Scala Expert in Germany

• Delivered a new notifications platform implementation built from scratch to replace existing and upcoming services
• Collaborating with other teams to integrate more domains

Tech stack:

• Data: Scala 3, Apache Kafka, Python, Airflow, Astronomer
• BE-FE: TypeScript, NestJS, Java, Spring Boot, Vue
• Dev-ops: AWS, PostgreSQL, Docker, GitHub Actions, Kubernetes, Helm, ArgoCD

• Building a data integration platform for high, medium, and low voltage assets for contextual analysis of time series with master data from the SCADA control system (IEC 60870 104), INIS, and SAP.
• Responsibility for the architecture and implementation of the solution, as well as sparring partner for the Product Owner.
• Use of Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter, and various API gateways.

• Assumed responsibility for backend architecture and technical strategy, planning and leading the platform's evolution in close collaboration with the CTO
• Simultaneously drove the development of new features for the housing and tenant management platform, balancing high-level architectural design with hands-on implementation
• Utilized AI-assisted workflows (with tools such as Claude Code, Codex, Cursor) and worked on AI-based features (with tools such as N8N, Mastra, ElevenLabs)

Technologies: Node.js, TypeScript, React.js, Next.js, PostgreSQL, Google Cloud, Docker, Kubernetes

• Short description: Lead a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations control while preserving the autonomy of decentralized business units within regulatory boundaries.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of an enterprise-wide cloud governance structure (Azure), incl. target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps) incl. decision-making and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework aligned with the Azure Cloud Adoption Framework (CAF), incl. landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), incl. cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts incl. RBAC design and "break glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operational and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance for lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from a hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "break glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Development High-Performance ad distribution via auction
• Holistic (multi-campaign & multi-channel) advertisement placement optimization
• Algorithmic optimization for NP-Hard/NP-e
• Multiple Knapsack Problem with constraints
• Online estimation of parameters in stochastic environments

Tools: Python, R, Kotlin, MILP/SAT/CP Solvers, Pytorch, Pandas, Docker

• Drive migration of enterprise authorization platform from Styra DAS to open-source OPA via Skipper (Zalando's Golang-based ingress proxy) integration
• Optimise k8s resources and integrate native Prometheus metrics with OPA
• Migrate from internal monitoring solution to Prometheus CRs + Dash0

Tech Stack: Java/Kotlin, Golang, Python, Spring Boot, AWS, Kubernetes, Docker, OpenTofu, Prometheus, Grafana

• It is like a startup within REWE, where we have to build a new forecasting system on Google Cloud Platform from the scratch. Although, officially my role is called MLOps, my actual tasks also include development of data processing pipelines (data engineering) and data scientists tasks such as feature engineering and model trainings.
• GCP: Terraform (tofu), Vertex AI (Kubeflow), Cloud Run, IAM, Google Cloud Storage, BigQuery, Artifact Registry
• Data engineering: Snowflake as the main data warehouse, Terraform, DBT for data model implementations
• CI/CD: GitLab. We have built a CI/CD pipeline that automates deployments of new releases up to production environment
• Development of feature store and data synchronization between environments
• Data science: evaluation of different forecasting models, including CatBoost, Contextual Gamma and Random Forest; implementation of training pipelines using Kubeflow on Vertex AI; scaling and development of an event-driven interface using Kafka as a forecasting service; evaluation of MLFlow for model tracking and model registry
• Implementation of REST API using KeyCloak OAuth2 and OpenID (JWT)
• Monitoring: implementation of dashboards with Grafana, Prometheus, Mimir, Streamlit and Loki to monitor prediction metrics, GCP and Snowflake costs for pipelines, and system metrics
• Development of Copilot Agent Skills

Consulting and prototype work on AI voice and multilingual agent systems, using AI-assisted delivery across realtime translation prototypes, call-centre automation, and voice-to-voice consultation workflows.

• Built and advised on AI voice / agentic conversation prototypes, including realtime translation and consumer-facing consultation experiences.
• Worked across call-centre automation, voice UX, product architecture, implementation tradeoffs, and prototype development.

• Crypto quant strategy development, automated trade execution, onchain data client (Ethereum / Solana)
• Data and trade architecture development for liquidity provision

• Create an AI legal assistant with modern ML capabilities.
• Implement RAG architecture, with data pipelines for legal data search.
• Use AWS Bedrock for LLM and embedding models and LangChain/LangGraph
• Python with FastApi for backend and React for frontend

• Lead programmer, architect and deputy product owner
• Completed transition from zPDV to STEP
• Ensured quality of C++ and Perl sources through automated and manual checks
• Supported resolution of incidents and errors in testing
• Implemented batch for supplementary assignment of payment run numbers
• Implemented batch for distribution of SGB 2 information to the central payment unit
• Supported replacement of Solaris with Linux
• Upgraded gcc from 7.4 to 9.3
• Programmatically generated Makefiles from Borland projects for builds
• Extended funding data with new attribute “Kennzeichen Fahrtkosten Praktikum”
• Programmatically generated XSD and WSDL files from IDL definitions
• Represented the product owner when needed
• Implemented batch for one-time payment processing
• Developed generator for Liquibase files
• Implemented and maintained regular anonymization of production data
• Supported migration from SLES 12 to SLES 15
• Supported introduction of mutual TLS
• Implemented batch for sending deletion impulses to EDA BE
• Organized script directory structure
• Investigated potential introduction of String-Latin and implemented minimal solution
• Remediated security findings identified by CheckMarx
• Supported PAP recalculations and general change notices
• Converted ERP interfaces from SOAP to REST
• Planned technical and business topics such as register modernization, cash register security, training costs, four-eyes principle

• Designed and implemented Azure Kubernetes Clusters, and managed DNS and Firewall solutions, enhancing network security and reliability.
• Led projects using Agile Scrum methodologies to streamline development cycles and improve project efficiency.
• Fostered and maintained relationships with suppliers to ensure timely project deliverables and resource availability.
• Managed continuous integration and delivery (CI/CD) pipelines using Jenkins, Sonar, GitHub, Bitbucket, and Terraform within the BMW Azure Cloud environment.
• Utilized Fortify SSC and Contrast AST for robust application security testing.
• Directed DevOps engineering initiatives on the SAP Business Technology Platform (BTP), focusing on streamlining development and deployment processes.
• Service Now governance, risk und compliance (GRC&IRM).

OpsWorker turns Kubernetes alerts into root-cause analyses, on top of the monitoring a team already runs. I lead the technical side: the agent architecture, the AWS infrastructure it runs on (fully inside EU regions), and the engineering decisions behind it, read-only in the cluster by default, human in the loop for judgment. The stack underneath: Amazon Bedrock and Bedrock AgentCore, agents built with the Strands Agents SDK, the Claude and OpenAI APIs, and the Kubernetes API.

• Contributed to the design of the new financial services integration layer and moderated the architectural discussions
• Oversaw the security concept and approval of the application
• Prepared infrastructure setup and best practices for the Kotlin backend