Sparx Enterprise Architect Experts in Germany

• Restructuring of the network architecture/topology, followed by installation, setup and testing of the network at a small business.
• Resolution of server (permissions and roles) and connection problems (WAN, (V)LAN, WLAN).
• Infrastructure support and maintenance.
• Creation of documents such as manuals, architecture documents and design documents.
• Revision of manuals and technical documents, as well as creation of VBA macros.
• Use of AI and basic prompting, as well as formulation of AI requests.
• Adjustment of workflows due to legal requirements and optimization of existing workflows.
• Delivery of courses and training for adaptations, new features and changed workflows.
• Modeling basis: BPMN.
• System environment: MS Office 2019/365, Win10/11, Teams, Netgear (Switch), QNAP, Synology (NAS), Linux (Ubuntu).

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

• C# development .Net 8.0
• Technical responsibility for architecture decisions (DDD, Clean Architecture, Microservices)
• Introduction and systematic evaluation of GitHub Copilot, analysis of efficiency benefits, identification of suitable application scenarios, assessment of code quality
• Development of best practices for using Copilot within the team, support during rollout and coaching of individual developers
• Conducting code reviews, architecture documentation according to Arc42
• Building stable CI/CD pipelines with Azure DevOps, introduction of automated quality assurance with SonarQube and .editorconfig
• Collaboration with stakeholders to continuously optimize technical concepts
• Technologies used: Azure Devops Server, Git, Sonarqube, Visual Studio 2022, Sparx EA 17, Nagios LS, Nagios XI, C#, Resharper 2.24.3, Clean Architecture, DDD, EF-Core, Arc24, Microservices, Angular, MediatR, SignalR, Copilot, OpenAI

• Establishing the Microsoft Fabric platform with the company as the central data warehouse and reporting system.
• The company migrated several operational systems including D365 to new version. The new data warehouse is based on a Fabric/Power BI architecture with Azure cloud Entra Authentication.

Tasks Performed:

• Full administrative responsibility for the Fabric platform F64 and F32 capacities, as well as two F8 capacities for development and prototyping.
• Integration of Fabric with Microsoft Entra.
• Data modeling for the data warehouse bronze, silver and gold layers using data modeling tools.
• Star Schema as well as entity relationship modeling.
• Data modeling for data marts and for dimensional modeling and Power BI (semantic model).
• Design of data models for Microsoft SSAS multidimensional and tabular OLAP cubes using DAX and MDX.
• Definition of design patterns for the ETL team for loading OLAP cubes (Tabular and MD), star schemas and data vault structures.
• Planning and managing team of 4 ETL and reporting developers.
• Performance Tuning of Power BI reports, particularly the semantic layer, as well as the Fabric notebooks
• SQL Performance Tuning.
• DB Design for Azure SQL.
• Reporting directly to project senior management.

Label: Power BI, Fabric, Analysis Services (multidimensional and tabular), D365, SSIS, Tabular Editor, SQL Server and Azure SQL, TOAD Data Modeler, DBSchema, Visual Studio Code, DAX Studio, SSMS, Visual Studio, Jira and Confluence.

• As part of the project, the further development of the identity management system was driven forward. This included a comprehensive refactoring of the interfaces to the connected target systems. In addition, several special systems were successfully connected to the IAM to ensure end-to-end identity and authorization management.
• Technical design and solution proposals for IAM system development
• Requirements analysis and requirements management (IREB, BABOK)
• Alignment of the strategy with the future target architecture (TOGAF)
• Prototyping of solutions
• Documentation of requirements (Innovator)
• Analysis and documentation of requirements and creation of process models (UML, BPMN, ArchiMate)
• Modeling of requirements and system functionalities (OOA/OOD, UML)
• Further development of interfaces (SOAP, REST)
• Carrying out architecture reviews

• Analysis of affected business processes taking numerous stakeholders into account
• Interface analysis, architecture and system design
• Communicating and coordinating various subprojects and interface partners
• Creating epics and user stories, maintaining the backlog, workshops and review presentations
• Support during implementation between business departments and development
• Test management including strategy and approach definition
• Test case definition, execution and approval
• Cross-team organization of integration and acceptance tests
• Support of test environments
• Technologies and tools: Java, Angular, Kubectl, REST, AWS SNS/SQS, Kafka, S4/HANA, Bruno

• Analysis
• Consulting
• Software design
• Development
• Automation
• Testing
• Deployment
• Architecture, development and deployment of various proof-of-concept applications around the integration of current AI interfaces including conversational, realtime voice, images and videos
• Developed best practices for working with agentic systems and AI in practice
• Created code templates

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• The AVANZA project provides the deployment and procurement of a modern, reliable system for efficient access and sales and supports smooth operations at the Lötschberg & Simplon car shuttle.
• Operations are sustainably secured and the further development of the car shuttle business model is supported.
• Developed a study with an evaluation of possible solution options.
• Supported the decision on options, evaluated the RFI, prepared procurement, concept created based on the chosen option.

• A warehouse valuation system was reimplemented using Java, Spring Boot, and Camunda. The backend solution focuses on integration and batch calculations, the frontend on managing formulas and reviewing results.
• Java 21
• Spring Boot
• JPA
• Maven
• REST
• Kafka
• PostgreSQL
• DB2
• Liquibase
• Google Cloud Storage
• Keycloak
• GitLab CI/CD
• Helm
• Terragrunt
• SonarQube
• Angular
• IntelliJ
• JUnit 5
• Mockito
• Open API

• Maintenance, integration, and compatibility testing of software and hardware components
• Modeling these components with Sparx Enterprise Architect as Solution Architect

• Lead Product Owner for 4 development teams
• Leading and coordinating a greenfield project with parallel implementation of core components by independent teams; managing dependencies and resources
• Establishing a data lakehouse approach, including analysis of data volumes and future requirements as part of a cloud migration (best-of-breed approach)
• Responsible for requirements analysis, selection, and piloting of a LIMS/ELN system, supported by advising decision-makers and managing external vendors
• Introducing and managing an OpenWeb UI and Azure OpenAI-based RAG system to support knowledge extraction and data-driven analyses
• Setting up, configuring, and managing Jira projects, as well as developing project-specific workflows and automations
• Implementing classic Scrum processes with all ceremonies and taking on the Scrum Master role for all involved teams
• Assisting in hiring through interviews and assessments from a product owner's perspective
• Making key architectural decisions, including selecting the platform for the data lakehouse (Databricks) and the strategic integration of LIMS and analytics platforms

• Design of requirement verification based on the INVEST principle
• Implementation of the prediction model with scikit-learn and BERT
• Implementation of the web client with ReactJS and FastAPI
• Adaptation of the T5 model to improve user story generation according to the INVEST framework
• Certification of NLP and scikit-learn
• Technologies: Python, NLP, Scikit-Learn, BERT, T5, ReactJS, FastAPI, Cursor Visual Paradigm, Visual Studio, Draw.io, NSIS, vite, Electron

• Consulting and development in a greenfield project for acquisition of sensor data.

• The new solution is meant to replace an existing system, where most of the logic is hardcoded and which is primarily targeted to the German market.

• The new system is meant to support international markets and the logic and configuration can be changed easily.

• The new system has to support multiple time zones and international requirements and regulations.

• Working closely with the in-house software architect, developing Enterprise Architect models, proof-of-concepts and implementations.

• The complete system has a generative approach, where C# code, database, dashboards and reports are generated from compact descriptions.

• The system is meant to be stable and secure. Encryption, hashing and signing are used throughout.

• After extensive performance measurements and various evaluations, we decided to use the ClickHouse database, which provides excellent performance and rather good SQL compatibility.

• Sparx Enterprise Architect, JAMA, Miro.

• ClickHouse Database, Linux / Debian / Ubuntu, GitLab.

• Docker, Cobasoft Log & LogVw.

• Microsoft: Visual Studio, C#, ASP.NET, Test.

• HTML5, CSS, JavaScript, JSON.

• Edge, FireFox, Chrome, Chromium.

• Code and HTML generation.