SUSE Linux Enterprise Server Experts in Germany

• PMO Lead Security Clearance 2 (SÜ2) verified
• Reporting to the GMN sub-program management
• System maintenance 25+
• Functional management and coordination of the Jira setup
• Preparation of decision papers (e.g. project planning, governance model, communication plans, controlling models, roles and responsibilities matrices)
• Development of program-wide knowledge management using Confluence, creation of Jira concept
• Development of an access concept for all project tools
• Analysis of existing processes, identification of improvement potential, and design of solutions to increase efficiency and effectiveness
• Development of a concept for introducing automation approaches into existing tools
• Creation of intranet articles for project marketing
• Responsible for project governance through reporting and resource planning in the sub-program
• Agile development of the project methodology
• Gathering customer requirements (Requirements Engineering)
• Preparation and support of contract negotiations (7-year term, 500+ million budget)

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

Project: Process optimization & IT support in an insurance broker office.

Project activities:

• Analysis of processes and definition of requirements
• Consulting for the implementation of a cloud solution (soho)
• Installation and verification of new infrastructure HW
• Cloud installation & configuration
• Definition and creation of use cases
• Performing user acceptance tests (UAT)
• User training / training
• IT support (cloud, PC, server, printer, network)

Label: Insurance, infrastructure, configuration, training, support

• Further development of the existing e-commerce platform based on SAP Commerce (Hybris) to meet the growing demands of digital commerce.
• Ensuring the scalability and performance of the backend, so the platform remained stable and efficient even under heavy user load.
• Development and integration of new OCC REST APIs and services for modular extensions and flexible adjustments, to implement new features quickly.
• Optimization of data flows and interfaces, which significantly improved platform efficiency and system performance.
• Ensuring a maintainable and scalable code base by using Clean Code principles, proven design patterns, and a future-proof architecture.
• Reduction of errors through extensive testing with JUnit, Mockito, and load tests with Gatling, supported by the introduction of automated test processes.
• Improved system performance through targeted refactoring measures and efficient database queries, especially to handle peak loads.
• Use of modern cloud and monitoring tools such as Kubernetes, Google Cloud Platform (GCP), and Grafana to ensure a stable and monitored infrastructure.
• Clear improvement in efficiency, scalability, and reliability of the platform, which now meets the demands of a dynamic and growing e-commerce market.

• Project: ESU Windows and SQL Server consolidation / Configuration Management in ServiceNow
• Creation of an as-is analysis of all servers worldwide
• Creation of an as-is analysis of all SQL servers worldwide
• Creation of requirements analyses for SQL and server migrations
• Coordination of requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
• Moderation of jour fixe meetings
• Creation of roadmaps and solution models for server migrations
• Setup of test scenarios
• Moderation of workshops for the introduction of a Global Admin Team
• Creation of data models (CMDB) in ServiceNow
• Conducting workshops for the CMDB data model
• Creation of solution models for the CMDB
• Creation of seamless configuration and work documentation for the CMDB
• Creation of reports for license management
• Creation of KPIs for data quality in ServiceNow
• Creation of a service catalog
• Moderation of workshops for creating service requests
• Interface between needs analysis and ServiceNow development team
• Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools

• Development and introduction of operations processes
• Preparation of complete documentation packages (including incident management and operations support) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Technical consulting for the project security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Hybrid cloud architecture design (on-prem, Hetzner, AWS)
• Analysis and troubleshooting of incidents and system outages
• Network adjustments for firewall rules, gateways, OpenVPN settings, and IPsec tunnels (pfSense)
• Technical consulting on Bitbucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

As project manager for the Odoo implementation at a small company, I was responsible for designing, implementing, and training a fully integrated CRM and accounting system. Through structured requirements analysis, precise data migration, and targeted change management, I was able to complete the rollout in just eight weeks. The project led to a significant reduction in manual tasks, faster business processes, and increased real-time transparency.

Main Responsibilities

Requirements analysis and process mapping Configuration of Odoo modules: CRM, Sales, and Accounting Data migration (Excel/CSV → Odoo) and quality control Creation of workflows, automated email rules, and dashboards Conducting training sessions and providing support after go-live Project coordination (budget, schedule, stakeholder communication)

Key Achievements

Full implementation of the Odoo suite within the set timeframe (8 weeks) 30% reduction in accounting time and 25% acceleration of the lead-to-sale flow 100% customer satisfaction after go-live, based on survey results Successful migration of 100% of existing master data without data loss Establishment of a sustainable support infrastructure (3-month post go-live support)

Impact

Improved decision-making through real-time dashboards and automated reports Increased efficiency and cost savings (≈ €8,000/month) Scalability for future growth (additional modules can be integrated seamlessly) Strengthened sales and finance departments through seamless process integration

This summary highlights how I created concrete and measurable value for the company through structured project work, technical expertise, and targeted training.

Development and evolutionary further development of a highly available, cloud-native microservice and integration architecture for dealer and retail processes in the Porsche Car Configurator.

Responsibilities

• Development of Java-/Kotlin-based backend, API, and integration components (Spring Boot)
• Integration of internal and external systems via REST/OpenAPI, GraphQL, Apache Kafka, and AWS SQS (synchronous and asynchronous)
• Implementation of stable, high-performance communication and data flows in a cloud-native platform architecture
• Processing of structured data formats (JSON, Protobuf, GraphQL schemas) based on existing API patterns
• Performance optimization of distributed microservices with reduced response times and higher operational stability
• Technical tests (unit, integration, and API tests) as well as error analysis in production-like environments
• AWS Infrastructure as Code with Terraform and AWS CDK
• CI/CD automation (build, test, and deployment pipelines) with GitHub Actions
• AI-supported feature implementation (GitHub Copilot Agent)

Label: Kotlin, Java 25, Spring Boot 4, Protobuf, TypeScript, AWS, Terraform, CDK, Apache Kafka, AWS SQS, REST/OpenAPI, GraphQL, JSON, PostgreSQL, Docker, GitHub Actions, Maven, Gradle, JUnit, Mockito, Testcontainers

• Designed, built, and launched an internal event planning web application used by over 100 department leads for a large event, despite having no dedicated testing phase.

• Ensured smooth, failure-free operation during first production use, leading to the tool being adopted for future events.

• Automated catering calculations and related workflows, significantly reducing email communication and manual computation effort for meal planning.

• Managed deployment and hosting on a Linux server using Coolify, including application setup and runtime operations.

• Hired and guided a communication designer on UX while independently owning all technical decisions and implementation.

• Design and build of a fully isolated AWS offline environment with no outbound internet access for running a browser-based business application
• Design and implementation of a proxy and response service that terminates all external application calls inside the VPC and serves them from locally stored content; identification of the actual communication needs through measurement-based DNS query logging
• Creation of architecture designs and decision papers including a comparison of options (Application Load Balancer with Lambda and S3, reverse proxy on EC2, private API Gateway) assessed by operational effort, cost, and availability
• Transfer of the solution and operations documentation previously available only for Azure to an AWS target architecture, including reassignment of all services and operational processes
• Automated rollout as Infrastructure as Code (Terraform, CloudFormation) with CI deployment via GitHub Actions, plus setup of private DNS zones and an internal certificate chain for operation without internet access
• Creation of architecture, deployment, and operations documentation and handover to the customer
• Build-up of a private cloud platform on OpenStack at provider TelemaxX with Terraform, including FortiGate HA clusters, FortiManager, and Kubernetes
• Introduction of Policy as Code (Open Policy Agent, Conftest) as well as development of MCP servers (Model Context Protocol) to connect AI assistants to operations and project tools

Successes:

• Made the business application fully operable without internet access for the first time; the cause of the loading error was narrowed down systematically to missing CORS headers after the likely certificate issue was ruled out
• Fully transferred an existing Azure concept to AWS and replaced the manually created environment with a reproducible, CI-based rollout

Technology stack: AWS (VPC, Application Load Balancer, Lambda, S3, Route 53 private hosted zones and Resolver query logging, IAM, CloudWatch, EC2, CloudFormation), Infrastructure as Code (Terraform, CloudFormation, Remote State), CI/CD (GitHub Actions with OIDC, Azure DevOps Pipelines), OpenStack, FortiGate, FortiManager, Kubernetes, Policy as Code (Open Policy Agent, Conftest), offline and air-gap architectures, PKI & certificates (internal CA, TLS, CRL/OCSP), DNS, network segmentation, Linux, Windows Server, Python, Bash, PowerShell, YAML, JSON, architecture design & decision papers, documentation (Confluence, Markdown), Generative & Agentic AI (Model Context Protocol, Agentic AI Coding Tools)

• Transition of Microsoft Azure operations to BTC AG
• Responsibility: budget of €60k
• Staff: leadership of 5 people
• Tools: Office 365, JIRA, Confluence

• Adaptation, optimization, configuration, and administration of a multi-stage GitLab instance with over 250 users
• Setup, adaptation, expansion, and optimization of infrastructure, configuration, and monitoring
• Provisioning of services and handover to production
• System environment: DependencyTrack, GitLab, Grafana, Hedgedoc, Kubernetes, Oauth2 Proxy, Openstack, Prometheus, Syseleven

• Installation, maintenance and regular upgrade of the DB systems with 19x
• Use of OPatch and RU 19.27 on RHEL 8x, SLES 15.x and Windows
• DBA for DACH and European customers in production and last test environments (e.g. Konrad Adenauer) as well as others in CDB
• Processes via Confluence
• Support in operations for customers SR via Metalink