Kubernetes Experts

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

• Designed and developed a production-ready data platform based on Microsoft Fabric for an e-commerce company
• Built a scalable Medallion Architecture (Bronze, Silver, Gold) with Lakehouse and Delta Lake as the foundation for analytics and AI applications
• Developed a metadata-driven ETL platform with PySpark and a generic Incremental Loading Framework (SQL Server → Bronze → Silver → Gold)
• Developed reusable components for Microsoft Fabric Notebooks to standardize data integration, transformation, and validation
• Implemented automated data pipelines including monitoring, logging, error handling, and Delta MERGE strategies for stable production operations
• Built a business layer architecture for reporting, data warehousing, and reusable data products
• Integrated heterogeneous data sources via SQL Server, REST APIs, Amazon SP API, and Google Analytics 4
• Worked closely with business departments to analyze business requirements and translate them into scalable data architectures

Technologies: Microsoft Fabric, PySpark, Python, SQL Server, Delta Lake, Lakehouse, OneLake, Data Factory, Data Warehouse, REST APIs, Amazon SP-API, Google Analytics 4

• Advise early-stage startups on product vision, roadmapping, and GTM strategy, combining PMP and Stanford PM training with hands-on technical execution.
• Lovable: built and led a 200+ member community program for AI-native founders, bridging real-time founder feedback into product roadmap decisions.
• Lead customer discovery and OKR design engagements, scoping AI integration opportunities across client products.

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

• Built a data integration platform for high-, medium- and low-voltage assets to enable contextual analysis of time series with master data from SCADA control systems (IEC 60870 104), INIS and SAP.
• Responsible for the architecture and implementation of the solution, and acted as a sparring partner for the Product Owner.
• Technologies used: Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter and various API gateways.

Product:

• Built a production-ready AI platform for generating brand-aware marketing images and videos from product data, user requirements, and uploaded media.
• Own the platform architecture, technical roadmap, API design, security, deployment workflow, operational reliability, and model-provider strategy.
• Developed the core platform in .NET and built supporting AI and workflow prototypes in Python, applying language-independent API contracts and structured interfaces between services and model providers.
• Implemented reliable background processing with RabbitMQ, persisted workflow state, idempotent handling, retries, failure recovery, logging, secure storage, authorization, and credit accounting.
• Made pragmatic build-versus-buy and model-routing decisions based on reliability, latency, cost, and maintainability rather than novelty.

Agent Orchestration & RAG Systems

• Built and compared agent workflows using Microsoft Agent Framework, LangGraph, and LangChain, including tool use, conditional routing, clarification steps, state management, and hand-offs between agents.
• Implemented reusable .NET components for agents, prompts, tools, model providers, structured responses, and retrieval with pyvector, making it easier to change AI providers without rewriting the core workflow.

• Documented complex financial reporting processes in deep-dive sessions with subject matter experts
• Analyzed and mapped the 3-tier data flow SAP – Essbase – HQ (984 account entries, triple chart of accounts)
• Identified the biggest time drains (40 % of close time)
• Evaluated technologies (AWS, Microsoft Fabric, Custom/Hybrid) with cost-benefit analysis
• Created a validation rule catalog with 351 rules as the basis for pre-submission automation
• Business case: estimated savings potential of 480–960 T€/year for the EAR region
• Hands-on implementation with Microsoft Fabric, RAG, AI agents/Tool Calling and n8n; productive use of Microsoft Copilot and Copilot Studio
• AI-supported project management workflows (minutes, tasks, knowledge synchronization)
• Stakeholder management at senior management level (EAR Accounting, IEA IT, TFSC Japan), workshops and training on AI tools

Technologies: Microsoft Fabric, Copilot Studio, Claude AI, Python, Power BI, SAP, Essbase/SmartView, Excel (VBA), Notion, SharePoint

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

• Claude Code subagents, MCP, Pydantic V2, pytest, bandit

• Designed and shipped 3 specialized agents that hand work down a line: a research agent writes a cited implementation spec, a coding agent builds the modular code and its tests, a review agent ranks findings by severity and applies the fixes. Each handoff is a structured document, so no stage depends on another agent's context window.

• Connected the research agent to an academic-research MCP server (Semantic Scholar, ArXiv, Hugging Face Hub, citation snowballing) so every reference traces to a tool result rather than the model. Gated commits behind ruff, mypy, pytest and bandit, required human sign-off before installs and commits, and persisted session state on disk so long runs survive a context reset.

Task: Operator development and observability

Technologies and skills: Kubernetes, Valkey-Operator, Crossplane, Backstage, OpenPortal, OTEL, Grafana Cloud, Azure DevOps, Artifactory, Flux, Alloy, Prometheus, Grafana, Loki, OCF, Copilot

What I did:

• Evaluated/developed Valkey-Operator
• Set up OpenTelemetry
• Integrated it with OpenPortal/Backstage/CrossPlane

• Planned and developed a CPU monitoring application for monitoring system performance and resource utilization.
• Designed and implemented a Spring Boot backend providing a REST API for processing and exposing monitoring data.
• Developed the React frontend for presenting monitoring information in a clear and user-friendly interface.
• Integrated PostgreSQL for persistent storage and management of application data.
• Containerized the application and its services using Docker Compose.
• Automated infrastructure provisioning and deployment using Terraform on AWS.
• Structured the application as a modern, maintainable system using REST-based communication between frontend and backend.
• Designed and developed a secure, scalable CPU monitoring architecture (cpu-watcher) with a dedicated collector application that streams monitoring data to the backend, reducing direct exposure of system resources.
• Designed a secure cloud infrastructure with the database isolated within a private network and OIDC-based authentication.
• Implemented Infrastructure as Code with Terraform and integrated version-controlled CI/CD pipelines to automate testing, infrastructure changes, and application deployments.
• Designed and implemented the frontend delivery architecture using AWS CloudFront.

Stack: Spring Boot · React · PostgreSQL · REST API · Docker Compose · Terraform · AWS

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK