Prometheus Experts in Germany

• Proactive support of management in business field development & innovation management

• New development of a suite of business applications for analyzing valuation, P&L, and market price risk data

• Automation of all internal and external business and work processes

• Development of AI-based and AI-supported ETL processes as well as data analysis

• Business use-case development

• Business and work process optimization

• Enterprise architecture management

• Sales data analysis and forecasting as well as capture

• Inventory management & reordering

• Supplier management and communication

• Customs processing & clearance

• Shipping handling & warehouse coordination

• Interface management

• Technologies used: Microsoft Office 365, Microsoft Teams, JTL-Wawi, JTL-WMS, OTTO Partner Connect (OPC), Amazon Seller Central, DHL Global Forwarding, Jira, Draw.IO, Java (8,17,21,25), Jenkins, SonarQube, Git, Gitea, Spring Boot, Spring Batch, Vaadin, H2, PostgreSQL, Docker, Local LLMs, Postman, JasperSoft Studio, JasperReports

• Kubernetes: EKS management, cluster upgrades and stability improvements, Infrastructure-as-Code reviews and updates, AWS support, and cost optimization.

• Team leadership: Prioritization and coordination of four cross-functional teams.
• Platform strategy: Development and implementation of strategies to optimize existing IT platforms.
• Stakeholder management: Active management of expectations and communication with internal and external stakeholders.
• Program and innovation management: Prioritization and coordination of cross-department projects as well as innovation initiatives.
• Product Owner consulting: Advising Product Owners with a focus on product development and continuous product improvement.
• Organizational development: Improving communication and decision-making structures across all organizational levels.
• Change management: Implementing best-practice change management methods to ensure continuous optimization and innovation.
• Quality assurance: Ensuring high quality standards in processes, services, and deliverables.

• Architected the Yatta Integration Layer – a config-driven integration platform on Java 25, Spring Boot 4 (WebFlux), Temporal, gRPC and Kafka, enabling new third-party integrations (e.g. AVS fulfillment) via declarative JSON configs with zero code changes.
• Designed and implemented Tink integration with 0Auth IBAN verification to enhance fraud prevention and account validation workflows with Adyen payByBank.
• Architected and implemented an OpenFGA-based authorization model for centralized management of users, groups, and fine-grained access control in the vendor portal.
• Architected and led delivery of the Yatta API Gateway platform using GraphQL Federation, providing a unified enterprise API layer across distributed microservices with centralized authentication, authorization and request orchestration.
• Replaced NGINX + NLB with Istio service mesh and AWS ALB; rolled out WAF, OAuth (Cognito), IP whitelisting and RBAC across environments.
• Migrated CDC from Confluent Cloud connectors to a self-hosted Kafka Connect + Debezium stack, reducing operational cost by ~80% across multiple environments.
• Implemented the Transactional Outbox pattern with Debezium for reliable, exactly-once event publishing to Kafka with Avro and Schema Registry.
• Migrated dunning/payment-recovery workflows from Airflow to Temporal, achieving 99.9% reliability for settlement handling.
• Optimised Apache Airflow with deferrable sensors to handle 1000+ concurrent DAG runs without scaling the worker pool.
• Refactored a monolithic Terraform codebase into 3 modular projects, cutting deployment time by ~45%.
• Stood up full observability with OpenTelemetry, Tempo, Prometheus and Loki; automated dev/staging/prod with ArgoCD, Image Updater and Helm.
• Collaborated with product, operations and engineering stakeholders to define scalable platform architecture and integration standards aligned with long-term business and operational goals.

• Short description: Leading a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations management while preserving the autonomy of decentralized business units within regulatory frameworks.

• Tasks and activities:

• Overall responsibility for designing, building, and implementing a company-wide cloud governance structure (Azure), including target picture, roadmap, and operating model.

• Managing internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps), including decision and escalation management.

• Planning and facilitating workshops on cloud strategy, governance principles, and the design of areas such as identity, connectivity, and platform management.

• Defining, implementing, and rolling out cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework based on the Azure Cloud Adoption Framework (CAF), including landing zone and guardrail concepts.

• Introducing automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementing cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishing and operationalizing FinOps in an enterprise environment (central and decentralized FinOps teams), including cost management strategies, reporting, and guardrails.

• Integrating governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementing access concepts including RBAC design and breaking-glass mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud use in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risk.

• Improved operational and decision-making capability across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance during lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure Networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, breaking-glass concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Focus: system architecture, cloud-native platforms, microservices, API design
• Product: Pflege-Pfad is a digital matchmaking platform that connects relatives of people in need of care directly with verified care services and caregivers - without an agency and without ongoing fees.
• Business analysis & process design:
• Analysis of the German care market and identification of the key pain points of both target groups.
• Modeling of the core business processes: registration, verification, care request, application, placement, and rating.
• Definition of the business model as a freemium/premium model with optional contact unlocking.
• Creation of user stories and requirements documentation for relatives, care services, and administrators.
• Design of trust and quality assurance mechanisms with document upload, admin review process, and rating system.
• Coordination with stakeholders and validation of product decisions with potential users.
• Technical implementation:
• Design and implementation of the entire platform architecture as a solo developer.
• Design and implementation of a REST API with Spring Boot and Kotlin, including JWT-based authentication.
• Development of the frontend as a single-page application with Angular 17.
• Implementation of the AWS infrastructure with EC2, RDS PostgreSQL, S3, CloudFront, and IAM.
• Document upload with AWS S3 via presigned URLs for verification of care services.
• Email notifications via Resend API.
• AI-supported care service search via OpenAI API.
• Implementation of complete user flows such as registration, login, password reset, and placement process.
• Building an admin panel for user and care service management as well as analytics.
• CI/CD with GitHub Actions and containerized deployments with Docker.
• End-to-end tests with Playwright.

Technologies: Kotlin, Spring Boot 3, Spring Security, JWT, JPA/Hibernate, PostgreSQL, Angular 17, TypeScript, RxJS, AWS (EC2, ECS, S3, CloudFront CDN, RDS PostgreSQL, IAM), nginx, GitHub Actions, Playwright, Maven, Git, OpenAI API, Resend API, Docker, Scrum, i18n (DE/EN/TR), Kiro, feature-flag architecture.

• Product responsibility for the central platform "one" as a group-wide web-based customer portal
• Coordination of the connection of 20 group companies to the product platform
• Derivation and steering of a group-wide product strategy and roadmap aligned with company goals
• Prioritization and bundling of strategic requirements from the various group companies
• Harmonization of different interests and moderation of complex decision-making processes at management level
• Ensuring the technical and business integration of the product into existing system landscapes, business processes, and business models
• Building transparent governance and decision-making structures for group-wide product development
• Representation of the product towards internal and external stakeholders at leadership level

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, acceptance, and compliance tests for safety-critical brake control units in the rail industry
• Software test application & integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies, and component interactions
• Test automation (FEAT framework): Co-development and further development of an automated test framework for test execution, reporting, and result analysis
• Functional safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage, as well as standards compliance according to EN50126/28/29
• Test automation for communication components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements analysis & shift-left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities, and redundancies early in the SDLC
• Test design & test case development: Derivation of test conditions, coverage strategies, and implementation of data-driven test cases (DDT), including reusable test data fixtures
• CI/CD & automation (Python, PowerShell, Jenkins, SVN): Automation of build, test, and HIL deployment processes as well as integration into CI/CD pipelines
• Test data & configuration management (XML): Maintenance and adaptation of XML test vectors and system configurations with automated integration into test environments
• Non-functional testing: Execution of performance and load tests to assess stability and system behavior
• Agile development & defect management (JIRA, Confluence): Participation in Scrum teams, test coordination, review of test artifacts, as well as defect tracking and root-cause analysis
• Error analysis & debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system layers (application to bus)
• Model-based analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & test documentation: Creation of integration and test documentation according to internal quality and certification requirements

• Designing the audit logging framework
• Implementing APIs for developers to integrate in their codebase
• Implementing ingestion pipeline, database query layer and UI for browsing the audit events
• Improving stability and reliability of the backend system

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• TrendReel, production LLM agent and RAG system (Python, LangChain, OpenAI, Groq/Llama 3, Claude, FastAPI, Kubernetes, PostgreSQL).
• Designed and built a production multi-step LLM agent system: a script generation agent with a per-platform psychology database, 7 viral narrative frameworks, and structured quality scoring, switching between Claude and Groq backends in real time based on output metrics.
• Implemented multi-provider LLM routing (Claude primary, Groq/Llama 3 fallback) with priority-chain failover and quality-based provider switching, achieving 95% inference cost reduction while holding measurable quality thresholds.
• Built an advanced RAG-style retrieval pipeline with per-platform knowledge bases, semantic content matching, and structured output evaluation across 7 decision frameworks, directly analogous to multi-tenant context-based reasoning for enterprise document workflows.
• BrainyAI, adaptive AI learning platform (Python, LangChain, Groq Llama 3.3-70B, OpenAI, Next.js, Supabase, Redis).
• Integrated Groq Llama 3.3-70B with education-level-aware prompting, dynamically adjusting vocabulary depth, citation complexity, and reasoning style across four student proficiency tiers.
• Nexus Prime, multi-tenant SaaS platform for marketing and growth automation (25 modules, 99 backend routers, 153 frontend files).
• Built a 25-module, 99-router multi-tenant SaaS platform covering ad remix, affiliates, WhatsApp inbox, email, and cart recovery, serving four subscription tiers from $199 to $1,999 per month with integrated Stripe, Paystack, and Flutterwave billing.
• AI Video Surveillance Platform, multi-tenant edge and cloud computer vision system currently in active client pitch.
• Designed a multi-tenant AI video surveillance platform combining edge YOLO26 inference on NVIDIA Jetson Orin NX boxes with a central GKE cloud layer (Postgres, Pub/Sub, ClickHouse, R2, Keycloak) for event storage, dashboards, alerting, and multi-tenancy.

• Designed and developed the architecture of an enterprise SCM/CI platform for Kubernetes-native delivery and GitOps workflows.
• Implemented infrastructure automation and Vault & IAM integration for secure, compliant pipelines.
• Coordinated cross-functional teams to improve DevOps, security, and architecture in release processes.
• Increased platform adoption and developer experience by automating onboarding and artifact pipelines.

• Developed backend features for Modern RIS, a web-based Radiology Information System integrated with the existing Classic RIS via WebView.
• Worked on a modular Spring Boot backend covering clinical workflows such as appointments, examinations, patients, orders, reporting, billing, and inventory.
• Contributed to event-driven architecture using domain events to decouple workflows across backend modules.
• Implemented REST/OpenAPI endpoints, service-layer business logic, DTO mapping, validation, and integration points for the React frontend.
• Worked with PostgreSQL-backed domain models, Liquibase database changes, read/write model separation, and legacy RIS database structures.
• Integrated authentication and authorization flows using Keycloak and OAuth2.
• Added and maintained unit/integration tests using JUnit, Rest Assured, Testcontainers, and project-specific test utilities.
• Supported CI/CD and local development workflows using Maven, Docker Compose, Jenkins, and generated OpenAPI clients.

Tech stack: Java 21, Spring Boot 3.5, Maven, PostgreSQL, Liquibase, Keycloak, OAuth2, REST, OpenAPI/Springdoc, MapStruct, Lombok, Docker, Testcontainers, Jenkins.