LDAP Expert

Project – Evaluation and development of databases for a new product line for a measuring equipment manufacturer

• Current-state analysis
• Requirements analysis of the data storage layer
• Writing benchmark tests
• Design of the new database schema
• Database migrations
• Development of audit logging and Part11
• Creation of backup and recovery concepts
• Design of the persistence layer API
• Writing unit tests
• Creating requirements in Azure

Tools: C#, Visual Studio 2022, Azure DevOps, SonarQube, Git, RestSharp, WebServer, PostgreSQL, MS SQL, SQLite, MinIO, Podman, Docker, DataGrip, SQL Management Studio, HeidiDB, pgAdmin

• Functional management and further development of a team of 28 IT employees (internal & external) in the areas of HelpDesk / HelpLine, RHEL (Red Hat), MUREX (trading system & applications), SAP basic operations
• Management of external service providers (including FI-TS for SAP basic operations)
• Personnel, resource and budget planning for the IT department and projects
• Introduction and establishment of regular communication formats (regular meetings, team and cross-departmental meetings)
• Ensuring application operations in a hybrid environment (Windows / Linux with database and web/application servers)
• Support for transformation projects to modernize the application landscape (e.g. DevOps approaches)
• Building and introducing digital IT procurement for hardware & software (e.g. with DELL)
• Development and management of the „IT Operations DOS" department based on the company strategy
• Preparation of management reports & decision papers on IT projects, optimization potential and automation opportunities
• Representing the department in Rentenbank committees and ensuring regulatory compliance (BaFin §44, DSGVO, BSI, MaRisk)

• Project: ESU Windows and SQL Server Consolidation / Configuration Management in ServiceNow
• Prepared an as-is analysis of all servers worldwide
• Prepared an as-is analysis of all SQL servers worldwide
• Conducted requirements analyses for SQL and server migrations
• Coordinated requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
• Facilitated regular status meetings (Jour Fixe)
• Developed roadmaps and solution models for server migrations
• Set up test scenarios
• Facilitated workshops for the rollout of a global admin team
• Designed data models (CMDB) in ServiceNow
• Led workshops for the CMDB data model
• Developed solution models for the CMDB
• Created end-to-end configuration documentation and work instructions for the CMDB
• Prepared reports for license management
• Defined KPIs for data quality in ServiceNow
• Created a service catalog
• Facilitated workshops to define service requests
• Acted as interface between requirements analysis and the ServiceNow development team
• Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

MOVE-ZPD – Strategic Infrastructure Project | Total Program Budget 48 Mio. € | Data Center Migration Hannover → Hamburg

Responsibility for a central subproject for migrating business-critical specialist applications to a highly available data center architecture.

• Management of a central subproject for migrating business-critical specialist applications to a highly available data center architecture.
• Independent management of around 30 of approximately 100 business-critical specialist applications, including Exchange (approx. 30'000 users), LDAP, DNS and cross-state applications.
• Management of project structure, milestones, dependencies, risks and escalations, as well as coordination of the required business and technical stakeholders.
• End-to-end coordination of the managed migrations, from planning and structuring through environment provision, testing and acceptance to production deployment and go-live.
• Stakeholder management between business units, Product Owners, data center operations, program organization and external service providers.
• Development and implementation of a standardized server request and change process to speed up VM provisioning and reduce manual coordination.
• Management reporting as well as preparation and moderation of steering and decision-making bodies and workshops.

Technologies & Tools: MS Project, MS Teams, SharePoint, Oracle APEX, CA Automation Manager, Visio, MindManager

• Management of firewalls (Securepoint)
• Operation and maintenance of the client-server infrastructure (Windows)
• Operation and patching of IoT devices in the hazard management system (cameras, Web IOS, IP-to-serial converters)
• Support with the integration of security technology into existing IT infrastructures
• Planning and implementation of network segmentation and separation
• Transfer and implementation of solutions in other plants
• Tools used: Wireshark, Network Service Manager, PRTG, Cisco Catalyst, Nexus, HP Service, FNT/Command Manager Console, Service Now, Confluence, Active Directory, Wingard, Securepoint FW.

• Introduction of 5 different process applications for different teams

• Release planning: scope and time management

• Resource/capacity planning

• Conducting Sprint Planning / retrospectives

• Increment planning (several sprints)

• Preparation of Steering Committee meetings / reporting to the Board

• Coordination / alignment with external suppliers / deliveries

• Resource planning for multiple projects

• Coordination with business department and development team

• Identification of best practices with IBM BAW

• Cost control and planning for the project team and external service providers

• Collection of KPIs using LogScale

• Analysis of application errors with LogScale / Queries

• User Story definitions / coordination of requirements with the business department and development team

• Testing and defect tracking

• UI/UX design of applications

• Preparation and moderation of Brown-Paper workshops

• Test concept, test data, test organization, test execution

• Collection of team velocity / metrics

• Test execution

• Script for automated testing

• Test organization with business department and IT

• Recording and prioritization of defects

• Establishment and operation of the application

• Establishment of application monitoring with LogScale Dashboards

• Checking health endpoints with PowerShell

• Post Mortem analysis

• Establishment of Incident Management

• Establishment of Problem Management

• Analysis of errors using LogScale Queries and Dashboard

• Pre-processing of data for AI

• Evaluation using AI language models (Meta Llama 3.3 LLM and deepset Haystack) and RAG

• Installation of runtime environments for LLMs (Large Language Model)

• Evaluation of various LLMs

• Installation of RAG (Retrieval Augmented Generation) and integration with LLM

• Extraction of unstructured data with LLM and RAG

• Project based on IBM BAW (Business Automation Workflow), Websphere Liberty, Domea, d.3, REST, LogScale (formerly Humio), Swagger, Powershell, JIRA, Confluence, Lucom Interaction Platform (LIP), Mattermost, Jabber

• Structured analysis and evaluation of business processes

• Gathering, documenting, and prioritizing requirements

• Creating business-friendly and technically executable process models

• Use of Camunda tools

• Deriving requirements and interfaces from BPMN diagrams

• Coordination with stakeholders and business units

• Translating business requirements into technical solution designs

• Implementing efficient and tailored applications

• Systematic collection, analysis, and documentation of requirements

• Prioritizing and validating requirements in close collaboration with stakeholders

• Alignment between business and development to ensure shared objectives

• Creating use cases, user stories, and acceptance criteria

• Continuous requirements and change management throughout the project lifecycle

• Define project goals and create project plans

• Delegate tasks and monitor project progress

• Monitor budgets and inform stakeholders

• Mendix: Architecture, development, and maintenance of custom applications (Microflows, Domain Model, Security, XPath)

• Modeling Mendix workflows for process optimization

• Develop scalable apps with Mendix including REST/SOAP integration with SAP, SQL, Azure & SharePoint

• UI design for Mendix using Atlas UI, Fluent UI, HTML, CSS, JavaScript

• Develop web & mobile apps with Mendix using agile methods (Scrum, Kanban)

• Implement business logic with Mendix Microflows and Nanoflows

• Performance optimization and architecture improvements for Mendix applications

• Conduct Mendix training

• Create technical documentation and best practices for Mendix

• Coaching and mentoring for low-code development with Mendix

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

Task:

• Design and build a proof of concept (PoC) for a future-proof virtualization platform, taking secure system architectures into account
• Assess the current state of existing infrastructures and develop selection and evaluation criteria for the right OS virtualization platform
• Carry out the requirements analysis and then create and prioritize tickets in the ticket system
• Complete and continuously update a tool evaluation matrix based on PoC results
• Support team knowledge building through clear documentation of the approach and results in Confluence
• Enterprise analysis of existing hardware (creating different BoMs)

Technologies: Vmware, Vmware Aria Operations, Osism, Canonical OpenStack, FishOs, Linux, Terraform, Ansible, Confluence, Alma

Design and implementation of a compact ERP, CRM, accounting, and production-planning platform for a German food manufacturer. The system replaces Rechnung11, self-built Excel sheets, and manual processes for fewer than 10 internal users.

• Designed and implemented the full platform architecture as sole architect and developer.
• Built modules for customer management, B2B order handling, invoicing, production planning, and accounting support.
• Implemented DATEV export, ZUGFeRD/XRechnung e-invoicing, FinTS bank statement synchronization, and GoBD audit trail concepts.
• Used AI-supported workflows for prototyping, test support, and implementation acceleration while retaining full architecture, review, testing strategy, and technical ownership.

Technology: Java 23, Spring Boot 3, Spring Data JPA, Spring Security, Vue 3, TypeScript, PostgreSQL, Flyway, REST, OpenAPI, JWT, TOTP, RBAC, DATEV, FinTS, ZUGFeRD, XRechnung, GoBD, JUnit, Mockito, Testcontainers, Playwright, Docker, GitLab CI/CD

Rollout of printers and PCs

• Effective management of external service providers to ensure smooth operations.
• Planning and implementation of a global rollout for 150,000 clients.
• Carrying out a comprehensive risk analysis, including overall risk, site-specific risks, and security risks.
• Successful consolidation of two existing ServiceNow systems to optimize service management.
• Close coordination with program management to achieve the project goals.