Yarn Experts in Germany

• Developed a React and TypeScript dashboard with reusable UI components and API-driven data visualization.
• Implemented dynamic data rendering, state management, and performance-focused frontend architecture.
• Integrated Python-based backend services for processing and visualizing SEO analytics.

• Led the end-to-end delivery of enterprise full-stack web applications by driving requirement analysis, solution design, frontend and backend development, database design, API integration, code reviews, team coordination, Agile execution, CI/CD deployments, production support, performance optimization, security implementation, and stakeholder collaboration to deliver scalable, high-quality software solutions.

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• It is like a startup within REWE, where we have to build a new forecasting system on Google Cloud Platform from the scratch. Although, officially my role is called MLOps, my actual tasks also include development of data processing pipelines (data engineering) and data scientists tasks such as feature engineering and model trainings.
• GCP: Terraform (tofu), Vertex AI (Kubeflow), Cloud Run, IAM, Google Cloud Storage, BigQuery, Artifact Registry
• Data engineering: Snowflake as the main data warehouse, Terraform, DBT for data model implementations
• CI/CD: GitLab. We have built a CI/CD pipeline that automates deployments of new releases up to production environment
• Development of feature store and data synchronization between environments
• Data science: evaluation of different forecasting models, including CatBoost, Contextual Gamma and Random Forest; implementation of training pipelines using Kubeflow on Vertex AI; scaling and development of an event-driven interface using Kafka as a forecasting service; evaluation of MLFlow for model tracking and model registry
• Implementation of REST API using KeyCloak OAuth2 and OpenID (JWT)
• Monitoring: implementation of dashboards with Grafana, Prometheus, Mimir, Streamlit and Loki to monitor prediction metrics, GCP and Snowflake costs for pipelines, and system metrics
• Development of Copilot Agent Skills

• Redevelopment of outdated software used in Hessian schools in C# .NET/WPF
• Understanding and analysis of old Delphi and Visual Basic 6 source code
• Use of Visual Studio 2022 as IDE
• Team collaboration through pull requests and version control with Git/SourceTree
• Project management with proprietary wiki software and Open Project
• TechStack: C#, .NET 8.0, WPF, Visual Studio 22, Delphi, Visual Basic 6, LDAP, Active Directory, FTP, SMB, Git, SourceTree
• Workflow: pull requests, Open Project, weeklies, weekly meetings, dynamic communication

Worked as an App Engineer as part of the IoT Control team in a React Native Stack.

• Implementing new Components based on the Tonies Design System.
• Improving, extending and maintaining Tonies Design System
• Adding new features like Volume and Playback Control of the Tonies
• Fixed connection issues via bluetooth and wifi
• Removing technical debt and polishing for an upcoming big software and hardware release
• Improving accessibility by optimizing screens and components for usage via screen readers.
• Wrote lots of automated tests to ensure app quality is always stellar.
• Weekly app releases in a high volume workload environment

Results & Impact:

• Improved app stability and connection reliability ahead of a major software and hardware release
• Raised overall app quality through a significantly broader automated test suite, catching regressions before they reached users
• Made the app usable with screen readers, improving accessibility for a wider audience
• Sustained a weekly release rhythm in a high-volume production environment without quality regressions

Technologies: react-native, expo, typescript, react-19, react-compiler, react-navigation, zustand, @tanstack/react-query, i18next, figma, app-store, play-store, sentry, bitrise, config-cat, poeditor

• Development of a Component Library based on a Design System for several international brands such as Alpecin, Karex, Linola and Plantur 39
• Integration of Headless CMS, PIM and Commerce solutions
• UI/UX development
• Prototype development
• MVP development
• API design and development
• SaaS development (Whitelabel/Multi-tenent)
• Headless CMS integration
• Design Systems Digital Signage
• Internationalization (i18n)
• Javascript
• Component Library
• Tailwind CSS
• Storybook
• HTML
• Vue 3
• Storyblok
• Github Actions
• SEO
• i18n Theming
• React

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• Developed custom frontend designs for clients like Cube, Douglas, and Leuze using HTML, SCSS, JavaScript (ES6), TypeScript, Vue.js, Twig, and Smarty.
• Customized and implemented themes for Shopware 5 and 6 e-commerce websites.
• Managed client communication, crafted project concepts, and provided ongoing support.
• Improved code quality and team efficiency through optimized Git workflows and regular QA.
• Supported other developers and addressed daily client inquiries.

• Planning and implementing the upgrade of the existing TYPO3 installation to TYPO3 11, including switching to a Composer setup (Composer-based deployment)
• Migrating the underlying MySQL database

• Modernized the homepage of a luxury residential building for a better user experience and contemporary design
• Developed and implemented the website and modules using current web technologies
• Optimized for SEO to improve visibility in search engines
• Created a modern and professional appearance that enhances the building's image
• Increased efficiency in content maintenance by using a CMS
• Technologies: HTML5, HTML, CSS3, CSS, JavaScript, Umbraco, C#, .NET

• Developed a web component for vehicle pricing communication in an international online shop.
• Replaced an old Stencil component to create a modern, flexible, and maintainable Vue.js component.
• Implemented country-specific displays and rules to comply with legal requirements.
• Introduced modal windows and tooltips to optimize user guidance.
• Adapted the component for desktop, tablet, and mobile devices.
• Provided different views and functions for stock and configurable vehicles as well as for private and business customers.
• Implemented efficient API calls and caching mechanisms to improve performance.

• Designed and developed a high-performance internal resource management platform using React and TypeScript, optimizing dynamic data rendering and state management.
• Built a React Native application to support mobile access to internal tools, enabling on-the-go project tracking for field teams.
• Developed custom 2D canvas-based visualizations using Pixi.js to simulate material flows and refractory layer behaviors.
• Integrated Pixi.js with React components for interactive diagrams and real-time UI updates.
• Developed interactive 3D visualizations using React.js for displaying refractory product layouts and simulations, supporting engineering and sales teams with dynamic product previews.
• Integrated Three.js within the React ecosystem to allow manipulation of 3D models in real-time via browser, enhancing user engagement and field configurability.
• Integrated a headless CMS to enable dynamic content updates by non-technical users, reducing content deployment time by 40%.
• Led AWS CloudFront optimization initiatives, improving portal load speeds by 30% globally.
• Actively collaborated with cross-functional Agile teams and product owners to deliver prioritized features with a fast feedback loop.
• Key Technologies: React.js, React Native, Three.js, TypeScript, Contentful CMS, AWS S3/Lambda/CloudFront, Cypress, Agile Scrum