Microsoft Azure Experts in Stuttgart

• Focus: system architecture, cloud-native platforms, microservices, API design
• Product: Pflege-Pfad is a digital matchmaking platform that connects relatives of people in need of care directly with verified care services and caregivers - without an agency and without ongoing fees.
• Business analysis & process design:
• Analysis of the German care market and identification of the key pain points of both target groups.
• Modeling of the core business processes: registration, verification, care request, application, placement, and rating.
• Definition of the business model as a freemium/premium model with optional contact unlocking.
• Creation of user stories and requirements documentation for relatives, care services, and administrators.
• Design of trust and quality assurance mechanisms with document upload, admin review process, and rating system.
• Coordination with stakeholders and validation of product decisions with potential users.
• Technical implementation:
• Design and implementation of the entire platform architecture as a solo developer.
• Design and implementation of a REST API with Spring Boot and Kotlin, including JWT-based authentication.
• Development of the frontend as a single-page application with Angular 17.
• Implementation of the AWS infrastructure with EC2, RDS PostgreSQL, S3, CloudFront, and IAM.
• Document upload with AWS S3 via presigned URLs for verification of care services.
• Email notifications via Resend API.
• AI-supported care service search via OpenAI API.
• Implementation of complete user flows such as registration, login, password reset, and placement process.
• Building an admin panel for user and care service management as well as analytics.
• CI/CD with GitHub Actions and containerized deployments with Docker.
• End-to-end tests with Playwright.

Technologies: Kotlin, Spring Boot 3, Spring Security, JWT, JPA/Hibernate, PostgreSQL, Angular 17, TypeScript, RxJS, AWS (EC2, ECS, S3, CloudFront CDN, RDS PostgreSQL, IAM), nginx, GitHub Actions, Playwright, Maven, Git, OpenAI API, Resend API, Docker, Scrum, i18n (DE/EN/TR), Kiro, feature-flag architecture.

• Advised the executive team on the strategy, architecture, and development of an AI-powered Product Security Operations Center (PSOC); a cybersecurity operating system for software-defined cyber physical connected systems.
• Provided strategic guidance on product vision, regulatory alignment, and market positioning, supporting capabilities across threat intelligence, vulnerability management, compliance automation, and autonomous product security.

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• Capture and analyze stakeholder needs to define clear requirements and make sure the new website meets user expectations.
• Took on the role of Product Owner to lead the development team, set priorities, and monitor implementation progress.
• Coordinated the implementation of Optimizely as the new CMS, including adapting and integrating all required features to ensure a smooth user flow.
• Ensured the successful integration of features within the Condor lifecycle, such as flight booking, check-in, and other relevant services, to create a complete user experience.
• Actively communicated with stakeholders to gather feedback and make adjustments during the development process, continuously improving the user experience.
• Planned and carried out tests to ensure the quality of the implemented features and that all requirements were met.
• Methods used: Agile methods, SCRUM, SAFe
• Tools used: Optimizely, Jira, Confluence
• Result: Significant improvement in user experience, optimized booking and check-in processes, and a stronger digital presence for Condor in the market.

Designed and developed an AI-powered automation platform using n8n to analyze social media niches, identify target audiences, and automate marketing strategy generation. The solution combined AI agents, workflow orchestration, and data analysis to automate research processes and generate data-driven insights.

• Designed and implemented complex automation workflows using n8n
• Developed AI-powered analysis agents for market and audience research
• Integrated multiple APIs and AI services into automated workflows
• Built automated market, competitor, and target audience analysis pipelines
• Leveraged Large Language Models (LLMs) for information summarization, classification, and prioritization
• Containerized and deployed the platform using Docker

Technologies: n8n, AI Agents, OpenAI APIs, Prompt Engineering, LLMs, Docker, Linux, REST APIs, Webhooks

• IT Senior Consultant (bank infrastructure, Active Directory, Azure, security, PKI)
• Planning, design, and implementation of cloud solutions based on Microsoft Azure / M365
• Teams, M365, and cloud services
• Vulnerabilities, threats, attacks
• Security analysis, security policy, security architecture
• Conducting meetings and presentations at various management levels
• Organizing and leading team meetings to improve internal communication
• Tools: PowerShell, Active Directory, GPO, DNS, DHCP, scripting

• Founded Latence to commercialise runtime safety patterns from HALO as a deployable product.
• Built end-to-end as single technical founder with open-source stack on NVIDIA ecosystem.
• Developed TRACE: real-time safety layer for knowledge agents and RAG pipelines with groundedness scoring, prompt-attack detection, GDPR redaction, context compression, audit-ready traces.
• Developed vLLM Factory: production inference framework on vLLM with custom Triton kernels and 12 parity-validated plugin models, achieving up to 11.7× throughput vs vanilla PyTorch.
• Developed ColSearch: single-node multi-vector late-interaction retrieval engine with Rust SIMD and fused CUDA, achieving 3.12× FastPlaid geomean QPS on BEIR-8 and a 1.58-bit quantized lane 6.4× smaller than FP16.
• Developed llm-opt: LLM compression research framework with hierarchical importance, structured pruning, tabu search, knowledge distillation.

• Selected clients: b.telligent, youth fire brigade, Stackable, 1K5

• Implementation of Rittal MDC’s hybrid data center (on-premises, Azure and local)

• Implementation of backup solution (Azure, Azure local, M365 and Entra ID) with Rubrik

• Application migration and optimization

• Client management (Intune) with Microsoft 365, Office 365 (Exchange Online, OneDrive, MS Teams, SharePoint Online)

• WAN migration and network optimization including Cisco Umbrella, network segmentation and microsegmentation in IT and OT areas

• Implementation of comprehensive WLAN

• Active Directory, Azure AD and Azure tiering model

• Security optimization (NIST, SoSafe, BitSight, SecureScoreCard)

• IT Service Management implementation (ITIL, workflows, ticket system, SIEM and SOC monitoring)

• Strategy consulting and reporting to CIO

• Tendering and selection of service providers for various managed services

• Maintaining operations for IT infrastructure security topics

• Creation, updating and monitoring of project plan/progress, business case and PMO

• Planning and managing work packages, costs, resources, risks, quality, communication and configuration management

• Stakeholder analysis, HR and procurement management

• Holistic view of data security and privacy (IT baseline protection, GDPR)

• Monitoring, reporting and compliance with project management processes and standards

• Review and adjustment of IT service contracts based on customer requirements

• Management of new and existing IT service providers

• Solution design / requirements management

• Designing the migration strategy for WLS applications to the BKA cloud and Stack IT

• Creating a hybrid cloud for internal testing and development with Kubernetes

• Transforming the IT landscape from a legacy monolithic architecture to a cloud-based architecture

• Integrating new CI/CD processes using Azure Pipelines

• Quadrupled the throughput of personnel security checks

• Migrated personnel security clearance applications to Docker-based applications

• Built CI/deploy pipelines with Azure DevOps

• Environment: Java Spring Boot, Kubernetes, Oracle WebLogic, OpenID, Camunda, JUnit, TOGAF

• Data Migration Engine / Data Migration from proprietary source systems to SAP/S4 (SAP S/4 HANA Migration cont.)
• Development data authorization Concept
• Conception of system architecture / data architecture / data integration – continuous extensions
• Development conceptional / logical (MDM) data Model - continuous extensions

• Project focus: Strategic realignment of global market clusters and design of future-proof data architectures.
• Results & achievements:
• TOM design SEA & General Distributors: Development of a hub-and-spoke operating model for Southeast Asia (Thailand, Vietnam, Malaysia, Singapore) including site evaluation. Goal: Achieving significant savings in FTE and EUR.
• Data Intelligence Architecture: Conceptualization of a "Data Intelligence Unit" and a Central Data Hub for Europe, including role and process definition.
• AI-Driven Knowledge Management: Implementation of AI-based knowledge management in after-sales to consolidate heterogeneous sources.

• Development of comprehensive services in cybersecurity, IT governance, and AI
• Building and delivering strategic security solutions such as vCISO service, ISMS, SOC-as-a-Service (SIEM, SOAR, use cases, playbooks, threat hunting, incident response), AI-driven risk and compliance tools, and frameworks for outsourcing and third-party risks
• Supporting companies in meeting regulatory requirements and certifications (ISMS, NIS-2, DORA, CRA, KRITIS, ISO 27001, TISAX, BSI IT Baseline Protection, EU AI Act)
• Promoting innovations in cybersecurity automation, AI governance, and secure digital transformation
• Responsible for company growth, client relations, and strategic partnerships

• Lead Product Owner for 4 development teams
• Leading and coordinating a greenfield project with parallel implementation of core components by independent teams; managing dependencies and resources
• Establishing a data lakehouse approach, including analysis of data volumes and future requirements as part of a cloud migration (best-of-breed approach)
• Responsible for requirements analysis, selection, and piloting of a LIMS/ELN system, supported by advising decision-makers and managing external vendors
• Introducing and managing an OpenWeb UI and Azure OpenAI-based RAG system to support knowledge extraction and data-driven analyses
• Setting up, configuring, and managing Jira projects, as well as developing project-specific workflows and automations
• Implementing classic Scrum processes with all ceremonies and taking on the Scrum Master role for all involved teams
• Assisting in hiring through interviews and assessments from a product owner's perspective
• Making key architectural decisions, including selecting the platform for the data lakehouse (Databricks) and the strategic integration of LIMS and analytics platforms