Linux Expert in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Elevator emergency call reorganization project: Project to evaluate and define a new technical solution for connecting elevator emergency calls for all facilities of DB InfraGO passenger stations.

• Objectives: Secure, redundant connection of all locations across Germany. Definition of the technical solution, documentation, subject-matter support and management of specialist and line organizations.

• Identification and commissioning of technical solutions.

• Management of documentation and approval of the technical solution in DB regulations.

• Definition and tracking of the roadmap for describing the solution.

• Preparation of a rollout plan to avoid shutdowns.

• Coordination and implementation of decision proposals for steering committees.

• Communication of the solution to all committees and regional areas.

Participation in the EU-funded MORANE-2 project to validate the Future Railway Mobile Communication System (FRMCS) in real-world use cases: preparation of the requirements specifications for TOBA and the associated test specifications.

Technologies: 5GS (Radio & Core), FRMCS, MCx (MCPTT, MCData, MCVideo), MC Gateway UE, MCx Priority/Security/QoS Management, ETCS, SIP, IMS

Statistical Forecasting Algorithm

• Improvement of an statistical probabilistic forecasting algorithm for sales + evaluation
• Migration from R/On-premise to Python/Snowflake
• Productionalization on Snowflake in cooperation with data engineers & DevOps

Monitoring Dashboard

• Data engineering for preparation & provisioning of necessary data/resources on Snowflake
• Development & deployment of a Streamlit dashboard in Snowflake

ML-based Probabilistic Forecasting on Vertex AI

• Development of a ML-based probabilistic forecasting algorithm from scratch
• Implementation of MLOps pipeline in Kubeflow on Google Cloud Vertex AI

Tech Stack: Python, Snowflake/Snowpark, R, Streamlit, Gitlab/Gitlab CICD, Terraform, Google Cloud, Vertex AI (aiplatform SDK, gcloud CLI, feature store, model registry, etc), kubeflow

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Conducting and evaluating web analyses
• Creating and editing tags and scripts in the area of tag management as well as banners and other client-side web elements in the area of consent management
• Technologies used in development: Tealium, JavaScript, IntelliJ, Git, Android Studio, Selenium, Appium, Adobe Analytics, Power Automate, Power App

• Hands-on solution architect
• Digital product development - SaaS
• Strategic consulting on software architecture, cloud migration, and DevOps processes
• Coaching SE developers and IT architects

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

• Development and implementation of backend components with PL/SQL and Oracle Forms 12c. Adaptation and further development of the policy administration system. Technical consulting in UI design with a focus on integrating existing Oracle Forms and the requirements of the BIPRO framework.
• The project takes place in the technical environment of BIPRO, SQL databases and Oracle Forms applications. The assigned work includes backend development and technical further development in the above project with the following tasks:
• Development and implementation of backend components with PL/SQL and Oracle Forms 12c to technically map the business processes and ensure a stable and efficient system architecture
• Adaptation and further development of the policy administration system to ensure system functionality in line with the requirements of the new broker communication program
• Analysis of the existing system to identify and avoid errors and technical problems during implementation, in order to enable a smooth transition to the new system
• Carrying out patching and further development of existing Oracle and Oracle Forms applications to ensure compatibility and security of the systems in use
• Technical consulting in UI design with a focus on integrating existing Oracle Forms and the requirements of the BIPRO framework.

Label: PL/SQL, Java, Oracle RDBMS and Oracle Forms

• Designed and specified the technical network integration of a new business-critical application system (MUREX) in the capital markets area in a complex interface and outsourcing environment.

• Created component specifications, a catalog of measures and an implementation plan.

• Ensured proper integration of the developed results in line with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between the bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous improvements to ensure efficient resource use and acceptable response times for users.

• Provided network support in a financial services organization and prepared operational changes on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed the role of network architect for medium to large projects involving team resources.

• Creation of test concepts
• Requirements management
• Release planning and support
• DDS management
• Reporting (test report, AFO TestMatrix)
• UAT/BAT coordination
• Onboarding of new team members
• Team planning / capacity planning
• Support with documentation
• Methods/tools/technologies: black box, white box, exploratory testing, E2E testing, regression testing, L&P testing, acceptance testing and interface testing, integration and system testing, networking, JIRA with Zephyrscale plug-in, Confluence, RISE Portal, Ethernet, IPv4, IPv6, Linux, VM, Postman, SQL, SQL-Developer, Bruno, Wireshark, cloud, Burp Suite, Notepad++

• Co-founded the Real-Time Data team, which grew to 10 members over time.
• Developed and delivered core data products.
• Optimized real-time application performance and implemented monitoring, alerting and logging solutions to ensure system stability.
• Created and maintained deployment pipelines.
• Collaborated with teammates, architects and experts in an agile Scrum environment.
• Operated applications, analyzed, tested and troubleshot software solutions.

• ITSM consulting, analysis and optimization of IT capacity with BMC TSCO / BMC Helix
• Drafting "Governance guidelines for operational capacity management"