Knowledge Management System Experts in Germany

• Built a scalable nearshore IT developer hub (Croatia, Czech Republic, Poland) as an independent company through a BOT model (Build – Operate – Transfer)
• Identified, selected, and managed full-service agencies; introduced management and control mechanisms, including KPIs, SLAs, and regular service reviews
• Prepared and reviewed data processing agreements and framework contracts in coordination with Legal & Compliance; integrated regulatory requirements (including KRITIS) into process design
• Advised on cloud vs. on-premise strategies, data storage, and authorization concepts; supported Procurement with tendering and service provider evaluations
• Managed change and process harmonization between internal teams and nearshore partners; reported to executive management, CFO, and CIO

Result: Scalable IT developer hub with an audit-ready governance model, reduced operating costs, and accelerated product development.

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

• Development and implementation of tailored information security strategies

• Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

• Risk management and creation of security concepts

• Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

• Building and improving security organizations

• Creation and implementation of guidelines, policies, work instructions, and process descriptions

• Audit support and certification preparation

• Conducting trainings, workshops, and awareness campaigns

• Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

• Conducting penetration tests and vulnerability analyses

• Consulting on the selection, integration, and management of security architectures in complex IT environments

• Consulting on ITSM and managed security services and SOC

• Leading and managing complex projects to improve information security

• Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

• Introduction and quality assurance of management, documentation, and knowledge management systems

• Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

• Development and implementation of risk analysis procedures

• Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

• Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

• Awareness campaigns to promote security culture in companies

• Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

• Simulations and exercises to prepare for information security incidents

• Interim management for leading information security projects or IT security organizations

• Taking on the role of an external CISO (Chief Information Security Officer)

• Support in developing and implementing IT security and corporate strategies

• Coaching and mentoring of managers in the field of information security

• Building and leading security departments as well as recruiting and qualifying employees

• Temporary assumption of management responsibility in critical situations

Transformation assignment: IT Operating Model and Governance

• Management of the operationalization of a new IT operating model for a service- and customer-oriented organization in the managed services and Microsoft 365 environment.
• Translation of the target organizational model into concrete roles, responsibilities, organizational elements, decision-making paths and collaboration principles.
• Design and operationalization of a layered model with autonomous delivery teams, supporting units and clearly defined governance functions.
• Design of governance for Service Delivery Management, People Leads, Global Service Owners (GSO), operational teams, clusters and management committees.
• Structuring of the transformation rollout into ramp-up, implementation, hardening and operations, as well as development of kick-off, communication and feedback formats.
• Further development of PMO and office structures as well as portfolio and workforce management to create transparency around resources, risks, dependencies and decision requirements.
• Facilitation of cross-functional workshops and decision-making meetings, and translation of different stakeholder interests into actionable principles, rules and measures.

Interim assignment: IT Service and Operations Management

• Assumption of operational responsibility for Citrix and AD/Access, including incident, escalation, transition and quality management in day-to-day operations.
• Clarification of operational interfaces and clear separation of responsibilities between internal units, Service Delivery Management and external service providers.
• Conduct of structured GAP analyses of existing service descriptions, preparation of make-or-buy decisions and clarification of roles with KPI integration.
• Management of conflicting objectives, dependencies and escalations in complex customer, operations and transformation situations.

Selected results

• The transformation target model was translated into directly applicable roles, governance rules, organizational elements and rollout formats.
• Decision-making paths, responsibilities and interfaces between operational delivery, supporting functions and management were described transparently and bindingly.
• The foundations for self-organized teams, standardized service descriptions and reliable portfolio, resource and management transparency were established.

Methods: Operating Model Design, Governance Design, RACI, GAP Analysis, Stakeholder Analysis, Workshop Facilitation, Change Communication, Risk and Escalation Management, KPI and Service Management

A nationwide service provider for occupational medicine, occupational safety and health management, focusing on prevention, health and digital transformation.

• Role: Responsible for establishing and further developing professional project portfolio management in the Digital Transformation & Data area. Managing and supporting strategic IT and transformation projects, as well as supporting the introduction and establishment of project management standards, methods and governance structures.

Key areas:

• Establishment and further development of IT project portfolio management
• Analysis and structuring of business and technical requirements
• Management and coordination of cross-functional IT initiatives
• Stakeholder management at department, management and service provider level
• Introduction and further development of project management methods and tools (including Jira, Confluence, MS Planner)
• Preparation of decision-making documents, target visions and implementation concepts in the context of digital transformation
• Management and coordination of transformation, digitalization and organizational projects
• Preparation of decision templates and management documents for executive committees
• Conducting workshops and stakeholder management with departments and IT teams
• Definition of requirements for dashboards, reporting and KPI management
• Participation in the Wissenskompass project (requirements analysis and MVP concept)
• Analysis and evaluation of AI support opportunities in Knowledge Management
• Investigation of AI use cases to improve knowledge provision and use
• Consideration of AI requirements as part of the Wissenskompass concept
• Coordination with strategic departments to further develop project management standards
• Introduction, configuration and training for Microsoft Planner to support project and task management
• Conducting user training and supporting employees in the introduction of new ways of working and tools

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Development of a production-ready Enterprise AI solution for the automated processing of invoices and business documents
• Integration of Azure AI Document Intelligence and LLM technologies into existing business processes
• Development of robust REST APIs for automated document processing and system integration
• Extraction, validation, and storage of structured invoice data in Azure SQL as a base for analytics and machine learning models
• Development of an AI-based recommendation engine with machine learning and deep learning to generate personalized product recommendations based on historical purchase data
• Implementation of logging, monitoring, error handling, and validation mechanisms for stable production use
• Collaboration with business teams to define business rules and integrate the solution into existing enterprise processes

Technologies: Python, Azure AI Document Intelligence, Azure OpenAI, Azure SQL Database, REST APIs, Machine Learning, Deep Learning, OCR, Pandas, JSON, Workflow Automation

• Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
• Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
• Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
• Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
• Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
• Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
• Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables

Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban

• Develop custom AI agents delivering 90%+ reduction in manual workload and significant efficiency gains
• Provide end-to-end AI strategy consulting: from digital assessment to implementation and change management
• Design and deliver tailored training programs and workshops on AI adoption, prompt engineering, and automation
• Support clients in implementing scalable AI solutions integrated with existing technology stacks
• Focus areas: AI strategy, automation, workflow optimization, and capability building

• Recurring problem in my own AI-assisted projects: requirements analysis, use cases, and architecture decisions can be created quickly with AI support, but remain difficult to follow and scattered across Markdown files – knowledge is lost as soon as it is no longer in the context window. arknet turns requirements engineering and architecture knowledge into structured, verifiable data instead of plain text: requirements, use cases, and architecture decisions form a consistently linked knowledge graph, traceable from requirement to architecture decision – queryable by both people and AI agents. Technically based on RDF/OWL and a custom MCP server.

• Result: Working MCP daemon, Docker image published automatically to GHCR, nine hexagonal modules, eleven ADRs (including an Open-Core licensing model). Requirements engineering and Ubiquitous Language hexagons are active. Public as a Community Edition under Apache-2.0 since 07/2026 (github.com/kogn-io/arknet), together with the Claude Code plugin and GHCR image; Open-Core model.

• Label: Java, Maven, RDF, RDF4J, OWL, SPARQL, Model Context Protocol, Spring AI, Docker, GitHub, Git, Claude Code, Obsidian, DDD, Hexagonal Architecture, ArchUnit, JUnit, AssertJ, Interface Development, Software Architecture, Continuous Integration, Knowledge Management

• Senior agile practitioner in a complex, regulated pharmaceutical environment — facilitating Scrum ceremonies across three international teams (~40 people) while supporting delivery governance and agile coaching.
• Time-limited assignment to bridge the gap until the client could fill the role internally
• Facilitated all Scrum ceremonies (Sprint Planning, Daily Stand-up, Review, Retrospective) across multiple international teams; kept sprints predictable and productive
• Coached teams and Product Owners in agile practices within a GxP-regulated environment, pragmatically balancing agile ways of working with QMS compliance requirements
• Tracked and visualized delivery metrics, managed dependencies, and produced status reports for senior stakeholders and Steering Committee
• Stepped up to project leadership of the internal CCMS product initiative: introduced structured processes and transparent tooling into a previously low-governance environment
• Actively contributed to the company-wide Agile Community of Practice, including authoring blog articles on agile topics
• Commended for analytical thinking, reliability under pressure, and the ability to manage multiple workstreams simultaneously

• Definition and implementation of the global strategy for IT site infrastructure products and services, ensuring scalability, security and compliance
• Leadership and development of a high-performing team of IT site management specialists, promoting collaboration and professional development
• Monitoring the quality of IT services for sites and ensuring timely delivery and compliance with company standards
• Central point of contact between Corporate IT, regional IT teams and business stakeholders for site infrastructure topics
• Driving innovation and process optimization in the delivery and operation of IT site infrastructure
• Responsibility for the product lifecycle of IT site infrastructure solutions, from design through retirement
• Management of global demand for IT site infrastructure services and ensuring alignment with IT demand management processes
• Establishment and monitoring of KPIs for service delivery and product performance
• Ensuring compliance with IT security, data protection and regulatory requirements
• Management of supplier relationships and negotiation of contracts for IT site infrastructure services
• Budget planning and cost optimization for IT site infrastructure
• Review, improvement and implementation of ServiceNow processes

• Designed and developed a multi-tenant SaaS platform enabling organizations to build their own knowledge bases and chat with brand-customized AI assistants (white-label approach with dynamic branding per organization).
• Implemented a scalable RAG architecture with a GPT-4o tool-use loop, hybrid semantic search, and strict tenant isolation at database and search index level.
• Built persistent, project-like chat sessions including a streaming API (SSE), multilingual support, and speech input/output (STT/TTS).
• Delivered the cloud infrastructure as Infrastructure-as-Code, fully automated per-customer CI/CD pipelines, and an onboarding process for new tenants.

Technologies used: Python, FastAPI, Pydantic (v2 noted), Next.js, React, TypeScript, Tailwind CSS, OpenAI / LLMs (GPT-4o), Azure AI Search, Cosmos DB, Azure Blob Storage, Azure Cognitive Services Speech, Azure App Service, Azure Container Registry, Retrieval-Augmented Generation (RAG), Server-Sent Events (SSE), Docker, Terraform, GitHub Actions, REST, OpenID Connect (OIDC), Multi-Tenancy