Laravel Expert

• A digital system made up of special software and hardware components. The overall system replaces the traditional process with job slips and handwritten notes and enables more efficient order intake. Orders and work steps for the violin-making company’s projects can now be recorded, processed and logged in real time directly on the workshop’s touchscreen PC, by mobile phone or on the desktop. This gives customers a more transparent view of the work on their instruments and allows them to track the status and progress of their instrument through their customer account.

Tech stack: next.js, React, Flutter, Dart, Raspberry, Linux, Directus

• SPA for automated communication of medical findings with role-based access (Sanctum)
• Server-side LLM integration (OpenRouter) with structured processing
• Automated sending via SMS/voice call (Twilio, ElevenLabs) with queue + status retry
• Full test coverage with 80+ documented test cases

Technologies: PHP, Laravel, LLM API (OpenRouter), Twilio, ElevenLabs, Laravel Sanctum, PHPUnit, Playwright, Docker, REST

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

Manufacturing intelligence platform with enterprise workflows, RAG, real-time AI assistant features, and multi-repository backend architecture.

• Built and extended production AI/backend services with Django, DRF, FastAPI, GraphQL, Celery, PostgreSQL, MySQL, Redis, and WebSockets across a modular multi-repository platform.
• Contributed to ARIS V2, a real-time manufacturing AI assistant using LangChain, LangGraph, MCP tool orchestration, planning/execution flows, OpenAI, AWS Bedrock, Qdrant, and Elasticsearch/OpenSearch-backed retrieval.
• Supported rollout expansion from ARIS V1 in 4 of 17 client production plants to ARIS V2 currently active in 13 of 17 plants, increasing real-world deployment coverage to more than 50% of the client footprint.
• Worked on document-grounded RAG functionality including ingestion, OCR, chunking, embeddings, indexing, retrieval, reranking, and grounded answer generation for industrial workflows.

Stack: Python, Django, DRF, FastAPI, LangChain, LangGraph, GraphQL, Celery, WebSockets, OpenAI, AWS Bedrock, Qdrant, Elasticsearch/OpenSearch, PostgreSQL, MySQL, Redis, Docker.

• DTO class generator: In-house development of a tool for the automatic generation of classes, functions, and methods for use in .NET Core projects based on SAP Business One Service Layer metadata
• E-invoice import add-on: Development of a SAP Business One add-on / coresuite module for the automated import of ZUGFeRD e-invoices as incoming invoices – with configurable mapping to flexibly control the import logic across four mapping types (DIRECT, SQL, FIXED, EXPR). The add-on is available as a licensed product for SAP Business One customers.

Stack: SAP Business One, SAP Business One Service Layer, coresuite Country Package, C#

agentic-engineer.online is my publicly testable live demo and at the same time the platform where I show my work. Originally created as a recruitment trial task, I have since continued to run it as my own demo, learning, and product project — on a Hetzner VPS behind a Cloudflare tunnel, through a multi-stage AI-orchestrated deploy pipeline with snapshot rollback. If a deploy step breaks, the system falls back to the last clean snapshot, the script is adjusted, the test repeated — empirical, test-driven, without hand tuning.

• Technically behind it: Python and FastAPI, an OpenRouter model cascade, SQLite persistence, and Cloudflare edge tuning.
• I am the developer and the strictest customer of my own AI work in one person — what started as a prototype has become a tool I use every day and against which I test my own products.

• Development and maintenance of a news portal CMS with interfaces.
• PHP development with HTML, CSS, SCSS, JavaScript, MySQL, Laravel, documentation of the interfaces and the system.
• Further development of the SSO system based on Laravel with a large API and connections to AWS, SAP, ERPS.
• Reorganisation and development of the news portals on the basis of a publish platform, services and interfaces to Google, Facebook, Twitter, SSO, SAP technical based on NodeJS with TypeScript and AWS.
• Technologies: PHP, Laravel, MySQL, JavaScript, Vue.js, NodeJS, TypeScript, jQuery, CSS, SCSS, SASS, Unix, Jira, Confluence, Git, Apache, Nginx, AWS.

• Advising clients on digital transformation, IT architecture and the introduction of cloud-based environments.
• Gathering, evaluating and prioritizing customer requirements, as well as coordinating projects and programs based on scope, time, quality, budget and risk.
• Designing, documenting, maintaining and developing IT environments, automation and containerized applications.
• Implementing digital platforms, including e-commerce and ordering solutions, event platforms and the product concept for a legal-tech platform.
• Working in interdisciplinary teams and communicating effectively between clients, service providers and technical stakeholders.
• She accompanied companies in their transformation into the digital and agile working world, whether in business process or IT architecture consulting or as part of managed services.
• She developed individual strategies for the digital transformation of our customers and designed new IT environments in the cloud.
• As part of demand management, she gathered, evaluated and prioritized customer requirements.
• She worked in project and program management and coordinated our service providers and those of our customers, monitored their own projects in terms of scope, time, quality and budget and kept an eye on the associated risks.
• She led projects successfully to the end and ensured a professional transfer to regular operation.
• Ms. Sara Mussie has an exceptional understanding of the structure and optimization of IT infrastructures and various cloud technologies as well as modern IT architectures.
• Her areas of responsibility were the development of solutions, considering the service strategy and the possibility of automation, working on design and architecture documentation for projects and services, as well as working on the structure, maintenance and development of IT environments, automation and related tools for our microservice environment and containerized application.
• She was involved in improving our processes and the tool chain used.
• She is confident in handling common IT processes and IT standards.
• Ms. Sara Mussie has very good knowledge of PHP, PHP OOP, Laravel, MySQL, VueIs | Vuex, HTML | CSS | JS, Bootstrap, MongoDB, NodeIs and Python.
• To this day, Ms. Sara Mussie remains available to us for consultation requests from specific clients.

• Led client projects end-to-end — from scoping and cloud strategy to sprint planning and stakeholder alignment
• Planned and implemented secure Azure Landing Zones using Infrastructure as Code
• Developed governance frameworks and cloud security controls tailored to enterprise environments
• Executed cloud readiness assessments and managed cloud migration initiatives from evaluation to handover
• Facilitated client workshops and agile ceremonies (sprint planning, backlog refinement, standups)
• Built internal Cloud Competence Centers to foster knowledge sharing and best practices across teams
• Development of a general Cloud Service Portal

• Platform established and running stably; deliberately reducing my involvement to refocus on an engineering mandate in the financial sector.
• Built an own SaaS learning platform from the ground up and scaled it to over 20,000 users (over 6,000 courses sold, B2C and B2B); end-to-end ownership from development through infrastructure to operations.
• Built a lab environment that provisions an isolated Linux container per user (Docker, Traefik, Go), including automatic provisioning and a dedicated subdomain per user.
• Integrated LLM features into the product and accelerated development end-to-end with AI-assisted workflows (Claude Code, Codex); CI/CD with automated tests.

• Architecture and conception
• Development at gitis.de (Laravel, Vue, Blade, CI/CD Pipeline [Rector, PHPUnit, PHPStan, PHP_CodeSniffer])
• Development at plotdesk.app (Laravel, Vue, Inertia, Tailwindcss, Prism, Ansible, Docker, CI/CD Pipeline [Rector, Pest, PHPStan, Pint])
• Development at sales-automation.ai (Laravel, Vue, Inertia, Tailwindcss, Prism, CI/CD Pipeline [Pest, PHPStan, Pint])
• Development at Cynapsis Interactive (Laravel, Filament, Google Ads API, CI/CD Pipeline [Rector, Pest, PHPStan, Pint])
• Analysis and monitoring tool for z-optimations GmbH (Laravel, Blade)
• Development at ProgressMaker (Laravel, Pest, REST-API)
• Development of a data warehouse at ProgressMaker (Laravel)
• Development of SimpleStats.io (Laravel, Vue, Inertia, Tailwindcss, Pest, CI/CD)
• Development of Validation for Laravel (Laravel, Vue, Inertia, Tailwindcss)
• Development of multiple open-source projects (laravel-date-scopes, laravel-schema-rules, laravel-xhprof)

• Development of a SaaS platform for esports teams with roles, scheduling, statistics, and billing
• Planning and implementation of the architecture, external API integrations, and operations
• Stack: Laravel 13, React 19, TypeScript, PostgreSQL, Redis, and Stripe

Overall architecture and technical implementation of a Wix-based subscription frontend with Stripe payments and connection to Axxessio's SaaS backend. Implemented Stripe Checkout, subscriptions, webhooks, and transaction logging end to end. Customer data and contract information transferred automatically via a JWT-protected REST API. Designed and documented proxy and security architecture for IP whitelisting, HMAC, and operations, and aligned it with the backend team.

Stack: Wix Studio, Wix Velo, JavaScript, Stripe, Webhooks, JWT, HMAC, REST API, Hetzner, Cloudflare