VPN Experts in Germany

• Operation and further development of the network and security infrastructure.

• Monitoring, analysis and resolution of network and security incidents.

• Cross-departmental collaboration with other teams on operations and further development, and reporting.

• Firewall vulnerability analysis.

• Firewall access requests.

• Troubleshooting IP communication issues on network and firewall infrastructure.

• Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.

• Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5

• Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI

Description of duties “Atruvia / HCL International” Role: HCL Notes Banking Support, Domino Administration / Migration / Operations Operations, administration and technical support of the HCL Notes/Domino environment in the Atruvia banking environment on behalf of HCL. As part of an international support team, the focus was on second- and third-level support as well as the processing, management and monitoring of SLA tickets in categories 1, 2 and 3. Duties included the technical analysis and resolution of incidents in the Notes/Domino environment, system administration, and the development and modification of Lotus Notes /Domino applications and LotusScript agents when a programming solution was required. Another focus was ticket dispatching: analysing and assessing incoming tickets, assigning them to the responsible departments and specialist teams, and subsequently coordinating and tracking processing within the agreed SLA periods. There was also direct communication and coordination with subject-matter experts, departments and end customers of the connected banks. In particular, when language or technical communication problems arose within the international support team, German-language customer communication was handled and mediation between customers and technical specialists was provided. Objective Ensuring stable and reliable operation of the HCL Notes/Domino landscape in the Atruvia banking environment and the timely processing of business-critical support cases in line with the agreed Service Level Agreements. Incidents were to be analysed as early as possible and either resolved directly through administrative measures or suitable LotusScript/Notes solutions, or forwarded specifically to the responsible specialist teams. As of: 25.09.2026 (Version 2.10 LITE) including project times Page: 3 of 32 SPO-SOFT EDV Beratung, Dipl.-Ing. Klaus Kano, Tel.: +494532-2767682, Mail: [email], [link] At the same time, qualified preliminary analysis and targeted ticket dispatching were intended to ensure that every ticket reached the technically and professionally responsible department immediately and that unnecessary transfers, processing times and associated costs were reduced. Result Operational Notes/Domino support for the banks served was reliably ensured throughout the entire project period. SLA-relevant tickets were systematically analysed, prioritised, assigned to the responsible departments and tracked through to resolution. Some incidents were resolved directly through administration, technical error analysis and the development of suitable LotusScript agents and modifications to Notes/Domino applications. By directing tickets specifically to the relevant expert and specialist teams, incorrect assignments and unnecessary processing loops were reduced and compliance with the agreed SLA times was supported. Direct communication with the banks and mediation between German-speaking end customers and the international support team also contributed to efficient problem resolution and high customer satisfaction.

As part of this project, the existing active network infrastructure was modernized and made fit for the future. The goal was to introduce a powerful, secure and scalable network and WLAN infrastructure, including a Network Access Control (NAC) solution to improve network security and centralized access control.

At the beginning of the project, a comprehensive requirements analysis was carried out, taking into account the technical, operational and security-related requirements of the hospital sites. On this basis, a technical tender was prepared for new switches, WLAN access points and the NAC solution.

The successful implementation of the project established a modern, standardized and secure network infrastructure that meets the growing requirements for availability, mobility and IT security in hospital operations.

Activities:

• Supporting the tender process, including technical evaluation of offers and bidder evaluation
• Leading and managing the entire project implementation
• Coordinating the project process with internal stakeholders, business units and hospital IT
• Managing external service providers during the implementation and installation of the systems
• Monitoring the implementation, including quality control, project acceptance and defect management
• Coordinating and managing communication between hospital IT and external service providers as part of the NAC implementation
• Managing escalations in the event of technical and organizational challenges
• Ongoing budget monitoring and control of project expenses and additional costs
• Preparing decision papers for management on project changes, additional services and risks

Maturing their API practices on both a business and technology level. My role covers strategy, architecture, developer advocacy as well as hands-on software engineering, enabling both technical teams and business leadership to adopt and act on API-centric principles effectively. Coincidentally, we also establish GitOps, DX and platform best practices with this project.

Highlights:

• Aligning executives with the initiative by clarifying strategy, replacing misconceptions and myths with facts, clarifying the value of existing assets and enabling informed decision-making
• Formulating a way forward for API Lifecycle Management at OTTO
• Driving platform progress and fostering developer engagement by hands-on engineering work towards strategic goals

API Lifecycle Management, Team Topologies, Organizational Evolution, Regulatory, Platform Advocate, Developer Platform, Communities of Practice, Terraform, Kotlin, Kafka, Kong, WSO2, Apigee, Gravitee, Backstage, AsyncAPI, OpenAPI, API Design, AWS, React, Node.js, TypeScript, Redocly, reactive programming, CDC, Golang, Gin, GitOps, DX (developer experience), stakeholder management, roadmaps, workshops, discovery.

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

• Implementation of a full-stack application with Angular as frontend framework and Java as backend language
• Use of the Swagger OpenAPI specification for REST communication between frontend and backend applications
• Control of a card printer via the Nexus Card SDK framework
• Design and implementation of card management software with web interface and JavaFX module for printer monitoring
• Use of Cucumber tests for test automation and creation of test artifacts for testing outside the development environment
• Use of Wireshark for network investigations to analyze the API of a third-party product and to check the REST API of the self-developed software

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Multi-Agent Document-Generation Platform

Problem:

Turn a single prompt into a well-researched, structured and cited document, while keeping the user in control: every stage can be reviewed, corrected or revisited before the system moves on.

Architecture:

A multi-agent system orchestrated by a central controller. More than 20 specialised pydantic-ai subagents (understanding, structuring, planning, research, writing, assembly, cross-reference check, glossary, citation, reference table and more) pass results forward through a shared plan persisted in Postgres (asyncpg); a runner layer dispatches each task by name to its agent, and mechanical steps such as formatting, table of contents and list of figures are deterministic code instead of LLM calls. Provider (Anthropic or OpenAI) is a configuration setting, and responses stream over Server-Sent Events.

Hosting & Infrastructure:

Stateless container run as a Scaleway Serverless Container on a private network with managed PostgreSQL, object storage for finished documents and assets, and centralized log shipping (Loki / Scaleway Cockpit), provisioned with OpenTofu modules and deployed through GitLab CI; usage is metered per API key.

My Contribution & Key Decisions:

• Central decision controller: a satisfaction classifier turns the user's free-text feedback into a verdict (keep working, advance, cancel or revise an earlier task), and a middleware applies it to the plan. Plan progression supports jumping back to earlier tasks and re-running the stages after them.
• Research and writing fan-out: planning produces a plan from which a research-design agent generates individual research tasks and a writing-design agent generates individual writing tasks, each linked to the research it needs. Every task runs in its own dedicated agent with its own conversation history.
• Self-review and human-in-the-loop: after each step a critical-thinking agent reviews the output; the user can accept, refine, or ask questions about a critique before the plan advances.
• MCP integrations: two remote MCP servers, web search and internal document search, connected through pydantic-ai with retries and long-running tool-call timeouts. Classifier agents decide per task whether web search is needed, and a small model condenses raw search results into structured findings before they reach the writing agents.

Usage Metering:

Clients authenticate with an API key validated against a key-management service; consumption is charged in credits calculated from token usage per model plus a markup, and exhausted quota is answered with HTTP 429.

• Technical management of parallel rooftop PV projects (Type A/B) from project planning through construction to completed plant certification
• Analysis of project requirements based on on-site inspections, planning reviews and evaluation of tender and project documents, and preparation of the findings for the internal planning department
• Derivation of work packages and milestones for each project, including structured filing in the client’s project documentation (SharePoint)
• Coordination of the planning phase between planning, procurement and executing trades
• Preparation of specifications and bills of materials as the basis for preparing quotations, and monitoring the timely submission of offers
• Coordination and monitoring of the construction phase, including schedule tracking and ensuring implementation in line with the plans
• Preparation and continuous updating of project schedules and project budgets across all projects
• Tracking of milestones, work packages and project progress, as well as early documentation and escalation of schedule and budget deviations to the overall project management
• Preparation of technical analyses of existing and planning data for each plant as the basis for the entire certification process
• Review, verification and compilation of all certification-relevant evidence: technical data sheets, manufacturer approvals, component documentation, test reports, type certificates and simulation results
• Assessment of the completeness and compliance of manufacturer documentation with applicable standards, identification of missing evidence, and requesting and tracking missing documents from manufacturers and installers
• Preparation and technical review of declarations of conformity for the grid connection of the plants
• Preparation of complete plant certification documentation for Type A/B in accordance with the applicable VDE application rules, the grid operators’ technical connection requirements (TAB) and the requirements of the certification bodies
• Review and documentation of protection concepts, as well as definition of the certification scope for each plant in technical coordination with the grid operators
• Submission of documents to grid operators and accredited certification bodies, follow-up on queries through final approval, and deadline management across parallel procedures
• Management of interfaces between the client, manufacturers, installers, grid operators and certification bodies, as well as complete project documentation with status overviews, communication logs and approval documents

Cloud Journey Kickoff on STACKIT

• Helped the client kickstart their cloud journey on sovereign EU STACKIT platform.
• Bootstrapped IAC & GitOps architecture with Opentofu and ArgoCD.
• Setup platform fundamentals for a fresh, holistic cloud experience: Kubernetes, external secrets, certificate management, gateway API, DNS & routing, observability basics.

Gronic Ident & Sign

Core technologies: Android, Jetpack Compose, Retrofit, Regula Document Reader, Adobe Sign

Android app on dedicated devices for identifications and electronic signatures at the PoS

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Built and further developed an AWS landing zone based on Terraform / OpenTofu (multi-account structure, IAM baselines, network and security standards)
• Designed and operated platform-oriented AWS architectures to standardize infrastructure and operations processes
• Built and operated Kubernetes-based platforms (EKS) as a shared runtime environment for application teams
• Established GitOps-based deployments with Argo CD and FluxCD
• Developed and operated central CI/CD platforms (GitLab CI, GitHub Actions, Jenkins)
• Enabled development and project teams through reusable platform building blocks
• Introduced and implemented FinOps structures (AWS Cost Explorer, CUR + Athena, Infracost, Grafana dashboards)
• Built and operated central observability platforms (Prometheus, Grafana, Loki, Alertmanager, CloudWatch)

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)