Object-Relational Mapping Expert in Germany

• Modernization of a large-scale Java enterprise application*

The project is modernizing a complex enterprise application that has grown over many years. The existing Spring-based legacy system runs on Java 8, OSGi, and Eclipse RCP and is being gradually migrated to a modern, maintainable architecture with Java 25 and Quarkus.

Marcus works on analysis, architecture, refactoring, and implementation. One focus is on untangling historically grown structures and dependencies and on building a clean, sustainable Java and Quarkus technology stack.

Tools & technologies: Java 8, Java 25, Quarkus, Hibernate ORM with Panache, EclipseLink, OSGi, Eclipse RCP, Maven, JUnit, Mockito, REST, JSON, Git, Eclipse IDE, IntelliJ IDEA Ultimate, Jira, Confluence

• Joined the initial development team and helped transform an n8n prototype into a production-ready 0-to-1 product in a fast-paced environment.
• Owned delivery across CRM and Twilio integrations, customer communication workflows, and administrative interfaces.
• Collaborated on AI evaluation, microservice architecture, and other cross-functional product and engineering topics.
• Supported the CEO across VC communications, customer acquisition, product positioning, onboarding, documentation, pricing, and sales.

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, acceptance, and compliance tests for safety-critical brake control units in the rail industry
• Software test application & integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies, and component interactions
• Test automation (FEAT framework): Co-development and further development of an automated test framework for test execution, reporting, and result analysis
• Functional safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage, as well as standards compliance according to EN50126/28/29
• Test automation for communication components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements analysis & shift-left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities, and redundancies early in the SDLC
• Test design & test case development: Derivation of test conditions, coverage strategies, and implementation of data-driven test cases (DDT), including reusable test data fixtures
• CI/CD & automation (Python, PowerShell, Jenkins, SVN): Automation of build, test, and HIL deployment processes as well as integration into CI/CD pipelines
• Test data & configuration management (XML): Maintenance and adaptation of XML test vectors and system configurations with automated integration into test environments
• Non-functional testing: Execution of performance and load tests to assess stability and system behavior
• Agile development & defect management (JIRA, Confluence): Participation in Scrum teams, test coordination, review of test artifacts, as well as defect tracking and root-cause analysis
• Error analysis & debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system layers (application to bus)
• Model-based analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & test documentation: Creation of integration and test documentation according to internal quality and certification requirements

Development and further development of an internal platform for managing and providing technical resources, virtual machines, and infrastructure services. The platform supports self-service processes and covers functions that are conceptually comparable to cloud management solutions like Azure or AWS.

• Responsible involvement in the design, development, and implementation of new backend and frontend features
• Hands-on development with Java, Spring Boot, Python, and Angular
• Implementation of REST interfaces, business logic, validations, and integrations into existing system landscapes
• Further development of modern web interfaces with Angular, including connection to backend services
• Participation in architecture and design decisions within the team, especially with regard to scalability, maintainability, and clean interfaces
• Containerization and deployment of applications with Docker, Kubernetes, and Helm
• Support with CI/CD processes and deployment to Kubernetes-based environments
• Work in the environment of vSphere, Broadcom, GitLab CI/CD, ArgoCD, Maven, npm, and NuGet
• Close collaboration with developers, business teams, DevOps, and other technical stakeholders
• Analysis of technical requirements, deriving suitable solutions, and independent implementation in an agile team
• Use of GitHub Copilot to support code generation, refactoring, test case creation, and technical documentation

Methods/ tools/ technologies: Languages & frameworks: Java (21), Spring Boot (4.x), Python, Angular, Robot Framework, Kubernetes, Helm Persistence: PostgreSQL, MongoDB, Hibernate, Liquibase Architecture & communication: REST, gRPC, GraphQL, Apache Kafka, OpenAPI, Microservices, Event Driven, Domain Driven Design Cloud & infrastructure: Terraform, Docker, Rancher, Helm, Ansible Security: OAuth2, MS (Entra ID), web security, Keycloak (extensions for detailed group rights) DevOps: GitLab CI/CD, Ansible, Maven, Gradle, Grafana, Prometheus, Git, GitHub Copilot Testing & QM: JUnit, Robot Framework, automated component and integration tests, E2E tests with Playwright, Testcontainers, EasyMock Methodology & approach: Kanban, JIRA, Confluence, Clean Code

• Own full-stack development of an AI-native enterprise platform built on TypeScript, React, Vite, tRPC, Hono, and PostgreSQL, delivering AI-powered consulting workflows to B2B clients.
• Designed and shipped a multi-agent AI system using ReAct framework and Claude skills-style workflow patterns, including an intelligent PM assistant with rich system prompts, slash commands, tool integrations, and streaming chat UI.
• Architected an LLM evaluation framework: rubric-based LLM-as-judge, golden datasets, regression testing, and automated quality gating — ensuring consistent AI output quality at scale.
• Integrated LangFuse for end-to-end LLM tracing, conversation replays, and evaluation pipelines, enabling data-driven prompt optimisation that reduced token costs and response variance.
• Built with Drizzle ORM, pgvector, and knowledge graphs for structured data access, semantic search, and relationship-aware AI reasoning across the platform.
• Led TanStack React Query migration across the application — replacing manual state management with centralised caching and automatic refetching, reducing data-fetching boilerplate significantly.
• Practiced AI-native development throughout: Claude Code, Codex, Perplexity SDK, and LLM-assisted testing across the full development lifecycle. Deployed on Vercel + Azure ACA with Biome for linting/formatting.

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

(Maternity/Parental Leave: July 2023 – Aug 2024)

• Domain: Payment Domain | Client: Telefonica Germany
• Project: General Payment Service

The General Payment Service is responsible for processing of online payments via external payment service provider like Safer pay and PayPal

• Developed Design of Use (DOU) and interface contract documentation, ensuring clarity and compliance across system integrations
• Designed and delivered REST/SOAP web services with Spring Boot and Spring Data JPA, publishing Swagger contracts through WSO2 API Gateway to improve accessibility and governance.
• Spearheaded the on-premises to AWS Cloud migration, re-platforming from Oracle to PostgreSQL on AWS RDS and deploying services on EC2, improving scalability and cost efficiency.
• Containerized microservices using Docker and orchestrated deployments with Kubernetes, streamlining deployment pipelines and improving system reliability.
• Implemented proactive monitoring and logging via AWS CloudWatch and Kibana, ensuring stability and performance during cutover.
• Enhanced collaboration through code reviews and peer reviews, promoting maintainability and clean coding standards.
• Strengthened quality by writing comprehensive JUnit tests and preparing detailed test cases enabling early defect detection
• Delivered automated API testing with Ready API, Postman, and SOAPUI, and conducted performance testing with JMeter, ensuring reliability in high-transaction environments.

Self-initiated, solo project, in active development

• Full-stack TypeScript app (Nuxt 4, Vue 3, Nitro, Drizzle ORM, PostgreSQL) for running tabletop RPG campaigns, built around a system-agnostic core designed to extend from Pathfinder 2e to other systems without rewrites.
• Deliberate content-ownership model: Live References vs. Owned Content, with publishing modeled as an immutable snapshot rather than a flag, designed for forward compatibility from day one. Namespaced, frozen slugs for collision-safe URLs.
• Data ingestion pipeline importing curated Foundry VTT data into a normalized schema, with version-checking. Library currently holds 1,209 creatures and 1,796 spells (PF2e Remastered content); licensing confirmed clear under ORC/OGL for statblock display.
• Strict TDD workflow (red-green-refactor, vertical slices; Vitest, Playwright, PGlite for fast in-memory DB-integration tests), Architecture Decision Records, a maintained domain glossary.
• Standalone, account-free public tools (Creature Database, Spell Database, Encounter Builder) built to launch ahead of the full campaign/adventure product, as a lower-friction wedge to get real usage sooner. Self-hosted on a Hosteurope VPS.

Stack: Nuxt 4, Vue 3, Nitro, Drizzle ORM, PostgreSQL, Vitest, Playwright, PGlite

• Contributed to the development of an advanced RAG AI Chat application that integrates multiple LLM models, enabling users to seamlessly switch between models based on specific tasks. This improved the user experience by providing tailored, efficient solutions for various use cases, such as event scheduling, booking systems, and complex task management.
• Participated in designing and implementing a robust backend architecture using Spring AI, enabling advanced AI-driven capabilities like intelligent task automation, language processing, and contextual recommendations. Leveraged Spring AI Tools and Advisors to enhance the performance and decision-making of the AI models.
• Collaborated on the integration of vector databases to support embeddings, enhancing the app's ability to understand user queries and perform actions based on complex, real-time data inputs.
• Contributed to the development of a seamless, user-friendly front-end interface using React with TypeScript support, ensuring a modern, responsive, and scalable user experience across platforms.
• Assisted in implementing state management with Redux RTK for efficient data flow and real-time updates, optimizing the overall user experience in dynamic scenarios such as scheduling and task management.
• Partnered with stakeholders to define feature requirements, helping ensure that the app could scale to meet evolving business needs and integrate with other systems like calendar and email services. Worked alongside cross-functional teams, including data scientists and UI/UX designers, to fine-tune AI models and ensure alignment with project goals.
• Contributed to ensuring end-to-end system performance, security, and compliance by helping integrate authentication mechanisms, role-based access control, and secure communication protocols in both backend and frontend layers.

Technology Stack and Key Contributions:

• Java / Spring Boot / Spring AI: Developed backend services leveraging Spring AI for intelligent responses, task automation, and complex workflows.
• React / TypeScript: Built intuitive user interfaces with React and TypeScript, ensuring a smooth and scalable frontend.
• Redux RTK: Managed application state with Redux RTK for optimized state management, enabling dynamic, real-time data updates.
• Vector Databases: Integrated vector databases (pgVector) for embedding support, improving AI model performance in handling complex queries.
• PostgreSQL / Redis: Managed persistent and temporary data with relational and in-memory data stores, ensuring data integrity and speed.
• Kafka: Utilized Apache Kafka for event-driven communication and seamless integration between microservices.
• Spring Security: Ensured the security of backend services with robust authentication and authorization mechanisms.
• CI/CD & DevOps: Integrated continuous integration and deployment pipelines to ensure rapid and secure deployment of features and updates.

• Automation of the database major / minor releases for the TKeasy project

• Concept for database major / minor release automation

• As-is analysis

• Evaluation of Redgate Flyway functionality

• Concept creation

• Products: Redgate Flyway, GitHub, Quest, Erwin Data Modeller, Oracle, Atlassian Jira, Atlassian Confluence

• Skills: Docker, Continuous Delivery, Continuous Integration, Redgate Flyway, Major Releases, Minor Releases

• Analysis
• Consulting
• Software design
• Development
• Automation
• Testing
• Deployment
• Architecture, development and deployment of various proof-of-concept applications around the integration of current AI interfaces including conversational, realtime voice, images and videos
• Developed best practices for working with agentic systems and AI in practice
• Created code templates

• Supporting several agile teams in the new product development of an enterprise CRM and ERP application
• Web frontend development with Angular 17–21 (microfrontends, Domain-Driven Design, MDB-Bootstrap)
• Backend development with C# and .NET 7–10, MongoDB, MassTransit, RabbitMQ, Entity Framework Core, ElasticSearch (microservices, DDD)
• Technical feature design for assigned tasks
• Technical architecture design including forward-looking planning of AI-supported extension options
• Proof-of-concept implementation of AI-supported workflows with n8n and a locally hosted LLM (Ollama)
• Coordination with stakeholders and Product Owners, support with sprint planning

Result: Delivery of production-ready microservices and frontend modules in agile sprint cycles.

Environment: .NET 7–10 · Angular 17–21 · C# · TypeScript · OpenAPI · Microfrontends · DDD · Kubernetes · Docker · Helm · MS SQL Server · PostgreSQL · MongoDB · MassTransit · RabbitMQ · EF Core · ElasticSearch · Kibana · Azure DevOps · KeyCloak · n8n · Ollama

• Created internal web application to improve the salary process using a microservice interfacing with MSSQL
• Developed interactive web UI using Microsoft Blazor
• Integrated Azure AD for user authentication
• Designed and implemented roles and permissions in the database
• Developed progress page guiding users through each process step
• Processed bonus calculations by importing Excel files
• Configured email notifications using MSSQL Send Mail
• Tools and technologies: C#, ASP.NET 6, MS-SQL, REST API, Visual Studio 2022, TFS, microservices, Kanban Board, Azure DevOps

• Porsche ID is a unified digital identity platform providing secure authentication and seamless access across Porsche’s online services, mobile apps, and connected vehicle features
• Designed and implemented new authentication and authorization functionalities for both users and systems
• Ensured high availability, security, and performance to deliver a flawless digital experience for Porsche customers
• Technologies: Auth0, Angular, Tailwind, AWS, Terraform, Github
• Methodologies: Scrum and SAFe