Senior Java & DevOps Engineer | AWS-Spezialist für Cloud-Migration & IaC

9/2025 – 11/2025

Architected and implemented a critical handshake microservice for a digital health therapy platform to enable strategic expansion from single-region European operations to multi-region global deployment across EU, United States, and Canada. The service acts as the initial contact point for mobile applications, providing region-specific configuration based on activation codes, user emails, or platform identifiers while ensuring strict data sovereignty compliance and regional data separation. Designed and implemented event-driven architecture using AWS SQS for asynchronous communication between microservices, processing user creation, company registration, activation code assignments, and platform events. Built REST API endpoints providing region configuration lookup by activation code, user email, and platform ID, enabling mobile apps to connect to the correct regional infrastructure. Implemented DynamoDB single-table design pattern with partition keys for multi-entity storage (regions, users, companies, activation codes, platforms) and Global Secondary Indexes for efficient cross-region queries while maintaining data isolation. Developed sophisticated region resolution logic with country-to-region mapping (CountryEnum, CountryRegionMapper) ensuring users are automatically routed to correct regional infrastructure based on their geographic location. Established comprehensive event processing system with 11 event processors handling create/update/delete operations for users, companies, activation codes, and platforms with proper error handling (RecoverableProcessingException, NonRecoverableProcessingException) and retry mechanisms using Spring Retry. Implemented production-grade monitoring and observability with Spring Boot Actuator, Micrometer metrics, structured logging, and health checks for DynamoDB connectivity and service availability. Achieved 40%+ test coverage including unit tests with Mockito, integration tests with Testcontainers and LocalStack for AWS services, and end-to-end tests validating complete user journeys across multiple entities. Built containerized deployment using Spring Boot 3.4.1, Java 21, and WAR packaging for flexible deployment to AWS ECS, Kubernetes, or traditional application servers. Ensured strict data sovereignty compliance through regional data isolation, preventing cross-region data leakage, and maintaining separate DynamoDB tables per region with region-specific configuration management. Implemented API documentation with Swagger/OpenAPI integration for developer onboarding and established clean architecture following Boundary-Control-Entity pattern for maintainable service design.

Cloud Spezialist, Java-Entwickler, Agile Methodologie, Apache Maven, Spring Framework, Amazon Web Services (AWS)

9/2025 – 10/2025

Architected and built a cloud-native insurance claim management platform for a leading insurance software provider using AWS serverless infrastructure (CDK v2), FastAPI, and Angular. The system streamlines catastrophic property claim processing end-to-end with secure multi-tenant workflows and role-based access control. Designed a 12-stack Infrastructure-as-Code solution applying Domain-Driven Design principles: Cognito for auth, API Gateway REST with JWT, Lambda (Python 3.12), DynamoDB (6 GSIs), S3 for document storage, and CloudFront CDN. Developed production-grade FastAPI REST APIs with Mangum for Lambda, custom JWT/role verification, transactional DynamoDB deduplication, pre-signed S3 URLs, and observability via AWS Powertools. Built a modern Angular 20 SPA with standalone components, oidc-client-ts for Cognito OAuth2/OIDC, Angular Material & Bulma UI, claim creation wizard, drag-and-drop uploads, and an advanced paginated dashboard. Implemented multi-environment configuration (dev-test/int/poc/prod) with type-safe Python dataclass factories. Delivered a fully serverless, cost-optimized (~$2–20/mo dev) architecture with multi-tenant support, type safety across Python & TypeScript, single-table DynamoDB with ACID transactions, and security-first design: end-to-end encryption, least-privilege IAM, JWT auth, and secret management via AWS Secrets Manager.

Amazon Web Services (AWS), Angular, Cloud Spezialist, DevOps, Kundenberater, Python-Programmierer, Solution Architektur, Typescript

8/2024 – 8/2025

Worked as Migration Automation Engineer for a large financial institution to develop comprehensive migration patterns and automation solutions for migrating massive IT systems and workloads from multiple on-premise datacenters to Amazon Web Services. The project involved migrating diverse workload types including OpenShift containers, Linux/Windows VMs, Microsoft AlwaysOn Clusters, various database systems (MS-SQL, MySQL, MongoDB, Cassandra), messaging systems (RabbitMQ, Apache ActiveMQ), load balancers, firewall appliances, and storage systems. Developed automated migration workflows with multiple phases including DNS TTL management, OpenShift resource backup and restore, DNS entry changes, and cutover runbook automation. Created migration templates and wave-based execution strategies using advanced AWS services and automation tools. Implementation and automation of DevOps processes using Ansible for Infrastructure as Code, GitLab-CI for continuous integration/deployment, and Jenkins for build automation to ensure efficient and reliable software delivery. Design and implementation of scalable deployment strategies through development of custom Helm Charts for Kubernetes orchestration and Bash scripts for automated deployment processes, including multi-environment support (Dev, Staging, Production). Systematic execution of root-cause analysis for complex technical issues in self-developed and legacy systems, including implementation of sustainable solution strategies and preventive monitoring measures. Design and delivery of technical training programs as well as strategic consulting for users and stakeholders to optimize workflows, best practices, and technology adoption.

Amazon Web Services (AWS), DevOps, DNS, IT Ingenieur-Infrastruktur, Jenkins, Kubernetes, Microsoft SQL-Server (MS SQL), Mysql, Openshift, Python, Python-Programmierer