TypeScript Experts in Stuttgart

Designed and developed an AI-powered automation platform using n8n to analyze social media niches, identify target audiences, and automate marketing strategy generation. The solution combined AI agents, workflow orchestration, and data analysis to automate research processes and generate data-driven insights.

• Designed and implemented complex automation workflows using n8n
• Developed AI-powered analysis agents for market and audience research
• Integrated multiple APIs and AI services into automated workflows
• Built automated market, competitor, and target audience analysis pipelines
• Leveraged Large Language Models (LLMs) for information summarization, classification, and prioritization
• Containerized and deployed the platform using Docker

Technologies: n8n, AI Agents, OpenAI APIs, Prompt Engineering, LLMs, Docker, Linux, REST APIs, Webhooks

• Development of a SaaS platform for esports teams with roles, planning, statistics and billing
• Design and implementation of the architecture, external API integrations and operations
• Stack: Laravel 13, React 19, TypeScript, PostgreSQL, Redis and Stripe

Two complementary tracks: (a) building my own AI products and open-source tools under the Neckarshore AI brand, with a focus on AI-supported multi-agent development processes and documentation automation; (b) freelance support for industrial, logistics, and financial companies in IT-related transformation projects.

Current product portfolio under the Neckarshore AI brand:

• Omnopsis Documenter — AI-powered documentation engine: generates compliance, technical, and release documentation from Git, Jira, and Confluence. 500+ automated tests, 100+ API endpoints, RBAC, monitoring stack.
• TrustScope — trust analysis for public GitHub repos: deterministic three-pillar report (Security & Supply Chain, Governance, Community) based on OpenSSF Scorecard, with constructive fix suggestions instead of a single misleading score.
• md-viewer — dependency-free Markdown viewer for macOS (Finder Quick Action) and web, split view of rendered document and raw text.
• Obsidian Vault Autopilot — AI-supported vault automation for Obsidian × Claude Code: sorts the inbox, renames notes, enriches frontmatter.
• Phonesis Voice Bank — voice archive for families, hospices, and cultural archives (guided recordings, inheritable archive, optional voice cloning); currently in the GDPR compliance phase (Art. 9, biometric data).
• Multi-Agent Development Process — 12+ specialized agents (architecture, implementation, security, refactoring, marketing) with structured handoff protocol, parallel execution, and automated quality assurance — powers the entire product development.
• Freelance consulting: Technical Product Ownership for production, logistics, and compliance/AML systems; steering international rollouts including test, cutover, and change management.

Stack: NestJS, TypeScript, PostgreSQL, Redis/BullMQ, Next.js, Claude Code (Opus), Docker, GitHub Actions, Vercel

• Contributed to the design of the new financial services integration layer and moderated the architectural discussions
• Oversaw the security concept and approval of the application
• Prepared infrastructure setup and best practices for the Kotlin backend

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Implementing applications with Kotlin and Ktor as microservices
• Using MongoDB in the MongoDB Atlas cloud
• Asynchronous communication of services via Google Pub/Sub
• Using Kotest and MockK for unit tests
• Developing an administration frontend with TypeScript, React and Express.js
• Provisioning environments in GCP using Terraform
• Implementing CI/CD processes with GitHub Actions
• Operating scalable production and test environments in GCP with Kubernetes, Helm and Flux CD
• Monitoring environments with Prometheus and Grafana
• Providing BI data in the Google BigQuery data warehouse

• Design of a new cloud service
• Requirements Engineering
• API Design (REST API, Kafka)
• Consulting on architecture, feasibility and effort estimation
• Implementation of a microservice architecture
• Implementation of a Spring Boot web service
• Development of REST APIs including business and persistence logic
• Kafka consumers and producers
• Various Excel upload/download scenarios
• Change Data Capture
• Cloud provisioning with IaC/Terraform
• Go-live with 30,000 users
• Operation, support and bug fixing for other services

Environment/tools: GitLab, JIRA, Confluence, IntelliJ, Spring Boot, Java, Docker, Terraform, AWS ECS, Postgres, Apache Kafka, SAP Datasphere, JUnit, Debezium, Apache POI, Hibernate, JPA, Testcontainers

• Development of a microservice application for calculating postings on accounts

• Development of backend components with Java or JEE, Quarkus, Kafka, Rest API

• Development of the test component with mocking frameworks (Mockito)

• Development of integration test components

• Creation of OpenAPI specification format

• Configuration of CI/CD pipeline

• Development of frontend components with React

• Design, further development and optimization of system structures

• Code review

• Java Corretto 21, JEE, Quarkus, Golang

• Reactive programming with Spring WebFlux, Project Reactor

• Git, Azure DevOps for CI/CD pipeline, YAML, Json Swagger UI, Postman, Rest OpenAPI, Kafka Streams, Kafka Connect, Log4J

• Microservices, Jira, Confluence, MySQL, Docker, Kubernetes (deployment via Helm charts)

• Spring Security, OAuth 2, JWT, Sonarqube

• IntelliJ, Maven, logging framework Splunk, Agile method Scrum, Nexus, Vaadin V24, build tool Vite

• React, React.JS, Node.js, Jess/JavaScript, Tailwind CSS, Agile method Scrum, accessibility BITV, Playwright

• Due to an organizational restructuring towards product-based teams, the implementation of a Data Mesh in the area of Digital Supplier Management (DSM) was decided.
• A highly available real-time Data Mesh for providing large volumes of data via Kafka and REST to other products.
• New development of a core supplier management software in a (micro-)service-based architecture with a modern tech stack.
• Technologies/Tools:
• Java 21
• Spring Boot
• Angular
• TypeScript
• Go
• MapR
• Kafka
• Docker
• Google Cloud Platform (GCP)
• Kubernetes
• Helm
• GitLab CI
• Maven
• JUnit
• Mockito
• WireMock
• Cypress
• Keycloak
• OAuth 2.0 & OpenID Connect
• Humio
• Nexus
• Artifactory
• SonarQube
• Renovate
• Git
• Postman
• IntelliJ

• Development of a wealth management application for investing in foreign currencies
• Full-stack development with Angular, Spring Boot, OpenShift, Oracle DB, Kafka
• Design and implementation of a microservice architecture
• Integration into Atruvia's BWS system and connection of multiple interfaces between Atruvia and DZ Privatbank
• Greenfield development of the application from the ground up
• Technical responsibility for architecture and interface design
• Close collaboration with business units and external stakeholders

• Managing director (CTO/CFO) and founder of Savvi and Sparklyft
• Management of the entire product team incl. development team & content team
• Responsible for product strategy, go-to-market, project management, integration projects, business planning, etc.

• NocTime time tracking, workshop planner, meal delivery service app
• LLM-based chat bot to control the NocTime time tracking system via voice input
• New and further development of customer solutions based on the Noctica SAS app framework
• Technologies: Java 17, Spring Boot, JPA, Hibernate, JavaScript, TypeScript, Angular 20, Angular Material, React, C#, Docker, Bash, Git, GitLab, RedMine, SQL, DBeaver, MariaDB, PostgreSQL, Python, TensorFlow, Ollama, various LLMs

• Improved backend performance by 30% and reduced downtime by 25% by optimizing database queries, fixing memory leaks, and implementing advanced monitoring tools.
• Delivered revenue-generating upsell features, integrated Apple/Google Wallet, and streamlined guest check-in/out with a redesigned frontend.

• Developing hybrid web apps for Android/iOS (Frontend)
• Planning and steering of product roadmap as Product Owner
• Responsible for all gamification topics