Swagger Expert

Project – Evaluation and development of databases for a new product line for a measuring equipment manufacturer

• Current-state analysis
• Requirements analysis of the data storage layer
• Writing benchmark tests
• Design of the new database schema
• Database migrations
• Development of audit logging and Part11
• Creation of backup and recovery concepts
• Design of the persistence layer API
• Writing unit tests
• Creating requirements in Azure

Tools: C#, Visual Studio 2022, Azure DevOps, SonarQube, Git, RestSharp, WebServer, PostgreSQL, MS SQL, SQLite, MinIO, Podman, Docker, DataGrip, SQL Management Studio, HeidiDB, pgAdmin

Working Environment

• Insurance / Claims Management (Property, Liability, Automotive)
• REST-based ClaimAPI with Guidewire ClaimCenter

Scope

• Further development of the internal REST-based ClaimAPI with Guidewire ClaimCenter as the backend and various portals/front-end offices as clients, and with the following objectives: + increased AI-supported claims processing outside of Guidewire ClaimCenter + and support for all lines (property, liability, automotive).
• Further development of automated claims processing

Activities

• Interfacing IT & Business
• Design activities with documentation in Confluence, Jira: + Requirements engineering (functional and non-functional) + Design of REST endpoints and coordination with interface partners (esp. AI-colleagues) + Identification, design and evaluation of alternative solutions (moving away from a monolithic approach toward fine-grained endpoints, with code reuse across all lines if possible) + Creation / refinement of product backlog items in Jira, i.e. epics, user stories and tasks, incl. alignment with developers & POs during (pre-)refinement sessions + Using AXA Secure GPT when creating / refining user stories (description, acceptance criteria) and designing REST endpoints + Estimation and prioritization of user stories and tasks during Sprint Planning sessions + Coordination and support during the implementation of Product Backlog items + Driving decision making with preparation and presentation of decision-making documents
• Quality assurance: + Test management, including test case creation using Xray in Jira + Test execution using Bruno as REST client and in Guidewire ClaimCenter + Submission of test artifacts for PO approval + Analysis of production bugs

Methods Big Room Planning (aka PI-Planning in SAFe), Scrum, BPMN, EPK, UML, ERM, DDD

Tools / Tech Stack Teams, Confluence, Jira with Xray, OpenAPI/Swagger, REST, JSON, XML, MS Office, Bruno, GitHub repository (reading), Guidewire ClaimCenter, AXA Secure GPT (AXA's in-house GenAI solution based on Azure OpenAI)

• Built a scalable nearshore IT developer hub (Croatia, Czech Republic, Poland) as an independent company through a BOT model (Build – Operate – Transfer)
• Identified, selected, and managed full-service agencies; introduced management and control mechanisms, including KPIs, SLAs, and regular service reviews
• Prepared and reviewed data processing agreements and framework contracts in coordination with Legal & Compliance; integrated regulatory requirements (including KRITIS) into process design
• Advised on cloud vs. on-premise strategies, data storage, and authorization concepts; supported Procurement with tendering and service provider evaluations
• Managed change and process harmonization between internal teams and nearshore partners; reported to executive management, CFO, and CIO

Result: Scalable IT developer hub with an audit-ready governance model, reduced operating costs, and accelerated product development.

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Focus: System architecture, cloud-native platforms, microservices, API design
• Product: Pflege-Pfad is a digital placement platform that directly connects relatives of people in need of care with verified care services and caregivers – without an agency and without ongoing fees.
• Business analysis & process design:
• Analysis of the German care market and identification of the key pain points of both target groups.
• Modeling of core business processes: registration, verification, care request, application, placement, and rating.
• Definition of the business model as a freemium/premium model with optional contact unlocking.
• Creation of user stories and requirements documentation for relatives, care services, and administrators.
• Design of trust and quality assurance mechanisms with document upload, admin review process, and rating system.
• Coordination with stakeholders and validation of product decisions with potential users.
• Technical implementation:
• Design and implementation of the entire platform architecture as the sole developer.
• Design and implementation of a REST API with Spring Boot and Kotlin, including JWT-based authentication.
• Development of the frontend as a single-page application with Angular 17.
• Implementation of the AWS infrastructure with EC2, RDS PostgreSQL, S3, CloudFront, and IAM.
• Document upload with AWS S3 using presigned URLs to verify care services.
• Email notifications via Resend API.
• AI-supported care service search via OpenAI API.
• Implementation of complete user flows such as registration, login, password reset, and the placement process.
• Development of an admin panel for user and care service management as well as analytics.
• CI/CD with GitHub Actions and containerized deployments with Docker.
• End-to-end tests with Playwright.

Technologies: Kotlin, Spring Boot 3, Spring Security, JWT, JPA/Hibernate, PostgreSQL, Angular 17, TypeScript, RxJS, AWS (EC2, ECS, S3, CloudFront CDN, RDS PostgreSQL, IAM), nginx, GitHub Actions, Playwright, Maven, Git, OpenAI API, Resend API, Docker, Scrum, i18n (DE/EN/TR), Kiro, feature flag architecture.

• Implementation of a full-stack application with Angular as frontend framework and Java as backend language
• Use of the Swagger OpenAPI specification for REST communication between frontend and backend applications
• Control of a card printer via the Nexus Card SDK framework
• Design and implementation of card management software with web interface and JavaFX module for printer monitoring
• Use of Cucumber tests for test automation and creation of test artifacts for testing outside the development environment
• Use of Wireshark for network investigations to analyze the API of a third-party product and to check the REST API of the self-developed software

Project: Introduction of statutory-compliant electronic invoicing (outbound, Germany) in SAP for an international technology group.

• Project management: Planning, steering and reporting of the E-Invoicing outbound rollout across all affected business areas, including budget and resource coordination.
• UAT: Structured user acceptance test with key users per business area, test cases per invoice scenario, and consolidated test results for decision making.
• Defect management: Handover and tracking of defects in Jira, including validation of the generated invoices against the statutory schemas.
• Cutover, go-live and hypercare: Readiness checks and cutover planning aligned with the statutory deadlines, coordination of go-live and stabilization during hypercare.
• Stakeholder management and reporting: Alignment with Finance, Tax, business departments and IT, preparation of status reports and decision papers, and consistent follow-up of open items.
• Change management and documentation: Communicated process changes to the business departments, enabled key users, and created process and compliance documentation to ensure traceability and audit readiness.

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Designed a migration strategy for WLS applications to BKA Cloud and Stack IT

• Created a hybrid cloud for internal testing and development with Kubernetes

• Transformed the IT landscape from an outdated monolithic architecture to a cloud-based architecture

• Integrated new CI/CD processes using Azure Pipelines

• Quadrupled the processing throughput for personnel security checks

• Migrated personnel security screening applications to Docker-based applications

• Implemented CI/deployment pipelines using Azure DevOps

• Environment: Java Springboot, Kubernetes, Oracle Weblogic, OpenID, Camunda, JUnit, TOGAF

• Development of an AI-powered project organization tool for a civil engineering company that intelligently links project, task, tender, schedule, and document data through a knowledge graph.
• Implementation of AI features for document analysis, information extraction, context-based assistance, and voice-based data capture based on Microsoft Azure AI, reducing administrative effort, making information available faster, and supporting project teams in decision-making.
• Tech stack: Python, React, TypeScript, FastAPI, Claude Code, Codex, Graphify, PostgreSQL, Microsoft Azure AI Foundry, Azure OpenAI, Azure AI Speech, Azure AI Document Intelligence, Microsoft Graph, Microsoft Entra ID, Docker, Git, CI/CD.

Real-time AWS threat detection using LLMs, UEBA, and vector analytics

• Built UEBA engine processing millions of CloudTrail/GuardDuty events to detect behavioural anomalies in real time.
• Integrated Amazon Bedrock LLMs for narrative threat analysis and structured automated incident summarisation.
• Designed vector embedding pipeline (MongoDB Atlas) for entity behaviour comparison and semantic anomaly detection.

Tech: Python, FastAPI, AWS, MongoDB Atlas, Amazon Bedrock, Pydantic, Motor (Async).

Development and further development of an internal platform for managing and providing technical resources, virtual machines, and infrastructure services. The platform supports self-service processes and covers functions that are conceptually comparable to cloud management solutions like Azure or AWS.

• Responsible involvement in the design, development, and implementation of new backend and frontend features
• Hands-on development with Java, Spring Boot, Python, and Angular
• Implementation of REST interfaces, business logic, validations, and integrations into existing system landscapes
• Further development of modern web interfaces with Angular, including connection to backend services
• Participation in architecture and design decisions within the team, especially with regard to scalability, maintainability, and clean interfaces
• Containerization and deployment of applications with Docker, Kubernetes, and Helm
• Support with CI/CD processes and deployment to Kubernetes-based environments
• Work in the environment of vSphere, Broadcom, GitLab CI/CD, ArgoCD, Maven, npm, and NuGet
• Close collaboration with developers, business teams, DevOps, and other technical stakeholders
• Analysis of technical requirements, deriving suitable solutions, and independent implementation in an agile team
• Use of GitHub Copilot to support code generation, refactoring, test case creation, and technical documentation

Methods/ tools/ technologies: Languages & frameworks: Java (21), Spring Boot (4.x), Python, Angular, Robot Framework, Kubernetes, Helm Persistence: PostgreSQL, MongoDB, Hibernate, Liquibase Architecture & communication: REST, gRPC, GraphQL, Apache Kafka, OpenAPI, Microservices, Event Driven, Domain Driven Design Cloud & infrastructure: Terraform, Docker, Rancher, Helm, Ansible Security: OAuth2, MS (Entra ID), web security, Keycloak (extensions for detailed group rights) DevOps: GitLab CI/CD, Ansible, Maven, Gradle, Grafana, Prometheus, Git, GitHub Copilot Testing & QM: JUnit, Robot Framework, automated component and integration tests, E2E tests with Playwright, Testcontainers, EasyMock Methodology & approach: Kanban, JIRA, Confluence, Clean Code

• Led QA and test automation for a distributed industrial IoT and data-integration platform connecting shop-floor systems with enterprise applications.
• Designed and maintained automated API and UI tests using Playwright, TypeScript, and Python, covering REST APIs, authentication, resource management, integrations, permissions, and end-to-end workflows.
• Tested distributed services, data pipelines, messaging infrastructure, containerized applications, and integrations across Kubernetes, OpenShift, Docker, and Docker Compose environments.
• Performed functional, integration, regression, endurance, resilience, load, chaos, and exploratory testing across complex distributed systems.
• Used Chaos Mesh and Toxiproxy for network fault injection, latency, packet loss, and partition scenarios to validate system resilience and failure handling.
• Automated infrastructure provisioning, configuration, and environment setup with Ansible and managed deployments using Kubernetes and Helm.
• Tested integrations with industrial protocols, messaging systems, databases, HTTP/REST APIs, and external enterprise systems using simulators, emulators, and dedicated test environments.
• Worked with MQTT, Kafka, SQL databases, InfluxDB, REST APIs, OAuth 2.0, JWT, LDAP, Active Directory, OpenLDAP, mTLS, TLS, MFA, SSO, and RBAC.
• Investigated and resolved 40+ defects across backend services, integrations, distributed components, and web applications, using AI-assisted analysis with Claude to accelerate debugging, test design, and root-cause investigation.
• Improved deployment reliability through Kubernetes/OpenShift configuration and health-check tuning and monitored distributed systems using Grafana, Prometheus, and Loki.
• Collaborated with developers and product teams on sprint planning, technical refinement, quality strategy, release testing, and continuous improvement.
• Applied AI-assisted and agentic testing approaches to expand automated coverage and identify complex edge cases.

• Analysis of the existing CAN communication between microcontrollers
• Analysis of the sensors used and the measured values collected
• Planning the CAN messages for transmitting the measured values
• Iterative adjustment of the microcontroller code to the new CAN messages
• Cross-compilation from x64 to arm64