Java Experts in Germany

Reporting and controlling with Power BI for a productive ERP system

• Analysis of ERP data and interfaces for use in Power BI dashboards
• Evaluation and migration of existing reports (e.g. Excel) to Power BI
• Development of an access rights concept for selective data access
• Documentation and training on how to use and adapt the Power BI dashboards

Label: Power BI, Excel, SelectLine ERP, Microsoft SQL, SQL Server Management Studio

• AI product development: Design of an AI-supported GRC platform to automate compliance processes.
• AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
• IT interim management and strategic consulting

• Analysis, documentation, and alignment of requirements. Conducting stakeholder analyses, interviews, and workshops for requirements gathering and validation. Carrying out requirements reviews and working closely with business units and development teams.

Techniques & tools: requirements engineering, stakeholder management, workshop facilitation, system context modeling, requirements reviews, quality scenarios, Miro, Jira, Confluence

• Building a scalable nearshore IT developer hub (Croatia, Czech Republic, Poland) as an independent company using a BOT model (Build – Operate – Transfer)
• Identifying, selecting, and managing full-service agencies; introducing governance and control mechanisms including KPIs, SLAs, and regular service reviews
• Creating and reviewing data processing agreements and framework contracts in coordination with Legal & Compliance; integrating regulatory requirements (including KRITIS) into process design
• Advising on cloud-vs.-on-premise strategies, data storage, and authorization concepts; supporting procurement with tendering and vendor evaluations
• Change management and process harmonization between internal teams and nearshore partners; reporting to management board, CFO, and CIO

Result: Scalable IT developer hub with an audit-proof governance model, lower operating costs, and faster product development.

• Proactive support of management in business field development & innovation management

• New development of a suite of business applications for analyzing valuation, P&L, and market price risk data

• Automation of all internal and external business and work processes

• Development of AI-based and AI-supported ETL processes as well as data analysis

• Business use-case development

• Business and work process optimization

• Enterprise architecture management

• Sales data analysis and forecasting as well as capture

• Inventory management & reordering

• Supplier management and communication

• Customs processing & clearance

• Shipping handling & warehouse coordination

• Interface management

• Technologies used: Microsoft Office 365, Microsoft Teams, JTL-Wawi, JTL-WMS, OTTO Partner Connect (OPC), Amazon Seller Central, DHL Global Forwarding, Jira, Draw.IO, Java (8,17,21,25), Jenkins, SonarQube, Git, Gitea, Spring Boot, Spring Batch, Vaadin, H2, PostgreSQL, Docker, Local LLMs, Postman, JasperSoft Studio, JasperReports

• Development of cloud native applications to provide a multi-vendor marketplace for different digital assets (e.g. NFTs)
• Design and operation of a microservice architecture using Nest.js, MySQL, Redis, Hasura, Algolia, Docker and Serverless
• Design and operation of a streaming data architecture using Kafka (with JSON Schemas)
• Creation of CI/CD pipelines with GitHub Actions for automated deployment of applications
• Testing and evaluating new technologies for more stable, faster, safer and more sustainable application development
• Building the full infrastructure with Terraform in AWS
• Integration of Stripe to handle international payments
• Use of Algolia for real-time search of digital assets on the platform
• Presenting results to stakeholders and running internal meetups
• Federation of services with GraphQL and Hasura
• Discussions about architecture decisions in the IT landscape and their impact
• Use of message queues for app-internal communication and component encapsulation
• Advising internal staff on the implementation of business and technical requirements
• Test Driven Development: unit, integration and E2E testing using JUnit
• Use of Next.js/React with SASS/SCSS for frontend applications
• Use of Vue.js with SASS/SCSS for frontend applications
• Integration of security-related mechanisms (JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA, secret vaults)
• Creation of microfrontends using Retool for fast prototyping and testing of functionality
• Use of nx monorepo with nrwl

• Operation and further development of the network and security infrastructure.

• Monitoring, analysis and resolution of network and security incidents.

• Cross-department collaboration with other specialist teams for operations, further development and reporting.

• Firewall vulnerability analysis.

• Firewall rule approvals.

• Troubleshooting IP communication issues in the network and firewall infrastructure.

• Security-critical IT infrastructure, processing of personal data, compliance with legal regulations.

• Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5

• Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI

Product:

• Built a production-ready AI platform for generating brand-aware marketing images and videos from product data, user requirements, and uploaded media.
• Own the platform architecture, technical roadmap, API design, security, deployment workflow, operational reliability, and model-provider strategy.
• Developed the core platform in .NET and built supporting AI and workflow prototypes in Python, applying language-independent API contracts and structured interfaces between services and model providers.
• Implemented reliable background processing with RabbitMQ, persisted workflow state, idempotent handling, retries, failure recovery, logging, secure storage, authorization, and credit accounting.
• Made pragmatic build-versus-buy and model-routing decisions based on reliability, latency, cost, and maintainability rather than novelty.

Agent Orchestration & RAG Systems

• Built and compared agent workflows using Microsoft Agent Framework, LangGraph, and LangChain, including tool use, conditional routing, clarification steps, state management, and hand-offs between agents.
• Implemented reusable .NET components for agents, prompts, tools, model providers, structured responses, and retrieval with pyvector, making it easier to change AI providers without rewriting the core workflow.

Developed a CPU monitoring application using Spring Boot and React, containerized with Docker Compose, with automated infrastructure provisioning using Terraform on AWS.

Stack: Spring Boot, React, PostgreSQL, REST API, Docker Compose, Terraform, AWS

• A recurring problem in my own AI-supported projects: requirements analysis, use cases, and architecture decisions can be created quickly with AI support, but they remain hard to trace and scattered across Markdown files – knowledge is lost as soon as it is no longer in the context window. arknet turns requirements engineering and architecture knowledge into structured, verifiable data instead of plain text: requirements, use cases, and architecture decisions as a continuously linked knowledge graph, traceable from the requirement to the architecture decision – queryable for both people and AI agents alike. Technically based on RDF/OWL and its own MCP server.

• Result: MCP daemon running, Docker image automatically published on GHCR, nine hexagonal modules, eleven ADRs (including an open-core licensing model). Requirements engineering and ubiquitous language hexagon active. Publicly available since 07/2026 as a Community Edition under Apache-2.0 (github.com/kogn-io/arknet), together with the Claude Code plugin and the GHCR image; open-core model.

• Label: Java, Maven, RDF, RDF4J, OWL, SPARQL, Model Context Protocol, Spring AI, Docker, GitHub, Git, Claude Code, Obsidian, DDD, Hexagonal Architecture, ArchUnit, JUnit, AssertJ

• Integration of highly regulated countries such as China and South Korea into a company-wide M365 tenant.

• Technical contact for integrating special requirements for the executive board and German subsidiaries that are subject to BaFin compliance requirements.

• Subproject management.

• Coordination of requirements within the overall architecture.

• Design of the use of DLP features from Microsoft Purview.

• Design of special access restrictions via Entra ID Conditional Access.

• Support in designing the provisioning of Teams teams and SharePoint sites with higher compliance requirements.

• Technical support for implementing information classification with sensitivity labels for SharePoint Online and Teams.

• Technical support for the subproject introducing CoPilot for M365.

• Skills: M365, Purview, DLP, Entra ID, Sensitivity Labels, CoPilot, Teams, SharePoint Online.

Project: Process optimization & IT support in an insurance broker office.

Project activities:

• Analysis of processes and definition of requirements
• Consulting for the implementation of a cloud solution (soho)
• Installation and verification of new infrastructure HW
• Cloud installation & configuration
• Definition and creation of use cases
• Performing user acceptance tests (UAT)
• User training / training
• IT support (cloud, PC, server, printer, network)

Label: Insurance, infrastructure, configuration, training, support

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

• Further development of the existing e-commerce platform based on SAP Commerce (Hybris) to meet the growing demands of digital commerce.
• Ensuring the scalability and performance of the backend, so the platform remained stable and efficient even under heavy user load.
• Development and integration of new OCC REST APIs and services for modular extensions and flexible adjustments, to implement new features quickly.
• Optimization of data flows and interfaces, which significantly improved platform efficiency and system performance.
• Ensuring a maintainable and scalable code base by using Clean Code principles, proven design patterns, and a future-proof architecture.
• Reduction of errors through extensive testing with JUnit, Mockito, and load tests with Gatling, supported by the introduction of automated test processes.
• Improved system performance through targeted refactoring measures and efficient database queries, especially to handle peak loads.
• Use of modern cloud and monitoring tools such as Kubernetes, Google Cloud Platform (GCP), and Grafana to ensure a stable and monitored infrastructure.
• Clear improvement in efficiency, scalability, and reliability of the platform, which now meets the demands of a dynamic and growing e-commerce market.