Zabbix Experts in Germany

• Set up Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Developed Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines using Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Led development of 15+ microservices (Java 17, Spring Boot) driving customer interactions; migrated from on-prem to GCP Kubernetes, improving scalability and reducing infra cost by 20%.
• Optimized user services with CouchDB caching and API refactoring, cutting response times by 35% and enhancing customer experience.
• Implemented canary deployments, FluxCD GitOps, and CI/CD optimizations in GitLab, reducing release lead time by 25% and enabling zero-downtime rollouts.
• Set up Grafana health checks and Anodot alerts for latency, error, and throughput monitoring, reducing MTTR by 40%.
• Built secure APIs using OAuth2, DPoP, and Gatekeeper, integrated REST and GraphQL, and achieved 90%+ test coverage with unit and E2E tests.
• Mentored junior developers, promoted Agile best practices, and collaborated cross-functionally to deliver high-impact, reliable customer-facing features.

• Consulting and project management to build an AI-based automation platform for market data analysis
• Automated testing of financial data
• Market data automation with Python and N8N
• AI data integration and AI learning
• Use of Ollama and Qwen
• Data organization and database management

Conducting a gap analysis to assess existing security measures → identifying critical vulnerabilities

Developing a catalog of measures considering risk and cost-effectiveness

Implementing an IT maturity model according to BSI guidelines

Advising management on compliance, governance, and security strategy

Establishing internal processes for a sustainable security organization

• Responsible for setting up and configure AWS Organizations and Control Tower on company's master organizational account
• Administer and maintain various AWS services, including EC2, S3, RDS, Lambda, VPC, IAM, etc.
• Monitor system performance, availability, and capacity planning to ensure scalability and reliability
• Implement and maintain infrastructure as code (IaC) using tools like CloudFormation or Terraform
• Work closely with development and operations teams to automate deployment processes using CI/CD pipelines (e.g., Jenkins, GitLab CI/CD)
• Develop and maintain scripts for automating routine tasks and infrastructure provisioning
• Implement automation for monitoring, logging, and alerting to ensure timely incident response
• Implement and enforce security company guidelines and best practices for AWS environments
• Configure and manage AWS security services such as AWS Identity and Access Management (IAM), AWS WAF, AWS Shield, etc.
• Collaborate with the Security Team to improve and update security policies and posture
• Collaborate with development teams to provide agile deployments and optimize application performance and reliability on AWS
• Provide technical support and guidance to internal teams on AWS-related issues and best practices
• Participate in cross-functional projects to enhance overall infrastructure and operational efficiency

• Subproject Manager / Head of Monitoring for facility management and handling operational project parts as well as coordinating operations
• CheckMK consulting: central monitoring infrastructure with CheckMK master and distributed CheckMK satellites
• Implementation of advanced monitoring approaches, integration of new plugins and customization of the CheckMK agent
• Graphic representation of performance metrics with InfluxDB and Grafana, creation of NagVis/Grafana templates and dashboards
• Monitoring of Linux/UNIX/Windows systems and active components using CheckMK agents/MRPE as well as hardware monitoring via SNMP
• Development of monitoring plugins based on Bash scripting
• Inventory and cross-disciplinary analysis for application-specific monitoring
• Concept design, testing and documentation for integrating CheckMK status messages and performance data into a higher-level umbrella system (Data Leak)
• Technical and conceptual point of contact

• Integration of a FortiManager into the existing FortiGate firewall infrastructure to centralize and optimize firewall management.

• Evolved the platform from bare-metal infrastructure with a monolithic PHP application to a hybrid Google Cloud architecture with Go microservices on Kubernetes
• Managed and scaled a production infrastructure with 300+ VMs and dozens of clusters, including MySQL, PostgreSQL, MongoDB, RabbitMQ, Redis and Elasticsearch clusters
• Designed architecture, deployment, monitoring, performance analysis, and upgrades for all platform services using Terraform and Ansible
• Migrated observability systems from ELK and Prometheus to Datadog, managed with Terraform
• Introduced Jenkins CI/CD with SonarQube integration and automated tests to speed up feedback cycles
• Containerized the testing environment and implemented GitLab CI pipelines for Docker image builds, static code analysis, and infrastructure tests
• Performed zero-downtime migrations of MySQL and MongoDB clusters to Google Cloud
• Developed reusable Ansible roles for database clusters and automated data obfuscation for staging environments
• Decomposed monolithic databases and migrated to microservice architectures
• Built tools to detect and optimize slow queries in MySQL and MongoDB
• Conducted online schema migrations with pt-online-schema-change without downtime windows
• Developed internal Go applications for batch queries, GitLab-Jira integration, and MongoDB backup recovery
• Technologies: Debian, Ubuntu, Alpine, Go, Bash, Python, PHP, SQL, GitLab CI, Jenkins, Drone CI, MySQL, MongoDB, PostgreSQL, Redis, Elasticsearch, RabbitMQ, Kafka, Docker, Kubernetes, Nomad, Ansible, Terraform, Grafana, ELK, Prometheus, Datadog, Nagios, Zabbix, Nginx, HAProxy, Vault, Helm, SonarQube, Filebeat, Auditbeat, Google Cloud, AWS

• Architecture and conception
• Development at Cynapsis Interactive (Laravel, Filament, Google Ads API)
• Analyze and monitoring tool for z-optimations GmbH (Laravel, Blade)
• Development at ProgressMaker (Laravel, REST-API)
• Development of a data warehouse at ProgressMaker (Laravel)
• Development of SimpleStats.io (Laravel, Vue, Inertia, Tailwindcss)
• Development of Validation for Laravel (Laravel, Vue, Inertia, Tailwindcss)
• Development of multiple open-source projects (laravel-date-scopes, laravel-schema-rules, laravel-xhprof)

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

• Configuration and management of routers and switches (e.g., Cisco, HP)
• Design and expansion of networks in corporate environments
• WLAN site surveys and optimization (e.g., with Ekahau, NetSpot)
• Implementation of security policies and access controls

• Project lead for internal rollout from Windows 10 to 11 incl. hardening, GPOs and drivers
• Project lead for internal rollout of Office 2024 LTSC incl. hardening and GPOs
• Design of operational processes
• Patch management with WSUS

• Consulting an NGO in the field of data center sustainability in publicly funded projects (BMUKN with NADIKI and Federal Environment Agency with SIEC)
• Development of Python APIs and web applications, deployment on AWS/ECS with Terraform
• Collecting power consumption metrics for servers, CPUs, GPUs running AI workloads
• Technologies used: AWS, EC2, ECS, Fargate, CloudMap, VPC, Route53, Lambda, EventBridge, CodeBuild/CodePipeline/CodeDeploy, Terraform, Docker, Linux, Bash scripting, Python, Flask, SQLAlchemy, SQL, MariaDB, InfluxDB, Telegraf, Prometheus, Zabbix, Kubernetes, Letsencrypt, certificate management