IBM WebSphere Experts

• AI product development: Design of an AI-supported GRC platform to automate compliance processes.
• AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
• IT interim management and strategic consulting

With project PRIZMA, DB will modernize its infrastructure on the one hand, and develop a fail-safe IT landscape on the other hand, which can be restored quickly and securely in case of a disaster.

• Capture current architectures of existing systems as well as methodical consulting and development of target architectures
• Deepen and maintain the building plan / target IT landscape
• Implement technical architecture concepts & architecture descriptions
• Implement migration concepts for updating and further developing the platform and information systems
• Assess submitted improvement suggestions as part of the project
• Capability management: identify capability gaps, develop target visions, and support transformation planning within the enterprise architecture.
• Create a compatibility matrix of the components in use and compare dependencies of specific versions
• Create an IT concept for extending the platform with the following topics: hardware and software requirements, security, licensing, high availability, load balancing, backup & recovery, update strategy, monitoring integration, etc.
• Coordinate with business architects as well as technical architects from the cross-functional architecture area of the PRISMA program for the topics (backup, Active Directory, monitoring, Citrix, and business applications ...)
• Status meetings and alignment of project planning with the Release Train Engineer / Project Manager
• Advise the Release Train Engineer / Project Manager in identifying project risks
• Advise the System Architect Engineers in steering the implementation of the concept
• Implement the IT concept
• Document the infrastructure

Label: MS Project, LINUX, Windows, ORACLE, Java, REST, SharePoint, Microsoft Exchange, UML, Enterprise Architect, BPMN, AZURE, AWS, V-MODEL, Micro Service, VisualStudio, SAP S/4HANA, SCRUM(SAFE), ESB (TIBCO), Python, Innovator, LeanIX (TOGAF), Ansible, Ansible Tower, Ansible Automation, ROBOT, SpringBoot

• Building the data center in Oberkochen (defense area)
• Planning the fiber optic ring, simulation of Wi-Fi coverage
• Cable routing plan for WAN and LAN cables for office and production (infrastructure)
• Adaptation of the SAP system (R3) for the Oberkochen site (software)
• IT transformation of the SAP system to SAP HANA
• Planning network infrastructure and server technologies in the SAP environment
• Pré-sales support and setting up change management
• Independent coordination of utilities according to time, budget and quality
• Mapping the project in MS Project and SERVICENow
• Development and design of hardware and software
• Demand management and portfolio management
• Building a risk register and migration plan
• Preparation of payment-supporting documents in coordination with the responsible finance and commercial functions
• Budget: 5 Mio. - 34 FTE

• Technical leadership and further development of a team of 28 IT staff (internal & external) in the areas HelpDesk/HelpLine, RHEL (Red Hat), MUREX (trading system & applications), SAP basis operations
• Managing external service providers (including FI-TS for SAP basis operations)
• Personnel, resource and budget planning for the IT department and projects
• Introducing and establishing regular communication formats (weekly status meetings, team and cross-department meetings)
• Ensuring application operations in a hybrid environment (Windows/Linux with database and web/application servers)
• Supporting transformation projects to modernize the application landscape (e.g. DevOps approaches)
• Setting up and implementing a digital IT procurement for hardware & software (e.g. with DELL)
• Developing and managing the "IT Operations DOS" department based on corporate strategy
• Preparing management reports & decision papers on IT projects, optimization potential and automation opportunities
• Representing the department in the advisory boards of the Rentenbank and ensuring regulatory compliance (BaFin §44, GDPR, BSI, MaRisk)

• Overall responsibility for the project lifecycle from scope definition to completion
• Close collaboration with platform teams, IT leaders, and external service providers
• Application of SAFe principles and structured sprint work
• Creation of a migration roadmap with clear milestones
• Monitoring of the lifecycle: onboarding, repository migration, replication of permissions, and system tests
• Visualization of the architecture with PlantUML and Gliffy as well as documentation in Confluence
• Regular status reports and running knowledge transfer sessions

• Drive migration of enterprise authorization platform from Styra DAS to open-source OPA via Skipper (Zalando's Golang-based ingress proxy) integration
• Optimise k8s resources and integrate native Prometheus metrics with OPA
• Migrate from internal monitoring solution to Prometheus CRs + Dash0

Tech Stack: Java/Kotlin, Golang, Python, Spring Boot, AWS, Kubernetes, Docker, OpenTofu, Prometheus, Grafana

• Designed blockchain-based learning platform with event-driven architecture, integrating RESTful APIs for personalized learning paths
• Developed scalable microservices using Java, Python, and React in Kubernetes, enabling real-time data processing
• Implemented smart contracts (Solidity) for secure course purchases and mentor engagement
• Led AI-supported matching system (DecisionTreeRegressor) to optimize learning recommendations

• Creating interfaces between the legacy platform and the new container solution
• Coordinating required contributions from line units
• Moderating regular status meetings with the software vendor
• Minimally invasive conversion of TWS scheduling from the old to the new platform
• Environment: IBM Mainframe, DB2, CICS, MQ, Red Hat Linux, Oracle, Kubernetes, Kafka, Helm, GitLab, Jenkins

• Further development and optimization of the PIM system (e.g. data modeling, interfaces, user experience)
• Analysis, structuring, and professional evaluation of business requirements in close coordination with business units and stakeholders
• Translating business requirements into functional and technical concepts (business & solution design)
• Designing and further developing the target PIM architecture including data models, object structures, versioning, and lifecycle concepts
• Defining interfaces, integration concepts, and data flows between PIM, eCommerce, ERP, and other systems
• Quality assurance in close collaboration with business units and the development team
• Effort estimations for analysis, design, and testing activities
• Agile, Scrum, 4APortal, SAP ERP, SAP eCommerce (Hybris)

• Redesign of a legacy Windows app for vehicle diagnostics as an AWS cloud application
• Creating build pipelines and conducting code reviews using Kotlin, Spring Boot, Micronaut, Jenkins, and GitHub

• Creation of automated tests.
• Extension of the functionality of the enterprise BI data warehouse.
• Design and development in SQL and PL/SQL.
• Data modeling as well as performance measurement and tuning.
• Creation of and contribution to user stories and concepts.
• Technical environment: Windows, Linux.
• Database: Oracle 19c incl. DWH, CDB, PDB.
• Tools: Confluence, CVS, Eclipse, Git, GitLab, Jira, N4, PL/SQL, SQL Developer, utPLSQL.

• Support of test management and consulting on replacing the existing core system for non-life insurance with a modern IT platform.

• Planning and controlling test execution as well as test analysis.

• Documentation of test results in JIRA/XRAY and defect management.

• Creating and continuously updating checklists to ensure quality.

• Creating Confluence pages to support test execution and its documentation.

• Creating test completion reports after each test cycle.

• Methods: process planning, status tracking, process optimization, process execution, process quality assurance.

• Tools: MS Office, Outlook, JIRA, Confluence, Wiki.

• Benefit: Support for test management in the preparation, execution and documentation of the different test cycles.

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Spring Boot Software Engineer
• DevOps Engineer (Kubernetes, Azure DevOps)

Toolstack: Java, Spring Boot, Kubernetes, Helm, GitOps, ArgoCD, Docker, Azure DevOps, CI/CD Pipelines, Git, Postgres