Microsoft Azure Expert in Germany

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

• Agile Transformation – introducing agile principles and transforming traditional IT departments into Scrum and Kanban teams

• IT Operating Model – redesigning the IT organization and introducing modern delivery structures and roles

• Flight Levels – implementing Flight Levels to align strategy, coordination and operational execution

• Leadership & Coaching – recruiting Agile Coaches and coaching Scrum Masters and IT leaders

• ERP Operations – acting as Interim Product Owner for the existing ERP landscape and ensuring business continuity

• ERP Transformation – supporting the migration from Microsoft Dynamics NAV to Microsoft Dynamics 365 Business Central as a Project Manager

• Operational Core (ERP) – establishing dedicated teams for ERP Support, Feature Development, and ERP Migration

• Modern Workplace – initiating the transition towards a Microsoft 365-based cloud workplace environment

• ConnectHub – establishing a dedicated team to drive integration and connectivity initiatives

• Warehouse Operations – building a cross-functional team to support logistics and warehouse-related capabilities

• Maintenance & Operations (M&O) – introducing a dedicated team focused on stable operations and continuous improvement

• AI Initiatives – identifying and promoting practical Artificial Intelligence use cases across the IT department

• As Interim Chief Digital Officer (CDO) for a leading industrial supplier with a strong e-commerce focus (often described as 'the Amazon for industrial goods') responsible for leading the digital and organizational transformation while reporting directly to executive leadership.

• Introduced agile principles and ways of working across the organization and transformed the traditionally structured IT department into cross-functional Scrum and Kanban teams focused on transparency, collaboration, and customer value delivery.

• Redesigned the entire IT organization by establishing a modern operating model, introducing new roles such as Product Owner, Scrum Master and Solution Architect and strengthening the organization through strategic hiring and targeted capability development.

• Recruited and onboarded Agile Coaches to accelerate the transformation and personally managed and coached Scrum Masters as well as IT department leaders to foster servant leadership, self-management and a culture of continuous improvement.

• Implemented Flight Levels practices based on Klaus Leopold to align strategic objectives, cross-functional coordination and operational execution across the organization.

• Introduced a ticketing system to increase transparency and enable data-driven decision-making, flow-based work management, and greater accountability at all levels.

• Established and supported multiple cross-functional teams, including the Operational Core (ERP) domain with dedicated streams for Support, Feature Development and ERP Migration, as well as teams responsible for Warehouse Operations, Maintenance & Operations (M&O), Modern Workspace and ConnectHub.

• Acted as Interim Product Owner for the operation and enhancement of the existing ERP landscape while supporting the migration from Microsoft Dynamics NAV to Microsoft Dynamics 365 Business Central as a Project Manager.

• Collaborated with the selected implementation partner to design and establish the project organization and target operating model for the ERP transformation, introducing agile delivery structures and ways of working.

• Facilitated the alignment between business, IT and the external vendor and played a key role in negotiating the contractual framework and delivery model to ensure a sustainable foundation for the transformation program.

• Initiated the strategic modernization of the workplace environment through the adoption of Microsoft 365 cloud capabilities, establishing the foundation for enhanced collaboration, scalability and future digital services.

• Launched AI initiatives to identify practical business use cases and promote the responsible adoption of Artificial Intelligence across the IT department.

• Encouraged self-management and empowered teams to take ownership of decisions, delivery and continuous improvement.

Project language: German

• Claude Code subagents, MCP, Pydantic V2, pytest, bandit

• Designed and shipped 3 specialized agents that hand work down a line: a research agent writes a cited implementation spec, a coding agent builds the modular code and its tests, a review agent ranks findings by severity and applies the fixes. Each handoff is a structured document, so no stage depends on another agent's context window.

• Connected the research agent to an academic-research MCP server (Semantic Scholar, ArXiv, Hugging Face Hub, citation snowballing) so every reference traces to a tool result rather than the model. Gated commits behind ruff, mypy, pytest and bandit, required human sign-off before installs and commits, and persisted session state on disk so long runs survive a context reset.

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Reporting and controlling using Power BI for a production ERP system

• Analysis of ERP data and interfaces for use in Power BI dashboards
• Evaluation and migration of existing reports (e.g. Excel) to Power BI
• Development of an authorization concept for selective data access
• Documentation and training on the use and customization of Power BI dashboards

Label: Power BI, Excel, SelectLine ERP, Microsoft SQL, SQL Server Management Studio

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Product Analytics, Mobile App Tracking & Tracking Governance (B2C Mobility App) – agile project management (Scrum/Kanban)
• Product Ownership for Product Analytics and Mobile App Tracking of the EnBW mobility+ app; gathering, prioritizing, and translating business requirements into actionable concepts and Azure DevOps user stories with acceptance criteria.
• Derivation of tracking requirements when introducing new app features (including Resilient Map), definition of tracking parameters (screens, events, custom definitions), and ensuring privacy-compliant tracking (Firebase, GA4, Adjust) based on the tracking concept.
• Design and adaptation of dashboards and funnel reporting for campaigns (GA4 validation, onboarding and order flow analyses, conversion funnels, charging start flow) to identify drop-off points and optimization potential.
• Management of the technical raw data export (Adjust to BigQuery) and connection to the data warehouse/data lakehouse, including data mapping; collaboration with international development teams, Data Engineering, Marketing/Sales, and Product Management.
• Establishment of standardized tracking architecture, naming conventions, and governance; analysis and expansion of tracking (new features and “blind spots”), test design, handover to testers, and quality assurance and approval before releases; documentation in Conceptboard.

• New development and further development of the existing MS Dynamics CRM

IT systems: Microsoft Dynamics Customer Service, SharePoint, DevOps, SAP IS-U

• CRM implementation / further development
• Taking over from the previous service provider
• Business process analysis
• Agile project organization
• Business analysis / requirements engineering with AI support
• Use of AI in development
• Analysis of master data processes
• CRM customer data management
• Requirements documentation
• Stakeholder management
• Workshop moderation

Project: Defect Generation on Test-Bench Images of Metal Surfaces Environment: Automated Visual Inspection (AVI), Metallurgy & Manufacturing

• Objective & Implementation: Designed, architected, and trained Generative Adversarial Networks (Pix2PixHD / SPADE) for image-to-image transformation. Targeted generation of synthetic material defects (e.g., cracks, inclusions, scale) on rough metal surfaces under real test-bench lighting conditions for privacy-compliant and efficient dataset expansion (data augmentation).
• Technical Design: Implemented robust Generative AI and computer vision pipelines in Python and PyTorch. Used semantic segmentation approaches for mask-controlled defect synthesis and subsequent evaluation with EfficientDet object detection models.
• Business Impact: Massive dataset upscaling (10x) without time-consuming and costly physical test-bench runs, while significantly improving the detection performance of automated inspection systems.

Technologies & Skills Used: Python | PyTorch | SPADE | Pix2PixHD | EfficientDet | Machine Learning | Semantic Segmentation | Computer Vision

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Evidence-led health intelligence platform turning published research into personal health protocols. It scores 430 habits, foods, and supplements against the studies behind them, and moves the score when the evidence moves. Built solo.

• Built the daily ingestion pipeline across PubMed, bioRxiv, and medRxiv: 43,000+ papers from 3,400+ journals processed into 230,000+ typed evidence claims, each one traceable back to the study it came from.
• Designed the six-factor evidence scoring model and the public changelog behind it, so no recommendation ever appears without the papers underneath it. 23,000+ grade changes recorded and explained to date.
• Shipped an entity information model connecting every intervention to its mechanisms, biomarkers, and outcomes: 118 biomarkers with region-specific reference ranges, 77 mechanisms, 32 graded outcomes.
• Built the personalisation layer: blood panel ingestion that reads lab PDFs with a vision model and corrects results for draw time against the user's wake anchor, plus Oura, WHOOP, and Withings integration for daily readiness context.
• Operate eleven specialised review agents over the corpus and codebase, covering paper curation, retrieval quality, health-claim compliance across EU and US regimes, and security.
• Shipped the Evidence Assistant, a RAG assistant that answers from the claim database and cites the underlying papers, plus a B2B practitioner tier, an Expo React Native app, and localisation across 3 languages and 7 markets.

Stack: Next.js 16, TypeScript, Supabase, pgvector, Anthropic Claude, Vercel, DeepInfra.

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Developed a browser-based platform for Kubernetes no-code deployment and cluster management
• Developed a CLI in TypeScript to deploy resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security, and used Kyverno. Implemented IAM integration for the command-line utility tool.
• Designed role and permission models for Keycloak, OAuth/OIDC, and social login flows.
• Used LLMs to convert user intent into diagrams.
• Worked on integration with multiple sovereign clouds like StackIT, Hetzner, CIVO, UpCloud, plus public clouds like AWS, GCP, and Azure
• The technology stack includes Java, Spring Boot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

Stabilization of an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps