Sonatype Nexus Experts in Germany

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

• Designed and implemented a hybrid recommendation system (content-based + collaborative filtering)
• Built end-to-end ML pipelines including data processing, feature engineering, model training, and evaluation
• Developed RAG-based LLM systems using LangChain and vector databases for semantic search and knowledge retrieval
• Established MLOps workflows with MLflow for experiment tracking, versioning, and deployment readiness
• Implemented deep learning models (computer vision & classification) using PyTorch and TensorFlow

• CHG Meridian AG is a financial company focused on leasing in the areas of IT technology, logistics and medical technology and is regulated by BaFin. One part of the company is Return to Remarketing, where devices delivered to the technology center (notebooks, smartphones, tablets, etc.) are prepared for resale. The project I supported was responsible for enabling damage assessment of returned lease devices, documenting them visually in the form of pictures, enabling invoicing for the customer, and making the pictures available via the in-house customer platform. This was achieved through a combination of in-house development within the internal development department and the use of SaaS products. The second project was the transition of SaaS tendering software, purchased by the business unit, into the operations of the CHG IT department. Evaluation of security questions in relation to BaFin requirements, development of an authorization concept, implementation of single sign-on, documentation of the application in the CHG systems (CMDB, iKnow, etc.) and handover into operations.

Used technologies and methods: NIS2, DORA, agile software development, Scrum, Kanban, ServiceNow, SaaS, MS Teams, MS SharePoint, Active Directory, Entra ID, CMDB, incident management, change management, request management, service level agreement

• Implementation of a REST-based web service for querying contract, claims, customer, and sales data as part of the Dialogmanager project.
• Data release is done in compliance with CoC requirements and individual user permissions from IAM (Identity and Access Management).
• Implementation using JBoss EAP 8.1 (JakartaEE 10) and Java 21 as well as JAX-RS, CDI, Microprofile-Config, Microprofile-OpenAPI.

• Testing the SekIDP and related components
• Test design, execution and automation, microservices, GitHub Enterprise, Eclipse, Katalon Test Platform, API Testing, Confluence 8, JIRA/Xray, Draw.io, Swagger/OpenAPI, Postman, Docker, Kubernetes, Podman, PuTTY, E-Health, Telematik, Gematik standards, EPA, E-Rezept, sektoraler IDP, encryption, XaDES, PaDES, DICOM, HL7, FHIR, IHE, ICD, SSO, SAML/Shibboleth, OAuth, smartcards, JWT, two factor authentication Android and iOS, Wireshark, BrowserStack, Cypress, gRPC, REST, SOAP, WS-Security, Linux Shell, PowerShell, SSH/SSL, Java, Kotlin, Cordova, Gradle, Groovy, Python, TypeScript

• Design, development, and optimization of batch processes using Java 11, Hibernate, and Liquibase based on an Oracle SQL database.
• Implemented Jenkins pipelines for automated build and deployment.
• Supported deployment processes with Docker and Kafka.

• Visualization, search, and maintenance of various types of master data, providing them via a REST API, and implementing a variety of import and export formats.

• Implementation, architecture, project management.

• Technologies and tools: Angular (Signals, Signal Store, swagger-codegen, standalone components), Java, PostgreSQL, ActiveMQ, JavaScript, Spring Boot (Spring Core, Spring MVC, Spring Data/JPA via Hibernate, Spring Security, Spring Modulith), JUnit, Flyway, QueryDSL, GraphQL, REST API, Node, npm, Maven, SonarQube, GitLab CI/CD pipelines, Docker, Nexus, OpenAPI + Swagger UI, Keycloak, OAuth2, OpenID Connect, IntelliJ IDEA, Jira, Confluence.

• Design and implementation of a solution for managing projects, materials, and assets in field operations
• Development of a modern web application (Blazor) for project managers to track inventory, plan demand, and issue transport and purchase orders
• Delivery of a mobile MAUI app for field staff to store and retrieve materials with location-based photo documentation in map views
• Control of the full business logic through a central API
• Tech stack: .NET 9, C#, WebAPI, Blazor, MAUI, REST, PostgreSQL, Entity Framework, Docker, Docker Compose, Ansible, Keycloak, Aspire
• Identity and access management with Keycloak
• Deployment and orchestration via Docker Compose and Ansible
• Project in testing and evaluation phase