Single Sign-On Experts in Frankfurt

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open-source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self-hosted solutions
• Development of reusable agentic workflows and business applications that enable non-technical employees to solve business problems independently
• Implementation of nine business applications with Single Sign-On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers

Techstack: Python, Streamlit, Anthropic SDK (Claude), Azure, Linux, PostgreSQL, MS SQL, Angular

• Designed and implemented modular AI assistants for sales and business processes within the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, Hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP servers, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting, and mentoring within the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• Extracted relevant infotypes from SAP HCM for migration to SuccessFactors Employee Central and mapping to ECP fields.

• Configured P2P integration including BAPI setup and secured data exchange with HTTPS and OAuth protocols.

• Set up foundational settings in Recruiting (REC) including roles, permissions, and job requisition templates.

• Implemented Career Site Builder to create a branded candidate experience and integrated external job boards.

• Configured candidate application workflows, screening, interviewing, and hiring communication templates.

• Set up pre-screening questions and assessment tools including DHB sanction list checks.

• Implemented automated background check and KYC integration with external vendors in the REC module.

• Localized job requisition templates to reflect regional job titles and regulatory compliance.

• Customized onboarding document templates and localized document archiving protocols (DRTM).

• Adjusted onboarding forms to capture country-specific employee information including Form I-9.

• Enabled Form I-9 remote document verification and integrated eVerify with SuccessFactors.

• Set up automated reminders for employees and HR to complete I-9 sections within deadlines.

• Configured pre-Day 1 access for new hires to complete tasks and mandatory trainings prior to start date.

• Enabled e-signature integration for onboarding documents to support remote verification.

• Technologies: SAP SuccessFactors, BTP, CPI, HCM onPremise, EC, ECP, REC, ONB, Form I-9, eVerify, S4HANA.

• Porsche ID is a unified digital identity platform providing secure authentication and seamless access across Porsche’s online services, mobile apps, and connected vehicle features
• Designed and implemented new authentication and authorization functionalities for both users and systems
• Ensured high availability, security, and performance to deliver a flawless digital experience for Porsche customers
• Technologies: Auth0, Angular, Tailwind, AWS, Terraform, Github
• Methodologies: Scrum and SAFe

• Main developer in an online retail company
• Built an online shop using the Next.JS React framework
• Integrated the site with dozens of third-party apps using REST and GraphQL APIs
• Built a backend for order management, warehouse management (with iPhone app), and supply management
• Automated invoicing and finances with QuickBooks

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.

• The internal audit is meant to ensure the company's quality standards.

• GDPR

• ISO 27001 ff.

• BSI

• DORA

• Patient data regulations

• Host / Cloud / S3 / Container / highly scalable / Nuxeo

• Budget: 50,000

• Team: 1

• Led multiple concurrent, enterprise-scale technical programs spanning backend services, APIs, identity platforms, cloud infrastructure, and security
• Actively participated in system architecture and design reviews, validating service interactions, data flows, security models, and scalability requirements
• Worked hands-on with engineering teams to decompose complex initiatives into technical epics, stories, and deliverables
• Reviewed technical approaches, migration strategies, and rollout plans to minimize operational and security risk
• Delivered SSO, MFA, directory services, SaaS integrations, and platform modernization impacting tens of thousands of users globally
• Drove Agile delivery across globally distributed teams; facilitated ceremonies, resolved blockers, and improved engineering throughput
• Established technical RAID logs, dependency maps, and milestone-based execution plans in regulated enterprise environments
• Acted as a trusted technical partner to senior leadership, translating complex engineering topics into business-relevant outcomes

• Automation of the (Linux-based) web landscape maintenance.
• Use of SALT, SuseManager, Wildfly, scripting and Kubernetes.
• DevOps tasks and use of Jira.
• Management of "special" applications as well as creating and helping with concepts.
• Focus on security, maintainability, integration and tooling/integration.

• Business analysis of payments for the introduction of Wero EPI in Germany.
• Analysis and optimization of merchant processes in the context of acquiring and issuing.
• Analysis of interfaces for instant payments.
• Analysis of SCT-Inst processes, settlement mechanisms and reporting processes.
• Identification and clarification of gaps in merchant processes.
• Analysis and documentation of clearing and settlement processes.
• OSPlus process analysis and documentation.
• Coordination and alignment with scheme management as well as various payment service providers and financial institutions on merchant processes.
• Preparation and follow-up as well as active participation in EPI meetings on technical coordination and regulatory topics in payments, including content familiarization and prioritization.
• Preparation and documentation of project and steering committees in the EPI environment.
• Creation of status reports for the subproject.
• Maintenance and structuring of Confluence pages for project documentation.
• Coordination and alignment with the issuing teams on individual customer processes as well as aligning with bank processes and acquirer processes in the Wero environment.
• Communication with payment service providers regarding merchant and bank processes in the Wero environment.
• Organizational support for project management in special tasks in the EPI and Wero environment.
• Digital filing and documentation in Confluence and Microsoft Teams.
• Planning, implementation and tracking of work packages and steps.
• Quality assurance and project control.
• Consulting on IT strategy, IT architecture and interface management in the EPI and Wero environment.
• Technical environment: Jira, Confluence, XML, JSON, MS Office (Word, Excel, Teams, PowerPoint), SharePoint, Draw.io, Innovator, 3rd-level support, ITIL, creation and updating of software documentation, interface management, OSPlus, Scrum, KYC, payment, European Payments Initiative (EPI), Wero, Microsoft Loop, Instant Payments, SCT-Inst.

• Upgraded Ruby from 2.7 to 3.1, boosting application performance by 30% and reducing technical debt.
• Integrated Zendesk Messenger into the customer support platform, streamlining communication workflows and increasing support efficiency by approximately 25% through faster response times and improved issue resolution.
• Orchestrated the migration of 65,000+ Schutzklick customer records to a new cloud platform, achieving zero downtime and accelerating data access speeds by 40% for internal teams.
• Implemented JumpCloud SSO for 500+ admin users, strengthening platform security and access control.
• Conducted k6 load testing, enabling the platform to support 10,000+ concurrent users without degradation.