Serverless Experts in Berlin

• Independently designed, developed, published, and maintained mobile games for iOS and Android.
• Implemented application architecture, gameplay systems, UI, monetization, analytics, and platform integrations.
• Managed the complete release lifecycle, including testing, store publication, production monitoring, and iterative improvements based on analytics.

• Delivered AI and data science solutions, including LLM-based chatbots and data pipelines, improving operational efficiency.
• Collaborated on product features, achieving measurable impact and maintaining strong client relationships.

OpsWorker turns Kubernetes alerts into root-cause analyses, on top of the monitoring a team already runs. I lead the technical side: the agent architecture, the AWS infrastructure it runs on (fully inside EU regions), and the engineering decisions behind it, read-only in the cluster by default, human in the loop for judgment. The stack underneath: Amazon Bedrock and Bedrock AgentCore, agents built with the Strands Agents SDK, the Claude and OpenAI APIs, and the Kubernetes API.

• Working on the next iteration of tonbo to make it the most flexible in-process analytical database in the market that scales and is operated with strong availability

• Introduced object scope cache to the remote storage layer to avoid I/O churn

• Working on refactoring WAL to support remote storage

• Taking care of the health of the systems as well as designing the operational story and bringing them to production

• Technologies: LSM, WAL, Arrow, Parquet, Rust

• Bootstrapping a CloudOps team and building a multi-cloud provider backend for a low-code Internal Developer Platform (IDP) with env zero

• Introducing user story mapping, ADRs, milestones, and backlog management

• Designing and developing core APIs, setting up CI/CD pipelines, OpenTofu/Terraform scripts

• Representing and communicating the team with third-party stakeholders (e.g. env zero)

• (Cross-)team coaching on DevOps, software design, Terraform, Golang, and agile practices

• Responsible for cross-department requirements management in collaboration with business units, IT, and external vendors
• Gathering, structuring, consolidating, and prioritizing business requirements from various company departments
• Modeling and documenting business processes using BPMN as a basis for transparency and further development of existing solutions
• Analyzing existing business processes and identifying optimization opportunities
• Refining business requirements with regard to feasibility, cost-effectiveness, and impact on adjacent processes
• Facilitating business alignment sessions with relevant stakeholders to refine requirements and support decision-making
• Creating actionable business concepts for IT development
• Supporting implementation, testing, and rollout of new or adjusted solutions
• Assisting in standardizing requirements and processes to build a reliable decision-making foundation

Enterprise AI content categorization and AI-powered web research.

• Built multi-LLM evaluation framework with annotated data
• Iterated LLM error rates based on annotated datasets
• Implemented AI-powered web research pipeline Stack: LLM, evals, OpenRouter, Python, Node.js, TypeScript, React

• Building and scaling cloud infrastructure on GCP to support a SaaS platform for industrial clients
• Designing and implementing a data-driven DevOps pipeline for streamlined deployment and CI/CD workflows
• Collaborating with Data Science team on MLOps workflow to automate integrated retraining

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Designed and deployed scalable REST APIs for enterprise clients
• Led migration of legacy systems to modern maintainable system, reducing deployment time and enabling daily deployments
• Mentored junior developers and collaborated cross-functionally to align technical roadmaps with business goals, improving team velocity by 50%.
• Tech Stack: PHP (Symfony), Golang, PostgreSQL, MySQL, GCP, Terraform, Kubernetes

• Introduced a serverless/event-driven platform, boosting deployment frequency from 3 to 40 per month
• Implemented an LLM-based fraud-detection proof of concept that flagged 92 % of suspicious transactions
• Built performance and DORA metrics dashboards adopted by the C-suite

• Fullstack development of our product: a web app (VueJS), Chrome extension (VueJS), SDK (JS), API (NodeJS), GraphQL server (Hasura, Postgres)
• Included development of multiple user-facing features, conversion of app and extension from Vue2 to Vue3, implementation of E2E testing system (Playwright), as well as debugging and refactors, on a team from 2 to 4 developers
• Deployment on Google Cloud Storage, including management of CI pipelines and jobs