SonarQube Experts in Berlin

Transmission system operator – network provisioning platform (team lead)

• Designed the saga orchestrator in Python that provisions network fabrics with rollback.
• Split IP, identity, and resource allocation into bounded contexts with their own databases and typed clients.
• Implemented data access using DDD repositories and units of work, with no SQL in the domain code.
• Required integration tests using real PostgreSQL and RabbitMQ containers, and API fuzzing for every service.
• Introduced an agent workflow where a spec starts each change and a human approves every merge.
• Rolled out OpenTelemetry auto-instrumentation through GitOps across eighteen Kubernetes clusters.
• Led incident response for stuck provisioning and recorded every outage as a post-mortem.

Languages and software used: Python, FastAPI, Pydantic v2, SQLAlchemy async, PostgreSQL, RabbitMQ, Celery, pytest, testcontainers, schemathesis, Helm, Flux CD, GitLab CI, OpenTelemetry, pi coding agent.

Software product company – datacenter simulation SaaS (backend development)

• Built the asynchronous simulation pipeline as the second-largest contributor among more than twenty team members.
• Tagged every image by commit SHA and semver in the GitHub Actions deployment workflows.
• Diagnosed the RabbitMQ memory alarm that froze every simulation and fixed the limits in the Helm chart.
• Converted the test suite to function-style pytest, with coverage reported in every pipeline.

Languages and software used: Python, FastAPI, SQLAlchemy, Alembic, Celery, RabbitMQ, Redis, PostgreSQL, S3, EKS, Helm, Keycloak, GitHub Actions, pytest, mypy, ruff, SonarQube.

Internal AI platform – model serving and telemetry

• Built the FastAPI service that deploys open-weight models on GPU tiers as OpenAI-compatible endpoints.
• Upgraded production EKS by two Kubernetes minor versions and fixed zone-bound storage faults.
• Traced every model call, including its token count, cost, and latency, through the OpenTelemetry operator.

Languages and software used: Python, FastAPI, vLLM, LangGraph, pydantic-ai, OpenAI and Anthropic APIs, EKS, Helm, Flux CD, Terraform, GitLab CI, OpenTelemetry, Grafana.

• Designed, built, and launched an internal event planning web application used by over 100 department leads for a large event, despite having no dedicated testing phase.

• Ensured smooth, failure-free operation during first production use, leading to the tool being adopted for future events.

• Automated catering calculations and related workflows, significantly reducing email communication and manual computation effort for meal planning.

• Managed deployment and hosting on a Linux server using Coolify, including application setup and runtime operations.

• Hired and guided a communication designer on UX while independently owning all technical decisions and implementation.

• Developed a Flutter app for eID ID card logins
• Focus: Flutter, iOS, eID, AusweisAppSDK, Mason, Keycloak, Agentic Coding, Arc42, Jenkins

• Worked on the development of cloud-based web platform for different financial solutions (Payment by invoice, EPI, Freenet)
• Made technical and architectural decisions, discussed with management team the direction of the platform
• Provided technical expertise, made software improvements
• Participated in meetings, reviewed tickets, wrote documentation
• Technologies used: C#, .NET, MS Azure Services, Azure SQL, CI/CD, Azure DevOps, Jira

OpsWorker turns Kubernetes alerts into root-cause analyses, on top of the monitoring a team already runs. I lead the technical side: the agent architecture, the AWS infrastructure it runs on (fully inside EU regions), and the engineering decisions behind it, read-only in the cluster by default, human in the loop for judgment. The stack underneath: Amazon Bedrock and Bedrock AgentCore, agents built with the Strands Agents SDK, the Claude and OpenAI APIs, and the Kubernetes API.

• Developed a custom tool using the Mistral 7B LLM to scan, validate, and report security vulnerabilities.
• Security tested AI agents, bots, and other LLMs, focusing on prompt injection, model inversion, data poisoning, EDR/AV bypass and evasion techniques, membership inference, model evasion, overfitting to malicious inputs, and contextual manipulation.
• Onboarded repositories to SAST solutions for security scanning, implemented secrets scanning, DAST, and SCA, and used ZAP for DAST in CI/CD pipelines.
• Delivered security awareness training and developed CTF challenges and training materials to improve developers' security knowledge.
• Planned and carried out bi-annual red teaming operations based on the MITRE ATT&CK framework and led internal and external pentests based on the OWASP Top 10 framework for 70+ applications worldwide, resulting in the detection, reporting, and remediation of hundreds of vulnerabilities.
• Triaged HackerOne reports.

• Manage the development release and update process for a digitized nationwide trade register project "AuRegis".

• Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.

• Oversee system release of microservice architecture.

• Build the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.

• Automate deployment onto OpenShift using Kustomize.

• Set up infrastructure components for development, code review, and code quality analysis including SonarQube.

• Integrate GitOps tools such as Kustomize and ArgoCD, using both Azure and private cloud for sensitive data handling.

• Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.

• Automate delivery to customers and deployment on test systems.

• Create Kustomize manifests for microservices and develop the related automation, treating documentation as code for clarity and reproducibility.

• Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.

• Context: Healthcare and laboratory teams required faster document analysis, treatment-planning support, and reliable AI workflows for MR/VR-assisted operations.
• Contribution: Built the AI healthcare platform, model/agent workflows, VR-glasses deployment platform, REST APIs, Next.js/React interfaces, and CI/CD pipelines.
• Impact: Delivered a production-ready AI product foundation that improved clinical document review, supported laboratory automation, and made VR fleet deployment manageable across environments.

Tech: TypeScript, Next.js, Node.js, React, Java, Spring Boot, Python, PyTorch, TensorFlow, Docker, PostgreSQL, OpenAPI, GitLab, GitHub Actions.

• Planning and implementing tailored Odoo ERP solutions to support and optimize specific business processes
• Configuring and customizing Odoo modules according to individual customer requirements, including process automation and data integration
• Training and supporting end users and administrators to ensure full use of Odoo features and to enhance user skills
• Providing ongoing post-implementation support, including troubleshooting, maintenance and updates to adapt to new business requirements
• Migrating data and integrating external applications into Odoo environments for a seamless, unified data landscape
• Analyzing and improving existing Odoo systems to boost efficiency and optimize the user experience

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

Java 21 · Spring Boot 3 · Keycloak · PostgreSQL · Docker · Nginx · GitHub Actions · DigitalOcean · React 18 · TypeScript · Plasmo

• Architected and shipped a production-ready Job Application Tracker end-to-end: REST API with 5-stage workflow, pagination, sorting, and dynamic filtering — full ownership from design to live cloud deployment on DigitalOcean.
• Implemented production-grade identity management: OAuth 2.0 / OpenID Connect / JWT / RBAC via Keycloak, applying Hexagonal Architecture and DDD principles.
• Built automated CI/CD pipeline (GitHub Actions); containerised with Docker; Nginx reverse proxy with path-based routing and SSL termination.
• Developed a Chrome Extension (Plasmo framework, Manifest V3) that auto-fills job applications directly from LinkedIn into the tracker — demonstrates full product thinking across backend API and browser client.

• Subject matter expert for the client on modeling and developing Camunda BPMN 2.0
• Development of new features and APIs, and coordination of tasks
• Design and development of RESTful APIs with Swagger (code first)
• Creation of target designs, high-level concepts, and requirement specifications
• Analysis and evaluation of alternative solution approaches
• Integration of external IT systems (ANUBIS, SES, ZPS) via Google GCP Pub/Sub and RESTful web services
• Pair programming, code reviews, and collaboration with API product owners
• Consulting on transforming legacy BPMN workflows and configuring Camunda BPM
• BPMN and DMN modeling and implementation in short iterations
• Operational support, bug fixing, and knowledge documentation
• Use of TDD, static code analysis with SonarQube, and integration tests
• Automation of test cases in Java and analysis of stack traces/logs on GCP-PROD
• Identification and execution of test data and documentation of test results

• Developed high-performance APIs for SDK backend on JavaEE Web, iOS, and Android, improving application performance and scalability by 30%.
• Led system design, tech stack planning, and development, ensuring 98% uptime with strong code quality and automated tests.
• Implemented CI/CD pipelines with Jenkins and GitHub Actions, reducing release cycle time by 40%.
• Deployed cloud-native applications on AWS EC2 instances, ensuring 99% uptime and optimized performance.
• Delivered clean code with full unit, component, and integration test coverage, reducing defects by 25%.
• Collaborated across engineering, QA, and product teams to deliver secure, reliable solutions.
• Mentored team members, increased development efficiency by 20%, automated routine tasks, and contributed to hiring, growing team capacity by 15%.

• Heycar is a leading automotive platform redefining the used car market through intelligent data pipelines, multi-tenant services, and dealer-focused tooling. I led initiatives across backend architecture, data ingestion, and identity management to enhance scalability, reliability, and developer productivity.
• Ingestion Platform: Designed a unified ingestion platform with YAML-based configuration, enabling new dealer data pipelines to be onboarded without code changes, cutting setup time from ~2 months to 2-3 days and improving scalability by 40%.
• Keycloak Leadership: Acted as the company's Keycloak expert, scaling it for multi-tenant identity management and extending functionality with custom plugins and delegated admin APIs.
• Back-Office Tooling: Developed a back-office application integrated with Salesforce, enabling dealers to manage inventory, convert leads, and handle support requests in real time.
• Multi-Tenant Migration: Collaborated across backend teams to migrate Heycar's core services into a unified multi-tenant cluster, ensuring high availability.
• Frontend CI Optimization: Optimized monorepo delivery by implementing CircleCI dynamic config with NX, deploying only affected UI projects and drastically cutting build times.
• Observability & Mentorship: Enhanced monitoring and release reliability while mentoring backend engineers and improving code review standards.