Red Hat Enterprise Linux Expert in Germany

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Planning and updating the entire environment to Windows Server 2022 and 2025

• Hardening of DCs and servers, setup of event log forwarding
• Migration of all existing Windows 2019 servers (including Active Directory DCs, DNS and CA) to Windows Server 2022 and 2025
• Automation of security patches for the Hyper-V clusters via PowerShell (CAU)
• Network administration
• Continuous operation and support of the MS Hyper-V environments

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

Temporary employment

• System black-box integration tests (BBIT, IVVQ): Execution of regression, release, confirmation and conformity tests for safety-critical braking control units in the railway industry
• Software Test Application & Integration: Runtime configuration of software components and libraries, validation of interfaces, configuration dependencies and component interactions
• Test Automation (FEAT Framework): Co-development and further development of an automated test framework for test execution, reporting and result analysis
• Functional Safety (SiL4, FuSi): Ensuring compliance with safety requirements, traceability and coverage as well as conformity with EN50126/28/29
• Test Automation for Communication Components: Configuration and validation of fieldbus (CAN) and Ethernet-based TCMS data communication interfaces (TRDP and CIP)
• Requirements Analysis & Shift-Left (PTC Windchill ALM): Analysis of software and system artifacts to identify gaps, ambiguities and redundancies early in the SDLC
• Test Design & Test Case Development: Derivation of test conditions and coverage strategies and implementation of data-driven test cases (DDT) including reusable test data fixtures
• CI/CD & Automation (Python, PowerShell, Jenkins, SVN): Automation of build, test and HIL deployment processes as well as integration into CI/CD pipelines
• Test Data & Configuration Management (XML): Maintenance and adjustment of XML test vectors and system configurations with automated integration into test environments
• Non-Functional Testing: Execution of performance and load tests to assess stability and system behavior
• Agile Development & Defect Management (JIRA, Confluence): Work in Scrum teams, test coordination, review of test artifacts as well as defect tracking and root-cause analysis
• Error Analysis & Debugging (CANoe, CANalyzer): Analysis of errors and message flows across multiple system levels (application to bus)
• Model-Based Analysis (UML, Enterprise Architect): Specification of SUT/SOW and support for systematic test control
• Process & Test Documentation: Creation of integration and test documentation according to internal quality and certification requirements

• Architected and deployed private cloud data platform on VMware vSphere, integrating Greenplum MPP, Apache Kafka, Kubernetes, and Apache Solr, and developed real-time ingestion pipelines with Kafka Connect and Schema Registry.
• Led Oracle Exadata to Greenplum migration, rearchitected data models, optimized storage, implemented RabbitMQ with Debezium for CDC, and deployed VectorDB for Generative AI.
• Designed and executed multi-cloud migration PoC across AWS, Azure, and GCP, defined KPIs for throughput, latency, and cost efficiency, executed bulk data transfers, validated analytics and streaming workloads, and delivered full-scale architecture recommendations.
• Assessed legacy on-premises infrastructure and designed modern cloud-native data platforms using Greenplum and containerized microservices, advising on scalability, disaster recovery, and high-availability.

• Designed a migration strategy for WLS applications to BKA Cloud and Stack IT

• Created a hybrid cloud for internal testing and development with Kubernetes

• Transformed the IT landscape from an outdated monolithic architecture to a cloud-based architecture

• Integrated new CI/CD processes using Azure Pipelines

• Quadrupled the processing throughput for personnel security checks

• Migrated personnel security screening applications to Docker-based applications

• Implemented CI/deployment pipelines using Azure DevOps

• Environment: Java Springboot, Kubernetes, Oracle Weblogic, OpenID, Camunda, JUnit, TOGAF

Participation in the EU-funded MORANE-2 project to validate the Future Railway Mobile Communication System (FRMCS) in real-world use cases: preparation of the requirements specifications for TOBA and the associated test specifications.

Technologies: 5GS (Radio & Core), FRMCS, MCx (MCPTT, MCData, MCVideo), MC Gateway UE, MCx Priority/Security/QoS Management, ETCS, SIP, IMS

Red Hat OpenShift Container Platform

Scope:

• Operation and configuration of the Red Hat OpenShift Container Platform, including network, storage, and security design.
• Implementation of centralized observability solutions (Prometheus, Grafana, alerting).
• Development of CI/CD pipelines, GitOps workflows, and automation frameworks.
• Training and enablement of operations and development teams.

Result: Accelerated service delivery, transparent operational metrics, and sustainable knowledge transfer.

Conducting a GAP analysis to assess existing security measures → identifying critical vulnerabilities

Developing an action plan that takes risk and cost-effectiveness into account

Introducing an IT maturity model based on BSI guidelines

Advising management on compliance, governance, and security strategy

Establishing internal processes for a sustainable security organization

Oracle Project Management and Automation

As part of the project, the operation of an Oracle infrastructure was automated by developing and enhancing Puppet modules and migrating existing Bash scripts to a standardized configuration management solution.

The aim of the project was to standardize and automate administrative processes, improve the maintainability of the Oracle platform, and increase the efficiency and traceability of infrastructure management through the use of Infrastructure as Code.

• Analysis and migration of existing Bash shell scripts to a Puppet-based automation solution
• Development and enhancement of Puppet modules for Oracle environments
• Automation of installation, configuration and operational processes using Infrastructure as Code
• Standardization and optimization of configuration management for Oracle systems
• Creation and maintenance of technical and operational documentation
• Planning, coordination and professional support during project implementation
• Operation and automation of Oracle systems on x86-based Linux server platforms
• Testing and quality assurance of the developed Puppet modules
• Analysis and resolution of technical errors as part of the automation and migration
• Close coordination with specialist departments and infrastructure teams to implement automation requirements

Technologies used: Puppet 7/8, SLES 15, Oracle 19, Oracle Grid, SVN, Windows Server, Confluence, VS Code, Ruby, Bash, Pass

Task:

• Design and build a proof of concept (PoC) for a future-proof virtualization platform, taking secure system architectures into account
• Assess the current state of existing infrastructures and develop selection and evaluation criteria for the right OS virtualization platform
• Carry out the requirements analysis and then create and prioritize tickets in the ticket system
• Complete and continuously update a tool evaluation matrix based on PoC results
• Support team knowledge building through clear documentation of the approach and results in Confluence
• Enterprise analysis of existing hardware (creating different BoMs)

Technologies: Vmware, Vmware Aria Operations, Osism, Canonical OpenStack, FishOs, Linux, Terraform, Ansible, Confluence, Alma

PROFILE Senior Oracle specialist, consultant and DBA with many years of experience in planning, architecture, installation, migration, operations, performance tuning and troubleshooting of large Oracle database environments. Focus on Oracle Database 19c and enterprise architectures with RAC, Active Data Guard, Golden Gate, Exadata, RMAN and CDB/PDB. Experience in heterogeneous enterprise environments on Linux, AIX, Solaris, HP-UX and Windows, as well as in cloud and migration projects. Over many years, worked as a technical consultant, DBA, architect and project manager for banks, insurers, energy providers, public institutions, industry, automotive and aviation. Combining technical Oracle expertise with operations concepts, migration, project planning, documentation and customer consulting.

ORACLE FOCUS AREAS

• Oracle Database 19c – installation, upgrade, patch/RU management, operations and troubleshooting
• Oracle Database 21c / 23ai / 26ai – knowledge of current Oracle release lines
• Oracle RAC, Active Data Guard, Data Guard, Oracle GoldenGate
• CDB / PDB, multitenant architectures and enterprise database operations
• Oracle Exadata and highly available database environments
• RMAN – backup, restore, recovery, migration and disaster recovery scenarios
• Data Pump (EXPDP / IMPDP), Transportable Tablespaces (TTS) and database-based migrations
• Performance analysis, SQL / PL/SQL, tuning, troubleshooting and capacity planning
• Oracle Enterprise Manager / monitoring and technical operational support
• Oracle Security: Wallet, TDE, Database Vault, VPD / RLS
• Oracle DWH / BI: OBIEE, ODI, OWB and Discoverer
• Oracle Applications / E-Business Suite and Oracle-based application environments

CURRENT PROJECTS

Scope Solutions AG, Basel / CH | 08/2023 – ongoing Oracle Project Management and DBA

• Installation, maintenance and regular upgrades of Oracle database systems with a focus on Oracle 19c.
• Patch and release management including OPatch and Release Updates; operations on RHEL 8.x, SLES 15.x and Windows.
• DBA support for customers in DACH and Europe and support of production, load test and other CDB/PDB environments.
• Technical operating processes and documentation via Confluence; support and service requests via My Oracle Support / Metalink.

Federal Employment Agency, Nuremberg | 04/2022 – 10/2023 Oracle Operations Support / DBA

• Operations and regular upgrades of Oracle-19c database systems on SLES 15.x.
• DBA for around 2,100 PDBs on RAC and Exadata in production, integration, load test and other environments.
• Configuration management via ARS Remedy; workflows and technical documentation via Jira and Confluence.
• Operations support and processing of service requests via My Oracle Support / Metalink.

Federal Statistical Office, Wiesbaden | 09/2021 – 03/2022 Oracle Operations and Architecture – 2022 Survey

• Merging data into a central Oracle-19c database system.
• Design of import/export procedures for the central data structure.
• KPI and performance architecture for analyses.
• Training employees in Oracle performance and DBA topics.

E.ON Digital Technology, Landshut / KKI | 03/2019 – 12/2021 Oracle Operations, Architecture and DBA

• Patch concepts, technical documentation, installation, database administration and operations of Oracle 12c/19c.
• AIX 7.x, LPAR administration including VIO server and software distribution with NIM.
• Performance monitoring and monitoring.
• Backup and restore with TSM / IBM Spectrum Protect and Oracle RMAN.
• Installation of Enterprise Manager 13c with WebLogic Server 12.1x; employee training.

KaPe Munich – various end customers in DACH / Europe | ongoing / various projects Oracle DBA, architecture, migration, DWH consulting and project management

• Many years of consulting and operational DBA work in various Oracle architectures.
• DWH/CRM platforms: planning, analysis, performance and tuning, as well as business analysis.
• RAC, Data Guard, Transportable Tablespaces, RMAN and Oracle 11g/12c in enterprise environments.
• Customer projects including Burda, Deka, E.ON, Otto Group and Augsburger Allgemeine.

AXA, Germany / Europe | 09/2018 – 02/2019 Oracle DB Operations and Migration – Cloud Architectures

• Planning, methodology and execution of Oracle database migrations to IBM Private Cloud / Spectrum and AWS Public Cloud.
• Creation of Oracle databases in the cloud with SLES and Terraform templates.
• Technical architecture work and cloud KPIs.

RWE / SÜWAG / Syna, Germany | 07/2016 – 09/2018 Oracle DB Migrations 11g/12c and Project Management

• Design, planning and execution of Oracle database migrations 11g → 12c with platform and architecture changes.
• Windows Server 2012/2016 and setup and migration of Enterprise Manager/WebLogic-based monitoring environments.
• Use of Data Guard, TTS, EXPDP/IMPDP and RMAN based on analysis of application requirements.
• Performance and tuning for Oracle 11g/12c.

MTU Aero Engines, Munich | 01/2016 – 03/2017 Oracle DBA / Requirements Engineer

• Operations and development of Oracle 11g/12c databases and application workflows.
• Interfaces to SAP via BAPI.
• Design and management of APPS modules with Visual Basic / Visual Studio and PL/SQL; version control with SVN.

UBIS (HVB), Munich | 04/2012 – 08/2015 Oracle Operations, Architecture, DBA and Project Management

• Oracle-based operations and migration of MUREX and Sophis trading platforms.
• Oracle Security, Wallet, Tablespaces, RAC, Data Guard, Database Vault, GoldenGate and DWH.
• Project management for Oracle DWH migrations and release changes from 10g to 11gR2.
• Migration OWB 11gR2 → ODI 12c and introduction of Oracle Database 12c.
• Platforms: Red Hat, AIX and Solaris.

WWK Deutschland a.G., Munich | 09/2010 – 03/2012 Oracle DB and HP-UX → Linux Migration

• Architecture, planning, operations concept and migration of 104 databases from an HP-UX cluster to Red Hat Linux.
• Single Instance with Veritas Cluster and 2-node RAC 11.2.0.2; four Data Guard databases.
• Project management for OWB/DWH migrations (>1 TB), including tuning, PL/SQL, mappings and metadata.

Allianz Deutschland, ACAS Stuttgart | 03/2010 – 09/2010 Technical DWH Project Manager

• DWH project for processing European ETL data sources.
• Business analysis and requirements management for automated loading processes.
• OWB, PL/SQL, SQL*Loader, Oracle Advanced Security / TDE, Oracle BI and Database Vault.

NETMA, Munich-Taufkirchen | 08/2007 – 02/2010 Oracle Specialist and DBA for Oracle Applications 11i

• Operations of Oracle 9i/10g and Oracle Applications 11.5.10.
• Design and development of APPS modules with PL/SQL and SVN.
• Oracle RAC, Enterprise Manager, Oracle Application Server and migration tests.
• Platforms: AIX, SLES, Windows and HP-UX.

BT Germany, Munich | 11/2007 – 04/2008 Oracle DB Migration

• Migration from Oracle 8i to 10gR2 in a Solaris cluster environment.
• Preparing offers, project planning and process planning.

Itellium (KQ), Nuremberg | 02/2007 – 08/2007 Oracle DWH Specialist

• Design and analysis of a DWH focusing on master data and logistics.
• Oracle Designer, OWB, Oracle Database, ETL, PL/SQL and External Tables; data volumes up to approx. 5 TB.

Oracle Deutschland GmbH, Munich | 10/2006 – 02/2007 and further assignments Oracle Specialist / Consultant – Data Migration and DWH

• Consulting for customers such as Volkswagen, GE Money Bank, WeKa, KSB, Swisscom and British Telecom.
• Migration Discoverer EUL4 → EUL5i, database optimization, Data Guard and web/database analysis.
• Performance and tuning on Solaris and Linux.

HaSpa, Hamburg | 07/2006 – 10/2006 Oracle Specialist / Consultant – Data Migration and DWH

• Setup of an Oracle-10gR2 environment for banking applications.
• Data transfer from DB2 / OS390, architecture, sizing, tuning and performance.
• Data preparation and integration with OWB.

AUDI, Ingolstadt | 02/2005 – 06/2006 Oracle Consultant and DBA

• Operations, installation and maintenance of Oracle 9i/10g and IAS 10g.
• RMAN, Oracle RLS, Oracle HTMLDB, Veritas Cluster, Solaris and AIX / HACMP.
• Database cloning and migration 9i → 10g; approx. 200 systems up to 4.5 TB.

Photocolor, Kreuzlingen / CH | 11/2003 – 01/2005 Project Manager / Oracle

• Implementation, configuration, technical support and acceptance of an Oracle ERP/CRM solution.
• Oracle Applications, Oracle 9i, Solaris, HP-UX, OWB and Mercury TestDirector.
• Project scope approx. 2 TB; reporting to management.

ZPD NRW, Duisburg | 05/2003 – 10/2003 Oracle Consultant

• Consulting, PL/SQL training and project planning for a nationwide Oracle Forms integration.
• Oracle on HP Superdome / HP-UX; data volume 1.2 → 2.5 TB, sizing up to 5 TB.

Messe München GmbH | 11/2002 – 05/2003 Project Manager / Oracle

• MIS/DWH solution with OWB, Discoverer, Oracle 11i / 9i and RAC.
• Architecture, design, integration, troubleshooting and consulting for data volumes of 1.5–2 TB.

Aria SA Integration, Geneva / CH | 09/2002 – 11/2002 Oracle DBA and Consultant

• Oracle 8.1.7.4 / 9i; merging the Stuttgart and Geneva databases via replication.

• Design and build of a fully isolated AWS offline environment with no outbound internet access for running a browser-based business application
• Design and implementation of a proxy and response service that terminates all external application calls inside the VPC and serves them from locally stored content; identification of the actual communication needs through measurement-based DNS query logging
• Creation of architecture designs and decision papers including a comparison of options (Application Load Balancer with Lambda and S3, reverse proxy on EC2, private API Gateway) assessed by operational effort, cost, and availability
• Transfer of the solution and operations documentation previously available only for Azure to an AWS target architecture, including reassignment of all services and operational processes
• Automated rollout as Infrastructure as Code (Terraform, CloudFormation) with CI deployment via GitHub Actions, plus setup of private DNS zones and an internal certificate chain for operation without internet access
• Creation of architecture, deployment, and operations documentation and handover to the customer
• Build-up of a private cloud platform on OpenStack at provider TelemaxX with Terraform, including FortiGate HA clusters, FortiManager, and Kubernetes
• Introduction of Policy as Code (Open Policy Agent, Conftest) as well as development of MCP servers (Model Context Protocol) to connect AI assistants to operations and project tools

Successes:

• Made the business application fully operable without internet access for the first time; the cause of the loading error was narrowed down systematically to missing CORS headers after the likely certificate issue was ruled out
• Fully transferred an existing Azure concept to AWS and replaced the manually created environment with a reproducible, CI-based rollout

Technology stack: AWS (VPC, Application Load Balancer, Lambda, S3, Route 53 private hosted zones and Resolver query logging, IAM, CloudWatch, EC2, CloudFormation), Infrastructure as Code (Terraform, CloudFormation, Remote State), CI/CD (GitHub Actions with OIDC, Azure DevOps Pipelines), OpenStack, FortiGate, FortiManager, Kubernetes, Policy as Code (Open Policy Agent, Conftest), offline and air-gap architectures, PKI & certificates (internal CA, TLS, CRL/OCSP), DNS, network segmentation, Linux, Windows Server, Python, Bash, PowerShell, YAML, JSON, architecture design & decision papers, documentation (Confluence, Markdown), Generative & Agentic AI (Model Context Protocol, Agentic AI Coding Tools)