Qualification
What I work on and what I bring to the table
Experience
-
CV
Full curriculum vitae
Current Focus
Modernisation with AI in the loop
Reconstructing undocumented legacy systems with AI agents, against a recorded behavioural baseline, so that every change can be shown to preserve behaviour. Retrieval-augmented generation over internal documentation, and agent use established in a department without a budget line. Daily work with LLM agents (Claude, GitHub Copilot) across design, documentation, review, refactoring, generation and testing, at production scale — some 400 million tokens in a month. Not experimenting with AI, but shipping with it. Platforms from on-premises to AWS (administering since 2011, certified 2025).
Security and identity architecture
Workforce identity and access management at major banks and a large insurer; federal cross-agency identity management; single sign-on and federation (OIDC, OAuth 2.0, SAML; Entra ID, Keycloak); data-centric security. The authorisation-management requirements of German banking supervision and the GDPR — implemented, not just read. Greenfield implementations as well as migration of legacy identity systems.
Presales and solution engineering
RFI and RFP responses and security questionnaires, proofs of concept and demonstrations, effort and feasibility estimation, architecture presentations and decision papers up to management level — including a won competitive bid for a Swiss university's identity management programme.