Linux Experts in Germany

• Focus on optimizing and further developing the internal customer EBICS application
• Functional and technical consulting for Aareal First Financial Solutions AG on EBICS standard products and applications in the areas of operations and further development, as well as project-related communication with external development partners and the product manufacturer to implement the corresponding technical optimizations
• As the functional coordinator, providing advice on content-related and regulatory requirements as well as technical prerequisites and requirements, and bringing these together at the functional level
• Consulting on the use of EBICS formats
• Reviewing the current EBICS standard for optimization and further development potential
• Analyzing the current state to identify development potential and deriving appropriate recommendations for action while considering regulatory requirements
• Conducting EBICS tests throughout the project
• Functional responsibility for requirements management and, in this context, recording and documenting requirements for such tests
• Designing a functional and sustainable test management system
• Conducting and evaluating tests
• Consulting on sustainable quality assurance and audits
• Project language: German and English
• Tools/Methods: MS Project, MS Office, MS Visio, TestRail, Confluence, Jira, Business Logics Bankkrecher, Business Logics Test Data Generator, Business Logics Banking Tool, Business Logics Test System, DBEAVER, Squirrel, Unix Virtual Machines, WinSCP, Kitty, Putty, various Aareal Bank products, Online Banking Portal, Aareal Sign, core banking system, SAP Blue Eagle, SAP RE-FX, Aareon Wodis Sigma, Haufe Real Estate Wowinex, GAP Group Immotion, UTS Karthago, SAP IS-U/Waste, SIV kVASy, various EBICS clients

• PMO Lead Security Clearance 2 (SÜ2) verified
• Reporting to the GMN sub-program management
• System maintenance 25+
• Functional management and coordination of the Jira setup
• Preparation of decision papers (e.g. project planning, governance model, communication plans, controlling models, roles and responsibilities matrices)
• Development of program-wide knowledge management using Confluence, creation of Jira concept
• Development of an access concept for all project tools
• Analysis of existing processes, identification of improvement potential, and design of solutions to increase efficiency and effectiveness
• Development of a concept for introducing automation approaches into existing tools
• Creation of intranet articles for project marketing
• Responsible for project governance through reporting and resource planning in the sub-program
• Agile development of the project methodology
• Gathering customer requirements (Requirements Engineering)
• Preparation and support of contract negotiations (7-year term, 500+ million budget)

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Reporting and controlling using Power BI for a production ERP system

• Analysis of ERP data and interfaces for use in Power BI dashboards
• Evaluation and migration of existing reports (e.g. Excel) to Power BI
• Development of an authorization concept for selective data access
• Documentation and training on the use and customization of Power BI dashboards

Label: Power BI, Excel, SelectLine ERP, Microsoft SQL, SQL Server Management Studio

• SAP S/4HANA upgrade from Release 2021 to 2025 and FI/CO transformation as part of a new TOM. Four streams and two SAP service providers; management during ongoing operations.

• Overall responsibility for time, quality and budget as well as cross-stream coordination of the four streams

• Coordination of process streams, business functions and SAP service providers

• Establishment and management of governance, planning, risks, dependencies, resources and escalations

• Provider management, regular management reporting, and preparation and execution of project and Steering Committee meetings

• Responsibility as Test Manager for test strategy, test planning, UAT, defect management and acceptance

• Result: Successful preparation for Go-live on 28.09.2026 during ongoing operations; quality and the planned absence of production interruptions ensured. Project governance established and positive feedback from management and stakeholders.

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• New development and further development of the existing MS Dynamics CRM

IT systems: Microsoft Dynamics Customer Service, SharePoint, DevOps, SAP IS-U

• CRM implementation / further development
• Taking over from the previous service provider
• Business process analysis
• Agile project organization
• Business analysis / requirements engineering with AI support
• Use of AI in development
• Analysis of master data processes
• CRM customer data management
• Requirements documentation
• Stakeholder management
• Workshop moderation

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Evidence-led health intelligence platform turning published research into personal health protocols. It scores 430 habits, foods, and supplements against the studies behind them, and moves the score when the evidence moves. Built solo.

• Built the daily ingestion pipeline across PubMed, bioRxiv, and medRxiv: 43,000+ papers from 3,400+ journals processed into 230,000+ typed evidence claims, each one traceable back to the study it came from.
• Designed the six-factor evidence scoring model and the public changelog behind it, so no recommendation ever appears without the papers underneath it. 23,000+ grade changes recorded and explained to date.
• Shipped an entity information model connecting every intervention to its mechanisms, biomarkers, and outcomes: 118 biomarkers with region-specific reference ranges, 77 mechanisms, 32 graded outcomes.
• Built the personalisation layer: blood panel ingestion that reads lab PDFs with a vision model and corrects results for draw time against the user's wake anchor, plus Oura, WHOOP, and Withings integration for daily readiness context.
• Operate eleven specialised review agents over the corpus and codebase, covering paper curation, retrieval quality, health-claim compliance across EU and US regimes, and security.
• Shipped the Evidence Assistant, a RAG assistant that answers from the claim database and cites the underlying papers, plus a B2B practitioner tier, an Expo React Native app, and localisation across 3 languages and 7 markets.

Stack: Next.js 16, TypeScript, Supabase, pgvector, Anthropic Claude, Vercel, DeepInfra.

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

• Expert in the company's architecture management area

• Support for standardizing the company's IT landscape

• Further development of architecture management

• Shaping the company's business architecture

• Restructuring, administration and maintenance of all IT assets

• Support in creating a unified software asset management and CMDB

• Creation of unified document management (e-file)

• Transition of documents into a central DMS structure

• Link between architecture management and the department's internal business process management

• Support in developing strategic and tactical development plans

• Organizing communication with key stakeholders

• Support in the conception, organization and coordination of the architecture office to be built up

• Accompanying and advising the entire architecture management process

• Advising the company's business units on architectural topics and their framework conditions

• MS Office, Windows 10, VBA

• ITIL, TOGAF, PowerBi, Kanban, Scrum

• Internal agency tools

• Open Touch Conversation, Webex, wire, bdbos

• MS Sharepoint, JIRA, Confluence

• ARIS, Archimate, BPMN

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

• Planned and developed a CPU monitoring application for monitoring system performance and resource utilization.
• Designed and implemented a Spring Boot backend providing a REST API for processing and exposing monitoring data.
• Developed the React frontend for presenting monitoring information in a clear and user-friendly interface.
• Integrated PostgreSQL for persistent storage and management of application data.
• Containerized the application and its services using Docker Compose.
• Automated infrastructure provisioning and deployment using Terraform on AWS.
• Structured the application as a modern, maintainable system using REST-based communication between frontend and backend.
• Designed and developed a secure, scalable CPU monitoring architecture (cpu-watcher) with a dedicated collector application that streams monitoring data to the backend, reducing direct exposure of system resources.
• Designed a secure cloud infrastructure with the database isolated within a private network and OIDC-based authentication.
• Implemented Infrastructure as Code with Terraform and integrated version-controlled CI/CD pipelines to automate testing, infrastructure changes, and application deployments.
• Designed and implemented the frontend delivery architecture using AWS CloudFront.

Stack: Spring Boot · React · PostgreSQL · REST API · Docker Compose · Terraform · AWS