• A security oriented, special purpose Linux distribution, specifically tailored for running Nextcloud
• It uses many modern system features, like TPM based disk and credential encryption, process namespacing and more

For my former employer we built an internal AI chat platform which ensured compliance with data protection requirements as well as independence from individual AI model providers.

Notable tasks of mine were the implementation of end-to-end encrypted storage for user chats, implementation of various AI agent abilities and building an API for other teams to integrate their applications with our platform.

• Developed the company internal AI chat platform together with my team. Key responsibilities:
  • Application security
  • end-to-end encryption of user data
  • Agent tool architecture + development
• Designed and developed a solution for collecting employee benefits (discounts, vouchers, ...) from multiple shops, performing tax calculation. Notable challenges:
  • Complex requirements engineering with many stakeholders and domain experts
  • Scalable asynchronous data processing with Google Dataflow
  • satisfying high compliance requirements (IT security + data protection)
  • Multiple tech stacks (go, java, javascript, SAP UI5, ?)
  • Multitude of cloud native micro services and jobs
• Worked on in-sourcing all of the SAP systems run by OTTO Group IT as specialist for cloud, information security and automation. Key Responsibilities:
  • Cloud architecture & security
  • Infrastructure as code (mostly Ansible)
  • CI/CD architecture
  • Implementation of custom monitoring system with integration into GCP alerting
  • Design of secret provisioning (using Hashicorp Vault and Google Cloud KMS)
• Ran and maintained a Google Cloud based service for encrypting sensitive customer data for being processed by a third party. Key tasks and technologies:
  • Cloud architecture & security
  • Infrastructure as code (Terraform)
  • CI/CD architecture
  • Operation of a private Gitlab Instance + runners (using Kubernetes)
  • Review and development of Dataflow pipelines

During a big insourcing project of my former employer, I supported the team as cloud and security specialist with migrating all (baremetal) SAP and database servers to virtual machines in the Google Cloud so that they could be maintained by a small team of our own.

Notably I was co-responsible for automating most administrative and setup tasks with Ansible and solely responsible for our cloud security model (secret management, IAM, etc.), designing CI/CD and deployment processes and for our fallback monitoring (that I built, because SAP's own solution proofed unreliable in the beginning).