Telematics Experts in Germany

IT consulting, analysis, architecture design, new and further development, code review, test automation, continuous integration, continuous delivery in backend and frontend areas for Automotive Project Instavalo.

Frontend:

• Implementation of UI components according to specifications, especially style guides and responsive design eith React and Typescript
• Component testing
• Code documentation
• CI/CD with Gitlab Pipeline

Backend / IoT:

• Analysis and architectural design with AWS Greengrass IoT on Edge Devices
• Setting up Microservices containers with Docker Compose on Edge device with AWS Greengrass and AWS IoT IAM, Token Exchange Service, Ansible
• CI/CD with Gitlab Pipeline, Terraform, AWS ECR
• Logging with Fluentbit Lua Language for AWS Cloudwatch
• Python Lambda for AWS Greengrass Recipe deployment on Edge Devices
• Implementation of test-driven development with JUnit, Mockito, and code Coverage
• Jacoco
• Definition of REST interfaces with OpenAPI / Swagger
• Development and enhancement of software based on Java Quarkus, Typescript NestJs NodeJs and Python
• Authentication and authorization in Aws IAM
• Development of REST and gRPC interfaces for the frontend and backend
• Implementation of Maven dependencies with DevSecOps OWASP
• Spring AI, Jetbrains AI Assistant, Junie, Github Copilot, Claude Code, Agents, Skills, Command, Hooks, Subagents

• Short description: Lead a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations control while preserving the autonomy of decentralized business units within regulatory boundaries.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of an enterprise-wide cloud governance structure (Azure), incl. target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps) incl. decision-making and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework aligned with the Azure Cloud Adoption Framework (CAF), incl. landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), incl. cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts incl. RBAC design and "break glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operational and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance for lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from a hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "break glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Responsible for establishing and leading the Products & Portfolio division, consisting of three teams: UX/UR & BA, Projects & Portfolio, and Products & Innovations
• Currently managing three teams with 35 employees and 3 students
• Budget responsibility in the high single-digit million range
• Restructuring of the User Research, User Concept, and Business Analysis teams, including market and competitive analysis
• Development and implementation of a new portfolio management process (PMO), including new PPM software (Meisterplan)
• Establishment of project and program management standards
• Implementation of a new CRM and ERP system based on Microsoft Dynamics
• Market launch of tracking, security, and AI-based products (Live Shipment Tracking, Business Partner Check, TIMOCOM AI)
• Secured innovation funding for R&D activities in the single-digit million range

• Product responsibility for the central platform "one" as a group-wide web-based customer portal
• Coordination of the connection of 20 group companies to the product platform
• Derivation and steering of a group-wide product strategy and roadmap aligned with company goals
• Prioritization and bundling of strategic requirements from the various group companies
• Harmonization of different interests and moderation of complex decision-making processes at management level
• Ensuring the technical and business integration of the product into existing system landscapes, business processes, and business models
• Building transparent governance and decision-making structures for group-wide product development
• Representation of the product towards internal and external stakeholders at leadership level

Design and implementation of a compact ERP, CRM, accounting, and production-planning platform for a German food manufacturer. The system replaces Rechnung11, self-built Excel sheets, and manual processes for fewer than 10 internal users.

• Designed and implemented the full platform architecture as sole architect and developer.
• Built modules for customer management, B2B order handling, invoicing, production planning, and accounting support.
• Implemented DATEV export, ZUGFeRD/XRechnung e-invoicing, FinTS bank statement synchronization, and GoBD audit trail concepts.
• Used AI-supported workflows for prototyping, test support, and implementation acceleration while retaining full architecture, review, testing strategy, and technical ownership.

Technology: Java 23, Spring Boot 3, Spring Data JPA, Spring Security, Vue 3, TypeScript, PostgreSQL, Flyway, REST, OpenAPI, JWT, TOTP, RBAC, DATEV, FinTS, ZUGFeRD, XRechnung, GoBD, JUnit, Mockito, Testcontainers, Playwright, Docker, GitLab CI/CD

• Freelance work as a consultant (workshops and coaching for small to midsize companies in the areas of lean startup methodology, digital & AI transformation strategy, agile culture, design thinking)
• AI training & certification
• Project Management

traigo is VTG's digital rail logistics and fleet management platform. It processes large volumes of telemetry, mileage, geofence, sensor and wagon-movement events in near real time and provides operational services for rail logistics customers across Europe.

As part of Team Customer Selfcare, I worked on the design, implementation, optimisation and operation of large-scale backend services and event-driven processing pipelines — covering both feature development and operational ownership of business-critical production systems. I also regularly acted as first responder for production incidents, data inconsistencies and performance investigations across multiple distributed services.

• Design and implementation of event-driven backend services.
• Migration and replacement of legacy processing pipelines.
• Development of replay / rebuild mechanisms for large event datasets.
• High-throughput asynchronous event processing on SNS / SQS.
• Database and query optimisation for PostgreSQL and DynamoDB.
• Design of scalable read / write models and aggregation pipelines.
• Production troubleshooting and operational support.
• Performance tuning and infrastructure scaling.
• Design and stabilisation of integration and system tests.
• Technical concepts, architecture documentation, and cross-team collaboration.
• Support the further development of existing GitLab CI/CD pipelines

Geofence & Wagon Stay Processing

• Algorithm to detect vehicles within geofences (entry, exit, dwell time).
• Event sourcing with guaranteed chronological order within the affected time window.
• Refactored geofence event and wagon-stay processing logic for performance.
• Resolved race conditions and event-ordering problems in distributed services; server-side filtering, aggregation and optimised query pipelines.
• Repair and replay tooling for corrupted or inconsistent movement data.

Fleet Metadata & Mileage

• Modernised the service; migrated storage from DynamoDB to PostgreSQL to improve traceability and accelerate new features.
• Scalable mileage aggregation and replay mechanisms.
• Read / write models and optimised queries for high-volume mileage calculations.

Sensor & Telematics Integration

• Integrated telemetry and sensor processing pipelines.
• Snapshot and state-calculation logic for sensor systems.
• APIs and persistence models for wagon sensor data; data-quality improvements.
• Further development of a service using gRPC for intra-service communication.

Movement Segment Processing & Routing

• Migrated services to new movement-segment event streams.
• Built replay and rebuild tooling for segment correction.
• Optimised throughput and reliability for high-volume event processing.

Condition Monitoring & Wagon Analytics

• APIs and backend services for wagon condition monitoring.
• Brake-wear prediction processing and wagon analytics functionality.
• PostgreSQL views and optimised query models for operational dashboards.

Operational Reliability - First Responder

• Investigated production incidents and distributed-system failures; DLQ analysis, replay and operational recovery.
• Tuned database performance and AWS infrastructure under production load.
• Improved observability, monitoring and operational tooling.
• Supported rollout strategies, monitoring and post-deployment stabilisation.

• Leading the Internal Sales and Sales Steering teams
• Change management
• Developing and appointing the Head of Internal Sales
• Clearing backlogs (inquiries, orders)
• Leading and taking part in several cross-functional projects
• Developing / implementing KPIs, deriving / initiating measures
• Further development of Hubspot CRM
• Reporting to the CSO

• Development and maintenance of IT architectures with embedded Linux systems.
• Designing, implementing, and optimizing backend applications and script-based solutions.
• Analyzing and resolving issues, including troubleshooting and user support.
• Developing and implementing security concepts for cloud solutions.
• Administering networks (DHCP, DNS, NTP, VPN).
• Technologies: Linux, PowerShell, Bash, Python, Ansible, Kubernetes, GitLab CI.
• Methods: Kanban.

• Innovation/pilot project eHealth Germany
• SaaS company in the media sector, NRW
• Secure software development lifecycle, NRW
• BSI IT baseline protection assessments for multiple clinics

• Design and supervise implementation, testing and rollout of end-to-end processes and system integrations (frontend & backend)
• Integrate with OEMs (Daimler, BMW/MINI) and CPOs (Ionity and others)
• Introduce CPO discount packages with lifecycle processes
• Implement consenting process for GTC & tariff updates and marketing opt-ins via SAP Emarsys
• Automate blocking/unblocking of customers and integrate MS Dynamics CRM and proprietary 3rd level tool
• Coordinate migration and go-live of new fleet portal
• Migrate PSP from Datatrans to Adyen (credit card, PayPal) and integrate SEPA/BACS with Adyen via webhooks
• Support and enhance OpenInformer billing engine: Oracle→PostgreSQL migration, PostgreSQL upgrade, regression test suite, performance troubleshooting, invoice relocation to Azure Storage
• Identify and analyze fraud cases and implement countermeasures
• Provide problem management, incident support and hypercare after major rollouts

• Identified and resolved AUTOSAR violations in master code to ensure compliance with automotive software standards
• Verified product requirements against implementations using DOORS, ensuring full traceability and alignment with ISO 26262
• Managed and refined JIRA tickets, documented processes in Confluence, and maintained version control via GIT/Bitbucket
• Performed post-rebase code cleanup and validation across branches to maintain consistency in automotive software development
• Applied quality management principles to ensure compliance with automotive SPICE/ASPICE processes, including DSP and audio-related software validation
• Leveraged knowledge of Xtensa chips for low-level optimization in automotive C/C++ embedded systems

• Analysis and optimization of business processes in financial accounting
• Customizing in SAP FI (e.g. company codes, chart of accounts, payments)
• Integration with other modules such as CO, MM, SD
• Consulting on legal requirements (e.g. GoBD, UStG)
• Support with month-end and year-end closing
• Creation of test plans (system test, integration test, UAT)
• Definition of test cases (e.g. postings, payment runs, dunning runs)
• Selection of suitable test data and scenarios
• Manual testing of posting processes (e.g. customer invoice, payment run)
• Validation of automatic postings (e.g. for MM credit memo)
• Checking interfaces (e.g. to subsystems or non-SAP solutions)
• Documentation of defects in the test tool (e.g. Jira, ALM)
• Analysis and feedback to developers or the customizing team
• Retest after bug fixes
• E2E tests with SAP Solution Manager (SOLMAN)
• Use of tools such as SAP CBTA or Micro Focus UFT

• Analysis
• Consulting
• Software design
• Development
• Automation
• Testing
• Deployment
• Architecture, development and deployment of various proof-of-concept applications around the integration of current AI interfaces including conversational, realtime voice, images and videos
• Developed best practices for working with agentic systems and AI in practice
• Created code templates