Role-Based Access Control Experts in Berlin

• Mentor team of 6 ML platform engineers through weekly 1:1s, technical design reviews, and best practices, improving team velocity by 35% through structured sprint planning and skill development programs
• Define 2025–2026 ML platform roadmap in collaboration with Data Science, Cloud Engineering, and Product teams, prioritizing automated model governance, cost attribution systems, and multi-environment deployment strategies
• Partner with Data Science, SRE, and Product stakeholders to align ML platform capabilities with business objectives, reducing data scientist deployment friction by 60% through self-service platforms
• Architect and deliver production-grade MLOps platform supporting 50+ models in production with automated promotion pipelines, versioning, and rollback capabilities, achieving 99.5% platform uptime SLA
• Design distributed ML pipeline architecture using Metaflow and Argo Workflows (Vertex Pipelines-compatible), reducing model training time by 30% and deployment cycles from 2 weeks to 3 days through full CI/CD automation
• Build containerized ML services on Kubernetes with auto-scaling policies, resource quotas, and multi-tenancy isolation, optimizing infrastructure costs by $180K annually (25% reduction)
• Implement monitoring, alerting, and performance tracking using Prometheus, Grafana, and custom instrumentation, reducing model debugging time by 50% and establishing model performance SLOs
• Lead development of RAG-based document intelligence platform using LangChain, LangGraph, and vector databases, implementing agentic AI workflows for automated financial document processing
• Implement Infrastructure-as-Code using Terraform for reproducible environment provisioning and GitOps workflows, reducing infrastructure drift incidents by 80%
• Design role-based access control for ML platform, implement model lineage tracking, and establish audit trails for regulatory compliance aligned with enterprise IAM best practices

• Codebase Evaluation & Problem Design: Designed and stress-tested complex software engineering problems against large open-source Python codebases (including pandas), requiring deep context acquisition and architectural understanding to produce well-scoped, realistic problem statements aligned to strict correctness guidelines.
• Agent Failure Analysis: Assessed LLM coding agent solutions for correctness and completeness, identifying meaningful failures across edge case handling, dtype behaviour, and multi-column NaN propagation logic; documented findings with precision for downstream evaluation use.
• Programmatic Test Suite Development: Authored comprehensive pytest suites to programmatically verify agent-generated solutions against defined requirements, with deliberate coverage of boundary conditions and failure modes not caught by naive implementations.
• Containerised Environment Engineering: Built and debugged Docker environments for reproducible agent execution, including git-based repository provisioning, dependency pinning with npm ci, and multi-stage Dockerfile authoring across Linux-based containers.

• Lecturer for the GenAI Track at the Master School Institute of Technology
• Development of a full-stack AI application (React + Python/FastAPI) for automated supplier product import with intelligent column and category classification (4-layer hierarchical) including human-in-the-loop validation

• Opt-in RAG extension over tenant-owned data sources (SharePoint, Confluence) on existing multi-tenant enterprise AI platform
• Architecture: ADRs, solution evaluations, permission strategy, cost modeling
• End-to-end SharePoint and Confluence connectors: OAuth consent flows, token refresh, metadata sync, search integration
• Permission resolution: ACL indexing at ingestion and query-time verification (document-level security)
• Elasticsearch hybrid search (semantic + keyword) with RRF scoring
• RAG chat with context injection and source citations
• Stack: Elastic Cloud, Elasticsearch, Docker, Northflank, Next.js, React, TypeScript, Prisma, Microsoft Graph API, Atlassian REST API, OAuth 2.0

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

• Too Good To Throw (AI powered social impact webapp focused on reducing food waste in Nigeria):

• Integrated Paystack Split Payments to automatically route payments between the platform and partner vendors.

• Configured automated subaccount creation workflows so new businesses get a settlement account instantly.

• Setup a scalable cloud backend using Supabase.

• Implemented role-based access control (RBAC) for Users, Partners, and Admin.

• FaithFlow (AI powered webapp supporting Christian teens on their spiritual journey):

• Designed and implemented an AI-driven scripture search engine that interprets natural language questions and maps them to relevant Bible texts, commentary, devotionals, and cross-references.

• Designed a spiritual growth dashboard enabling users to track reading progress, prayer streaks, and devotional completion milestones.

• Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
• Leading the “Identity & Directory Management” product (8 people) as Product Owner.
• Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
• Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
• Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.

• Defined and executed a comprehensive security roadmap: integrated Shift-Left Security, CNAPP, and DevSecOps principles to streamline secure product development and reduce risk exposure.
• Established a robust threat modeling framework: embedded security into design processes, enabling early identification of vulnerabilities and reducing potential risks.
• Developed a scalable Vulnerability Management program: accelerated detection and remediation of new vulnerabilities, significantly shortening the risk response cycle.
• Enhanced cloud and container security: leveraged advanced tools such as Tetragon to achieve deeper visibility and implement a defense-in-depth strategy.
• Automated security controls within CI/CD pipelines: integrated security measures into the development lifecycle to maintain continuous delivery with robust safeguards.
• Championed cross-functional collaboration: partnered with developers and infrastructure teams to prioritize threats and align remediation efforts, fostering a unified security culture.
• Ensured regulatory compliance and audit readiness: collaborated closely with the InfoSec team to adhere to internal policies and successfully support audits for standards like PCI-DSS and SOC2.

• Rebuilding an existing cloud solution with Kubernetes, Terraform, Ansible, Prometheus, Grafana, GitLab, Argo CD and PostgreSQL
• Coordinating and managing external partners and service providers
• Ensuring service delivery on time and on budget with budget responsibility
• Integrating the cloud solution with external public clouds (AWS)
• Setting up and defining processes and workflows in Jira and Confluence
• Product management of software development for automation and self-service in CI/CD DevOps mode
• Agile software development with Kanban and Scrum in various development teams
• Single point of contact for key customers in respective projects
• Creating and aligning the product backlog with stakeholders from sales, architecture, development teams, marketing, management and customers
• Migrating existing customers to the AWS cloud as product owner
• Creating and aligning a product roadmap with internal and external stakeholders

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Support Tchibo design team in redesigning the shopping app to enhance the user experience, make it accessible, and drive engagement.

• Launched an AI marketplace aggregator leveraging deep knowledge of e-commerce and marketplaces that reduced product listing time by 65% and improved compliance rates by 70% for a US based client
• Implemented AI-based content generation and image validation features based on marketplace-specific SEO principles and selling policies, eliminating up to 8 hours of manual work per week
• Created an intelligent inventory system with demand forecasting algorithms that decreased stockouts by 30% while optimizing cross-platform inventory allocation across multiple sales channels
• Engineered a conversational AI sales agent to achieve <600ms response latency and >92% intent classification accuracy, ensuring natural, human-like interactions across 10+ Indian languages
• Integrated persona-based conversation flows that improved engagement and upsell conversions by 28% using LLMs, SLMs, RAG and the latest STT and TTS technologies
• Delivered an enterprise-grade real estate CRM and lead management system that reduced lead management effort by 60% through automated workflows
• Architected role-based access controls after conducting 50+ stakeholder interviews to identify critical security needs
• Managed sprint execution with 90% on-time feature delivery while maintaining technical quality standards
• Developed a global VOIP application from concept to launch by defining product strategy based on competitive analysis for an Australian client
• Reduced onboarding friction by 60% through UX optimization, resulting in 25% higher user conversion rates
• Executed data-driven prioritization that accelerated time-to-market while balancing technical constraints

• Consulting, design, and architecture of SaaS platforms with a focus on automation, data analytics, and cloud deployment
• Defining the target architecture and managing the entire development lifecycle from implementation to production operation, including stakeholder alignment
• Designing, architecting, and implementing a multi-tenant SaaS platform
• Building scalable data and machine learning pipelines (batch & streaming) for order and business data
• Developing AI models for data analysis (KPI calculations, forecasts) and integrating them into data pipelines
• AI-driven processing of customer inquiries (delivery status, invoices, cancellations, complaints) to automate customer service
• Developing APIs, microservices, and dashboards with Python for data-driven applications
• Cloud deployment on AWS and infrastructure-as-code automation with Terraform; containerization with Docker and Kubernetes
• Setting up CI/CD pipelines for automated deployments with GitLab CI and governance of deployment processes
• Implementing monitoring dashboards with Grafana to monitor services and ML pipelines
• Implementing security and compliance requirements (GDPR-compliant data handling, logging), including identity & access management and role-based access control