery and GitOps workflows.
• Implemented infrastructure automation and Vault & IAM integration for secure, compliant pipelines.
• Coordinated cross-functional teams to improve DevOps, security, and architecture in release processes.
• Increased platform adoption and developer experience by automating onboarding and artifact pipelines.

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

• Adaptation, optimization, configuration, and administration of a multi-stage GitLab instance with over 250 users
• Setup, adaptation, expansion, and optimization of infrastructure, configuration, and monitoring
• Provisioning of services and handover to production
• System environment: DependencyTrack, GitLab, Grafana, Hedgedoc, Kubernetes, Oauth2 Proxy, Openstack, Prometheus, Syseleven

• Converts natural language into JQL using RAG and pgvector. Returns structured JSON with a query, chart spec, and plain-text answer. A two-stage router answers general questions without touching the JQL pipeline at all.
• Interchangeable LLM backends: Ollama, vLLM, Groq, Anthropic Claude, AWS Bedrock - switchable at runtime, no code changes. Self-healing JQL: on Jira validation failure, feeds error back to LLM, retries up to 4 times. OCI Vault for secrets. Deployed on Oracle Cloud A1 with GPU inference over Tailscale private network. Open source.

• Infrastructure management with Puppet and Terraform for consistent environments
• Maintenance and adaptation of Terraform scripts for Azure cloud deployment
• Migration of database systems and services to the Azure cloud
• Introduction of GitOps with ArgoCD for fully automated deployments
• Adaptation and development of GitHub pipelines for CI/CD workflows
• Creation of Helm Charts for standardized deployments
• Migration of repositories from Bitbucket to GitHub
• Operation and performance optimization of an Oracle 19c grid cluster (RAC, Dataguard)
• Setup and management of MongoDB instances (on-premise and Azure Kubernetes)
• Setup of PostgreSQL clusters in on-premise and Azure Kubernetes environments
• Migration of services, master data, and stored procedures from Oracle to PostgreSQL
• Troubleshooting and performance tuning of complex data infrastructures
• Installation, configuration, and upgrade of Tableau in the productive BI environment
• Development of sanity checks to monitor business processes and application logic
• Adaptation of the backup and recovery strategy to new requirements
• Carrying out disaster recovery and point-in-time recovery
• Technologies used: Oracle 19c RAC Grid Dataguard, PostgreSQL 16, MongoDB, MySQL Cluster, Kubernetes (Azure), Tableau, Puppet, Terraform, ArgoCD, GitHub/Bitbucket, CheckMK, Prometheus, Grafana, Icinga2, Ubuntu/RHEL

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

• Led development of 15+ microservices (Java 17, Spring Boot) driving customer interactions; migrated from on-prem to GCP Kubernetes, improving scalability and reducing infra cost by 20%.
• Optimized user services with CouchDB caching and API refactoring, cutting response times by 35% and enhancing customer experience.
• Implemented canary deployments, FluxCD GitOps, and CI/CD optimizations in GitLab, reducing release lead time by 25% and enabling zero-downtime rollouts.
• Set up Grafana health checks and Anodot alerts for latency, error, and throughput monitoring, reducing MTTR by 40%.
• Built secure APIs using OAuth2, DPoP, and Gatekeeper, integrated REST and GraphQL, and achieved 90%+ test coverage with unit and E2E tests.
• Mentored junior developers, promoted Agile best practices, and collaborated cross-functionally to deliver high-impact, reliable customer-facing features.