Microservices Experts in Hamburg

Cloud Journey Kickoff on STACKIT

• Helped the client kickstart their cloud journey on sovereign EU STACKIT platform.
• Bootstrapped IAC & GitOps architecture with Opentofu and ArgoCD.
• Setup platform fundamentals for a fresh, holistic cloud experience: Kubernetes, external secrets, certificate management, gateway API, DNS & routing, observability basics.

• Building a data integration platform for high, medium, and low voltage assets for contextual analysis of time series with master data from the SCADA control system (IEC 60870 104), INIS, and SAP.
• Responsibility for the architecture and implementation of the solution, as well as sparring partner for the Product Owner.
• Use of Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter, and various API gateways.

• Assumed responsibility for backend architecture and technical strategy, planning and leading the platform's evolution in close collaboration with the CTO
• Simultaneously drove the development of new features for the housing and tenant management platform, balancing high-level architectural design with hands-on implementation
• Utilized AI-assisted workflows (with tools such as Claude Code, Codex, Cursor) and worked on AI-based features (with tools such as N8N, Mastra, ElevenLabs)

Technologies: Node.js, TypeScript, React.js, Next.js, PostgreSQL, Google Cloud, Docker, Kubernetes

Full overall responsibility: product, technology, compliance and go-to-market

• Delivered an enterprise MVP in 54 days, exceeding scope and schedule.
• Won a 250k € ARR anchor customer and built a sustainable enterprise sales pipeline in the first quarter.
• Paid PoCs with Zalando (35k €) and tesa (26k €), validating product-market fit with Tier-1 enterprise customers.
• Initiated ISO-27001 and TISAX certification processes. Left when the venture entered its next organizational phase.

Co-founded a software agency building custom web and cross-platform products. I owned the technical decisions across the whole portfolio and led 12 people, while carrying delivery planning, process and client relationships for 11 clients across 3 industries.

• Technical leadership: owned the technical decisions for the codebase across every project — stack, architecture, code conventions and the tooling the team worked with — and led the developers on how work got built through code reviews, pair programming and mentoring across a team ranging from junior to senior, keeping the codebase coherent as the portfolio and the team grew

• Delivery planning against the financial plan: built the company's financial plan and derived from it the billable hours each developer had to reach per month and the hours each project could absorb to stay within budget; planned capacity and scope against those figures and negotiated budgets and delivery dates directly with clients

• Client ownership: technical contact across the portfolio — requirements gathering and prioritisation, scoping and estimates, timeline communication, budget negotiation, and consistent transparency throughout delivery

• Team and people: owned the hiring and interview process end to end and took responsibility for offboarding where it was needed; designed an onboarding that got new developers productive within 1–2 days; cleared blockers daily and kept a close eye on where effort was creating value and where it was not

• Process ownership: consolidated a micro-service landscape spread over 15+ repositories into a single monorepo, cutting backend development time by ~40% and simplifying releases for 6 engineers; set up deployment pipelines with GitHub Actions and GitLab CI; ran retrospectives and turned the feedback into concrete changes; introduced AI agents into day-to-day development

• Delivered short-staffed: when the team shrank from 8 developers to 2, restructured scope, introduced AI-assisted development to hold the schedule and took on Go backend work alongside my own frontend scope

• Architecture and code: defined the architecture for every project in the portfolio — the structure the rest of the team built within — and wrote roughly 90% of the frontend code myself, from SSR applications with Next.js and Remix to cross-platform apps with Capacitor

• From zero to production: took a practice management platform — administration, inventory, integrated online shop, chat messenger — from an empty repository to production. Live in 7 markets with at least 7 more coming up, serving tens of thousands of users

• Delivery under pressure: built and shipped a replacement online shop for a Fortune 250 client in 4 days, restoring order intake while their global shops had been offline for several weeks

• Design system: built a cross-project design system used across 7 products, so new projects and features started from a shared, consistent base

• Cross-platform and real-time: built iOS and Android apps with Capacitor for a client live event with 1,000+ participants — web sockets and push notifications for real-time content, Stripe payments supporting PayPal, Apple Pay, Google Pay and cards

Key technologies: React, TypeScript, Next.js, Remix, GraphQL, ConnectRPC, Redux, Zustand, Go, Node.js, Turborepo, Nx, Capacitor, Ionic, WebSockets, Stripe, PostgreSQL, Playwright, Cypress, Vitest, Storybook, GitHub Actions, GitLab CI, Claude Code, Cursor, GitHub Copilot

• Onboarded and conducted comprehensive documentation and system analysis to assess the existing data infrastructure, facilitating rapid integration and collaboration across functional data teams (modelling, processing, reporting).
• Collaboratively defined the architecture and project structure for a central data pipeline repository, including hierarchical standards, knowledge management strategies, and role-specific responsibilities, enhancing maintainability and onboarding speed.
• Evaluated and validated open-source data routing tools (Airbyte, Apache NiFi, Dragster) for ingest and sync requirements in retail analytics, including local benchmarking and error-state testing.
• Led the design and deployment of Airbyte in Kubernetes, creating customized Helm charts, securing secrets handling, and configuring Ingress with TLS and internal DNS routing, ensuring full API and UI accessibility.
• Troubleshot and resolved Ingress controller issues, iterating through multiple stages of debugging and testing, and documented setup and replication steps for scalable reuse.
• Mapped data models to ARTS standard, supporting schema alignment for ERP and reporting use cases, and coordinated review loops to align future data processing logic.
• Drafted strategic 1-pagers comparing MinIO, Pub/Sub, and routing architectures, providing technical guidance for architectural decisions and investment planning.
• Enabled secure access and authentication mechanisms, including initial evaluation for SAML integration, cluster-level configuration reviews, and service annotation improvements.

traigo is VTG's digital rail logistics and fleet management platform. It processes large volumes of telemetry, mileage, geofence, sensor and wagon-movement events in near real time and provides operational services for rail logistics customers across Europe.

As part of Team Customer Selfcare, I worked on the design, implementation, optimisation and operation of large-scale backend services and event-driven processing pipelines — covering both feature development and operational ownership of business-critical production systems. I also regularly acted as first responder for production incidents, data inconsistencies and performance investigations across multiple distributed services.

• Design and implementation of event-driven backend services.
• Migration and replacement of legacy processing pipelines.
• Development of replay / rebuild mechanisms for large event datasets.
• High-throughput asynchronous event processing on SNS / SQS.
• Database and query optimisation for PostgreSQL and DynamoDB.
• Design of scalable read / write models and aggregation pipelines.
• Production troubleshooting and operational support.
• Performance tuning and infrastructure scaling.
• Design and stabilisation of integration and system tests.
• Technical concepts, architecture documentation, and cross-team collaboration.
• Support the further development of existing GitLab CI/CD pipelines

Geofence & Wagon Stay Processing

• Algorithm to detect vehicles within geofences (entry, exit, dwell time).
• Event sourcing with guaranteed chronological order within the affected time window.
• Refactored geofence event and wagon-stay processing logic for performance.
• Resolved race conditions and event-ordering problems in distributed services; server-side filtering, aggregation and optimised query pipelines.
• Repair and replay tooling for corrupted or inconsistent movement data.

Fleet Metadata & Mileage

• Modernised the service; migrated storage from DynamoDB to PostgreSQL to improve traceability and accelerate new features.
• Scalable mileage aggregation and replay mechanisms.
• Read / write models and optimised queries for high-volume mileage calculations.

Sensor & Telematics Integration

• Integrated telemetry and sensor processing pipelines.
• Snapshot and state-calculation logic for sensor systems.
• APIs and persistence models for wagon sensor data; data-quality improvements.
• Further development of a service using gRPC for intra-service communication.

Movement Segment Processing & Routing

• Migrated services to new movement-segment event streams.
• Built replay and rebuild tooling for segment correction.
• Optimised throughput and reliability for high-volume event processing.

Condition Monitoring & Wagon Analytics

• APIs and backend services for wagon condition monitoring.
• Brake-wear prediction processing and wagon analytics functionality.
• PostgreSQL views and optimised query models for operational dashboards.

Operational Reliability - First Responder

• Investigated production incidents and distributed-system failures; DLQ analysis, replay and operational recovery.
• Tuned database performance and AWS infrastructure under production load.
• Improved observability, monitoring and operational tooling.
• Supported rollout strategies, monitoring and post-deployment stabilisation.

Strategic technology leadership and architecture consulting.

• Fractional CTO & interim management for startups, scale-ups, and enterprises – technical strategy, team building, architecture oversight, and delivery.
• Architecture consulting on cloud-native, distributed, and event-driven systems: reviews, design partnerships, and ongoing advisory.
• Event-driven architecture training – a hands-on 2-day course for engineering teams
• Conference speaker on distributed systems

• Sole technology owner, leading architecture, development, operations, and infrastructure. Leveraging AI to accelerate work in areas like front-end and design.
• Built full-stack solutions (backend, React front-end) with CI/CD pipelines and observability standards, setting the foundation for an engineering organization.
• Delivered AI-driven features using LLMs, automating supplier–buyer matching, lead generation, email campaigns, and reducing manual effort.
• Reduced cloud costs by 90% by migrating the system to an AWS serverless architecture

• Technical consulting to meet regulatory MiCA requirements for a digital trading platform
• Design and development of backend components and APIs to comply with transparency and auditability requirements
• Optimization of core functions in order execution and market data delivery with a focus on performance and reliability under high load
• Conducting job interviews and structured onboarding of new developers
• Successful and timely implementation of the regulatory MiCA requirements, ensuring uninterrupted operations
• Reduction of user issues and common support requests by fixing complex backend problems
• Strengthening the development team through effective onboarding, mentoring, and knowledge sharing

• Several projects in a police context
• Model and document police procedures/projects with Archimate (as-is/to-be) in the context of P20 (BKA)
• Create software architectures with microservices
• POC development with Springboot/Docker/Kubernetes
• Project size: 10 people
• Enterprise architecture management with Togaf and Archimate
• Backend software development Springboot
• DevOps with Kubernetes
• Implemented using: Java 17/21, Springboot 3, P20 architecture, Togaf, Archimate

• Development and implementation of custom IT solutions for key customers.
• More than 15 years of experience in IT and project management, disciplinary leadership of up to 80 employees.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.