Sparx Enterprise Architect Experts in Germany

• As part of the project, the further development of the identity management system was driven forward. This included a comprehensive refactoring of the interfaces to the connected target systems. In addition, several special systems were successfully connected to the IAM to ensure end-to-end identity and authorization management.
• Technical design and solution proposals for IAM system development
• Requirements analysis and requirements management (IREB, BABOK)
• Alignment of the strategy with the future target architecture (TOGAF)
• Prototyping of solutions
• Documentation of requirements (Innovator)
• Analysis and documentation of requirements and creation of process models (UML, BPMN, ArchiMate)
• Modeling of requirements and system functionalities (OOA/OOD, UML)
• Further development of interfaces (SOAP, REST)
• Carrying out architecture reviews

Consumer Cards Solution Architect

• Provided architectural leadership in Consumer Cards Domain establishing best practices and improving architectural transparency and maintainability by designing a structured documentation framework to enable reverse engineering of legacy card systems.
• Standardized architectural artefacts including BIAN Business Capabilities, UML diagrams in draw.io format (Use Case, Component, Sequence), naming conventions, document repository, design templates and blueprints, microservices.
• Produced high-level and low-level designs aligned with enterprise architecture governance processes and artefact standards.
• Provided architectural support to the Strategic Card Simplification Programme, focusing on card product migrations and application decommissioning across all countries. Agile environments (Scrum/SAFe).
• Analysed and designed AI use cases in the architecture domain.

Project: Payment Card Industry Data Security Standards (PCI DSS) Strategic Programme

• Analysed and documented existing data flows across card products and geographic regions to assess PCI DSS compliance.
• Identified areas involving sensitive data at rest and data in motion requiring encryption or masking, ensuring adherence to PCI DSS requirements.
• Collaborated with security, infrastructure, and application teams to align encryption strategies with regulatory and organizational policies.
• Provided strategic advisory services on data strategy, data governance, data management, data quality, data architecture, data mesh, MEGA HOPEX, DAMA-DMBOK, event-driven architecture, end-to-end data flows and card product harmonization models.
• Ensured solution design alignment with regulatory compliance (BCBS 239, DORA, GDPR) and internal policies.

Project: Denmark ATM Outsourcing Project

Objective: Outsource ATM operations and maintenance to a third-party provider while expanding the Denmark ATM fleet, with Nordea retaining ownership of ATMs and cash for the existing and extended infrastructure.

• Led a cross-functional delivery team (project management, business analysis, and architecture) and documented the as-is ATM ecosystem architecture, including end-to-end data flows, integrations, and internal/external application interfaces.
• Designed end-to-end processes for authorization, reconciliation, and settlement, aligning operating model, controls, and compliance requirements across Nordea and the outsourced service provider.
• Produced high-level and low-level solution designs using standardized UML artefacts (Use Case, Component, and Sequence diagrams) to support vendor onboarding, integration planning, and implementation.
• Ensured architectural alignment and decision-making across enterprise stakeholders and third-party providers, managing dependencies and interfaces in the context of the outsourcing initiative.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

Stellar SR6 G7 line, 32-bit Arm® Cortex®-R52+ MCU.

• MISRA-C, C99, Greenhills ARM compiler
• Dassault AUTOSAR Builder
• EB Tresos
• Sparx Enterprise Architect 16.1
• VS Code
• Python xml, lxml, NumPy and Pandas

ISO 26262, ISO 21434, hypervisor, key management, HSM. Tooling & automation. LieberLieber LemonTree + Sparx EA. Jira, Confluence, SharePoint. Git/Github. DevOps through Jenkins & Conan.

• Establishing the Microsoft Fabric platform with the company as the central data warehouse and reporting system.
• The company migrated several operational systems including D365 to new version. The new data warehouse is based on a Fabric/Power BI architecture with Azure cloud Entra Authentication.

Tasks Performed:

• Full administrative responsibility for the Fabric platform F64 and F32 capacities, as well as two F8 capacities for development and prototyping.
• Integration of Fabric with Microsoft Entra.
• Data modeling for the data warehouse bronze, silver and gold layers using data modeling tools.
• Star Schema as well as entity relationship modeling.
• Data modeling for data marts and for dimensional modeling and Power BI (semantic model).
• Design of data models for Microsoft SSAS multidimensional and tabular OLAP cubes using DAX and MDX.
• Definition of design patterns for the ETL team for loading OLAP cubes (Tabular and MD), star schemas and data vault structures.
• Planning and managing team of 4 ETL and reporting developers.
• Performance Tuning of Power BI reports, particularly the semantic layer, as well as the Fabric notebooks
• SQL Performance Tuning.
• DB Design for Azure SQL.
• Reporting directly to project senior management.

Label: Power BI, Fabric, Analysis Services (multidimensional and tabular), D365, SSIS, Tabular Editor, SQL Server and Azure SQL, TOAD Data Modeler, DBSchema, Visual Studio Code, DAX Studio, SSMS, Visual Studio, Jira and Confluence.

• Analysis of affected business processes taking numerous stakeholders into account
• Interface analysis, architecture and system design
• Communicating and coordinating various subprojects and interface partners
• Creating epics and user stories, maintaining the backlog, workshops and review presentations
• Support during implementation between business departments and development
• Test management including strategy and approach definition
• Test case definition, execution and approval
• Cross-team organization of integration and acceptance tests
• Support of test environments
• Technologies and tools: Java, Angular, Kubectl, REST, AWS SNS/SQS, Kafka, S4/HANA, Bruno

• Analysis
• Consulting
• Software design
• Development
• Automation
• Testing
• Deployment
• Architecture, development and deployment of various proof-of-concept applications around the integration of current AI interfaces including conversational, realtime voice, images and videos
• Developed best practices for working with agentic systems and AI in practice
• Created code templates

• The AVANZA project provides the deployment and procurement of a modern, reliable system for efficient access and sales and supports smooth operations at the Lötschberg & Simplon car shuttle.
• Operations are sustainably secured and the further development of the car shuttle business model is supported.
• Developed a study with an evaluation of possible solution options.
• Supported the decision on options, evaluated the RFI, prepared procurement, concept created based on the chosen option.

• A warehouse valuation system was reimplemented using Java, Spring Boot, and Camunda. The backend solution focuses on integration and batch calculations, the frontend on managing formulas and reviewing results.
• Java 21
• Spring Boot
• JPA
• Maven
• REST
• Kafka
• PostgreSQL
• DB2
• Liquibase
• Google Cloud Storage
• Keycloak
• GitLab CI/CD
• Helm
• Terragrunt
• SonarQube
• Angular
• IntelliJ
• JUnit 5
• Mockito
• Open API

• Lead Product Owner for 4 development teams
• Leading and coordinating a greenfield project with parallel implementation of core components by independent teams; managing dependencies and resources
• Establishing a data lakehouse approach, including analysis of data volumes and future requirements as part of a cloud migration (best-of-breed approach)
• Responsible for requirements analysis, selection, and piloting of a LIMS/ELN system, supported by advising decision-makers and managing external vendors
• Introducing and managing an OpenWeb UI and Azure OpenAI-based RAG system to support knowledge extraction and data-driven analyses
• Setting up, configuring, and managing Jira projects, as well as developing project-specific workflows and automations
• Implementing classic Scrum processes with all ceremonies and taking on the Scrum Master role for all involved teams
• Assisting in hiring through interviews and assessments from a product owner's perspective
• Making key architectural decisions, including selecting the platform for the data lakehouse (Databricks) and the strategic integration of LIMS and analytics platforms

• Maintenance, integration, and compatibility testing of software and hardware components
• Modeling these components with Sparx Enterprise Architect as Solution Architect

• C# development in .NET 8.0
• Technical responsibility for architecture decisions (DDD, Clean Architecture, microservices)
• Introduction and systematic evaluation of GitHub Copilot, analyzing efficiency benefits, identifying suitable use cases, assessing code quality
• Developing best practices for using Copilot in the team, supporting rollout and coaching individual developers
• Conducting code reviews, architecture documentation according to Arc42
• Building stable CI/CD pipelines with Azure DevOps, introducing automated quality checks with SonarQube and .editorconfig
• Collaborating with stakeholders for continuous improvement of technical concepts
• Technologies used: Azure DevOps Server, Git, SonarQube, Visual Studio 2022, Sparx EA 17, Nagios LS, Nagios XI, C#, ReSharper 2.24.3, Clean Architecture, DDD, EF Core, Arc24, microservices, Angular, MediatR, SignalR, Copilot, OpenAI

• Design of requirement verification based on the INVEST principle
• Implementation of the prediction model with scikit-learn and BERT
• Implementation of the web client with ReactJS and FastAPI
• Adaptation of the T5 model to improve user story generation according to the INVEST framework
• Certification of NLP and scikit-learn
• Technologies: Python, NLP, Scikit-Learn, BERT, T5, ReactJS, FastAPI, Cursor Visual Paradigm, Visual Studio, Draw.io, NSIS, vite, Electron

• Consulting and development in a greenfield project for acquisition of sensor data.

• The new solution is meant to replace an existing system, where most of the logic is hardcoded and which is primarily targeted to the German market.

• The new system is meant to support international markets and the logic and configuration can be changed easily.

• The new system has to support multiple time zones and international requirements and regulations.

• Working closely with the in-house software architect, developing Enterprise Architect models, proof-of-concepts and implementations.

• The complete system has a generative approach, where C# code, database, dashboards and reports are generated from compact descriptions.

• The system is meant to be stable and secure. Encryption, hashing and signing are used throughout.

• After extensive performance measurements and various evaluations, we decided to use the ClickHouse database, which provides excellent performance and rather good SQL compatibility.

• Sparx Enterprise Architect, JAMA, Miro.

• ClickHouse Database, Linux / Debian / Ubuntu, GitLab.

• Docker, Cobasoft Log & LogVw.

• Microsoft: Visual Studio, C#, ASP.NET, Test.

• HTML5, CSS, JavaScript, JSON.

• Edge, FireFox, Chrome, Chromium.

• Code and HTML generation.