Keycloak Experts in Berlin

• Led development of 15+ microservices (Java 17, Spring Boot) driving customer interactions; migrated from on-prem to GCP Kubernetes, improving scalability and reducing infra cost by 20%.
• Optimized user services with CouchDB caching and API refactoring, cutting response times by 35% and enhancing customer experience.
• Implemented canary deployments, FluxCD GitOps, and CI/CD optimizations in GitLab, reducing release lead time by 25% and enabling zero-downtime rollouts.
• Set up Grafana health checks and Anodot alerts for latency, error, and throughput monitoring, reducing MTTR by 40%.
• Built secure APIs using OAuth2, DPoP, and Gatekeeper, integrated REST and GraphQL, and achieved 90%+ test coverage with unit and E2E tests.
• Mentored junior developers, promoted Agile best practices, and collaborated cross-functionally to deliver high-impact, reliable customer-facing features.

• Led migration to GCP using Terraform, GKE, and GitOps, improving deployment consistency and scalability
• Implemented Datadog observability stack via Terraform and datadog-operator
• Established automated end-to-end tests and on-call processes, improving incident response and service reliability
• Migrated from NGINX Ingress Controller to Kubernetes Gateway API (NGINX Gateway Fabric)
• Migrated stateful services (PostgreSQL and Redis) to GCP, improving scalability and operational reliability

Transmission system operator – network provisioning platform (team lead)

• Designed the saga orchestrator in Python that provisions network fabrics with rollback.
• Split IP, identity, and resource allocation into bounded contexts with their own databases and typed clients.
• Implemented data access using DDD repositories and units of work, with no SQL in the domain code.
• Required integration tests using real PostgreSQL and RabbitMQ containers, and API fuzzing for every service.
• Introduced an agent workflow where a spec starts each change and a human approves every merge.
• Rolled out OpenTelemetry auto-instrumentation through GitOps across eighteen Kubernetes clusters.
• Led incident response for stuck provisioning and recorded every outage as a post-mortem.

Languages and software used: Python, FastAPI, Pydantic v2, SQLAlchemy async, PostgreSQL, RabbitMQ, Celery, pytest, testcontainers, schemathesis, Helm, Flux CD, GitLab CI, OpenTelemetry, pi coding agent.

Software product company – datacenter simulation SaaS (backend development)

• Built the asynchronous simulation pipeline as the second-largest contributor among more than twenty team members.
• Tagged every image by commit SHA and semver in the GitHub Actions deployment workflows.
• Diagnosed the RabbitMQ memory alarm that froze every simulation and fixed the limits in the Helm chart.
• Converted the test suite to function-style pytest, with coverage reported in every pipeline.

Languages and software used: Python, FastAPI, SQLAlchemy, Alembic, Celery, RabbitMQ, Redis, PostgreSQL, S3, EKS, Helm, Keycloak, GitHub Actions, pytest, mypy, ruff, SonarQube.

Internal AI platform – model serving and telemetry

• Built the FastAPI service that deploys open-weight models on GPU tiers as OpenAI-compatible endpoints.
• Upgraded production EKS by two Kubernetes minor versions and fixed zone-bound storage faults.
• Traced every model call, including its token count, cost, and latency, through the OpenTelemetry operator.

Languages and software used: Python, FastAPI, vLLM, LangGraph, pydantic-ai, OpenAI and Anthropic APIs, EKS, Helm, Flux CD, Terraform, GitLab CI, OpenTelemetry, Grafana.

• Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
• Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator

• Developed and deployed microservices in Kotlin and Spring Boot, integrated AWS Secrets Manager to secure credentials and decreased network calls using Spring cache.
• Refactored Kafka consumer using Spring Kafka with semaphore-based backpressure to cap records and keep heap memory stable under spikes; switched to batch upserts to cut down on database invocations; added Testcontainers integration tests for Kafka and database to pave the way for future changes.
• Automated the financial reconciliation workflow in Spring Boot (Kotlin) using Spring Scheduler, transactional boundaries, JPA/Hibernate on MySQL, and Flyway migrations, saving the accounts team 16+ hours per week.
• Designed and dockerized payments end-to-end test framework in Robot (Python) with reusable keyword libraries and profiles; integrated with GitLab CI (JaCoCo XML and HTML reports) to accelerate releases and lift code coverage to 80%.
• Implemented end-to-end observability on Datadog by instrumenting services with Datadog APM, correlating metrics and logs, provisioning dashboards, and creating monitors with burn-rate alerts and anomalies to harden reliability and give stakeholders clear visibility.

• Developed a Flutter app for eID ID card logins
• Focus: Flutter, iOS, eID, AusweisAppSDK, Mason, Keycloak, Agentic Coding, Arc42, Jenkins

• IT training in theory and practice for IT specialists in application development and system integration

• Manage the development release and update process for a digitized nationwide trade register project "AuRegis".

• Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.

• Oversee system release of microservice architecture.

• Build the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.

• Automate deployment onto OpenShift using Kustomize.

• Set up infrastructure components for development, code review, and code quality analysis including SonarQube.

• Integrate GitOps tools such as Kustomize and ArgoCD, using both Azure and private cloud for sensitive data handling.

• Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.

• Automate delivery to customers and deployment on test systems.

• Create Kustomize manifests for microservices and develop the related automation, treating documentation as code for clarity and reproducibility.

• Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.

• Context: Healthcare and laboratory teams required faster document analysis, treatment-planning support, and reliable AI workflows for MR/VR-assisted operations.
• Contribution: Built the AI healthcare platform, model/agent workflows, VR-glasses deployment platform, REST APIs, Next.js/React interfaces, and CI/CD pipelines.
• Impact: Delivered a production-ready AI product foundation that improved clinical document review, supported laboratory automation, and made VR fleet deployment manageable across environments.

Tech: TypeScript, Next.js, Node.js, React, Java, Spring Boot, Python, PyTorch, TensorFlow, Docker, PostgreSQL, OpenAPI, GitLab, GitHub Actions.

• Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
• Leading the “Identity & Directory Management” product (8 people) as Product Owner.
• Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
• Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
• Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.

Java 21 · Spring Boot 3 · Keycloak · PostgreSQL · Docker · Nginx · GitHub Actions · DigitalOcean · React 18 · TypeScript · Plasmo

• Architected and shipped a production-ready Job Application Tracker end-to-end: REST API with 5-stage workflow, pagination, sorting, and dynamic filtering — full ownership from design to live cloud deployment on DigitalOcean.
• Implemented production-grade identity management: OAuth 2.0 / OpenID Connect / JWT / RBAC via Keycloak, applying Hexagonal Architecture and DDD principles.
• Built automated CI/CD pipeline (GitHub Actions); containerised with Docker; Nginx reverse proxy with path-based routing and SSL termination.
• Developed a Chrome Extension (Plasmo framework, Manifest V3) that auto-fills job applications directly from LinkedIn into the tracker — demonstrates full product thinking across backend API and browser client.

• Design of an LLM-based agent system to control the ERP software
• Development of agent workflows with LangGraph and PydanticAI
• Planning interfaces between business logic and language models
• Planning agent orchestration
• Prototype development and demonstration

Tools: Python, Pydantic, React, LangChain, LangGraph, Linux

• Leading 20+ staff in development, site reliability engineering, and architecture.
• Leading the group-wide agentic AI initiative (Norway, Poland, Germany).
• Hands-on solution architect and AI consultant for over 50% of my working time on client projects in the publishing sector – from local publishers to international corporations.
• Strategic consulting and technical implementation of AI workflow platforms (n8n, Workato).
• Developing prototypes for traditional, AI-based, and agentic AI workflows.

• Rebuilding an existing cloud solution with Kubernetes, Terraform, Ansible, Prometheus, Grafana, GitLab, Argo CD and PostgreSQL
• Coordinating and managing external partners and service providers
• Ensuring service delivery on time and on budget with budget responsibility
• Integrating the cloud solution with external public clouds (AWS)
• Setting up and defining processes and workflows in Jira and Confluence
• Product management of software development for automation and self-service in CI/CD DevOps mode
• Agile software development with Kanban and Scrum in various development teams
• Single point of contact for key customers in respective projects
• Creating and aligning the product backlog with stakeholders from sales, architecture, development teams, marketing, management and customers
• Migrating existing customers to the AWS cloud as product owner
• Creating and aligning a product roadmap with internal and external stakeholders