HashiCorp Vault Experts in Germany

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, confirmation and conformity tests for safety-critical braking control units in the railway industry
• Software Test Application & Integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies and component interactions
• Test Automation (FEAT Framework): Co-development and further development of an automated test framework for test execution, reporting and result analysis
• Functional Safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage as well as conformity with EN50126/28/29
• Test Automation for Communication Components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements Analysis & Shift-Left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities and redundancies early in the SDLC
• Test Design & Test Case Development: Derivation of test conditions and coverage strategies and implementation of data-driven test cases (DDT) including reusable test data fixtures
• CI/CD & Automation (Python, PowerShell, Jenkins, SVN): Automation of build, test and HIL deployment processes as well as integration into CI/CD pipelines
• Test Data & Configuration Management (XML): Maintenance and adjustment of XML test vectors and system configurations with automated integration into test environments
• Non-Functional Testing: Execution of performance and load tests to assess stability and system behavior
• Agile Development & Defect Management (JIRA, Confluence): Work in Scrum teams, test coordination, review of test artifacts as well as defect tracking and root-cause analysis
• Error Analysis & Debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system levels (application to bus)
• Model-Based Analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & Test Documentation: Creation of integration and test documentation according to internal quality and certification requirements

The Base Services of DB InfraGO form a central data hub between the company’s IT systems. Common Data Services are developed that distribute data from source systems to a variety of downstream systems (via JMS) and make them available (via REST API). The existing service landscape based on TIBCO is being migrated to DB InfraGO’s cloud-native platform.

• Architecture design and implementation for performance-optimized bulk data processing of several million datasets at specific times during the day
• Technical specification and documentation of business requirements
• Integration of various subsystems (including SAP and Salesforce) through the reimplementation of more than 40 microservices based on Spring Boot
• Migration of TIBCO Based microservices from the Enterprise Integration Platform to the Cloud Native Platform using Spring-Boot
• Establishment of a deployment pipeline using GitLab CI/CD, Artifactory, and automated deployment to a Kubernetes environment with the help of ArgoCD
• Definition and implementation of automated unit, integration, and regression tests

Team Size: 9

Technologies/Tools: Java, Spring Boot, ActiveMQ(JMS), JUnit, Tibco Business Works, Gitlab (CI/CD), Kubernetes (Amazon AWS), ArgoCD, postgreSQL, Oracle, Postman, Hoppscotch, openAPI, Sonarqube

Red Hat OpenShift Container Platform

Scope:

• Operation and configuration of the Red Hat OpenShift Container Platform, including network, storage, and security design.
• Implementation of centralized observability solutions (Prometheus, Grafana, alerting).
• Development of CI/CD pipelines, GitOps workflows, and automation frameworks.
• Training and enablement of operations and development teams.

Result: Accelerated service delivery, transparent operational metrics, and sustainable knowledge transfer.

Development and further development of an internal platform for managing and providing technical resources, virtual machines, and infrastructure services. The platform supports self-service processes and covers functions that are conceptually comparable to cloud management solutions like Azure or AWS.

• Responsible involvement in the design, development, and implementation of new backend and frontend features
• Hands-on development with Java, Spring Boot, Python, and Angular
• Implementation of REST interfaces, business logic, validations, and integrations into existing system landscapes
• Further development of modern web interfaces with Angular, including connection to backend services
• Participation in architecture and design decisions within the team, especially with regard to scalability, maintainability, and clean interfaces
• Containerization and deployment of applications with Docker, Kubernetes, and Helm
• Support with CI/CD processes and deployment to Kubernetes-based environments
• Work in the environment of vSphere, Broadcom, GitLab CI/CD, ArgoCD, Maven, npm, and NuGet
• Close collaboration with developers, business teams, DevOps, and other technical stakeholders
• Analysis of technical requirements, deriving suitable solutions, and independent implementation in an agile team
• Use of GitHub Copilot to support code generation, refactoring, test case creation, and technical documentation

Methods/ tools/ technologies: Languages & frameworks: Java (21), Spring Boot (4.x), Python, Angular, Robot Framework, Kubernetes, Helm Persistence: PostgreSQL, MongoDB, Hibernate, Liquibase Architecture & communication: REST, gRPC, GraphQL, Apache Kafka, OpenAPI, Microservices, Event Driven, Domain Driven Design Cloud & infrastructure: Terraform, Docker, Rancher, Helm, Ansible Security: OAuth2, MS (Entra ID), web security, Keycloak (extensions for detailed group rights) DevOps: GitLab CI/CD, Ansible, Maven, Gradle, Grafana, Prometheus, Git, GitHub Copilot Testing & QM: JUnit, Robot Framework, automated component and integration tests, E2E tests with Playwright, Testcontainers, EasyMock Methodology & approach: Kanban, JIRA, Confluence, Clean Code

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

Topics:

• Further development of the CRM system NKAM and technical separation of “direct” and “indirect” sales
• Redesign of the discount management area and outsourcing to another system.
• Designing numerous improvements on the wholesale side to reduce manual effort down to the level of user stories.

• Led development of 15+ microservices (Java 17, Spring Boot) driving customer interactions; migrated from on-prem to GCP Kubernetes, improving scalability and reducing infra cost by 20%.
• Optimized user services with CouchDB caching and API refactoring, cutting response times by 35% and enhancing customer experience.
• Implemented canary deployments, FluxCD GitOps, and CI/CD optimizations in GitLab, reducing release lead time by 25% and enabling zero-downtime rollouts.
• Set up Grafana health checks and Anodot alerts for latency, error, and throughput monitoring, reducing MTTR by 40%.
• Built secure APIs using OAuth2, DPoP, and Gatekeeper, integrated REST and GraphQL, and achieved 90%+ test coverage with unit and E2E tests.
• Mentored junior developers, promoted Agile best practices, and collaborated cross-functionally to deliver high-impact, reliable customer-facing features.

• Built and further developed an AWS landing zone based on Terraform / OpenTofu (multi-account structure, IAM baselines, network and security standards)
• Designed and operated platform-oriented AWS architectures to standardize infrastructure and operations processes
• Built and operated Kubernetes-based platforms (EKS) as a shared runtime environment for application teams
• Established GitOps-based deployments with Argo CD and FluxCD
• Developed and operated central CI/CD platforms (GitLab CI, GitHub Actions, Jenkins)
• Enabled development and project teams through reusable platform building blocks
• Introduced and implemented FinOps structures (AWS Cost Explorer, CUR + Athena, Infracost, Grafana dashboards)
• Built and operated central observability platforms (Prometheus, Grafana, Loki, Alertmanager, CloudWatch)

• Development and introduction of operations processes
• Preparation of complete documentation packages (including incident management and operations support) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Technical consulting for the project security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Hybrid cloud architecture design (on-prem, Hetzner, AWS)
• Analysis and troubleshooting of incidents and system outages
• Network adjustments for firewall rules, gateways, OpenVPN settings, and IPsec tunnels (pfSense)
• Technical consulting on Bitbucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

Design and implementation of a compact ERP, CRM, accounting, and production-planning platform for a German food manufacturer. The system replaces Rechnung11, self-built Excel sheets, and manual processes for fewer than 10 internal users.

• Designed and implemented the full platform architecture as sole architect and developer.
• Built modules for customer management, B2B order handling, invoicing, production planning, and accounting support.
• Implemented DATEV export, ZUGFeRD/XRechnung e-invoicing, FinTS bank statement synchronization, and GoBD audit trail concepts.
• Used AI-supported workflows for prototyping, test support, and implementation acceleration while retaining full architecture, review, testing strategy, and technical ownership.

Technology: Java 23, Spring Boot 3, Spring Data JPA, Spring Security, Vue 3, TypeScript, PostgreSQL, Flyway, REST, OpenAPI, JWT, TOTP, RBAC, DATEV, FinTS, ZUGFeRD, XRechnung, GoBD, JUnit, Mockito, Testcontainers, Playwright, Docker, GitLab CI/CD

PROFILE Senior Oracle specialist, consultant and DBA with many years of experience in planning, architecture, installation, migration, operations, performance tuning and troubleshooting of large Oracle database environments. Focus on Oracle Database 19c and enterprise architectures with RAC, Active Data Guard, Golden Gate, Exadata, RMAN and CDB/PDB. Experience in heterogeneous enterprise environments on Linux, AIX, Solaris, HP-UX and Windows, as well as in cloud and migration projects. Over many years, worked as a technical consultant, DBA, architect and project manager for banks, insurers, energy providers, public institutions, industry, automotive and aviation. Combining technical Oracle expertise with operations concepts, migration, project planning, documentation and customer consulting.

ORACLE FOCUS AREAS

• Oracle Database 19c – installation, upgrade, patch/RU management, operations and troubleshooting
• Oracle Database 21c / 23ai / 26ai – knowledge of current Oracle release lines
• Oracle RAC, Active Data Guard, Data Guard, Oracle GoldenGate
• CDB / PDB, multitenant architectures and enterprise database operations
• Oracle Exadata and highly available database environments
• RMAN – backup, restore, recovery, migration and disaster recovery scenarios
• Data Pump (EXPDP / IMPDP), Transportable Tablespaces (TTS) and database-based migrations
• Performance analysis, SQL / PL/SQL, tuning, troubleshooting and capacity planning
• Oracle Enterprise Manager / monitoring and technical operational support
• Oracle Security: Wallet, TDE, Database Vault, VPD / RLS
• Oracle DWH / BI: OBIEE, ODI, OWB and Discoverer
• Oracle Applications / E-Business Suite and Oracle-based application environments

CURRENT PROJECTS

Scope Solutions AG, Basel / CH | 08/2023 – ongoing Oracle Project Management and DBA

• Installation, maintenance and regular upgrades of Oracle database systems with a focus on Oracle 19c.
• Patch and release management including OPatch and Release Updates; operations on RHEL 8.x, SLES 15.x and Windows.
• DBA support for customers in DACH and Europe and support of production, load test and other CDB/PDB environments.
• Technical operating processes and documentation via Confluence; support and service requests via My Oracle Support / Metalink.

Federal Employment Agency, Nuremberg | 04/2022 – 10/2023 Oracle Operations Support / DBA

• Operations and regular upgrades of Oracle-19c database systems on SLES 15.x.
• DBA for around 2,100 PDBs on RAC and Exadata in production, integration, load test and other environments.
• Configuration management via ARS Remedy; workflows and technical documentation via Jira and Confluence.
• Operations support and processing of service requests via My Oracle Support / Metalink.

Federal Statistical Office, Wiesbaden | 09/2021 – 03/2022 Oracle Operations and Architecture – 2022 Survey

• Merging data into a central Oracle-19c database system.
• Design of import/export procedures for the central data structure.
• KPI and performance architecture for analyses.
• Training employees in Oracle performance and DBA topics.

E.ON Digital Technology, Landshut / KKI | 03/2019 – 12/2021 Oracle Operations, Architecture and DBA

• Patch concepts, technical documentation, installation, database administration and operations of Oracle 12c/19c.
• AIX 7.x, LPAR administration including VIO server and software distribution with NIM.
• Performance monitoring and monitoring.
• Backup and restore with TSM / IBM Spectrum Protect and Oracle RMAN.
• Installation of Enterprise Manager 13c with WebLogic Server 12.1x; employee training.

KaPe Munich – various end customers in DACH / Europe | ongoing / various projects Oracle DBA, architecture, migration, DWH consulting and project management

• Many years of consulting and operational DBA work in various Oracle architectures.
• DWH/CRM platforms: planning, analysis, performance and tuning, as well as business analysis.
• RAC, Data Guard, Transportable Tablespaces, RMAN and Oracle 11g/12c in enterprise environments.
• Customer projects including Burda, Deka, E.ON, Otto Group and Augsburger Allgemeine.

AXA, Germany / Europe | 09/2018 – 02/2019 Oracle DB Operations and Migration – Cloud Architectures

• Planning, methodology and execution of Oracle database migrations to IBM Private Cloud / Spectrum and AWS Public Cloud.
• Creation of Oracle databases in the cloud with SLES and Terraform templates.
• Technical architecture work and cloud KPIs.

RWE / SÜWAG / Syna, Germany | 07/2016 – 09/2018 Oracle DB Migrations 11g/12c and Project Management

• Design, planning and execution of Oracle database migrations 11g → 12c with platform and architecture changes.
• Windows Server 2012/2016 and setup and migration of Enterprise Manager/WebLogic-based monitoring environments.
• Use of Data Guard, TTS, EXPDP/IMPDP and RMAN based on analysis of application requirements.
• Performance and tuning for Oracle 11g/12c.

MTU Aero Engines, Munich | 01/2016 – 03/2017 Oracle DBA / Requirements Engineer

• Operations and development of Oracle 11g/12c databases and application workflows.
• Interfaces to SAP via BAPI.
• Design and management of APPS modules with Visual Basic / Visual Studio and PL/SQL; version control with SVN.

UBIS (HVB), Munich | 04/2012 – 08/2015 Oracle Operations, Architecture, DBA and Project Management

• Oracle-based operations and migration of MUREX and Sophis trading platforms.
• Oracle Security, Wallet, Tablespaces, RAC, Data Guard, Database Vault, GoldenGate and DWH.
• Project management for Oracle DWH migrations and release changes from 10g to 11gR2.
• Migration OWB 11gR2 → ODI 12c and introduction of Oracle Database 12c.
• Platforms: Red Hat, AIX and Solaris.

WWK Deutschland a.G., Munich | 09/2010 – 03/2012 Oracle DB and HP-UX → Linux Migration

• Architecture, planning, operations concept and migration of 104 databases from an HP-UX cluster to Red Hat Linux.
• Single Instance with Veritas Cluster and 2-node RAC 11.2.0.2; four Data Guard databases.
• Project management for OWB/DWH migrations (>1 TB), including tuning, PL/SQL, mappings and metadata.

Allianz Deutschland, ACAS Stuttgart | 03/2010 – 09/2010 Technical DWH Project Manager

• DWH project for processing European ETL data sources.
• Business analysis and requirements management for automated loading processes.
• OWB, PL/SQL, SQL*Loader, Oracle Advanced Security / TDE, Oracle BI and Database Vault.

NETMA, Munich-Taufkirchen | 08/2007 – 02/2010 Oracle Specialist and DBA for Oracle Applications 11i

• Operations of Oracle 9i/10g and Oracle Applications 11.5.10.
• Design and development of APPS modules with PL/SQL and SVN.
• Oracle RAC, Enterprise Manager, Oracle Application Server and migration tests.
• Platforms: AIX, SLES, Windows and HP-UX.

BT Germany, Munich | 11/2007 – 04/2008 Oracle DB Migration

• Migration from Oracle 8i to 10gR2 in a Solaris cluster environment.
• Preparing offers, project planning and process planning.

Itellium (KQ), Nuremberg | 02/2007 – 08/2007 Oracle DWH Specialist

• Design and analysis of a DWH focusing on master data and logistics.
• Oracle Designer, OWB, Oracle Database, ETL, PL/SQL and External Tables; data volumes up to approx. 5 TB.

Oracle Deutschland GmbH, Munich | 10/2006 – 02/2007 and further assignments Oracle Specialist / Consultant – Data Migration and DWH

• Consulting for customers such as Volkswagen, GE Money Bank, WeKa, KSB, Swisscom and British Telecom.
• Migration Discoverer EUL4 → EUL5i, database optimization, Data Guard and web/database analysis.
• Performance and tuning on Solaris and Linux.

HaSpa, Hamburg | 07/2006 – 10/2006 Oracle Specialist / Consultant – Data Migration and DWH

• Setup of an Oracle-10gR2 environment for banking applications.
• Data transfer from DB2 / OS390, architecture, sizing, tuning and performance.
• Data preparation and integration with OWB.

AUDI, Ingolstadt | 02/2005 – 06/2006 Oracle Consultant and DBA

• Operations, installation and maintenance of Oracle 9i/10g and IAS 10g.
• RMAN, Oracle RLS, Oracle HTMLDB, Veritas Cluster, Solaris and AIX / HACMP.
• Database cloning and migration 9i → 10g; approx. 200 systems up to 4.5 TB.

Photocolor, Kreuzlingen / CH | 11/2003 – 01/2005 Project Manager / Oracle

• Implementation, configuration, technical support and acceptance of an Oracle ERP/CRM solution.
• Oracle Applications, Oracle 9i, Solaris, HP-UX, OWB and Mercury TestDirector.
• Project scope approx. 2 TB; reporting to management.

ZPD NRW, Duisburg | 05/2003 – 10/2003 Oracle Consultant

• Consulting, PL/SQL training and project planning for a nationwide Oracle Forms integration.
• Oracle on HP Superdome / HP-UX; data volume 1.2 → 2.5 TB, sizing up to 5 TB.

Messe München GmbH | 11/2002 – 05/2003 Project Manager / Oracle

• MIS/DWH solution with OWB, Discoverer, Oracle 11i / 9i and RAC.
• Architecture, design, integration, troubleshooting and consulting for data volumes of 1.5–2 TB.

Aria SA Integration, Geneva / CH | 09/2002 – 11/2002 Oracle DBA and Consultant

• Oracle 8.1.7.4 / 9i; merging the Stuttgart and Geneva databases via replication.

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

• Adaptation, optimization, configuration, and administration of a multi-stage GitLab instance with over 250 users
• Setup, adaptation, expansion, and optimization of infrastructure, configuration, and monitoring
• Provisioning of services and handover to production
• System environment: DependencyTrack, GitLab, Grafana, Hedgedoc, Kubernetes, Oauth2 Proxy, Openstack, Prometheus, Syseleven

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019