Linux Expert in Frankfurt

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Elevator emergency call reorganization project: Project to evaluate and define a new technical solution for connecting elevator emergency calls for all facilities of DB InfraGO passenger stations.

• Objectives: Secure, redundant connection of all locations across Germany. Definition of the technical solution, documentation, subject-matter support and management of specialist and line organizations.

• Identification and commissioning of technical solutions.

• Management of documentation and approval of the technical solution in DB regulations.

• Definition and tracking of the roadmap for describing the solution.

• Preparation of a rollout plan to avoid shutdowns.

• Coordination and implementation of decision proposals for steering committees.

• Communication of the solution to all committees and regional areas.

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Participation in the EU-funded MORANE-2 project to validate the Future Railway Mobile Communication System (FRMCS) in real-world use cases: preparation of the requirements specifications for TOBA and the associated test specifications.

Technologies: 5GS (Radio & Core), FRMCS, MCx (MCPTT, MCData, MCVideo), MC Gateway UE, MCx Priority/Security/QoS Management, ETCS, SIP, IMS

Independently built a data platform with cross-system process monitoring.

• Designed the Bronze/Silver/Gold architecture and Python-based pipelines for diverse operational sources.
• Cleaned, harmonized, and validated data; processed and stored it in Parquet format.
• Tracked data history and built business-focused fact and dimension models for traceable reporting.
• Automated data delivery with Python and Power Automate (desktop and cloud); used SharePoint for archiving and data access.
• Developed the Power BI solution from data preparation through to visualizing process statuses, work progress, and deviations.

Technologies: Python, SQL, Parquet, Power BI, Power Query, Power Automate, SharePoint, Copilot

• Introduction of 5 different process applications for different teams

• Release planning: scope and time management

• Resource/capacity planning

• Conducting Sprint Planning / retrospectives

• Increment planning (several sprints)

• Preparation of Steering Committee meetings / reporting to the Board

• Coordination / alignment with external suppliers / deliveries

• Resource planning for multiple projects

• Coordination with business department and development team

• Identification of best practices with IBM BAW

• Cost control and planning for the project team and external service providers

• Collection of KPIs using LogScale

• Analysis of application errors with LogScale / Queries

• User Story definitions / coordination of requirements with the business department and development team

• Testing and defect tracking

• UI/UX design of applications

• Preparation and moderation of Brown-Paper workshops

• Test concept, test data, test organization, test execution

• Collection of team velocity / metrics

• Test execution

• Script for automated testing

• Test organization with business department and IT

• Recording and prioritization of defects

• Establishment and operation of the application

• Establishment of application monitoring with LogScale Dashboards

• Checking health endpoints with PowerShell

• Post Mortem analysis

• Establishment of Incident Management

• Establishment of Problem Management

• Analysis of errors using LogScale Queries and Dashboard

• Pre-processing of data for AI

• Evaluation using AI language models (Meta Llama 3.3 LLM and deepset Haystack) and RAG

• Installation of runtime environments for LLMs (Large Language Model)

• Evaluation of various LLMs

• Installation of RAG (Retrieval Augmented Generation) and integration with LLM

• Extraction of unstructured data with LLM and RAG

• Project based on IBM BAW (Business Automation Workflow), Websphere Liberty, Domea, d.3, REST, LogScale (formerly Humio), Swagger, Powershell, JIRA, Confluence, Lucom Interaction Platform (LIP), Mattermost, Jabber

Statistical Forecasting Algorithm

• Improvement of an statistical probabilistic forecasting algorithm for sales + evaluation
• Migration from R/On-premise to Python/Snowflake
• Productionalization on Snowflake in cooperation with data engineers & DevOps

Monitoring Dashboard

• Data engineering for preparation & provisioning of necessary data/resources on Snowflake
• Development & deployment of a Streamlit dashboard in Snowflake

ML-based Probabilistic Forecasting on Vertex AI

• Development of a ML-based probabilistic forecasting algorithm from scratch
• Implementation of MLOps pipeline in Kubeflow on Google Cloud Vertex AI

Tech Stack: Python, Snowflake/Snowpark, R, Streamlit, Gitlab/Gitlab CICD, Terraform, Google Cloud, Vertex AI (aiplatform SDK, gcloud CLI, feature store, model registry, etc), kubeflow

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Conducting and evaluating web analyses
• Creating and editing tags and scripts in the area of tag management as well as banners and other client-side web elements in the area of consent management
• Technologies used in development: Tealium, JavaScript, IntelliJ, Git, Android Studio, Selenium, Appium, Adobe Analytics, Power Automate, Power App

• Linux server migrations: Planning and implementation of the migration with SLES Linux Deployment of VMs in VMware 8.0
• Guiding colleagues in configuring Linux VMs in vSphere Auto Deploy
• Application operations: Ensuring the smooth operation of applications on the migrated servers
• Operations manuals: Revising existing operations manuals, adding to them and creating new ones when required
• Reviewing service offerings: Adjusting and optimizing the service offering of external service providers
• Logistics SW, RedHat Linux, Ansible, Confluence / Jira

• Designed and specified the technical network integration of a new business critical application system (MUREX) in the capital market area in a complex interface and outsourcing environment.

• Created component specifications, catalog of measures and implementation plan.

• Ensured proper integration of developed results in accordance with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous enhancements to guarantee efficient resource utilization and acceptable response times to users.

• Provided network support in financial service organization and operational change preparation on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed role of network architect for medium-large projects involving team resources.

• Hands-on solution architect
• Digital product development - SaaS
• Strategic consulting on software architecture, cloud migration, and DevOps processes
• Coaching SE developers and IT architects