Redis Experts in Germany

• Development of cloud native applications to provide a multi-vendor marketplace for different digital assets (e.g. NFTs)
• Design and operation of a microservice architecture using Nest.js, MySQL, Redis, Hasura, Algolia, Docker and Serverless
• Design and operation of a streaming data architecture using Kafka (with JSON Schemas)
• Creation of CI/CD pipelines with GitHub Actions for automated deployment of applications
• Testing and evaluating new technologies for more stable, faster, safer and more sustainable application development
• Building the full infrastructure with Terraform in AWS
• Integration of Stripe to handle international payments
• Use of Algolia for real-time search of digital assets on the platform
• Presenting results to stakeholders and running internal meetups
• Federation of services with GraphQL and Hasura
• Discussions about architecture decisions in the IT landscape and their impact
• Use of message queues for app-internal communication and component encapsulation
• Advising internal staff on the implementation of business and technical requirements
• Test Driven Development: unit, integration and E2E testing using JUnit
• Use of Next.js/React with SASS/SCSS for frontend applications
• Use of Vue.js with SASS/SCSS for frontend applications
• Integration of security-related mechanisms (JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA, secret vaults)
• Creation of microfrontends using Retool for fast prototyping and testing of functionality
• Use of nx monorepo with nrwl

Product:

• Built a production-ready AI platform for generating brand-aware marketing images and videos from product data, user requirements, and uploaded media.
• Own the platform architecture, technical roadmap, API design, security, deployment workflow, operational reliability, and model-provider strategy.
• Developed the core platform in .NET and built supporting AI and workflow prototypes in Python, applying language-independent API contracts and structured interfaces between services and model providers.
• Implemented reliable background processing with RabbitMQ, persisted workflow state, idempotent handling, retries, failure recovery, logging, secure storage, authorization, and credit accounting.
• Made pragmatic build-versus-buy and model-routing decisions based on reliability, latency, cost, and maintainability rather than novelty.

Agent Orchestration & RAG Systems

• Built and compared agent workflows using Microsoft Agent Framework, LangGraph, and LangChain, including tool use, conditional routing, clarification steps, state management, and hand-offs between agents.
• Implemented reusable .NET components for agents, prompts, tools, model providers, structured responses, and retrieval with pyvector, making it easier to change AI providers without rewriting the core workflow.

• Architected the Yatta Integration Layer – a config-driven integration platform on Java 25, Spring Boot 4 (WebFlux), Temporal, gRPC and Kafka, enabling new third-party integrations (e.g. AVS fulfillment) via declarative JSON configs with zero code changes.
• Designed and implemented Tink integration with 0Auth IBAN verification to enhance fraud prevention and account validation workflows with Adyen payByBank.
• Architected and implemented an OpenFGA-based authorization model for centralized management of users, groups, and fine-grained access control in the vendor portal.
• Architected and led delivery of the Yatta API Gateway platform using GraphQL Federation, providing a unified enterprise API layer across distributed microservices with centralized authentication, authorization and request orchestration.
• Replaced NGINX + NLB with Istio service mesh and AWS ALB; rolled out WAF, OAuth (Cognito), IP whitelisting and RBAC across environments.
• Migrated CDC from Confluent Cloud connectors to a self-hosted Kafka Connect + Debezium stack, reducing operational cost by ~80% across multiple environments.
• Implemented the Transactional Outbox pattern with Debezium for reliable, exactly-once event publishing to Kafka with Avro and Schema Registry.
• Migrated dunning/payment-recovery workflows from Airflow to Temporal, achieving 99.9% reliability for settlement handling.
• Optimised Apache Airflow with deferrable sensors to handle 1000+ concurrent DAG runs without scaling the worker pool.
• Refactored a monolithic Terraform codebase into 3 modular projects, cutting deployment time by ~45%.
• Stood up full observability with OpenTelemetry, Tempo, Prometheus and Loki; automated dev/staging/prod with ArgoCD, Image Updater and Helm.
• Collaborated with product, operations and engineering stakeholders to define scalable platform architecture and integration standards aligned with long-term business and operational goals.

Enhancement and modernization of a mature Aspire backend application in the environment of a utility company, focusing on new business requirements, testing, legacy code cleanup, and stable backend delivery.

Core contributions & results Implemented new business requirements in the context of customer orders, subcontractors, and cross-company backend processes, and ensured consistent workflows in a distributed system landscape. Modernized existing backend components step by step and reduced technical debt through targeted legacy code cleanup, refactoring, and structured code reviews. Improved the testability of business-critical services by expanding automated tests with xUnit, AutoFixture, and clearer validation structures. Supported the further development of workflow automations and integration processes via microservices, messaging, and API-based communication. Took over source code from external firms, systematically checked code quality, and derived technical improvements for maintainability, stability, and integration. Worked in agile development processes with Jira, Confluence, and Azure DevOps and supported cross-team alignment on architecture, quality, and implementation. Technical metrics Technologies & methods C#, .NET, ASP.NET, ASP.NET Core, Aspire, Docker, RabbitMQ, gRPC, REST API, Swagger, Microservices, NServiceBus, AutoMapper, Autofac, xUnit, AutoFixture, FluentValidation, Entity Framework Core, MediatR, Redis, Consul, Serilog, SonarQube, Azure DevOps, Azure Monitor, GitLab, Google Protocol Buffers, IronPDF, Mailjet, Jira, Confluence, Miro, agile development, Scrum, code reviews, refactoring, legacy code cleanup, workflow automation, power grids

• Designing the audit logging framework
• Implementing APIs for developers to integrate in their codebase
• Implementing ingestion pipeline, database query layer and UI for browsing the audit events
• Improving stability and reliability of the backend system

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• TrendReel, production LLM agent and RAG system (Python, LangChain, OpenAI, Groq/Llama 3, Claude, FastAPI, Kubernetes, PostgreSQL).
• Designed and built a production multi-step LLM agent system: a script generation agent with a per-platform psychology database, 7 viral narrative frameworks, and structured quality scoring, switching between Claude and Groq backends in real time based on output metrics.
• Implemented multi-provider LLM routing (Claude primary, Groq/Llama 3 fallback) with priority-chain failover and quality-based provider switching, achieving 95% inference cost reduction while holding measurable quality thresholds.
• Built an advanced RAG-style retrieval pipeline with per-platform knowledge bases, semantic content matching, and structured output evaluation across 7 decision frameworks, directly analogous to multi-tenant context-based reasoning for enterprise document workflows.
• BrainyAI, adaptive AI learning platform (Python, LangChain, Groq Llama 3.3-70B, OpenAI, Next.js, Supabase, Redis).
• Integrated Groq Llama 3.3-70B with education-level-aware prompting, dynamically adjusting vocabulary depth, citation complexity, and reasoning style across four student proficiency tiers.
• Nexus Prime, multi-tenant SaaS platform for marketing and growth automation (25 modules, 99 backend routers, 153 frontend files).
• Built a 25-module, 99-router multi-tenant SaaS platform covering ad remix, affiliates, WhatsApp inbox, email, and cart recovery, serving four subscription tiers from $199 to $1,999 per month with integrated Stripe, Paystack, and Flutterwave billing.
• AI Video Surveillance Platform, multi-tenant edge and cloud computer vision system currently in active client pitch.
• Designed a multi-tenant AI video surveillance platform combining edge YOLO26 inference on NVIDIA Jetson Orin NX boxes with a central GKE cloud layer (Postgres, Pub/Sub, ClickHouse, R2, Keycloak) for event storage, dashboards, alerting, and multi-tenancy.

• Designed, built, and launched an internal event planning web application used by over 100 department leads for a large event, despite having no dedicated testing phase.

• Ensured smooth, failure-free operation during first production use, leading to the tool being adopted for future events.

• Automated catering calculations and related workflows, significantly reducing email communication and manual computation effort for meal planning.

• Managed deployment and hosting on a Linux server using Coolify, including application setup and runtime operations.

• Hired and guided a communication designer on UX while independently owning all technical decisions and implementation.

• Developed backend features for Modern RIS, a web-based Radiology Information System integrated with the existing Classic RIS via WebView.
• Worked on a modular Spring Boot backend covering clinical workflows such as appointments, examinations, patients, orders, reporting, billing, and inventory.
• Contributed to event-driven architecture using domain events to decouple workflows across backend modules.
• Implemented REST/OpenAPI endpoints, service-layer business logic, DTO mapping, validation, and integration points for the React frontend.
• Worked with PostgreSQL-backed domain models, Liquibase database changes, read/write model separation, and legacy RIS database structures.
• Integrated authentication and authorization flows using Keycloak and OAuth2.
• Added and maintained unit/integration tests using JUnit, Rest Assured, Testcontainers, and project-specific test utilities.
• Supported CI/CD and local development workflows using Maven, Docker Compose, Jenkins, and generated OpenAPI clients.

Tech stack: Java 21, Spring Boot 3.5, Maven, PostgreSQL, Liquibase, Keycloak, OAuth2, REST, OpenAPI/Springdoc, MapStruct, Lombok, Docker, Testcontainers, Jenkins.

Development of an iOS app for virtual try-on and outfit suggestions

The goal of the project is to develop a mobile application for personalized, photorealistic outfit suggestions. Users should be able to upload their own photos, try on clothes virtually, and find products that can be bought directly in the generated suggestions.

• Planning and implementation of the onboarding and photo upload in the iOS app
• Development of the mobile application with Expo and React Native
• Implementation of a Hono/Node.js backend for user, product, and generation processes
• Building an asynchronous processing pipeline with BullMQ and Redis
• Connection of PostgreSQL/pgvector and S3 for product, image, and generation data
• Integration of Gemini and OpenAI for outfit generation and image processing
• Implementation of a credit system and integration of RevenueCat
• Integration of Stripe Connect and affiliate product feeds for products that can be bought directly

Label: TypeScript, React Native, Expo, Hono, Node.js, PostgreSQL/pgvector, BullMQ, Redis, S3, Gemini, OpenAI, RevenueCat, Stripe Connect, Docker

Manufacturing intelligence platform with enterprise workflows, RAG, real-time AI assistant features, and multi-repository backend architecture.

• Built and extended production AI/backend services with Django, DRF, FastAPI, GraphQL, Celery, PostgreSQL, MySQL, Redis, and WebSockets across a modular multi-repository platform.
• Contributed to ARIS V2, a real-time manufacturing AI assistant using LangChain, LangGraph, MCP tool orchestration, planning/execution flows, OpenAI, AWS Bedrock, Qdrant, and Elasticsearch/OpenSearch-backed retrieval.
• Supported rollout expansion from ARIS V1 in 4 of 17 client production plants to ARIS V2 currently active in 13 of 17 plants, increasing real-world deployment coverage to more than 50% of the client footprint.
• Worked on document-grounded RAG functionality including ingestion, OCR, chunking, embeddings, indexing, retrieval, reranking, and grounded answer generation for industrial workflows.

Stack: Python, Django, DRF, FastAPI, LangChain, LangGraph, GraphQL, Celery, WebSockets, OpenAI, AWS Bedrock, Qdrant, Elasticsearch/OpenSearch, PostgreSQL, MySQL, Redis, Docker.

agentic-engineer.online is my publicly testable live demo and at the same time the platform where I show my work. Originally created as a recruitment trial task, I have since continued to run it as my own demo, learning, and product project — on a Hetzner VPS behind a Cloudflare tunnel, through a multi-stage AI-orchestrated deploy pipeline with snapshot rollback. If a deploy step breaks, the system falls back to the last clean snapshot, the script is adjusted, the test repeated — empirical, test-driven, without hand tuning.

• Technically behind it: Python and FastAPI, an OpenRouter model cascade, SQLite persistence, and Cloudflare edge tuning.
• I am the developer and the strictest customer of my own AI work in one person — what started as a prototype has become a tool I use every day and against which I test my own products.

Project for a leading German email and cloud service provider: As Senior Frontend Developer and Technical Web Architect, I developed an international, multi-tenant white-label consent management layer for several brands.

Main tasks:

• Architecture and implementation with Vue 3, TypeScript, and Vite
• Development of automated tests with Vitest and Playwright
• Creation of brand-specific CMP configurations, CSS themes, i18n structures, and vendor settings
• Implementation of the playout and initialization logic as well as backend integration
• technical decision support, project and code documentation

Impact: Replacement of external CMP solutions with a reusable and long-term maintainable in-house base for several international brands and rollouts.

Technologies: Vue 3, TypeScript, Vite, Vitest, Playwright, IAB TCF, Google Additional Consent, i18n, Git, CI/CD.