PHP Experts in Stuttgart

Methodology: Agile project management

Goal: Digitization and implementation of CCD2 requirements within the Consumer Finance systems.

Analysis, identification, and assessment of business requirements, as well as their transfer into technical implementation requirements. Coordination and status reporting of the various requirements. Documentation and process management using UML and BMPN. Cross-functional stakeholder management, UAT testing, data management, API architecture management.

Tools: Jira, Confluence, Visual Code, Sql Developer, Enterprise Architect, MsOffice, Bruno, ALM, Camunda, Figma

• Developing the infrastructure and improving existing infrastructure: Jenkins, Gitlab Pipeline, OpenShift, Docker, Helm Chart, Kubernetes, Artifactory, CodePipeline, CodeArtifact, Python
• Documenting solutions in Jira/Confluence
• Supporting other colleagues in different technical areas

• Development of a SaaS platform for esports teams with roles, planning, statistics and billing
• Design and implementation of the architecture, external API integrations and operations
• Stack: Laravel 13, React 19, TypeScript, PostgreSQL, Redis and Stripe

• Development of a new generation of Spring Boot microservices for an archiving system on OpenShift, monitoring, security analyses

Stack: Java, Spring Boot, Kafka, Vaadin, OpenShift 4.x, Maven, Artifactory, Jenkins, Git/Github, GitHub Copilot, GitOps, CI/CD, Kargo/ArgoCD

• Technical lead of diagnostics activities for eDCT transmissions and drive systems in the area of hybrid (HEV), mild-hybrid (MHEV), and plug-in hybrid vehicles (PHEV)
• Responsibility for the development and validation of DTC strategies (OBD / EOBD) for markets in North and South America and the EU
• Coordination between interdisciplinary teams (system development, software, safety, calibration, after-sales)
• Creation and maintenance of diagnostic specifications (DID, DTC matrix, snapshot, freeze frame) according to STLA standards
• Support with troubleshooting, validation tests, EOL processes, and internal audits
• Technical interface to suppliers (Bosch, Valeo, etc.) in the area of actuators, sensors, and electric pumps
• Creation of diagnostic RFQ

• Develop hardware drivers and middleware using C++11, Java and Python
• Design of various RF features such as deembedding based on stakeholder requests
• Work with multiple teams to design drivers for multiple RF products
• Perform HW control to deliver RF signals and measure modulated response
• Develop RF drivers for generation of low noise signals to test WiFi7 products
• Use digital modulation techniques such as QAM for low level driver development
• Develop low level USB drivers for device enumeration
• Develop drivers for HW relay control of control boards for device testing
• Perform JTAG operations on devices under test
• Use network-based protocols (SFTP, UFTP, FTP, SSH) for control board communication
• Manage HW devices such as BADC and EEPROM for control board maintenance
• Utilize C++11/14/17 features, template metaprogramming and STL
• Employ multithreading for testing and control of multiple HW devices
• Develop tools for deployment of customer OS on control boards
• Perform component and integration tests using CxxTest
• Follow Scaled Agile Framework for software development
• Create detailed design documents using PlantUML

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Process and project management to optimize products and development processes for energy systems
• Technical risk management
• Requirements engineering and system architecture
• System FMEA of power generator units and energy storage modules aiming for generic structures
• Claims management according to Section 313 of the German Civil Code
• Regulatory environment: military and NATO standards, AQAP, VG norms

• OpenStreetMap integration for a logistics system of PTV Transport GmbH
• Contributed to portal software
• Webshop system in PHP with login, shopping cart, order management and PDF invoice module, AdminLTE
• Cash book application for managing income and expenses (including export functions)
• Helpdesk system with ticket management, user roles and automatic notifications

• Rebuilt the online shop, implemented a theme from the Shopware store with custom adjustments, delivered a custom design for the header & footer, added custom functionalities, migrated data from the previous xt:Commerce shop, relaunched the shop, optimized performance using Cloudflare

• Consulting, frontend development, project management, leading a team of developers

• Project management: Jira, MeisterTask, BugHerd

• Team communication: Microsoft Teams, Google Meet, Zoom

• Tools used: PHPStorm, BrowserStack

• Technology strategy planning concerning the client-server and blockchain environments
• Development of smart contracts for the EOS blockchain using C++, Python and JavaScript and for Ethereum using Solidity
• Development of the BLABBER mobile app for iOS and Android using React Native

• Technical support and further development of client sites on the WordPress CMS (hotel industry)
• Further development of our partner site on the Kirby CMS
• Customization of the ZeroOne theme with a focus on features like booking systems, page filter plugins, and interactive animations

• Creating websites from A to Z based on mock-ups with Live-GO
• Implementation with WordPress (Elementor, WP Bakery, Breakdance, Cookie consent: Borlabs, Complianz, Usercentrics), blog templating, custom post types, Advanced Custom Fields, integration of various plugins, HTML, CSS, small snippet codes in PHP and JavaScript
• Marketing: SEO, content creation, Chat GPT, Meta Business, TikTok Ads, Google Ads, Google Analytics integration, Google Search Console, Google Jobs, email marketing
• Image editing with Photoshop, minor edits in Illustrator
• Creating templates with Breakdance Builder
• Domain and email setup, website migration, preparing hosting packages
• Responding to written customer inquiries

• Developed three applications with Flutter (Dart), Swift (iOS), and Kotlin (Android)
• Responsible for the apps' UI/UX design
• Developed a fingerprint plugin for HidGlobal in Swift and Kotlin
• Used Riverpod and Flutter Bloc for efficient state management
• Used Hive and Isar for local data management
• Used Firebase for backend services (Firebase Cloud Messaging, Analytics, and Firestore)
• Managed code with GitLab, developed using Visual Studio Code and Xcode