Katalon Studio Experts in Germany

Two complementary tracks: (a) building my own AI products and open-source tools under the Neckarshore AI brand, with a focus on AI-supported multi-agent development processes and documentation automation; (b) freelance support for industrial, logistics, and financial companies in IT-related transformation projects.

Current product portfolio under the Neckarshore AI brand:

• Omnopsis Documenter — AI-powered documentation engine: generates compliance, technical, and release documentation from Git, Jira, and Confluence. 500+ automated tests, 100+ API endpoints, RBAC, monitoring stack.
• TrustScope — trust analysis for public GitHub repos: deterministic three-pillar report (Security & Supply Chain, Governance, Community) based on OpenSSF Scorecard, with constructive fix suggestions instead of a single misleading score.
• md-viewer — dependency-free Markdown viewer for macOS (Finder Quick Action) and web, split view of rendered document and raw text.
• Obsidian Vault Autopilot — AI-supported vault automation for Obsidian × Claude Code: sorts the inbox, renames notes, enriches frontmatter.
• Phonesis Voice Bank — voice archive for families, hospices, and cultural archives (guided recordings, inheritable archive, optional voice cloning); currently in the GDPR compliance phase (Art. 9, biometric data).
• Multi-Agent Development Process — 12+ specialized agents (architecture, implementation, security, refactoring, marketing) with structured handoff protocol, parallel execution, and automated quality assurance — powers the entire product development.
• Freelance consulting: Technical Product Ownership for production, logistics, and compliance/AML systems; steering international rollouts including test, cutover, and change management.

Stack: NestJS, TypeScript, PostgreSQL, Redis/BullMQ, Next.js, Claude Code (Opus), Docker, GitHub Actions, Vercel

Working as a QA Engineer within a regulated digital health environment, supporting structured test planning, test analysis, verification evidence and release readiness across mobile and web applications.

Creating, maintaining and executing manual and automated (MAESTRO, Katalon, Cypress) functional, regression and SIT test cases for iOS, Android and web platforms. Performing daily activities using Jira, Xray, Confluence, BrowserStack and staged test environments.

Supporting traceability between requirements, risks, test cases, defects and test results, helping ensure QA evidence is clear, auditable and suitable for regulated software delivery.

Collaborating with development, product, medical, regulatory and business stakeholders to clarify requirements, investigate defects, assess severity and priority, and reduce release risk.

Applying ISTQB, Agile and SAFe testing principles across mobile apps (as mobile medical devices), web platforms, system integration and regulated documentation.

Using AI products and open-source AI tools to support QA activities, including test case design, user story analysis, test data creation, process optimisation and regression coverage estimation.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

Consulting, designing, and implementing the software testing lifecycle for multiple Android apps and backends Introducing test automation with Appium, SpringBootTest, RestAssured Setting up and managing emulators Developing an E2E library, an integration library, a Testcontainers library, and other libraries Developing, implementing, and advising on CI strategies Building the test environment with Testcontainers and virtualization Developing and implementing test cases for integration tests and end-to-end tests Establishing a maintainable test architecture with low entry barriers to simplify the creation of automated tests Some tools and technologies used: JUnit, RestAssured, Testcontainers, Kubedock, Appium, Android emulator, Jira Xray, Mockito, WireMock, Spring Framework, Kotlin

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• Automation of existing manual tests from XRay with Cucumber/Gherkin in Cypress.io
• Testing the company application on different medical devices
• Tech Stack: JavaScript, Cypress.io, Confluence, IntelliJ, XRay, JIRA, Cucumber/Gherkin, Git

• Introduction of backend test automation for an existing CRM & DMS tool
• Support for test management-related aspects of the tool introduction
• Creation of new test cases
• Automation of the REST API backend with integration into the Azure DevOps pipeline and transfer of results to Azure Test Plans
• Tools/languages: Azure DevOps, Postman/Newman, Microsoft Self Hosted Agent, REST API