OpenShift Experts in Frankfurt

Project: SCS (Settlement / Clearing Services)

Settlement platform serving multiple trading and clearing venues — counterparty risk safeguarding, settlement volume reduction, central risk management, and post-trade anonymity.

Technologies: Java 17, Spring Boot 3, Microservices, Spring Data JPA, SonarQube, Fortify (SCST), Mockito, Jenkins, OpenShift, Maven, Podman, GitHub, JIRA, Liquibase, Swagger, AMQP, Apache Camel, Terraform, PostgreSQL, Instana, Graylog.

• Identified and remediated CVEs in third-party libraries using SCA tooling, strengthening the security posture of production components.
• Maintained 90% code coverage with SonarQube, improving code quality and reducing production defects.
• Built and customized Helm charts and values.yaml configurations across 3 environments (ACT, SIMU, PROD), increasing deployment flexibility and consistency.
• Enabled mTLS for database authentication and message broker connections, enforcing encrypted, certificate-validated communication.
• Designed and deployed microservices with asynchronous, REST-based communication between components.
• Automated build and continuous integration pipelines using Maven and Jenkins.
• Used Podman and OpenShift for container orchestration and Liquibase for database version control.
• Optimized Java code and implemented EHCache-based caching, improving application performance.
• Managed application images, JAR versions, and dependencies via DBAG Artifactory Repository Manager.

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Co-founded the Real-Time Data team, which grew to 10 members over time.
• Developed and delivered core data products.
• Optimized real-time application performance and implemented monitoring, alerting and logging solutions to ensure system stability.
• Created and maintained deployment pipelines.
• Collaborated with teammates, architects and experts in an agile Scrum environment.
• Operated applications, analyzed, tested and troubleshot software solutions.

• Introduction of methods for developing and automated deployment of cloud-native software and machine learning applications in OpenShift clusters
• Development of various programs in Python
• Technologies: Kubernetes, OpenShift, Kustomize, ArgoCD, Tekton, Docker, PodMan, Airflow, IntelliJ, PyCharm, Git, Bitbucket, Jira, Confluence, Python

• General CTO responsibilities (architectural design, operational setup, external runtime product evaluation, investor buy-in, regulatory compliance).
• Software development oversight (implementation on deep-dive-in) plus workflow design.
• Product co-ownership.
• Tech/tools/frameworks: proprietary software (Java, JavaScript), Kubernetes, Postgres, MiniIO, Ollama (internal), several xAI API (external), OpenTofu (Terraform), Keycloak, Kafka, Prometheus, ELK Stack, GitHub, GitHub Workflows, Argo CD, ISO 27001, BSI-ISM, EU AI Act.

AI-powered platform for automated UX validation and designer support

• Designed and led technical implementation of an enterprise-wide AI solution for automated UX review that improved design quality and significantly reduced manual review processes in teams
• Developed an automated UX validation tool as a Figma plugin and web application that generates test cases based on internal guidelines and reliably checks current designs for consistency and standard compliance
• Implemented an interactive designer chat based on RAG that answers questions about the current design and the company's UX guidelines, and designed the deployment architecture using containerized services
• Python, Azure OpenAI, PostgreSQL, REST API, Docker, OpenShift, Helm, CI/CD, Figma MCP, LLM, RAG, Prompt Engineering, GenAI, XAI, AI Architecture, AI Strategy

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• Requirements analysis for the enterprise-wide observability platform.
• Creation of playbooks and pipelines for rolling out Envoy, OpenTelemetry Collectors, and OpenTelemetry Agents.
• Conducting load tests for capacity planning of metrics for the observability platform.
• Documentation and implementation of compliance standards for production readiness.
• Creation and design of RED metrics, spanmetrics, JBoss, and Tomcat dashboards for mission-critical applications.
• Setting up alerts for critical applications for proactive incident response.
• Integration of OpenShift applications into the enterprise-wide observability stack.

• Product strategy and roadmap development for digital health portal
• Requirements engineering and feature prioritization
• User story definition and backlog management
• Prototype development
• Implementation of continuous delivery
• Search engine optimization
• Technological environment: Claude Code, Claude Sonnet 4.5, Agentic Coding, TypeScript, React, AstroJS, PostgreSQL, JetBrains IntelliJ, Netlify, Supabase, GitHub Actions, Git, DevOps, continuous delivery

• Close collaboration with development teams to ensure alignment with project goals
• Assessment of in-scope assets, requirements definition and support of the public tender process up to vendor selection
• Creation and maintenance of UML sequence diagrams to document system interactions
• Intensive use of Agile/Scrum methodology and the Spotify model
• Development and implementation of cutover and rehearsal plans together with the application managers

• Tech Stack: Java 17, Spring Boot, Microservices, REST, GraphQL, Spring AI, Jenkins, Docker, Git/Bitbucket, JUnit, Splunk
• Led a team of 6 to deliver policy, claims, and onboarding modules serving 50k+ users, maintaining 99.9% uptime
• Cut release cycle time by 35–40% by automating CI/CD with Jenkins and Docker
• Implemented trunk-based branching in Git/Bitbucket
• Integrated 10+ REST APIs and streamlined customer workflows, boosting process automation by 40%
• Increased system stability with proactive Splunk alerting and runbooks, reducing outages by ~25%
• Driven quality with JUnit tests (92% coverage) and code reviews; enforced standards with static checks such as SonarQube

• Implementation of complex Azure resources using Terraform IaC and Azure DevSecOps pipelines with network security and zero-trust governance policies

• Optimization of the existing network design, firewall and database migration

• Implementation of governance and network policies as Policy as Code (PaC)

• Establishment of company-wide Azure connectivity using Azure VPN as an IPSec tunnel

• Implementation of hybrid on-premises multi-cloud connectivity (GCP, Azure) using Terraform

• Development of Azure Functions for scheduled cron jobs and Service Bus message queuing with topics

• Optimization of messaging with Service Bus premium features and IP whitelisting

• Stakeholder management, customer communication and creation of Architectural Decision Records (ADR)

• Responsible for cost-efficient quick wins in Azure and on-premises systems

• Maintenance and further development of several existing projects in the "AI-powered transportation" sector, based on React, REST-like APIs (Spring, Python) and various design libraries
• Responsible in the project for build processes, JavaScript development, architecture, coordination and communication with the design team
• Agile software development (Scrum, Kanban)
• Technologies: React, TypeScript, Ant Design, Node.js, Yarn, Vite, i18n, Postgres, Keycloak, Jest, Cypress, Storybook
• Tools: IntelliJ, Git, GitLab CI, Docker, Confluence, Jira