Helm Expert in Frankfurt

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

• Built an MCP (Model Context Protocol) layer for Mwanachama's agency service, turning domain manager methods into callable AI-agent tools. This included a composite tool that builds a full organization design (org chart, goals, workflows, RACI matrix) from one specification.
• Built the chat-driven agency builder (Wakala Studio and API), where an organization describes its structure in natural language and an AI agent uses those tools to construct and modify the live design.
• Added an insights service so an organization can review AI-agent interactions and completed work. Insights from that review feed back into solution design, gated by architect and user sign-off.
• Alongside this, designed and built the platform itself: ~20 Go microservices on PostgreSQL, Flutter and React clients, deployed on Kubernetes.
• AI agents scan the platform autonomously for security gaps and run scripted tests, covering API (Postman-style) and UI testing. The rest of the work stays supervised. No rogue agents, promise.

Project: SCS (Settlement / Clearing Services)

Settlement platform serving multiple trading and clearing venues — counterparty risk safeguarding, settlement volume reduction, central risk management, and post-trade anonymity.

Technologies: Java 17, Spring Boot 3, Microservices, Spring Data JPA, SonarQube, Fortify (SCST), Mockito, Jenkins, OpenShift, Maven, Podman, GitHub, JIRA, Liquibase, Swagger, AMQP, Apache Camel, Terraform, PostgreSQL, Instana, Graylog.

• Identified and remediated CVEs in third-party libraries using SCA tooling, strengthening the security posture of production components.
• Maintained 90% code coverage with SonarQube, improving code quality and reducing production defects.
• Enabled mTLS for database authentication and message broker connections, enforcing encrypted, certificate-validated communication.
• Designed and deployed microservices with asynchronous, REST-based communication between components.
• Optimized a high-volume REST API (~200K requests) by reducing response time from 3s to 2s (33% improvement), boosting throughput and reliability under production load.
• Automated build and continuous integration pipelines using Maven and Jenkins.
• Orchestrated containerized workloads on Podman/OpenShift and governed schema evolution with Liquibase, ensuring reliable, repeatable deployments across all environments.
• Optimized Java code and implemented EHCache-based caching, improving application performance.
• Streamlined release management by governing application images, JAR versions, and dependencies through DBAG Artifactory, ensuring version consistency and audit traceability across environments

• Hands-on solution architect
• Digital product development - SaaS
• Strategic consulting on software architecture, cloud migration, and DevOps processes
• Coaching SE developers and IT architects

• Founding and overall responsibility: Built a B2B SaaS platform for craft and construction businesses from the first line of code to the live launch with the first paying customer; solo founding including full establishment of the company and all business processes.
• Product and technology responsibility: Designed and developed the entire product.
• Infrastructure & DevOps: Managed a Kubernetes/Helm environment including CI/CD, monitoring, and security architecture; GDPR-compliant platform decisions and evaluation of EU-hosted LLM providers.
• Agentic coding as a productivity multiplier: Set up a productive multi-agent environment with Claude Code: up to eight parallel agents in isolated Git worktrees, Telegram-based remote control and monitoring, MCP integrations (e.g., Context7, Playwright for E2E tests), and a builder-critic pattern with custom slash commands (/research, /plan) and compressed project contexts. Result: development throughput on par with a small team while working solo.
• Go-to-market: Independently developed positioning, SEO and direct mail playbook, as well as target group analysis.
• Regulation & finance: Implemented e-invoicing requirements (ZUGFeRD/XRechnung), set up accounting and payment infrastructure, and managed funding and financing options.

AI-powered platform for automated UX validation and designer support

• Designed and led technical implementation of an enterprise-wide AI solution for automated UX review that improved design quality and significantly reduced manual review processes in teams
• Developed an automated UX validation tool as a Figma plugin and web application that generates test cases based on internal guidelines and reliably checks current designs for consistency and standard compliance
• Implemented an interactive designer chat based on RAG that answers questions about the current design and the company's UX guidelines, and designed the deployment architecture using containerized services
• Python, Azure OpenAI, PostgreSQL, REST API, Docker, OpenShift, Helm, CI/CD, Figma MCP, LLM, RAG, Prompt Engineering, GenAI, XAI, AI Architecture, AI Strategy

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• Requirements analysis for the enterprise-wide observability platform.
• Creation of playbooks and pipelines for rolling out Envoy, OpenTelemetry Collectors, and OpenTelemetry Agents.
• Conducting load tests for capacity planning of metrics for the observability platform.
• Documentation and implementation of compliance standards for production readiness.
• Creation and design of RED metrics, spanmetrics, JBoss, and Tomcat dashboards for mission-critical applications.
• Setting up alerts for critical applications for proactive incident response.
• Integration of OpenShift applications into the enterprise-wide observability stack.

• Developed a retrieval-augmented generation (RAG) application using LangChain and LangGraph for corporate document parsing, delivered as an installable Electron desktop application with local AI models via Ollama.
• Currently providing ongoing AI feature support for the Loan Pricing Tool at Hamburg Commercial Bank, with a commitment of three days per month.
• Architected Kubernetes-native solutions, including Helm chart configuration and Azure DevOps pipeline integration.

• Product strategy and roadmap development for digital health portal
• Requirements engineering and feature prioritization
• User story definition and backlog management
• Prototype development
• Implementation of continuous delivery
• Search engine optimization
• Technological environment: Claude Code, Claude Sonnet 4.5, Agentic Coding, TypeScript, React, AstroJS, PostgreSQL, JetBrains IntelliJ, Netlify, Supabase, GitHub Actions, Git, DevOps, continuous delivery

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Development of a central billing app for cloud costs at DB
• AWS
• Python
• AWS CDK
• RDS
• Spark (PySpark)
• Glue
• Lambda
• CI/CD (GitLab)
• React/Typescript
• data optimization
• Scrum