* Led the system design / implementation of custom-built coding agent infrastructure, suitable for running autonomous tasks inside a regulated fintech environment.

* Support for existing coding agents harnesses such as codex/claude/opencode

* Slack/Bitbucket integration for easy collaboration, governed access to internal infrastructure (code repositories, databases, logging/telemetry services)

* Custom TCP proxy system for fine-grained permissions of network related communication.

* Full transparency of the coding agents actions.

* Dynamically scalable agent runners depending on workloads.

* Replaced recurring developer tasks within the infrastructure saving already ~7 hours per week of developer time.

• Led the complex architectural overhaul of a mobile identity verification SDK & server-side application architecture to parallelize the work of multiple teams on the mobile SDK.
• Designed, evaluated and documented larger architectural changes within the business-critical identity verification SDK
• Closely collaborated with various teams across server-side and frontends to enable architectural changes with no downtime.
• Built AI-assisted developer tooling that reduced onboarding time for engineers outside the SDK team.
• Final implementation reduced architectural/code complexity by ~30%

• Research and planned through a secure network communication layer for a mobile identity verification SDK across platforms (iOS, Android, Web), concretely mitigating attack vectors such as replay-attacks, spoofing and device impersonation.
• Led a team of three to implement the planned security layer across frontend/backend platforms
• Worked out backwards compatible migration strategies for enabling the security layer for every integrating partner.

• Led the design and implementation of a low-latency, high-throughput file service that processes&stores millions of highly sensitive identity verification proofs as a core component of the identity verification pipeline.
• Implemented the service using only Go and the standard library, eliminating external runtime dependencies.
• Integrated performance, reliability, and end-to-end (E2E) benchmarking into the CI/CD pipeline.
• Built comprehensive throughput and resilience validation tooling to verify service stability under failure scenarios, including system and network exhaustion, disk failures, and data integrity testing.
• Simplified the identity verification architecture by eliminating multiple redundant micro-services.
• Designed and implemented the service's monitoring and observability strategy.
• Production deployment with zero downtime

• Led the modernization of logging&observability of a mobile identity verification SDK (across iOS, Android, Web) leading to cost reduction in infrastructure.
• Defined wanted observability/logging metrics suitable for concrete KPIs, outage alerting and rollout-monitoring.
• Worked out a partner distribution strategy for introducing the external Sentry SDK in the mobile identity verification SDK
• Supported software developers during implementation phase

• Led the early stage & continuous development of the real-time image processing / machine learning model inference library for CHECK24's in-house identity verification web SDK.
• Architected a cross-platform CMake-based build system targeting Android (JNI) and WebAssembly for maximum compatibility, specifically for low-end devices.
• Ported TensorFlow Lite, OpenCV, and XNNPACK to work on WebAssembly, enabling SIMD acceleration, multithreading, and real-time performance
• Conducted research towards which model inference libraries and model formats (tensorflowlite, opencv, onnx) can become compatible with internal model requirements, in close collaboration with Data Science teams.
• Optimized the image processing / machine learning model pipelines inference in close work with our Data Science teams from 100ms to 10ms. Also reduced the memory footprint of the image processing to an absolute minimum, making it viable to run on low-end devices.

• Implemented various security layers into a mobile native identity verification SDK including SSL pinning, jailbreak detection and additional network encryption layers.

• Implemented a new micro service for server-side zero-trust certificate validation according to the ICAO9303 eMRTD standard
• Implemented data payload extraction of eMRTD related ASN.1 payloads on the server
• Automated the BSI master-list rotation on server-side alongside integrity checks.
• Following testing standards to ensure validity of certificate validation across international passports.

• Led the development of a complete ICAO9303 conform eMRTD (electronic machine readable travel passport) implementation from the ground up for iOS
• Implemented all required cryptographic requirements for eMRTD throughout BAC/PACE + generic/integrated mapping for (diffie-hellman) key exchanges + passive/chip authentication + secure messaging)
• Implemented the NFC chip communication for interacting with the passport/id card chip. 
• Built a ASN.1 parser from the ground-up to read NFC related data payloads  according to ICAO9303 specifications
• Build test validation systems for verifying the eMRTD implementation across international passports
• Integrated the openssl library for iOS
• Integrated an existing eMRTD solution (jMRTD) for Android

• Conducted product oriented market/technology research and early stage development of an AI based identity verification SDK from the ground-up.
• Built various prototypes to solve various aspects of real-time image processing, on-device machine/deep learning models, mobile security, mobile architecture and user experience design. (Specifically targeting iOS/Android/web platforms)
• Close contact with stakeholders/management about direction of the technical foundation of the product.

• Conducted offensive security research against mobile SDKs using Frida, Ghidra, and custom attack tooling. Specifically testing vulnerabilities within our own Identity Verification SDK solution.
• Identified runtime vulnerabilities, MitM attacks, and camera-spoofing techniques
• Produced risk assessments for stakeholders and implemented mitigation strategies for identified threats