Vue.js Experts in Germany

• Development of cloud native applications to provide a multi-vendor marketplace for different digital assets (e.g. NFTs)
• Design and operation of a microservice architecture using Nest.js, MySQL, Redis, Hasura, Algolia, Docker and Serverless
• Design and operation of a streaming data architecture using Kafka (with JSON Schemas)
• Creation of CI/CD pipelines with GitHub Actions for automated deployment of applications
• Testing and evaluating new technologies for more stable, faster, safer and more sustainable application development
• Building the full infrastructure with Terraform in AWS
• Integration of Stripe to handle international payments
• Use of Algolia for real-time search of digital assets on the platform
• Presenting results to stakeholders and running internal meetups
• Federation of services with GraphQL and Hasura
• Discussions about architecture decisions in the IT landscape and their impact
• Use of message queues for app-internal communication and component encapsulation
• Advising internal staff on the implementation of business and technical requirements
• Test Driven Development: unit, integration and E2E testing using JUnit
• Use of Next.js/React with SASS/SCSS for frontend applications
• Use of Vue.js with SASS/SCSS for frontend applications
• Integration of security-related mechanisms (JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA, secret vaults)
• Creation of microfrontends using Retool for fast prototyping and testing of functionality
• Use of nx monorepo with nrwl

• Further development of the existing e-commerce platform based on SAP Commerce (Hybris) to meet the growing demands of digital commerce.
• Ensuring the scalability and performance of the backend, so the platform remained stable and efficient even under heavy user load.
• Development and integration of new OCC REST APIs and services for modular extensions and flexible adjustments, to implement new features quickly.
• Optimization of data flows and interfaces, which significantly improved platform efficiency and system performance.
• Ensuring a maintainable and scalable code base by using Clean Code principles, proven design patterns, and a future-proof architecture.
• Reduction of errors through extensive testing with JUnit, Mockito, and load tests with Gatling, supported by the introduction of automated test processes.
• Improved system performance through targeted refactoring measures and efficient database queries, especially to handle peak loads.
• Use of modern cloud and monitoring tools such as Kubernetes, Google Cloud Platform (GCP), and Grafana to ensure a stable and monitored infrastructure.
• Clear improvement in efficiency, scalability, and reliability of the platform, which now meets the demands of a dynamic and growing e-commerce market.

• Building a data integration platform for high, medium, and low voltage assets for contextual analysis of time series with master data from the SCADA control system (IEC 60870 104), INIS, and SAP.
• Responsibility for the architecture and implementation of the solution, as well as sparring partner for the Product Owner.
• Use of Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter, and various API gateways.

• LLM-based features for automated CO₂e data extraction from unstructured documents (70% reduction)

• Agentic AI pipeline for automated Scope 3 emissions calculation with 150,000+ validated data records

• Smart API workflows for real-time carbon footprint calculations in ERP and ESG systems

• ML algorithms to predict emission hotspots and optimize product design

• Automated data validation pipelines with NLP for quality assurance of CO₂e datasets

• Led a 15-person cross-functional team to develop 10+ AI features

• Strategic product planning and AI roadmap with 35% shorter time to market

• Stakeholder management with DAX companies (40% higher satisfaction, 95% retention)

• On-time project delivery with 95% budget adherence through data-driven backlog management

• Agile methods (Scrum, Kanban) with continuous AI/ML integration (25% team velocity increase)

• Product-market fit for AI features through A/B testing and analytics (60% higher adoption rate)

• Development of scalable backend applications with C#/.NET and Java
• Design and implementation of distributed microservice architectures
• Development and integration of REST APIs for industrial applications
• Development of modern web applications with React, Angular, and TypeScript
• Implementation of MQTT-based communication solutions
• Integration of industrial protocols such as OPC UA and Modbus TCP
• Development of batch, process control, and HMI components
• Containerization and deployment of applications with Docker
• Conducting code reviews and supporting architecture decisions
• Close collaboration with product owners, QA, and interdisciplinary teams
• Analysis of business requirements and implementation of technical solutions
• Further development of existing software architectures with a focus on maintainability and performance

Technologies: C#, .NET, ASP.NET Core, Java, C++, React, Angular, TypeScript, Vue.JS, MQTT, OPC UA, Modbus TCP, Docker, GitLab, MariaDB, MySQL, Linux

• Training the AI models, evaluating images and texts for UI/UX, turning the provided data into insights via OpenAI Feather as part of the machine learning workflow

Technologies: OpenAI Feather

• Short description: Leading a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations management while preserving the autonomy of decentralized business units within regulatory frameworks.

• Tasks and activities:

• Overall responsibility for designing, building, and implementing a company-wide cloud governance structure (Azure), including target picture, roadmap, and operating model.

• Managing internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps), including decision and escalation management.

• Planning and facilitating workshops on cloud strategy, governance principles, and the design of areas such as identity, connectivity, and platform management.

• Defining, implementing, and rolling out cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework based on the Azure Cloud Adoption Framework (CAF), including landing zone and guardrail concepts.

• Introducing automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementing cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishing and operationalizing FinOps in an enterprise environment (central and decentralized FinOps teams), including cost management strategies, reporting, and guardrails.

• Integrating governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementing access concepts including RBAC design and breaking-glass mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud use in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risk.

• Improved operational and decision-making capability across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance during lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure Networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, breaking-glass concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Own full-stack development of an AI-native enterprise platform built on TypeScript, React, Vite, tRPC, Hono, and PostgreSQL, delivering AI-powered consulting workflows to B2B clients.
• Designed and shipped a multi-agent AI system using ReAct framework and Claude skills-style workflow patterns, including an intelligent PM assistant with rich system prompts, slash commands, tool integrations, and streaming chat UI.
• Architected an LLM evaluation framework: rubric-based LLM-as-judge, golden datasets, regression testing, and automated quality gating — ensuring consistent AI output quality at scale.
• Integrated LangFuse for end-to-end LLM tracing, conversation replays, and evaluation pipelines, enabling data-driven prompt optimisation that reduced token costs and response variance.
• Built with Drizzle ORM, pgvector, and knowledge graphs for structured data access, semantic search, and relationship-aware AI reasoning across the platform.
• Led TanStack React Query migration across the application — replacing manual state management with centralised caching and automatic refetching, reducing data-fetching boilerplate significantly.
• Practiced AI-native development throughout: Claude Code, Codex, Perplexity SDK, and LLM-assisted testing across the full development lifecycle. Deployed on Vercel + Azure ACA with Biome for linting/formatting.

• Designed, built, and launched an internal event planning web application used by over 100 department leads for a large event, despite having no dedicated testing phase.

• Ensured smooth, failure-free operation during first production use, leading to the tool being adopted for future events.

• Automated catering calculations and related workflows, significantly reducing email communication and manual computation effort for meal planning.

• Managed deployment and hosting on a Linux server using Coolify, including application setup and runtime operations.

• Hired and guided a communication designer on UX while independently owning all technical decisions and implementation.

Embedded Analytics & AI-assisted BI

Design and development of an integrated analytics solution based on ASP.NET Core, Power BI Embedded, and LLM services to provide contextual business information.

Development of an AI agent with Function/Tool Calling for secure orchestration of REST APIs, SQL data sources, and technical services within defined business processes.

Build-up of automated BI workflows including workspace management, deployment processes, and scheduled refresh via the Power BI REST API.

Implementation of secure service-to-service communication with Microsoft Entra ID and service principal, as well as integration into existing enterprise system landscapes.

Technologies: ASP.NET Core, C#/.NET, Power BI Embedded, Power BI REST API, LLM API, AI Agents, Function/Tool Calling, Entra ID

• Developed backend features for Modern RIS, a web-based Radiology Information System integrated with the existing Classic RIS via WebView.
• Worked on a modular Spring Boot backend covering clinical workflows such as appointments, examinations, patients, orders, reporting, billing, and inventory.
• Contributed to event-driven architecture using domain events to decouple workflows across backend modules.
• Implemented REST/OpenAPI endpoints, service-layer business logic, DTO mapping, validation, and integration points for the React frontend.
• Worked with PostgreSQL-backed domain models, Liquibase database changes, read/write model separation, and legacy RIS database structures.
• Integrated authentication and authorization flows using Keycloak and OAuth2.
• Added and maintained unit/integration tests using JUnit, Rest Assured, Testcontainers, and project-specific test utilities.
• Supported CI/CD and local development workflows using Maven, Docker Compose, Jenkins, and generated OpenAPI clients.

Tech stack: Java 21, Spring Boot 3.5, Maven, PostgreSQL, Liquibase, Keycloak, OAuth2, REST, OpenAPI/Springdoc, MapStruct, Lombok, Docker, Testcontainers, Jenkins.

Development of an iOS app for virtual try-on and outfit suggestions

The goal of the project is to develop a mobile application for personalized, photorealistic outfit suggestions. Users should be able to upload their own photos, try on clothes virtually, and find products that can be bought directly in the generated suggestions.

• Planning and implementation of the onboarding and photo upload in the iOS app
• Development of the mobile application with Expo and React Native
• Implementation of a Hono/Node.js backend for user, product, and generation processes
• Building an asynchronous processing pipeline with BullMQ and Redis
• Connection of PostgreSQL/pgvector and S3 for product, image, and generation data
• Integration of Gemini and OpenAI for outfit generation and image processing
• Implementation of a credit system and integration of RevenueCat
• Integration of Stripe Connect and affiliate product feeds for products that can be bought directly

Label: TypeScript, React Native, Expo, Hono, Node.js, PostgreSQL/pgvector, BullMQ, Redis, S3, Gemini, OpenAI, RevenueCat, Stripe Connect, Docker

Manufacturing intelligence platform with enterprise workflows, RAG, real-time AI assistant features, and multi-repository backend architecture.

• Built and extended production AI/backend services with Django, DRF, FastAPI, GraphQL, Celery, PostgreSQL, MySQL, Redis, and WebSockets across a modular multi-repository platform.
• Contributed to ARIS V2, a real-time manufacturing AI assistant using LangChain, LangGraph, MCP tool orchestration, planning/execution flows, OpenAI, AWS Bedrock, Qdrant, and Elasticsearch/OpenSearch-backed retrieval.
• Supported rollout expansion from ARIS V1 in 4 of 17 client production plants to ARIS V2 currently active in 13 of 17 plants, increasing real-world deployment coverage to more than 50% of the client footprint.
• Worked on document-grounded RAG functionality including ingestion, OCR, chunking, embeddings, indexing, retrieval, reranking, and grounded answer generation for industrial workflows.

Stack: Python, Django, DRF, FastAPI, LangChain, LangGraph, GraphQL, Celery, WebSockets, OpenAI, AWS Bedrock, Qdrant, Elasticsearch/OpenSearch, PostgreSQL, MySQL, Redis, Docker.