Storage Area Network Experts in Germany

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Optimization of business results and expansion of sales activities
• Responsible for personnel organization
• Introduction of a document management system (DMS)
• Introduction and optimization of the ERP, CMS and CRM landscape
• Introduction of digital signatures
• Increase in revenue, reduction in costs and increase in EBIT

• Drove two cross-functional engineering teams within the SAFe framework to deliver backend and integration solutions for Visa’s Terminal Management and Cybersource Onboarding platforms
• Served as Program Coach for ten teams within the Platform Services organization, advancing Agile maturity, delivery alignment, and a culture of continuous improvement
• Orchestrated Agile ceremonies including Product Manager syncs, metrics reviews, inspect-and-adapt sessions, system demos, and leadership workshops to strengthen transparency, collaboration, and delivery performance
• Championed the rollout of the Re-imagine Work@Visa scaled delivery framework within the Agile Transformation Team, improving collaboration and delivery predictability
• Increased release frequency 18× per quarter by synchronizing distributed teams and developing a comprehensive release guide
• Partnered with the Release Manager to standardize deployments across Visa Data Center, AWS, and Mobile platforms
• Led teams to close all security findings and embed remediation into BAU, achieving zero open issues by mid-2024
• Directed the Security Findings Program across the portfolio, ensuring visibility, accountability, and progress tracking
• Supported the roll out of the OKR framework and led quarterly reviews to align execution with business goals
• Strengthened communication across distributed teams, removed blockers, and advocated for continuous improvement and automation
• Delivered on demand workshops for teams with raising maturity and adoption of best practices
• Co-founded a Center of Excellence and Agile Community of Practice to promote continuous learning and alignment
• Partnered with SRE and InfoSec teams on multi-region rollout and security initiatives to enhance reliability and compliance

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• ITSM consulting, analysis and optimization of IT capacity with BMC TSCO / BMC Helix
• Drafting "Governance guidelines for operational capacity management"

• Installation, maintenance and regular upgrade of the DB systems with 19x
• Use of OPatch and RU 19.27 on RHEL 8x, SLES 15.x and Windows
• DBA for DACH and European customers in production and last test environments (e.g. Konrad Adenauer) as well as others in CDB
• Processes via Confluence
• Support in operations for customers SR via Metalink

• Modernized and modularized a legacy monolith to enable independent team workflows
• Migrated from Java 8 to Java 21 and from Spring Boot 2 to Spring Boot 3.3
• Simplified Maven project structure, reducing build time from 15 minutes to 50 seconds
• Converting architecture to a hexagonal DDD architecture with end-to-end integration tests using RestAssured and JUnit 5
• Tools and technologies: Java 8-22, Spring Boot, Mockito, AssertJ, RestAssured, Hibernate, OracleDB, Flyway, REST, JSON, Docker, Kubernetes, AWS, Bitbucket, GitHub, SonarQube, IntelliJ IDEA Ultimate

• System administration of FreeBSD 11, 12 and 13.1 in a secure cloud software solution
• Administration of proxy servers for FITS and its clients, banks and state banks
• Administration of secure internet solutions
• Administration of secure mail solutions and mail gateways
• Administration of Apache 2.4 web servers
• Planning and maintenance of servers and network components in FNT Command
• Incident, change and ticket handling, especially troubleshooting network issues using Splunk and ARS
• Troubleshooting and log file analysis using Splunk Enterprise
• Monitoring with Nagios
• Ordering, provisioning and installation of certificates on Apache web servers, Nginx web servers and load balancers
• Hardware: HP ProLiant DL380 Gen 9 and 10, Cisco Catalyst
• Software: FreeBSD 11, 12 and 13.2, FNT Command, shell scripts, MySQL databases, ServiceNow, ARS, Splunk Enterprise 8.15

• Requirements analysis and replacement of local SharePoint as CMDB with open source NetBox to prepare for deploying Cisco ACI (SD-WAN) with Microsoft Azure
• Coordination with systems like Checkmk and Grasp
• Introduction and coordination of cmdbsyncer as CMDB data hub; further development of the syncer with Kuhn & Ruess GmbH
• Implementation of SNMPv3 on AIX LPAR/VIO, Linux, Windows, SAN/storage, network components (Cisco switches, F5 load balancers, Palo Alto and CheckPoint firewalls, iLO boards)
• Deployment and further development of the network scanner JDisc in cooperation with the vendor (Utimaco HSMs, Linux detection)
• Integration of NetBox, JDisc, and cmdbsyncer into the infrastructure using Docker containers
• End-user training: preparation, creation of materials, and delivery
• Creation of data flow and network diagrams
• Population and planning of IPv4/IPv6 with NetBox including VLAN import
• Dual-stack setup of servers and clients with IPv4 and IPv6
• Connection of REST interfaces for Checkmk, JDisc, vSphere, HMC, i-doit, NetBox Software: Confluence, Jira, MS Office 365, Teams, i-doit, NetBox, JDisc, cmdbsyncer, DB Visualizer, vSphere, HMC

• Overall coordination of service providers for all infrastructure topics at a production site being set up in Baden-Württemberg
• Design and finding solutions for internet connectivity, building office communication networks, setting up WLAN in production and administration buildings, IP address management, password policies, time tracking, access control systems, backup strategies, emergency power planning, operating concepts, cost planning, event management, workplace setup including laptop/mobile phones/telephony, remote support, print servers
• Selecting suitable external service providers and planning to meet needs for spare parts, repairs, on-site service, network and workplace support including on-site system replacement by providers
• Choosing suitable external service providers for facility management and building technology (fiber optic connections, data center infrastructure, cable ducts etc.)
• Coordination with clients and service providers
• Escalation management, schedule control
• On-site presence for service meetings and managing service providers

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Requirement engineering for Ombudsstelle and creation of technical user stories for EPA V3
• Handling of objections and revocations via mail and letter with high transaction mail volume
• Coordination with other teams on interfaces
• Design of a highly available, high-throughput solution on OpenShift with Java backend microservices
• Implementation and extension of microservices
• Infrastructure setup for deployment on OpenShift/Kubernetes including Jenkins pipelines
• Integration with BitIAM, TI-M Fachdienst, Consent Keeper and FDV
• Capture of requirements from DevOps operations and business units
• Continuous integration and Scrum practices
• Use cases: Kassenfusion, Opt-Out, Last Test, Widerspruchsmanagement
• Integration test automation and feature extensions including Spring Boot 3 updates

• Led a large-scale transformation project to replace a complex multi-provider/multi-technology infrastructure with a unified single-provider platform
• Overall responsibility for planning, controlling, and implementing the migration of all LAN, WAN, and WiFi components at national and international locations under high availability and security requirements (critical infrastructure)
• Developed and implemented the migration strategy, including a detailed rollout roadmap and risk management plan
• Managed interdisciplinary project teams and coordinated service providers and internal stakeholders
• Ensured compliance with schedule, budget, and quality targets
• Introduced standardized operational processes and handed over to regular operations
• Close reporting to the steering committee and C-level

• Migrate company software to RHEL10
• Development in Bash, Python, C, Ansible