Vue.js Expert

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.

• Designed and operated a highly scalable microservice and serverless architecture
• Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
• Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
• Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
• End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
• Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
• Robust backup and disaster recovery strategies
• RDS Postgres backups and hourly snapshots
• Read-only, asynchronously synchronized replicas with automated master failover in emergencies
• Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
• Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
• Integrated Stripe for international payment processing
• Built a marketplace payment system with multiple parties and payout routines
• Used Algolia for high-performance real-time search of digital assets on the platform
• Federation of services with GraphQL and Hasura
• Later migration to GraphQL Mesh
• Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
• Used Next.js / React for modern frontend applications in the nx monorepo
• Enterprise security architecture & access control
• Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
• Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
• Built internal microfrontends with Retool for fast prototyping and operational business processes

Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest

• LLM-based features for automated CO₂e data extraction from unstructured documents (70% reduction)

• Agentic AI pipeline for automated Scope 3 emissions calculations with 150.000+ validated data records

• Intelligent API workflows for real-time carbon footprint calculations in ERP and ESG systems

• ML algorithms for predicting emissions hotspots and optimizing product design

• Automated data validation pipelines with NLP for quality assurance of CO₂e datasets

• Led a 15-person cross-functional team in developing 10+ AI features

• Strategic product planning and AI roadmap with 35% shorter time-to-market

• Stakeholder management with DAX companies (40% higher satisfaction, 95% retention)

• On-time project delivery with 95% budget adherence through data-driven backlog management

• Agile methods (Scrum, Kanban) with continuous AI/ML integration (25% increase in team velocity)

• Product-market fit for AI features through A/B testing and analytics (60% higher adoption rate)

Sub-project lead in an agile IT environment

Leading a software development team (10 employees)

• Leading a software development team with 10 employees
• Budget responsibility approx. 3 million euros per year
• Conducting employee and job interviews
• Responsibility for resource planning (budget and employees)
• Digitalization of a web interface
• Regular reporting to customers and stakeholders (C-level)
• Product management: developing and implementing product strategies; defining requirements to guide product development
• Structuring product development & continuous testing efficiently to quickly incorporate feedback & compliance points
• Close collaboration with stakeholders & various teams to understand requirements, set priorities, ensure rollout, and increase user-friendliness
• Project experience in an energy industry company, including the functioning of energy markets, the basics of energy generation and distribution, as well as current challenges and developments in the industry
• Project experience in the railway sector - including the structure and operation of railway systems.
• Project experience within the 16.7 Hz traction power sector incl. knowledge of regulatory processes
• Formulating the sub-project charter and the project profile according to the project standard together with the project management
• Controlling service delivery according to the project charter
• Planning and controlling human resources including budget planning for the sub-project
• Ensuring the work capacity of the sub-project participants, e.g. by requesting access rights and documents for the sub-project team
• Planning and control for the respective sub-project (time, scope, budget) including the creation of necessary documents
• Alignment with the business department and Product Owners to plan the sub-project scope and the corresponding implications
• Executing milestone planning according to the agreed process model
• Effort estimation and support of sub-project controlling as well as overall project controlling in forecasting and planning
• Reporting sub-project status (according to status slide template) including progress (according to progress measurement)
• Analyzing, preparing, and addressing action and decision requirements
• Escalating sub-project issues to the project management
• Creating and managing Change Requests (CR)
• Quality assessment of completed task packages from a project management perspective (time, scope, and budget)
• Implementation management of the overarching guidelines and requirements in the sub-project, supported by cross-functional roles on the functional and technical side.
• Identifying, managing, documenting, and communicating opportunities, risks, and dependencies within and across sub-projects
• Supporting project management in creating the overall project plan and overall status reports
• Preparing and managing commissioning including the required documents and protection needs assessment

Scrum Master in an agile IT environment supporting a software development team in the full-stack area (7 people)

• Close collaboration with stakeholders & various teams to understand requirements, set priorities, ensure rollout, and increase user-friendliness
• Implementation of the selected Scrum method, including the required events, meetings, artifacts (product backlog, sprint backlog, burndown charts), metrics, as well as conducting required training in an agile IT environment
• Preparation of Scrum events such as Daily, retrospectives, Review, Sprint planning, estimation, and refinement (agile way of working)
• Moderation of retrospectives and elimination of obstacles to move the team and product forward
• Preparation of action items and retros via whiteboard and Figma
• Application and improvement of agile methods such as Kanban, Scrum, SAFe, or Scrum of Scrums
• Tracking the "Definition of Done" and "Definition of Ready" for all work results of the development team
• Advising on information flow and communication improvements between Product Owner and project team
• Experience with automation, validation such as mandatory field checks, notification functions, creation of filters, boards, and reports via JQL, and setting up cycle time
• Use of Jira & Confluence
• Setting up a progress measurement for project management to transparently map planned vs. actual team capacities and actual efforts for user stories
• Measuring team progress: creating team KPIs: "velocity", "burn-down chart", "throughput", "costs", "quality", "scope"
• Evaluation of agile metrics, process management, and process modeling methods (BPMN, EPC, UML)
• Communication and moderation know-how
• Methodological competence proven in conflict discussions

• Further development of the existing e-commerce platform based on SAP Commerce (Hybris) to meet the growing demands of digital commerce.
• Ensuring the scalability and performance of the backend, so the platform remained stable and efficient even under heavy user load.
• Development and integration of new OCC REST APIs and services for modular extensions and flexible adjustments, to implement new features quickly.
• Optimization of data flows and interfaces, which significantly improved platform efficiency and system performance.
• Ensuring a maintainable and scalable code base by using Clean Code principles, proven design patterns, and a future-proof architecture.
• Reduction of errors through extensive testing with JUnit, Mockito, and load tests with Gatling, supported by the introduction of automated test processes.
• Improved system performance through targeted refactoring measures and efficient database queries, especially to handle peak loads.
• Use of modern cloud and monitoring tools such as Kubernetes, Google Cloud Platform (GCP), and Grafana to ensure a stable and monitored infrastructure.
• Clear improvement in efficiency, scalability, and reliability of the platform, which now meets the demands of a dynamic and growing e-commerce market.

• Building a data integration platform for high, medium, and low voltage assets for contextual analysis of time series with master data from the SCADA control system (IEC 60870 104), INIS, and SAP.
• Responsibility for the architecture and implementation of the solution, as well as sparring partner for the Product Owner.
• Use of Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter, and various API gateways.

• Development of scalable backend applications with C#/.NET and Java
• Design and implementation of distributed microservice architectures
• Development and integration of REST APIs for industrial applications
• Development of modern web applications with React, Angular, and TypeScript
• Implementation of MQTT-based communication solutions
• Integration of industrial protocols such as OPC UA and Modbus TCP
• Development of batch, process control, and HMI components
• Containerization and deployment of applications with Docker
• Conducting code reviews and supporting architecture decisions
• Close collaboration with product owners, QA, and interdisciplinary teams
• Analysis of business requirements and implementation of technical solutions
• Further development of existing software architectures with a focus on maintainability and performance

Technologies: C#, .NET, ASP.NET Core, Java, C++, React, Angular, TypeScript, Vue.JS, MQTT, OPC UA, Modbus TCP, Docker, GitLab, MariaDB, MySQL, Linux

Embedded Analytics & AI-assisted BI

Design and development of an integrated analytics solution based on ASP.NET Core, Power BI Embedded, and LLM services to provide context-based business information.

Development of an AI agent with Function/Tool Calling for the secure orchestration of REST APIs, SQL data sources, and technical services within defined business processes.

Building automated BI workflows including workspace management, deployment processes, and scheduled refresh via the Power BI REST API.

Implementation of secure service-to-service communication with Microsoft Entra ID and Service Principal, and integration into existing enterprise system landscapes.

Technologies: ASP.NET Core, C#/.NET, Power BI Embedded, Power BI REST API, LLM API, AI Agents, Function/Tool Calling, Entra ID

• Training AI models, evaluating images and text UI/UX, turning the provided data into insights through OpenAI Feather as part of the machine learning workflow

Technologies: OpenAI Feather

• Short description: Lead a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations control while preserving the autonomy of decentralized business units within regulatory boundaries.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of an enterprise-wide cloud governance structure (Azure), incl. target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps) incl. decision-making and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework aligned with the Azure Cloud Adoption Framework (CAF), incl. landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), incl. cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts incl. RBAC design and "break glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operational and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance for lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from a hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "break glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Self-hosted table tennis equipment platform.
• Development of a custom “Racket Builder” that uses a co-evolutionary genetic algorithm to identify, evaluate, and recommend the optimal combinations of racket blades and rubbers based on physics heuristics and player data within a search space of over 4 billion combinations.
• Development of a custom fully automated web crawler to capture equipment specifications, integrating an automated pipeline for image normalization as well as data harmonization via DeepSeek.
• Cloudflare Edge Workers written in Rust to perform low-latency data searches and offload computationally intensive simulations from the main server.
• High performance and accessibility standards across a large Nuxt 4 codebase achieving 95–100/100/100 Lighthouse scores.

• SPA for automated communication of medical findings with role-based access (Sanctum)
• Server-side LLM integration (OpenRouter) with structured processing
• Automated sending via SMS/voice call (Twilio, ElevenLabs) with queue + status retry
• Full test coverage with 80+ documented test cases

Technologies: PHP, Laravel, LLM API (OpenRouter), Twilio, ElevenLabs, Laravel Sanctum, PHPUnit, Playwright, Docker, REST

Task:

• Design and build a proof of concept (PoC) for a future-proof virtualization platform, taking secure system architectures into account
• Assess the current state of existing infrastructures and develop selection and evaluation criteria for the right OS virtualization platform
• Carry out the requirements analysis and then create and prioritize tickets in the ticket system
• Complete and continuously update a tool evaluation matrix based on PoC results
• Support team knowledge building through clear documentation of the approach and results in Confluence
• Enterprise analysis of existing hardware (creating different BoMs)

Technologies: Vmware, Vmware Aria Operations, Osism, Canonical OpenStack, FishOs, Linux, Terraform, Ansible, Confluence, Alma

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.