Jul 2020 – Dec 2020 · 5 mos · Erlangen, Bavaria, Germany · Remote

• Description: Review and creation of fixes (patches) for MS Azure security baseline
• checks for the MS Azure security center in order to secure MS Azure
• Linux VMs; in doing so, collaboration with experienced staff from MS Azure support. Furthermore creation of
• verification scripts for the aforementioned checks in bash and PowerShell
• Tools/Technologies/Programming languages/...: MS Azure, bash, PowerShell, Linux, Python, Ruby

Mar 2019 – Nov 2019 · 8 mos · Nuremberg, Bavaria, Germany · Hybrid

• Description: Encryption of SWIFT messages in Java on the basis of
• IBM MQ message queues and Quarkus framework by integrating the
• the pEp library (Pretty Easy Privacy) library (more details not possible due to
• not possible due to NDA)
• Tools/Technologies/Programming languages: Java, Maven,
• Gradle, GNU make, Jenkins, gitit, pandoc, PlantUML, Gitlab, Mercurial, IBM MQ,
• quarkus.io microservice framework, JUnit, Linux, VirtualBox, Docker, UML,
• JBoss, Tomcat, Scrum, Kanban

Apr 2018 – Apr 2019 · 1 yr · Nuremberg, Bavaria, Germany · On-site

• Description: Elaboration of tender criteria for
• comparison of open source based identity management solutions; evaluation of these
• solutions and integration into the existing infrastructure and
• architecture landscape, especially with regard to
• security aspects; goal: a central solution
• for all specialized procedures for issuing JSON Web Tokens (JWTs) including
• SPNEGO AuthN, various databases for AuthZ and WESPE (Web Service
• as well as the WESPE (Web Service Policy Enforcement) private
• custom claims and OAuth2.0/OpenID Connect as the central
• interface:
• Evaluation of WSO2 Identity Server, Keycloak, Apereo CAS
• Test of various OAuth2.0 grant types for suitability (implicit
• grant, authorization code grant, SAML2 bearer grant)
• Configuration of Kerberos in the Java environment (GSSAPI),
• private custom claims, database connections
• Cooperation with the central
• Identity Management department
• Analysis of NexusIQ vs. npm audit vs. snyk.io
• Introduction of the gitflow workflow
• Documentation of results and the necessary
• adjustments in Confluence
• Tools/Technologies/Programming languages/...: Groovy, bash, Maven, npm, Nexus, NexusIQ, PlantUML, Bitbucket, Confluence, JIRA,
• snyk.io, Apereo CAS, Keycloak, WSO2 Identity
• Server, Kerberos, SPNEGO AuthN, LDAP, JWT, OAuth 2.0/OpenID Connect,
• Docker, Linux, UML, ITIL

Oct 2017 – Feb 2018 · 4 mos · Nuremberg, Bavaria, Germany · On-site

• Description: Update of approx. 2.5 years old AngularJS
• 1.4/1.5 applications to current technologies in the JavaScript-
• resp. NodeJS environment specifically - also considering the tool selection - according to SCRUM methodology:
• Proposals and PoCs regarding the use of current technologies, such as
• e.g. replacement of Grunt by Webpack, use/update of tools
• for static code analysis, specifically ESLint/TSLint/Codelyzer in conjunction with
• NSP (Node Security Platform), use of new SonarQube plugins
• for the integration of these tools, implementation of
• E2E testing based on Protractor or alternatively Geb and Spock
• from the Groovy ecosystem, replacement of ES5 by Typescript,
• Migration from Angular 1.5 (AngularJS) to Angular 5 (angular.io)Simplification of the JavaScript build part within the
• Gradle plugin
• Coordination with Bulgarian colleagues regarding the
• items mentioned above
• Tools/Technologies/Programming languages/...: Groovy, bash,
• NodeJS, Typescript, ESLint/TSLint/Codelyzer, Gradle, Grunt, Webpack, CodeNArc, Geb Spock, AngularJS, Angular.io

Jun 2017 – Dec 2017 · 6 mos · Nuremberg, Bavaria, Germany · On-site

• Description: Automating the process of creating Kafka topics via
• Service Now and Jenkins based on the usage of REST APIs in conjunction with
• Jenkins jobs and Ansible playbooks
• Tools/Technologies/Programming languages/...: Groovy, bash,
• Jenkins, git, Gitlab, Ansible, Apache Kafka, Service Now, REST APIs, Confluence,
• JIRA, ITIL

Nov 2016 – May 2017 · 6 mos · Ellwangen, Baden-Württemberg, Germany · On-site

• Description: Introduction of CI/CD, application containerization based on
• Docker and orchestration using Kubernetes with Ceph as distributed
• filesystem for the project Command NXG according to SCRUM methodology:
• counseling/support creating build and delivery pipelines with Jenkins job
• DSL and Groovy
• introduction and structuring of application containerization with Docker
• and of orchestration with Kubernetes
• introduction of Ceph as distributed filesystem
• introduction of provisioning tools like Puppet, Chef, Ansible, Saltstack
• introduction of OpenStack as cloud platform
• counseling on the choice of build tools (Gradle in favor of Maven for
• microservices)
• Tools/Technologies/Programming languages/...: Java,
• Groovy, NodeJS, Typescript, Python, bash, Maven, Gradle, npm, Jenkins,
• Ansible (Puppet/Chef/Saltstack), git, Bitbucket, JIRA, Confluence,
• Artifactory, Kubernetes, Docker, Ceph, OpenStack, Jinja2, Linux, Scrum, ITIL

May 2015 – Oct 2016 · 1 yr 5 mos · Nuremberg, Bavaria, Germany · On-site

• Migration of the VAM (virtual labor market) to the
• BA standard architecture as well as Continuous Integration and
• Continuous Delivery for the project APOK:
• Conducted lifecycle measures for WLS and WLS domains, JDK, Maven
• (also taking into account the changed architecture requirements)
• Integration of the new application architecture based on
• NodeJS (frontend area) as well as the new architecture based on microservices with
• Docker containers (backend) (covered areas in the front end: NPM
• (Node Package Manager), Grunt
• (build system), Karma (unit tests), Protractor (E2E tests); in back
• end: Spring Boot, microservices based on Jersey, JUnit, Hamcrest,
• Docker, Marathon (application orchestration and resource
• Resource allocation), Mesosphere (distributed kernel), DCOS,
• Traefik (load blancer))
• Since ca. 03/16: also privately performed
• refreshing and/or acquisition of knowledge in JDK 8, Java design
• patterns, Docker, NoSQL DBMS (Elasticsearch, MongoDB, Hadoop) for the
• aforementioned item
• Tools/Technologies/Programming languages/...: Java,
• Groovy, Jython, WLST, Maven, Ant, Grunt, npm, Confluence, JIRA,
• Apache Mesosphere, Docker, Traefik, Oracle WebLogic Server, ITIL

Jul 2013 – Apr 2015 · 1 yr 9 mos · Nuremberg, Bavaria, Germany · On-site

• Description: JEE migration expert for the product VAM
• (Virtual Labor Market; > 600 service centers; ca. 100000
• users; ca. 13 million page accesses/day) at the Federal Employment Agency
• in the IT department:
• Coordination with agile developer/architect teams
• (ca. 100 developers) and technical operation units (covered
• areas: JEE, application operations, Linux, Jenkins, WLS, web
• services, web service security, TCP/IP networking) in terms of
• further development as well as narrowing down errors and correcting
• them
• Support of the operating units during the go-live of
• of releasesm
• Coaching of new project members in the build/deployment team
• Supported the development of the migration plan and
• carried out the migration for the WLS migration from
• 10.3.0 to 10.3.6 independently (boundary conditions for the productive system: 400
• application server instances in 7 clusters, each of them with
• component-specific WLS domains for 4 VAM components distributed over
• on 30 hosts; especially for the databases: 9,5 TB data in 3 DBs,
• 60000 SQL requests/sec. (peak hr.-average), approx. 2.5 billion data records (each
• approx.-data) ); DB and WLS infrastructure distributed over 2 data centers
• Maintenance and further development of the build and
• deployment infrastructure based on Ant, Maven, Groovy, Jython, WLST
• Jenkins administration and further development: approx. 1000 jobs
• distributed on 2 clusters with 2 instances each
• Tools/Technologies/Programming languages/...: Jython,
• XSLT, Groovy, bash, Ant, Maven, WLST, SOAPUI, Confluence, JIRA, Oracle
• WebLogic Server, Oracle Service Bus, web services policies, Linux, ITIL

Oct 2012 – Present · 13 yrs 5 mos · Erlangen, Bavaria, Germany

Oct 2012 – Jun 2013 · 8 mos · Munich, Bavaria, Germany · On-site

• Continuous Integration Expert:
• (Technical) guidance in English of an international
• support team for technical support in the
• Git/Gerrit/Jenkins environment
• Conducting workshops in English
• Setting up productive installations and training the
• employees with regard to these installations
• Design and implementation of a script-based solution (bash)
• for the automatic setup of Git/Gerrit/Jenkins machines
• starting from a standard SLES image
• Design and implementation of a web frontend as CGI script in
• Python with lxml library (output: XHTML web page), which will
• create the input file for the aforementioned bash script
• Unification of the Git/Gerrit/Jenkins infrastructure with
• Tomcat as application server and creation of the corresponding
• documentation as a wiki (Confluence)
• Tools/Technologies/Programming languages/...: Python,
• bash, XHTML, Jenkins, Gerrit, git, Confluence, JIRA, CGI, Tomcat, VirtualBox

Feb 2012 – Sep 2012 · 7 mos · Erlangen, Bavaria, Germany / Nürnberg, Bavaria, Germany · On-site

• Build \&
• Deployment/IT infrastructure management in the project ROBASO (Federal Employment Agency):
• Coordination with the technical units regarding OS and other
• other SW characteristics of the computers (e.g. Oracle middleware stack)
• Creation of practice-oriented or close-to-practice concepts, such as
• e.g. replacement of proprietary solutions like Oracle ojdeploy
• or JDeveloper for continuous integration builds of
• ADF applications with a combination of Ant and Groovy scripts
• Maintenance/extension of the Ant build scripts
• Evaluation of new Hudson versions and extension of existing
• Hudson configurations (e.g. introduction of parametrized jobs for
• delivery mails using Ant tasks for the Java mail API)
• Automation of recurring tasks using WLST/Jython, Groovy, and
• shell scriptsITIL-based working method (creation/monitoring of changes and incidents;
• performing requester reviews)
• Tools/Technologies/Programming languages/...: Jython,
• XSLT, Ant, Hudson, CVS, Oracle WebLogic Server, Linux, ITIL

Aug 2008 – May 2011 · 2 yrs 9 mos · Erlangen, Bavaria, Germany

• Job Role: Data Center and Technical IT Lead, IT Architect, and Security Officer
• Responsible for acquisition of new offers, sizing and procurement of new
• hardware (especially HP ProLiant and ProCurve)
• Design, implementation, test, and documentation of the network
• Design and carrying out of technical assessments for applicants in the
• area of system and/or network administration
• Verification of the familiarization advancement of system administrators
• Mentoring of system administrators
• Coordination with M-net (as provider)
• Planning, coordination and carrying out of the internal network migration
• Description: Design, implementation and documentation of a company network
• incl. migration and procurement
• NAS based on: QNAP hardware with Debian Linux (incl. SW RAID and LVM),
• Samba, OpenAFS, NFSv4, rsync, SSH/SCP, FTP, MIT~Kerberos, OpenLDAP, Bacula
• Software update server based on FreeBSD for FreeBSD and Debian-based
• systems
• Firewalls based on: FreeBSD and IPFW or PF, respectively
• DNS and NTP server based on: FreeBSD, BIND, ntpd
• Administration of HP ProCurve switches
• Backup of central servers using Bacula
• Single Sign On with MIT~Kerberos and OpenLDAP
• Virtualization server based on: Proxmox Virtual Environment (Debian Linux,
• KVM, OpenVZ) and Oracle
• Tools/Technologies/Programming languages/...: bash,
• Perl, Python, rsync, SSH, NFSv4, IPFW, PF, OpenLDAP, MIT Kerberos, OpenAFS, Icinga,
• Proxmox Virtual Environment (KVM, OpenVZ), Samba, VirtualBox, BIND, Bacula,
• NTP, Linux, FreeBSD

Sep 1999 – Jul 2008 · 8 yrs 10 mos · Erlangen, Bavaria, Germany

• For details, please refer to the respective projects in the "Projects" subsection.