Infrastructure as a Service Experts in Germany

• Coaching and training 6 agile Scrum teams
• Taking on the role of Solution Coach (leading 6 agile teams)
• Advising and coaching program management and Tribe Leads, including roadmap, program, and risk management
• Implementing the risk strategy
• Integrating and establishing agile methods, combining the Spotify and SAFe models
• Facilitating agile events and sharing agile values and methods
• Developing and implementing team development processes
• Mentoring internal Agile Coaches in the Agile Chapter

• Electronics – Surface Solutions | Carve-out of IT, data and system landscape*

• Separation of a full business division's IT, data and system landscape following divestment across cloud, on-premises and connected laboratory systems; centrally governed investment envelope in the three-digit m€ range

• Laboratory notebook and laboratory analytics platform stream: Palantir Foundry, Snowflake, Signals Notebook, Power BI and connected laboratory instrumentation; SharePoint and JIRA; site transition completed without interruption to laboratory operations

• Decision authority and escalation point for business, IT infrastructure, IT security and vendors; separation executed across globally distributed users and systems and handed over on schedule, avoiding a contractual penalty for the client

• Overall leadership of several strategic operations projects focusing on Workplace Services, SLA Framework, access management, certificate management, e-learning, backup & recovery, test management, and capacity management, as well as the introduction of system monitoring and feasibility studies for 24x7 operations, in some cases including implementation in ServiceNow
• Creation of various ServiceNow operating concepts covering training, access rights, and emergency management as part of a new cloud hosting initiative for the ServiceNow platform
• Executive board reports and leadership of steering committees as part of company-wide strategic objectives, as well as the establishment of new balanced scorecards for measuring KPIs related to optimization-driven project results

• Development of the unified CARIAD E3 2.0 software platform for future mobility
• Stakeholder management
• Synchronization and alignment with Solutions (UX, Security, Data Product & Mobility Services, Architecture, Software Product, Integration)
• Workshop and migration management
• Conducting risk matrix analyses
• Tools used: Jira, Confluence, Codebeamer

Evidence-led health intelligence platform turning published research into personal health protocols. It scores 430 habits, foods, and supplements against the studies behind them, and moves the score when the evidence moves. Built solo.

• Built the daily ingestion pipeline across PubMed, bioRxiv, and medRxiv: 43,000+ papers from 3,400+ journals processed into 230,000+ typed evidence claims, each one traceable back to the study it came from.
• Designed the six-factor evidence scoring model and the public changelog behind it, so no recommendation ever appears without the papers underneath it. 23,000+ grade changes recorded and explained to date.
• Shipped an entity information model connecting every intervention to its mechanisms, biomarkers, and outcomes: 118 biomarkers with region-specific reference ranges, 77 mechanisms, 32 graded outcomes.
• Built the personalisation layer: blood panel ingestion that reads lab PDFs with a vision model and corrects results for draw time against the user's wake anchor, plus Oura, WHOOP, and Withings integration for daily readiness context.
• Operate eleven specialised review agents over the corpus and codebase, covering paper curation, retrieval quality, health-claim compliance across EU and US regimes, and security.
• Shipped the Evidence Assistant, a RAG assistant that answers from the claim database and cites the underlying papers, plus a B2B practitioner tier, an Expo React Native app, and localisation across 3 languages and 7 markets.

Stack: Next.js 16, TypeScript, Supabase, pgvector, Anthropic Claude, Vercel, DeepInfra.

• Developing global ACM Copilot services and shaping their evolution on a global scale
• Evangelizing the benefits and capabilities of Copilot to internal and external audiences
• Onboarding, mentoring, and training new ACM colleagues in services and methodologies
• Acting as point of contact for internal Copilot proof of concept adoption and change management
• Leading Copilot adoption strategy, communicating benefits, usage and ethical considerations
• Organizing events and workshops and fostering an interactive community to share updates, findings and best practices

Financial services provider, >10,000 employees

• Entra ID: App Registrations, Hybrid Identities, group and permission concepts, Conditional Access, MFA, RBAC, and PIM.
• Azure IaaS/PaaS, Networking, Security, Governance, Monitoring, and automation with Bicep and PowerShell.
• Consulting and technical support for internal cloud projects.

Red Hat OpenShift Container Platform

Scope:

• Operation and configuration of the Red Hat OpenShift Container Platform, including network, storage, and security design.
• Implementation of centralized observability solutions (Prometheus, Grafana, alerting).
• Development of CI/CD pipelines, GitOps workflows, and automation frameworks.
• Training and enablement of operations and development teams.

Result: Accelerated service delivery, transparent operational metrics, and sustainable knowledge transfer.

Conducting a GAP analysis to assess existing security measures → identifying critical vulnerabilities

Developing an action plan that takes risk and cost-effectiveness into account

Introducing an IT maturity model based on BSI guidelines

Advising management on compliance, governance, and security strategy

Establishing internal processes for a sustainable security organization

• Training AI models, evaluating images and text UI/UX, turning the provided data into insights through OpenAI Feather as part of the machine learning workflow

Technologies: OpenAI Feather

• Short description: Lead a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations control while preserving the autonomy of decentralized business units within regulatory boundaries.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of an enterprise-wide cloud governance structure (Azure), incl. target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps) incl. decision-making and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework aligned with the Azure Cloud Adoption Framework (CAF), incl. landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), incl. cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts incl. RBAC design and "break glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operational and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance for lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from a hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "break glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

Project: Design and implementation of an AI product for four business use cases

Project management for an AI project at a leading provider of large-scale catering and food services, where a production-ready AI product for four use cases was implemented together with an external development partner: automated briefings based on CRM and document data, voice-based capture and structuring of reports, detection and consolidation of duplicates in master data, and data-based market analyses. A key focus was a data-protection-compliant architecture that passed the internal IT security review and enabled production use.

• Translation of business requirements into clearly defined AI use cases with a focused product scope and clear value proposition
• Selection and evaluation of models and architecture options for text extraction, speech-to-text, and context enrichment from business systems, including LLM integration, function calling, and retrieval
• Development and implementation of an architecture with European hosting, data minimization, and masking of personal data as a prerequisite for approval
• Management of interfaces between business departments, IT, IT security, and the external development partner under restrictive data access conditions
• Coordination with the CIO and executive management levels on data access, risk assessment, and approval decisions
• Preparation for the transition to production use

Oracle Project Management and Automation

As part of the project, the operation of an Oracle infrastructure was automated by developing and enhancing Puppet modules and migrating existing Bash scripts to a standardized configuration management solution.

The aim of the project was to standardize and automate administrative processes, improve the maintainability of the Oracle platform, and increase the efficiency and traceability of infrastructure management through the use of Infrastructure as Code.

• Analysis and migration of existing Bash shell scripts to a Puppet-based automation solution
• Development and enhancement of Puppet modules for Oracle environments
• Automation of installation, configuration and operational processes using Infrastructure as Code
• Standardization and optimization of configuration management for Oracle systems
• Creation and maintenance of technical and operational documentation
• Planning, coordination and professional support during project implementation
• Operation and automation of Oracle systems on x86-based Linux server platforms
• Testing and quality assurance of the developed Puppet modules
• Analysis and resolution of technical errors as part of the automation and migration
• Close coordination with specialist departments and infrastructure teams to implement automation requirements

Technologies used: Puppet 7/8, SLES 15, Oracle 19, Oracle Grid, SVN, Windows Server, Confluence, VS Code, Ruby, Bash, Pass

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)