Node.js Experts

• Developed a pilot system to control and monitor multiple GoPro cameras
• Implemented start, stop, status, media, download and diagnostic functions via COHN endpoints
• Built camera detection, individual and group control, and stable session/KeepAlive logic
• Set up a download pipeline with a queue, retry handling and temporary files
• Ensured consistent session, folder and file naming for multicamera recordings
• Integrated provisioning, certificates and network operations

• Extension of a Swing-based UI for recording Security Restricted Articles during baggage screening.
• Introduction of a new workflow for recording Deboarding Events.
• Extension of the reporting system for Security Restricted Articles and Deboarding Events.
• Implementation using JBoss Wildfly, PostgreSQL, spring-boot 3.x, Java 8/21, Swing, JSF, JAX-RS/Resteasy, Docker, Maven, Kiro.

• Developed browser based platform for kubernetes no-code deployment and cluster management
• Developed CLI in Typescript to deploy the resources in the cluster without leaving the browser UI.
• Implemented DevSecOps pipelines: image scanning, SBOM, policy enforcement, supply-chain security and used Kyverno. Implemented IAM integration for the command line utility tool.
• Designed role & permission models for Keycloak, oAuth/OIDC, social login flows.
• Used LLM to convert user intent into the diagram.
• Worked on integration with multiple Sovereign Cloud like stackIt, Hetzner, CIVO, UpCloud plus public clouds like AWS, GCP, Azure
• The technology stack includes Java, SpringBoot, Kubernetes, OpenAI, Kubernetes multi-tenancy using vCluster, Karpenter, RBAC for CLI, Helm, React

Led the end-to-end integration and migration architecture for decommissioning SAP IS-U market communication and transitioning to Salesforce Marketing Cloud (SFMC) with E.ON IT Services — covering regulated EDIFACT market messaging, a three-phase data migration (transfer of market message inventory after cutover), redesign of market communication processes, and full GDPR and German energy-market compliance.

• Designed the three-tier target architecture (SAP IS-U → NScale B2B gateway → SFMC) processing 50,000–100,000 EDIFACT messages daily within sub-5-minute SLAs.
• Architected the three-phase data migration: 36 months of historical data, zero-loss cutover of in-flight market messages, and near-real-time CDC synchronization.
• Delivered secure, BDEW/GDPR-compliant integration (AS2/OFTP2, RFC/IDoc, REST APIs, OAuth 2.0, Azure AD, AWS S3) achieving >99.5% uptime, <0.1% migration discrepancy, and RTO <4 hours.
• Applied BPMN to model and optimize the market communication processes.

Technologies: SAP IS-U, NScale, Salesforce Marketing Cloud, EDIFACT, OAuth 2.0, Azure AD, AWS S3, BPMN, Jira, Confluence, Draw.io

• Advise early-stage startups on product vision, roadmapping, and GTM strategy, combining PMP and Stanford PM training with hands-on technical execution.
• Lovable: built and led a 200+ member community program for AI-native founders, bridging real-time founder feedback into product roadmap decisions.
• Lead customer discovery and OKR design engagements, scoping AI integration opportunities across client products.

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Development of scalable backend applications with C#/.NET and Java
• Design and implementation of distributed microservice architectures
• Development and integration of REST APIs for industrial applications
• Development of modern web applications with React, Angular, and TypeScript
• Implementation of MQTT-based communication solutions
• Integration of industrial protocols such as OPC UA and Modbus TCP
• Development of batch, process control, and HMI components
• Containerization and deployment of applications with Docker
• Conducting code reviews and supporting architecture decisions
• Close collaboration with Product Owners, QA, and interdisciplinary teams
• Analysis of business requirements and implementation of technical solutions
• Further development of existing software architectures with a focus on maintainability and performance

Technologies: C#, .NET, ASP.NET Core, Java, C++, React, Angular, TypeScript, Vue.JS, MQTT, OPC UA, Modbus TCP, Docker, GitLab, MariaDB, MySQL, Linux

Fashion Genius was building an AI fashion advisor for online shops. As fractional CTO I:

• Worked with the founder on product and AI strategy
• Found and managed the development company
• Led the build of a Shopify plugin: a chat assistant that looks at a customer's item, gives fashion advice, and recommends matching products from the shop's catalogue
• Designed it as a structured AI workflow, which kept it controllable, fast, and affordable to run

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Built a customized MediaWiki instance, including installation, MySQL database, SSL, and automatic backups
• Set up user roles (Admin, Mod, Verified, User) and a permissions system
• FlaggedRevisions for editorial review workflows · Commenting and rating extensions

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest

• Opt-in RAG extension over tenant-owned data sources (SharePoint, Confluence) on existing multi-tenant enterprise AI platform
• Architecture: ADRs, solution evaluations, permission strategy, cost modeling
• End-to-end SharePoint and Confluence connectors: OAuth consent flows, token refresh, metadata sync, search integration
• Permission resolution: ACL indexing at ingestion and query-time verification (document-level security)
• Elasticsearch hybrid search (semantic + keyword) with RRF scoring
• RAG chat with context injection and source citations
• Stack: Elastic Cloud, Elasticsearch, Docker, Northflank, Next.js, React, TypeScript, Prisma, Microsoft Graph API, Atlassian REST API, OAuth 2.0

Senior Software Engineer with a core role in the architecture and product of Ynfinite, a European Webflow competitor (website builder and CMS).

• Architected a flow-based CMS configuration system with React Flow, custom graph state and node/edge interactions.
• Built a flexible visual Freeform Editor with recursive drag-and-drop, rich text editing and data bindings.
• Developed extensible inspector and reference systems for page links, components and assets.
• Built advanced CMS capabilities including interactive maps, content-type editing and CRM-connected forms.
• Technologies: TypeScript, React, Nest.js, Express.js, Prisma, PostgreSQL, Redis, BullMQ, Tailwind, Radix UI, TanStack Router

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.