Role-Based Access Control Experts in Munich

Overall business responsibility for a program-wide initiative to create a central, authoritative data foundation for business customer master data (contacts and locations) within an IT service management transformation program.

• Managed the Epic portfolio from exploration through launch; prioritization and quarterly planning in a SAFe environment
• Aligned business units, architecture, and IT delivery around a shared vision and clear rules for data ownership (Data Governance)
• Prepared and secured scope and key decisions with program leadership, including deliberate descoping
• Managed risks, dependencies, and escalations; reported to program leadership and the PMO
• Developed the 2027 roadmap as a basis for budget and portfolio planning

Result: a clear MVP scope, key decisions made, and a 2027 roadmap. The program continued after handover without any loss of knowledge.

• Leading enterprise BI transformation across Power BI & Microsoft Fabric, delivering scalable data models, automated reporting, and high-performance analytics solutions for commercial and operational leadership.
• Building and optimizing Power BI Dataflows, Fabric Lakehouse datasets, semantic models, and automated reporting pipelines to improve data scalability, governance, and reporting performance.
• Driving dashboard modernization and KPI governance by translating complex business requirements into executive-level insights, interactive visualizations, and decision-ready analytics.
• Designing end-to-end Microsoft Fabric architectures integrating data ingestion, transformation, virtualization, and enterprise reporting across cross-functional business domains with SAP BW to Qlik to Power BI migration.
• Delivering AI-enabled reporting capabilities, threshold-based alerting, and automation frameworks within the Power BI ecosystem to accelerate business decision-making.
• Partnering with commercial leadership, analytics teams, and IT stakeholders to standardize KPIs, optimize BI strategy, and deliver scalable, business-critical reporting solutions.
• Recognized for combining strong stakeholder leadership, technical architecture expertise, and business-driven analytics to deliver impactful enterprise BI transformation initiatives.

• Designed role-based delivery assignment workflows, switchable between own fleet and partner carriers, with traceable status chains from „pending“ to „in delivery.“
• Designed AI-assisted route optimization, where dispatchers review drive-time-optimized route suggestions as drafts and apply them in one click.
• Designed a central planning interface for delivery and route management, bringing table view, map view, and route composition into a single workflow.
• Built interactive prototypes to align new product features early with stakeholders and engineering.

Key methods: AI-assisted Product Design, Workflow Design, Role-Based Workflows, Dashboard Design, Interaction Design, Prototyping, Logistics/Operations UX, Stakeholder Collaboration

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Configured Topics, Microsites into rich content portal widgets, Content Library, landing pages and automated client portal data sync, reducing manual effort by 80% and elevating self-service engagement.
• Architected optimal display across devices and varying resolutions to enhance user accessibility and experience.
• Set up and customized Azure VM integration by utilizing Catalog Items, PowerShell scripting and workflow orchestration.
• Analyzed and translated business requirements into scalable solutions, leveraging ServiceNow scripting to enhance platform functionality and elevate user experience.

Key ServiceNow Skills: Service Portal, Widget Development, Catalog Items, PowerShell Scripting, Workflow Orchestration, Content Management.

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Partner directly with C-level leadership (CEO, CAIO, CTO) on architecture, OKR strategy, and cross-team roadmap prioritization, translating strategic goals into structured engineering requirements.
• Surfaced and mapped technical debt across the entire organization with C-level leadership and co-defined a prioritized remediation strategy, balancing debt paydown against feature delivery.
• Led code reviews and technical standards across the team, fostering a mentor-first environment with two-way feedback dialogue — pairing on complex pipeline work and unblocking junior engineers on async architecture patterns.
• Re-architected the AI companion's core processing pipeline from synchronous to asynchronous with a queue-based worker architecture, enabling horizontal scalability and cutting upload processing time ~4x (from ~22s to 5–10s) while improving response accuracy.
• Designed an AI-driven document intelligence workflow with automatic multi-document classification, per-document summarization, and relevance guardrails for the patient care journey.
• Built a unified patient memory system (short- and long-term context) bridging the document vault and chatbot into a single bidirectional, context-aware platform.

Project for a leading German email and cloud service provider: As Senior Frontend Developer and Technical Web Architect, I developed an international, multi-tenant white-label consent management layer for multiple brands.

Main tasks:

• Architecture and implementation with Vue 3, TypeScript, and Vite
• Development of automated tests with Vitest and Playwright
• Creation of brand-specific CMP configurations, CSS themes, i18n structures, and vendor settings
• Implementation of playout and initialization logic as well as backend integration
• Technical decision support, project, and code documentation

Impact: Replacement of external CMP solutions with a reusable and long-term maintainable in-house foundation for several international brands and rollouts.

Technologies: Vue 3, TypeScript, Vite, Vitest, Playwright, IAB TCF, Google Additional Consent, i18n, Git, CI/CD.

• Role: Software Engineer & Applied Mathematician (Mathematical optimization for scheduling; duration: 1 months; team setting: Team of 2, remote; technologies: JuMP, Julia, Pluto, Svelte, JavaScript, TypeScript, JetBrains Space, Terraform, Nomad)

• Role: Software & Cloud & Web Engineer (Building scalable data science compute cluster from scratch; duration: 11 months; team setting: Team of 1, on-site; technologies: Terraform, Kubernetes, k8s ingress, k8s services, k8s RBAC, k8s networking, k3s, etcd, S3, DNS, certificates, Julia, Pluto, JavaScript, Tailwind, Astro, npm, Parcel, Preact, MUI, JWT, AWS SQS, AWS RDS, Python, GitLab, GitHub)

• Role: AI & Web Engineer (Custom ChatGPT service; duration: 1 months; team setting: Team of 2, remote; technologies: Python, Poetry, LangChain, Tailwind, ChatGPT API, Flask, FastAPI)

• Role: Architect & Data Engineer (Central datalake setup and ingestion; duration: 9 months; team setting: Team of 5, remote; technologies: Infrastructure-as-code, AWS CDK, Python, Boto3, PySpark, AWS Glue, IAM, S3, ECS, Fargate, Lambda, Apache Hudi, DeltaLake, Databricks, GitHub, Jira, Miro)

• Role: Software Engineer (PoC Julia migration of scikit-decide; duration: 1 months; team setting: Team of 2, remote; technologies: Python, Julia, GitHub)

• Developed a C++ library using IDL for secure DDS system communication, focusing on protocol serialization and interface definition.
• Implemented rigorous validity tests and created a CLI window to simplify library integration and ensure optimal performance and security.

• Creation of the profit center report and statistical metrics report
• Gathering and analysis of requirements regarding the forecast for revenue and costs
• Implementation of various time series analyses and optimization of forecasts
• SAP process knowledge, SQL, Python
• Python with various libraries for time series analysis and Machine Learning

• Platform: Python ecosystem, RHEL 8, K10, AWS IoT Core, AWS Lambda, MLOps
• Software: Java JEE/cloud, IntelliJ IDEA, AWS IoT Core, AWS Edge and Lambda, AWS SageMaker SDK, Docker Compose, Kubernetes, OpenShift 4, Tekton, Flux, Helm charts, JSON/XML technology, Nginx, Apache Spark, OpenAI (GPT Plus, DALL-E 3, Whisper), GAN, GitHub Copilot, AI/machine and deep learning, Jupyter notebooks, TensorFlow 2, Colab, Keras API, Prometheus, Grafana, Conda, Python 3.9, PySci stack (NumPy, pandas, Scikit-learn, matplotlib)
• Responsible for webinar:
• IoT edge computing: architecture, components, resources, management
• IoT edge computing with MicroK8s, designing and creating flows/diagrams for AWS, three-step model for IoT ecosystem
• IoT processes, connectivity, data transfer and deployment, security
• Optimization of edge computing for IoT networks and services (AWS SQS queue, SNS notifications, events, analytics, buttons, device management/defender, Things Graph)
• Machine/deep learning frameworks (models, training, pipeline optimization, deployment in the cloud/at the edge (OpenShift), monitoring workloads with Prometheus and Grafana)
• Performance optimization for low latency/resilience using adaptive ML/DL/RL models for customer IoT data
• Analysis of large sensor data sets with Apache Spark, Kafka clusters
• Kasten K10 data management platform on Kubernetes multi-cluster with Helm chart, deployment, backup/disaster recovery (RTO/RPO), data lifecycle and security management
• Implementation of multilayer artificial neural network (ANN) with TensorFlow 2 and Colab for regression and classification; data analysis and provisioning for applications; development of models for testing and training, deployment of models
• Automation of business streamline processes with AI (Azure OpenAI, Discord bots/Zapier apps AI assistants (IntelliJ, GitHub Copilot))