Katalon Studio Experts in Germany

Two complementary tracks: (a) building my own AI products and open-source tools under the Neckarshore AI brand, with a focus on AI-supported multi-agent development processes and documentation automation; (b) freelance support for industrial, logistics, and financial companies in IT-related transformation projects.

Current product portfolio under the Neckarshore AI brand:

• Omnopsis Documenter — AI-powered documentation engine: generates compliance, technical, and release documentation from Git, Jira, and Confluence. 500+ automated tests, 100+ API endpoints, RBAC, monitoring stack.
• TrustScope — trust analysis for public GitHub repos: deterministic three-pillar report (Security & Supply Chain, Governance, Community) based on OpenSSF Scorecard, with constructive fix suggestions instead of a single misleading score.
• md-viewer — dependency-free Markdown viewer for macOS (Finder Quick Action) and web, split view of rendered document and raw text.
• Obsidian Vault Autopilot — AI-supported vault automation for Obsidian × Claude Code: sorts the inbox, renames notes, enriches frontmatter.
• Phonesis Voice Bank — voice archive for families, hospices, and cultural archives (guided recordings, inheritable archive, optional voice cloning); currently in the GDPR compliance phase (Art. 9, biometric data).
• Multi-Agent Development Process — 12+ specialized agents (architecture, implementation, security, refactoring, marketing) with structured handoff protocol, parallel execution, and automated quality assurance — powers the entire product development.
• Freelance consulting: Technical Product Ownership for production, logistics, and compliance/AML systems; steering international rollouts including test, cutover, and change management.

Stack: NestJS, TypeScript, PostgreSQL, Redis/BullMQ, Next.js, Claude Code (Opus), Docker, GitHub Actions, Vercel

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

Consulting, designing, and implementing the software testing lifecycle for multiple Android apps and backends Introducing test automation with Appium, SpringBootTest, RestAssured Setting up and managing emulators Developing an E2E library, an integration library, a Testcontainers library, and other libraries Developing, implementing, and advising on CI strategies Building the test environment with Testcontainers and virtualization Developing and implementing test cases for integration tests and end-to-end tests Establishing a maintainable test architecture with low entry barriers to simplify the creation of automated tests Some tools and technologies used: JUnit, RestAssured, Testcontainers, Kubedock, Appium, Android emulator, Jira Xray, Mockito, WireMock, Spring Framework, Kotlin

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• Automation of existing manual tests from XRay with Cucumber/Gherkin in Cypress.io
• Testing the company application on different medical devices
• Tech Stack: JavaScript, Cypress.io, Confluence, IntelliJ, XRay, JIRA, Cucumber/Gherkin, Git

• Establishing and enforcing strong technical standards within and across teams
• Define the required standard in line with overall strategy and communicate across respective technology teams
• Understanding business and technical requirements and implemented (across teams) in an effective and timely manner
• Mentoring (Junior/Mid) Quality Assurance engineers on their path towards seniority
• Providing regular feedbacks and participate in technical interviews
• Contribute to solution architecture proactively
• Design, align, and create solutions for future features according to overall architecture concept and business requirements
• Clarify and communicate decisions from system architects into respective teams
• Challenge business requirements in workshops, refinements, and planning to come to the best possible solution
• Drive QA solution delivery in and across the team
• Support and drive the full QA process
• Execute code reviews for critical tests and accompany their execution into CI/CD
• Participate in running/monitoring and maintaining the application in production
• Follow-up on critical bugs in production system
• Help to debug and solve problems in a timely manner

• Introduction of back-end test automation for an existing CRM & DMS tool
• Support of test-management-related aspects during the tool rollout
• Creation of new test cases
• Automation of the REST API back-end integrated into the Azure DevOps pipeline with result feedback to Azure Test Plans
• Tools/Languages: Azure DevOps, Postman/Newman, Microsoft Self Hosted Agent, REST API