Projects & Professional Experience

A comprehensive overview of my professional projects and experiences across cloud infrastructure, security, and software development.

View Full CV (PDF)

Cloud Consultant

Swisscom (Telecommunications)

Zurich, Switzerland

Sep 2025 - Present

▼

Managed and optimized cloud infrastructure on the Azure platform, ensuring high availability and performance.
Implemented security best practices and compliance measures to protect sensitive data and meet regulatory requirements for customers in the banking sector.
Utilized Infrastructure as Code (IaC) tools such as Terraform to automate the provisioning and management of cloud resources.
Collaborated with cross-functional teams to design and deploy scalable cloud solutions that meet business needs.

Cloud Trainer

Education Sector

Berlin, Germany

Aug 2025

▼

Conducted training sessions and workshops on cloud security best practices on the Azure platform

Cloud Architect

Bundesdruckerei GmbH (Public Sector)

Berlin, Germany

May 2024 - April 2025

▼

Hands-On design and architecture of secure, scalable, and resilient cloud environments on both AWS and Microsoft Azure platforms using the Cloud Adoption Frameworks and best practices.
Architected and implemented a complete DevOps process using Terraform and Terragrunt, GitLab CI/CD, Bash Scripting and Ansible, to accelerate and secure the deployment pipeline, speeding up deployment speeds from weeks to hours
Implemented a centralized logging and monitoring solution using Prometheus and Grafana, enhancing visibility and operational efficiency.
Design of a comprehensive Network Security Architecture that included firewalls, VPNs, and switch configs.
Developed and enforced a comprehensive cloud security strategy to ensure compliance with standards like ISO 27001, BSI Grundschutz, and CIS Benchmarks.
Taken responsibility for Operational Excellence by implementing best practices for incident response, change management, and continuous improvement.

Cloud Security Consultant

SENEC GmbH (Energy Sector)

Leipzig, Germany

Aug 2023 - Mar 2024

▼

Led the design of a cloud security strategy that integrated DevOps principles and GitLab to meet strict compliance requirements (ISO 27001, BSI Grundschutz, NIS2) using Infrastructure as Code (IaC) with Terraform and Terragrunt.
Hardened Kubernetes environments by implementing and enforcing security configurations using Azure Kubernetes Service (AKS) and Azure Policy.
Managed container lifecycle by building and storing images in Azure Container Registry for deployment into AKS, ensuring high availability and scalability.
Centralized secret management for enhanced security using HashiCorp Vault
Implemented a comprehensive logging and monitoring solution using Azure Monitor and Azure Log Analytics to ensure operational excellence and compliance.

Python Software Developer and Security Auditing

ITZBund (Pexon Consulting GmbH)

Bonn, Germany

Nov 2022 - Jun 2023

▼

Automated server configuration and application deployments using Puppet, reducing manual effort and increasing environment consistency.
Containerized applications using Docker and Podman to improve portability and streamline the development-to-production workflow.
Implemented CI/CD pipelines using GitLab CI to automate testing and deployment processes in a highly secure, ISO 27001-certified environment.
Managed source code and branching strategies using GitFlow within GitLab for collaborative and structured development.

Cloud and Software Developer | Azure

Internal Project (Pexon Consulting GmbH)

Berlin, Germany

Sep 2022 - Jan 2023

▼

Development of a REST-API for secure authentication against internal backends using Express and TypeScript
Accessing of identities using Google API and later public/private key signing via JWT
Module- and Unit testing for better code quality using jest
Design of a Microservice architecture using Docker and Kubernetes
Separation of DEV and PROD environments for lower downtimes using Azure Resource Groups
Reproduceable Infrastructure Deployments and IaC with Terraform
Secret management using Azure Secret Manager
Scalable code execution using Azure Cloud Functions
Agile work using Scrum and GitFlow practices for asynchronous cooperation
DevSecOps practices, like automated deployments and regular testing with GitLab CI
Further API development using Python (FastAPI) and Node.js (Express) for internal customer projects

Cloud and Software Developer | Azure

Education Sector (Pexon Consulting GmbH)

Berlin, Germany

Aug 2022 - Nov 2023

▼

Development of a scalable REST-API using Python (Flask) for accessing customer data on an on premises MySQL Database using Point to site VPN
Reproduceable provisioning of infrastructure using Terraform
Git version control using Azure DevOps Repositories
Secret Management using Azure KeyVault
Testing of API endpoints using pytest
Design of CI/CD Pipelines for regular, automated deployments using Azure DevOps
Provision of Docker Images using Azure Container Registry and operation in Azure Kubernetes Service (AKS) for optimal resiliency and scalability
Kubernetes Deployments with Helm
Monitoring of the applications using Prometheus and Grafana

Full Stack Developer

Education Sector

Berlin, Germany

Mar 2021 - Dec 2021

▼

Design and Development of a digital education and exam platform utilizing PHP and JavaScript
Persistence of customer Data using MariaDB
Configuration Management for reproducible environments using Ansible
Development of microservices in accordance by customer request using PHP
Automation of customer registration using Node.js and an MySQL customer database
Provisioning of the infrastructure with Terraform
CI/CD Pipeline and Git version control via GitHub and GitHub Actions
Site to Site VPN using WireGuard VPN

IT Specialist

Law Firm

Berlin, Germany

Mar 2020 - June 2020

▼

Design and implementation of a secure IT infrastructure for a law firm to ensure compliance with legal requirements
Configuration of a secure network with firewalls, VPNs, and switch configurations to protect sensitive data
Design of a digital security strategy in compliance with DSGVO, GoBD and data protection requirements of the law firm
Design and setup of a local bare-metal server with Debian Linux
Full-disk encryption of IT hardware to achieve internally set compliance goals using GNU/Linux tools, such as LUKS and GRUB2, among others
Implementation of regular snapshots for fast site recovery using restic and ZFS
Regular Backups to different sites using restic and cron
Introduction of Yubi Hardware Security Keys for authentication