Katalon Studio Experts in Germany

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

Consulting, designing, and implementing the software testing lifecycle for multiple Android apps and backends Introducing test automation with Appium, SpringBootTest, RestAssured Setting up and managing emulators Developing an E2E library, an integration library, a Testcontainers library, and other libraries Developing, implementing, and advising on CI strategies Building the test environment with Testcontainers and virtualization Developing and implementing test cases for integration tests and end-to-end tests Establishing a maintainable test architecture with low entry barriers to simplify the creation of automated tests Some tools and technologies used: JUnit, RestAssured, Testcontainers, Kubedock, Appium, Android emulator, Jira Xray, Mockito, WireMock, Spring Framework, Kotlin

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• Automation of existing manual tests from XRay with Cucumber/Gherkin in Cypress.io
• Testing the company application on different medical devices
• Tech Stack: JavaScript, Cypress.io, Confluence, IntelliJ, XRay, JIRA, Cucumber/Gherkin, Git

• Establishing and enforcing strong technical standards within and across teams
• Define the required standard in line with overall strategy and communicate across respective technology teams
• Understanding business and technical requirements and implemented (across teams) in an effective and timely manner
• Mentoring (Junior/Mid) Quality Assurance engineers on their path towards seniority
• Providing regular feedbacks and participate in technical interviews
• Contribute to solution architecture proactively
• Design, align, and create solutions for future features according to overall architecture concept and business requirements
• Clarify and communicate decisions from system architects into respective teams
• Challenge business requirements in workshops, refinements, and planning to come to the best possible solution
• Drive QA solution delivery in and across the team
• Support and drive the full QA process
• Execute code reviews for critical tests and accompany their execution into CI/CD
• Participate in running/monitoring and maintaining the application in production
• Follow-up on critical bugs in production system
• Help to debug and solve problems in a timely manner