Full-Stack Developer: DevSecOps, Kernel Security, CI/CD, AWS CloudFormation

freiberufler Full-Stack Developer: DevSecOps, Kernel Security, CI/CD, AWS CloudFormation auf freelance.de
Verfügbarkeit einsehen
DACH-Region
de  |  en  |  fr
auf Anfrage
45127 Essen
25.03.2020

Kurzvorstellung

I am the author of Syscase - the first open source kernel fuzzing
framework for ARM TrustZone.

Ich biete

IT, Entwicklung
  • IT Sicherheit (allg.)
  • Kontinuierliche Integration (CI)
  • Versionierung / Versionsverwaltung
  • Git
  • Betriebssysteme (allg.)
  • Testing (IT)
  • Testdesign (IT)
  • Testautomatisierung
  • Google Analytics
  • Google Adwords
  • DNS
  • DHCP
  • Konfiguration
  • Cloud Computing
  • Cloud (allg.)
  • Web Security
  • SSL / TLS
  • Netzwerk-Sicherheit
  • Firewalls
  • Embedded Systems
  • RDB / RDBMS
  • DevOps
  • Datenbankentwicklung
  • Softwareauswahl (Evaluierung)
  • SMTP
  • SIP (Session Initiation Protocol)
  • Migration
  • Hosting
  • Google Cloud
  • Software Design
  • Software Architektur / Modellierung
  • Informationssicherheit
  • Demilitarized Zone (DMZ)
  • Embedded Linux
  • ERP Beratung (allg.)
  • CRM Beratung (allg.)
  • DevOps
  • Datenbankadministration
  • Datenanalyse
  • SSH (Secure Shell)
  • Bash (Shell)
  • make (Software)
  • Webservices
  • Web Entwicklung (allg.)
  • Hardware Virtualisierung
  • Intel VT (Intel Virtualization Technology)
  • Scripting
  • Android
  • Amazon Web Services (AWS)
  • Ruby
  • KVM (Kernel-based Virtual Machine)
  • PostgreSQL
  • Kernel Programmierung
  • Continuous Delivery (CDE)
  • SVG (Scalable Vector Graphics)
  • React Native
  • React (JavaScript library)
  • Google Tag Manager
  • Tape Libraries
  • Pacman
  • TeX
  • Disassembler
  • Assembler
  • Code Review
  • UNIX
  • Unüberwachtes Lernen
  • Rekurrentes Neuronales Netzwerk (RNN)
  • Neuronale Netze
  • Machinelles Lernen
  • Bestärkendes Lernen
  • IPSec
  • Embedded Entwicklung / hardwarenahe Entwicklung
  • MariaDB
  • Big Data
  • Projektleitung / Teamleitung (IT)
  • Penetrationstest
  • C
  • Docker
  • Friendly Hacking
  • Ethical Hacking
Forschung, Wissenschaft, Bildung
  • Informatik
  • Wirtschaftsinformatik
Marketing, Vertrieb, Kommunikation
  • SEO / SEM
  • Sponsoring
  • Social Media Marketing
  • Virales Marketing
  • Servicekonzept
Management, Unternehmen, Strategie
  • Corporate Identity
  • Corporate Culture
  • Management (allg.)
  • Kostenoptimierung
  • Kooperationen
  • Product Owner
  • Wissensmanagement
  • Risikomanagement
  • Organisationsentwicklung
  • Organisation (allg.)
  • Organisation (allg.)
  • Lean Startup
  • Lean Management
Einkauf, Handel, Logistik
  • E-Commerce
Design, Kunst, Medien
  • Content Management
  • Grafiksoftware (allg.)
  • Webdesign
  • Responsive Webdesign
  • Design (allg.)
  • WordPress
  • Bloggen
  • Videoproduktion
  • Medien (allg.)
  • Animationssoftware (allg.)
Technik, Ingenieurwesen
  • Autodesk AutoCAD (allg.)
  • Embedded Software Engineering
  • Fuzzy-logik
Finanzen, Versicherung, Recht
  • Betriebliches Rechnungswesen
  • Venture Capital Finanzierung
  • Finanzierung

Projekt‐ & Berufserfahrung

Full-Stack DevOps Developer
Brinkschulte Medien, Essen
10/2018 – 9/2019 (1 Jahr)
Medienbranche
Tätigkeitszeitraum

10/2018 – 9/2019

Tätigkeitsbeschreibung

# Redesign regiomanager.de with ReactJS and Bootstrap:

First, I added a CDN cache with AWS CloudFront. Then I added support for style versioning and configured the style in the deployment manifests for each stack. I added a new SCSS style with Bootstrap. The Webpack and ReactJS stack were added to the frontend by me. I did the rendering of the forms with formalist. Moreover, I added new micropages for listed companies. To support responsive images and multiple formats, I improved the AWS Lambda image resizing. The responsive images were added with srcset to support HiDPI and multiple device resolutions. To support mobile and desktop devices, I optimized the load time for mobile and desktop devices.

The performance was improved by moving the slug generation to the database. I had to fix the URL routing structure for SEO and redirect the legacy URLs. I have reached a significant improvement of the Google ranking. Furthermore, I added Open Graph tags. The regiomanager.de emails were migrated to GSuite. I used the Slim Template Engine to add email templates and a new corporate email layout for system emails. I did a continuous feedback-driven rapid prototyping workflow with the client.

# Add Subscriptions, Automated Payments, a Self-Service Members Area, and Paywalls:

To add subscriptions, I added an account registration. The verification is done by email or support. I added support to assign existing companies to accounts in the backend. To allow companies to claim their existing company profile, the registration supports such claims by invoking the registration from the company profile. Since customers do not like to remember many passwords, I have added a password-less login by cryptographic encrypted and signed email tokens. The main purpose was to have an immediate call to action. However, it also improved the security of the website. In the next step, I added Stripe subscriptions and management of plans and subscriptions in the backend. The support for multiple payment options was added, as well as, the support for legacy payments and legacy subscriptions. The existing legacy subscriptions required to create a migration policy and schedule for the client.

I developed a self-service members area to change micropage contents, order subscriptions and access rankings in subscribed magazines. Each magazine requires a dedicated subscription. Therefore, I added support for multiple yearly subscriptions with monthly payments. In the result, members can order and pay subscriptions for each magazine and select between three payment plans for each magazine. The backend allows the customer support to cancel customer subscriptions. For all new database entities, views, listings, and forms were added to the backend. The new account history tracks all account activities and allows the support to track customer issues while login and payment. To allow support, editors, and photographers to access paid content for free, I added a special privilege level. This flag was also helpful for the migration of legacy customers to Stripe payments.

To support the marketing channels of Brinkschulte Medien a newsletter registration and multiple calls to action were added. Furthermore, I added a free ranking selection as a call to action. For this project, I used a XMLHttpRequest to read the login state in JSON and a list of paid subscriptions from an uncached route. This allowed me to render the navigation and session-specific content without caching issues. Finally, I added a paywall for rankings. The paywall blurs all unpaid rankings but allows search engines to view paid content.

Eingesetzte Qualifikationen

Responsive Webdesign, Continuous Delivery (CDE), Testing (IT), Node.js, Ruby, CSS (Cascading Style Sheet), JavaScript, React (JavaScript library), Kundenberatung, SEO / SEM


Full-Stack DevOps Developer
Brinkschulte Medien, Essen
6/2018 – 10/2018 (5 Monate)
Medienbranche
Tätigkeitszeitraum

6/2018 – 10/2018

Tätigkeitsbeschreibung

Migration of regiomanager.de to AWS Infrastructure:
To migrate the workflow to web to print, it was required to merge the dedicated regiomanager.de legacy database into a single AWS RDS database and migrate the workflow of editors and photographers to the new backend. I fixed and cleaned the legacy database schema and entries, as well as, deduplicated the database schema while import was done. Then I migrated legacy XLS exports of rankings to AWS S3 and linked those rankings to original legacy database entries. Furthermore, I replaced the legacy PHP image resizing with the AWS Lambda Function, which is triggered on S3 object creation by AWS S3 Event Notifications. To test and verify the results, I implemented the migration in Ruby. Moreover, I implemented a backend generator based on the Ruby Object Mapper schema with custom annotations and configurations. In the next step, I added support for complex and nested SQL joins, complex sorting and full-text search to the backend generator. I generated a backend based on the Ruby Object Mapper schema and deployed the results to a demo stack. This allowed us to iterate very quickly and find the cleanest database model. The new database schema was discussed with the management of Brinkschulte Medien. In the next step, I rebuild the legacy PHP templates with Slim and verified the legacy HTML output with the Slim output. Therefore, the final migration included all legacy data required to render the frontend. Then I analyzed and fixed critical legacy code issues, as well as, provided emergencysupport. I fix the existing legacy performance issues and legacy HTTP 4xxx and 5xx errors to improve search engine ranking. Finally, I migrated the domain and DNS to AWS Route 53.

Eingesetzte Qualifikationen

MariaDB, Continuous Delivery (CDE), Kontinuierliche Integration (CI), Testautomatisierung, Testdesign (IT), Testing (IT), Testmanagement / Testkoordination (IT), Ruby, Migration, Amazon Web Services (AWS)


Full-Stack DevOps Developer
Brinkschulte Medien, Essen
2/2018 – 6/2018 (5 Monate)
Medienbranche
Tätigkeitszeitraum

2/2018 – 6/2018

Tätigkeitsbeschreibung

For this project, I first interviewed all important stakeholders (sales, publishers, management, back office) to gain an understanding of the overall requirements. The client vision was to continuously replace all legacy software to fix legacy issues, redesign the magazine website and add a self-service members area with subscriptions and automated payments. Additionally, the client wished to introduce a contribution agreement and guidelines to legally support relicensing the overall software to other publishing companies.

In the first practical step, I migrated all the unversioned legacy source code to a new GitHub Organization. I did a continuous migration and replacement of
legacy code without downtime. Thereafter, I created backups of all legacy systems and introduced a backup policy. Furthermore, I introduced a temporary deployment strategy to legacy servers. I added the Sentry error tracking, as well as, analyzed and fixed critical legacy code issues. Through the whole project, I provided emergency support for the client. In the next step, a migration of the MySQL database to AWS RDS MariaDB was done by me. The database is stored in three availability zones. Moreover, I migrated the legacy PHP upload used by magazine photographers to AWS S3. This also required to add AWS S3 image downloads to the PHP legacy code. Magazines have very huge image archives. To not interrupt the work of employees and external freelancers, I migrated in non-breaking steps (e.g., first upload to legacy storage and S3).

I defined all infrastructure components with AWS CloudFormation and introduced infrastructure as code to the project. To reach the vision of the client I built a continuous deployment infrastructure with AWS CloudFormation, AWS ECR, Docker, CoreOS, Alpine Linux and CircleCI. Since AWS Fargate was not available within the EU, we could not use AWS Fargate without violating the GDPR. Support for the database schema migrations was added with Sequal and Ruby Object Mapper. I fixed and cleaned the legacy database schema and entries. For production, demo, and testing multiple CloudFormation stacks were added.

I added an load balancing with AWS Application Load Balancer and a scaling group with EC2 instances. Furthermore, I added a high availability infrastructure and migrated the infrastructure with zero downtime. Health checks, monitoring, and automated instance recycling were added by me. To support multiple parallel EC2 instances, I added AWS ElastiCache and Memcached. Since the old code was in PHP, I have added a new Ruby-based backend. Moreover, I replaced the custom PHP session handling with proper PHP session handling and shared the session with the Ruby Rack application (Roda Routing Tree Web Toolkit, Ruby Object Mapper, Dry-rb). As session store, I used a cluster of AWS ElastiCache nodes with memcached. All session data is stored encrypted and cryptographically signed. It was also important to add logging with AWS CloudWatch.

For the new backend, I added Webpack, SCSS, ReactJS and ReactJS form generation with Formalist. For template rendering, I used dry-view and the Slim template engine. I added support for routing legacy PHP and new Ruby URLs to dedicate docker containers.

For project management, I introduced task management with Trello and a Slack channel. Since the client had no experience with product development for the web, I furthermore did product development. The traditional publishing workflow was print to web. To support modern distribution channels, I migrated the workflow to web to print. The project involved nearly 100% remote work, as well as some meetings for requirements engineering and the presentation of the project progress and results.

Eingesetzte Qualifikationen

Continuous Delivery (CDE), DevOps, DevOps, Kontinuierliche Integration (CI), Web Security, Bildverarbeitung, Betriebssysteme (allg.), Agile Entwicklung, SCRUM, Testautomatisierung, Testdesign (IT), Testing (IT), Testmanagement / Testkoordination (IT), Back-End Entwicklung, Functional reactive programming (FRP), Git, Node.js, Ruby, Versionierung / Versionsverwaltung, XML, 24/7 Support, 2nd & 3rd Level Support, Cloud (allg.), Cloud Computing, Google Cloud, System Design, SSH (Secure Shell), Amazon Web Services (AWS), CSS (Cascading Style Sheet), JavaScript, JavaScript Object Notation (JSON), PHP, React (JavaScript library), Webservices, Kundenberatung, Kundenanalyse, Anforderungsmanagement


Researcher, Open Source Kernel Developer & Hacker
Syscase, University of Duisburg-Essen, Essen
10/2017 – offen (2 Jahre, 7 Monate)
Hochschulen und Forschungseinrichtungen
Tätigkeitszeitraum

10/2017 – offen

Tätigkeitsbeschreibung

The impact, ubiquity, and prevalence of mobile systems with trusted execution environments (TEEs) resulted in an increasing number of vulnerabilities on mobile platforms. While kernel fuzzing has been addressed there is no support for ARM TrustZone. Existing kernel fuzzers such as TriforceAFL suffer from parse errors caused by unsuitable test case formats, have limited code coverage output and are not designed for trusted kernel fuzzing.

From the outside of the TEE, it is possible to execute code via three different calls: trusted system calls, Secure monitor calls (SMCs) and TEE driver interface calls. Existing fuzzers do not cover SMCs. I introduced a test-driven approach and published Syscase as open source fuzzing framework for the ARM TrustZone TEE with a reference implementation for OP-TEE. It is a superior fork of TriforceAFL and QEMU with an Intel host system and an ARM guest running OP-TEE in the trusted zone and Linux in the untrusted zone. Its modularity and framework approach support easy extension to fuzz other trusted kernels.

With Syscase I show that trusted kernel security and the security of TEEs can be improved. In a first evaluation Syscase found two security vulnerabilities in OP-TEE – one denial of service (DoS) vulnerability through trusted system calls and another DoS vulnerability through SMCs. Additionally, Syscase achieves good code coverage of the OP-TEE kernel. The Syscase test case format with a structureless random binary body simplifies rapid prototyping as well as preparation, distributed execution, monitoring and analysis of experiments. Syscase solves and simplifies the collection, rotation, and import of console logs as well as matching those logs to unique executions.

It supports parse error-free mutations, significantly more detailed coverage analysis and visualization. Syscase demonstrates that inputs with complex nested structures can be properly generated by extracting natural seed inputs. My workflow to extract and verify those seed inputs results in a very fast exploration of paths.

Eingesetzte Qualifikationen

Continuous Delivery (CDE), Kontinuierliche Integration (CI), Embedded Entwicklung / hardwarenahe Entwicklung, Ethical Hacking, Friendly Hacking, Informationssicherheit, IT Sicherheit (allg.), Netzwerk-Sicherheit, Web Security, Kernel Programmierung, Linux (Kernel), Penetrationstest, Testautomatisierung, Testdesign (IT), Testing (IT), Assembler, Bash (Shell), C, Disassembler, Docker, Git, make (Software), Reverse Engineering, Scripting, SSH (Secure Shell), Hardware Virtualisierung, Intel VT (Intel Virtualization Technology), KVM (Kernel-based Virtual Machine), Web Entwicklung (allg.), Webservices


Researcher & Open Source Developer
WilsonROS, University of Duisburg Essen, Essen
4/2017 – 10/2017 (7 Monate)
Robotics
Tätigkeitszeitraum

4/2017 – 10/2017

Tätigkeitsbeschreibung

Implementation and construction of a self-driving robot in C++ and Python. The robot creates a 2D floor plan of buildings, can dynamically recognize moving obstacles and performs a high level path planning to navigate through a series of measurement points. The measurement points are gained from WiFi coverage
data. The robot measures the WiFi coverage at each measurement point to increase the WiFi coverage for Wireless Indoor Localization.

Eingesetzte Qualifikationen

3D Rekonstruktion, Bilderkennung, Bildverarbeitung, Computer Vision, Machinelles Lernen, Point Cloud Library (PCL), simultaneous localization and mapping (SLAM), C++, Python, WLAN (Wireless Local Area Network), Automatisierungstechnik (allg.), Robot Operating System (ROS), Robotik / Robotertechnik


Researcher & Software Developer
University of Duisburg Essen, Essen
10/2016 – 4/2017 (7 Monate)
Hochschulen und Forschungseinrichtungen
Tätigkeitszeitraum

10/2016 – 4/2017

Tätigkeitsbeschreibung

The exam room planning was previously done by hand and in Excel. There was no complete room list. This resulted in multiple months of planning, early exam registrations and high renting costs for external buildings. The new room planning system uses a genetic algorithm - the regulator algorithm (RGA) - to solve multiple hard and soft constraints such as time windows, equipment and
room size. The software splits big exams to reduce external building costs. University employees and lecturers use a web interface to manage exam wishes, rooms, equipment, lecturers, supervisors and more. Besides the exam
planning software is able to optimize the room planning for university courses over the semester.

Eingesetzte Qualifikationen

Webdesign, Informatik, Betriebssysteme (allg.), Agile Entwicklung, Behavior Driven Development (BDD), Code Review, Softwarequalität, Testautomatisierung, Testdesign (IT), Testing (IT), Testmanagement / Testkoordination (IT), NginX, Bash (Shell), Functional reactive programming (FRP), J2SE (Java SE), Java (allg.), Ruby, CSS (Cascading Style Sheet), HTML, JavaScript, React (JavaScript library), Prozessoptimierung


Researcher & Kernel Developer
University of Duisburg-Essen, Essen
4/2016 – 10/2016 (7 Monate)
Operating Systems Design and Implementation
Tätigkeitszeitraum

4/2016 – 10/2016

Tätigkeitsbeschreibung

ProcFS, mounting and lazzy allocation for Unix Version 6:
I did the „Operating Systems Design and Implementation“ course by Prof. Dr. Rasit Eskicioglu (University of Manitoba). This course is based on
the xv6 (Unix Version 6) MIT course 6.828.

I implemented mounting and ProcFS and extracted the xv6 file system (not required) to add support for multiple and arbitrary mount points. I also added lazy allocation (buffer in LRU-order), mmap, system calls, halt, bmap with double-indirect blocks, signal support for SIGFPE and SIGSEGV with signal handlers and have implemented my own shell with pipes and redirects.

Eingesetzte Qualifikationen

Kernel Programmierung, Linux (Kernel), UNIX, Assembler, C, Disassembler, Git, Linux Entwicklung, make (Software), Versionierung / Versionsverwaltung, Hardware Virtualisierung, KVM (Kernel-based Virtual Machine), Software Virtualisierung


Researcher & Software Developer
University of Duisburg-Essen, Essen
10/2015 – 10/2016 (1 Jahr, 1 Monat)
Hochschulen und Forschungseinrichtungen
Tätigkeitszeitraum

10/2015 – 10/2016

Tätigkeitsbeschreibung

Development of a board game engine where each state is a series of immutable changes in a dynamic system. Implementation of the Checkers game logic and UI with the board game engine. Each component is interchangeable because of fine-grained dependency injection. AI players can be added as plugins. The AI players use a neural network to learn from human players. To optimize user satisfaction, the difficulty of the AI player adjusts to the player‘s abilities dynamically through fuzzy logic.

Eingesetzte Qualifikationen

Game design, Grundlagenforschung, Kontinuierliche Integration (CI), Bestärkendes Lernen, Neuronale Netze, Agile Entwicklung, Testautomatisierung, Testdesign (IT), Testing (IT), Apache Maven, Computerspielentwicklung, Git, Gradle, J2SE (Java SE), Java (allg.), JUnit, Fuzzy-logik


Frontend Developer
ifm electronic gmbh, Essen
9/2015 – 3/2017 (1 Jahr, 7 Monate)
High-Tech- und Elektroindustrie
Tätigkeitszeitraum

9/2015 – 3/2017

Tätigkeitsbeschreibung

Interactive Field of View Visualization: Development of an interactive field of view visualization in Elm (JavaScript) and Haskell (precalculation of paths from SVG) for IFM O3M 3D sensors as an international marketing tool for the new IFM website and shop system published in 2017. There was already a technical 3D simulator tool, but this tool required local installation and a sales person to explain. To give the customer an early help to find the best suited sensor, the goal of the project was to develop a simple 2D visualization, that is helpful to support the decision-making process of the customer. This tool increases sales of cumstomers and reduces direct marketing costs.

Eingesetzte Qualifikationen

Front-End Entwicklung, Functional reactive programming (FRP), Git, Versionierung / Versionsverwaltung, JavaScript, JavaScript Object Notation (JSON), Kundenberatung, Marketing (allg.), Online Marketing, Werbung, Anforderungsmanagement


Co-Founder & CEO
Cerody, Essen
5/2015 – offen (5 Jahre)
IT & Entwicklung
Tätigkeitszeitraum

5/2015 – offen

Tätigkeitsbeschreibung

* Hosting of client websites
* Entrepreneurship
* Product development
* Odoo / Flectra
* Tape backups

Eingesetzte Qualifikationen

Design (allg.), Responsive Webdesign, Webdesign, Animationssoftware (allg.), Grafiksoftware (allg.), Medien (allg.), Videoproduktion, Bloggen, Content Management, WordPress, E-Commerce, Finanzierung, Venture Capital Finanzierung, Betriebliches Rechnungswesen, Informatik, Wirtschaftsinformatik, Big Data, Datenanalyse, Datenbankadministration, Datenbankentwicklung, MariaDB, PostgreSQL, RDB / RDBMS, Continuous Delivery (CDE), DevOps, DevOps, Kontinuierliche Integration (CI), CRM Beratung (allg.), ERP Beratung (allg.), Embedded Entwicklung / hardwarenahe Entwicklung, Embedded Linux, Embedded Systems, Demilitarized Zone (DMZ), Firewalls, Informationssicherheit, IPSec, IT Sicherheit (allg.), Netzwerk-Sicherheit, SSL / TLS, Web Security, Bestärkendes Lernen, Machinelles Lernen, Neuronale Netze, Rekurrentes Neuronales Netzwerk (RNN), Überwachtes Lernen, Unüberwachtes Lernen, Android, Betriebssysteme (allg.), Kernel Programmierung, Linux (Kernel), ReactOS, UNIX, Code Review, Softwarequalität, Software Analyse, Software Architektur / Modellierung, Software Design, Android Entwicklung, Assembler, Disassembler, Functional reactive programming (FRP), Git, LaTex, Reverse Engineering, Ruby, SAAS, Software engineering / -technik, TeX, Versionierung / Versionsverwaltung, Pacman, Cloud (allg.), Cloud Computing, Google Cloud, Hosting, Konfiguration, Migration, Tape Libraries, DHCP, DNS, SIP (Session Initiation Protocol), SMTP, KVM (Kernel-based Virtual Machine), Amazon Web Services (AWS), Google Adwords, Google Analytics, Google Tag Manager, React (JavaScript library), React Native, SVG (Scalable Vector Graphics), Softwareauswahl (Evaluierung), Lean Management, Lean Startup, Management (allg.), Organisation (allg.), Organisation (allg.), Organisationsentwicklung, Risikomanagement, Wissensmanagement, Product Owner, Corporate Culture, Corporate Identity, Kooperationen, Kostenoptimierung, SEO / SEM, Servicekonzept, Social Media Marketing, Sponsoring, Virales Marketing, Fuzzy-logik, Embedded Software Engineering, Autodesk AutoCAD (allg.)


Lead Developer
Schirp DSO, Essen
11/2011 – 12/2012 (1 Jahr, 2 Monate)
IT & Entwicklung
Tätigkeitszeitraum

11/2011 – 12/2012

Tätigkeitsbeschreibung

* wuru.tv (Wuppertaler Rundschau): Test driven and metric driven development of a self-hosted video service with audio and video transcoding in Ruby. Implementation of a video mercantile directory for local companies using Rack middleware directly to improve
page load and performance. The backend allowed the customer to change all data, upload videos or link external YouTube videos. Each company got a jump code. Readers of the printed newspaper can use this code to jump directly
to the video and profile of the advertising company. To further improve the test coverage I used mutation testing.

* Collaborative groupware app for Android to manage versioned tasks. Generic data model and form generation. Conversion of business model types (e.g., convert task to order). Version history and reverting objects to any state. Supports reverting reverts.

* Maintenance of legacy Ruby on Rails applications
* Maintenance of app hosting prototype based on KVM

Eingesetzte Qualifikationen

Informatik, MongoDB, PostgreSQL, RDB / RDBMS, Kontinuierliche Integration (CI), Firewalls, IT Sicherheit (allg.), Kryptographie, Netzwerk-Sicherheit, Web Security, Android, Betriebssysteme (allg.), Agile Entwicklung, Behavior Driven Development (BDD), Penetrationstest, Testautomatisierung, Testdesign (IT), Testing (IT), NginX, Objektorientierte Analyse (OOA), Objektorientierte Analyse und Design (OOAD), Objektorientierte Design (OOD), Objektorientierte Programmierung (OOP), Android Entwicklung, Back-End Entwicklung, Bash (Shell), Front-End Entwicklung, Functional reactive programming (FRP), Git, Java (allg.), Jenkins, make (Software), Ruby, Versionierung / Versionsverwaltung, Cloud (allg.), Cloud Computing, Konfiguration, DHCP, DNS, SSH (Secure Shell), KVM (Kernel-based Virtual Machine), Virtualisierung (Allg.), Ajax, Amazon Web Services (AWS), CSS (Cascading Style Sheet), DOM (Document Object Model), Full-Stack, Google Adwords, Google Analytics, HTML, JavaScript, JavaScript Object Notation (JSON), JavaScript-Frameworks, jQuery, Representational State Transfer (REST), Ruby on rails, Web Entwicklung (allg.), Webservices, XHTML (Extensible HyperText Markup Language), Dokumentation (IT), Konzeption (IT), Multimedia-Beratung / -Anwendung, Prozess- / Workflow, Projektleitung / Teamleitung, Kundenberatung, SEO / SEM, Werbung, Videotechnik


Research and Mobile Development
Digifieds, 1st International UBI Challenge, Univer, Oulu
6/2011 – 8/2011 (3 Monate)
Ubiquitous Computing
Tätigkeitszeitraum

6/2011 – 8/2011

Tätigkeitsbeschreibung

Finalist of of the 1st International UBI Challenge in Oulu (team Digifieds). Development of a digital bulletin board for the public display network of Oulu. Development of an android app to create and manage ads with images on local displays. Field evaluation with local residents. 3rd place.

Prototyping & Proposal in Essen: 10/2010 - 02/2011
Implementation, Deployment & Field Study in Oulu: 06/2011 - 08/2011

Eingesetzte Qualifikationen

Angewandte Forschung, Forschung & Entwicklung (allg.), Embedded Systems, Android, Ubuntu, Agile Entwicklung, glasfish, Android Entwicklung, Git, J2EE (Java EE), Mobile Entwicklung (allg.), Versionierung / Versionsverwaltung, Schnittstellenentwicklung, User Experience (UX), User Interface (UI), JavaScript, JavaScript Object Notation (JSON), jQuery, Representational State Transfer (REST), Werbung, Benutzerschnittstelle / Mensch-Maschine-Schnittstelle (MMS), Sensorik


Student Assistent (Festanstellung)
Human Computer Interaction Group, Prof. Dr. Rukzio, Essen
11/2010 – 1/2012 (1 Jahr, 3 Monate)
Human Computer Interaction
Tätigkeitszeitraum

11/2010 – 1/2012

Tätigkeitsbeschreibung

Android and Windows Phone 7 Development. Development of a photo-sharing app and rapid prototyping framework for Android, Windows Phone 7 and Microsoft Surface multitouch tables. The user can select photos and share those images by physical interaction (e.g. bumping) with the touch table. The user has a private space and can move images to public space with finger interaction. Other users can collect public images by bumping (detect by acceleration and microphone). Other responsibilities: Developing a color-based communication app to transfer data by color patterns.

Eingesetzte Qualifikationen

Angewandte Forschung, Forschung & Entwicklung (allg.), Grundlagenforschung, Trend- & Zukunftsforschung, Informatik, Kontinuierliche Integration (CI), Embedded Systems, IT Sicherheit (allg.), SSL / TLS, Android, Betriebssysteme (allg.), Ubuntu, Windows Phone, Agile Entwicklung, Extreme Programming, Softwarequalität, Testautomatisierung, Testdesign (IT), Testing (IT), Android Entwicklung, C#, Eclipse, Git, Java (allg.), JUnit, Mobile Entwicklung (allg.), Softwareentwicklung (allg.), Versionierung / Versionsverwaltung, Windows Phone Entwicklung, XML, Schnittstellenentwicklung, SSH (Secure Shell), User Experience (UX), JavaScript Object Notation (JSON), Dokumentation (IT), Machbarkeitsanalyse, Benutzerschnittstelle / Mensch-Maschine-Schnittstelle (MMS), Sensorik


CTO (Festanstellung)
Z. Food, Essen
5/2006 – 11/2010 (4 Jahre, 7 Monate)
Großhandel
Tätigkeitszeitraum

5/2006 – 11/2010

Tätigkeitsbeschreibung

Multilanguage mercantile dictionary for the Arabic market in Germany. Point of sale software development. GS1-128 barcode parsing. Magento and eBay shop system. Customer and product database. GS1 barcode database. Multiple other responsibilities: Development of own food brands, corporate identity, container management, ...

Eingesetzte Qualifikationen

Corporate design, Design (allg.), Druckgrafik (Print Design), Grafikdesign, Logodesign, Markendesign, Responsive Webdesign, Verpackungsdesign, Webdesign, Adobe Illustrator, Adobe Photoshop, Dreamweaver, Grafiksoftware (allg.), Content Management, Redaktion (allg.), Social Media Redaktion, E-Commerce, Einzelhandel (Retail), Großhandel, Handel (allg.), Stationärer Handel, Import, Zollabwicklung, Lagerlogistik, Logistik (Allg.), Container Management, Informatik, Wirtschaftsinformatik, Data Mining, Datenanalyse, Reporting, Datenbankadministration, Datenbankentwicklung, JDBC (Java Database Connectivity), mySQL, RDB / RDBMS, SQL, DevOps, DevOps, Konfigurationsmanagement (KM), Kontinuierliche Integration (CI), CRM Beratung (allg.), ERP Beratung (allg.), Embedded Linux, Embedded Systems, Cyber Security, Datenschutz, Demilitarized Zone (DMZ), ESET (allg.), Firewalls, IDS (Intrusion Detection System), Informationssicherheit, IT Sicherheit (allg.), Kaspersky (allg.), Netzwerk-Sicherheit, OpenVPN, SSL / TLS, Web Security, Text Mining, Text-Extraction, Betriebssysteme (allg.), Debian, Microsoft Windows (allg.), OpenSuse, Ubuntu, Windows 7, Windows CE, Windows NT, Windows PE, Windows Vista, Windows XP, Agile Entwicklung, Extreme Programming, Projektleitung / Teamleitung (IT), Projektmanagement (IT), Release Management, QoS (Quality of Service), Qualitätsmanagement / QS / QA (IT), Softwarequalität, Testautomatisierung, Testdesign (IT), Testing (IT), Testmanagement / Testkoordination (IT), Apache, Apache HTTP Server, Lighttpd, postfix, Samba, Server-Monitoring, Serveradministration (allg.), X.Org-Server, Enterprise Architect (EA), Objektorientierte Analyse (OOA), Objektorientierte Analyse und Design (OOAD), Objektorientierte Design (OOD), Objektorientierte Programmierung (OOP), Software Analyse, Software Architektur / Modellierung, Software Design, UML, Apache Maven, Apache Subversion (SVN), Application Development, Back-End Entwicklung, Bash (Shell), Drupal, Eclipse, EJB (Enterprise JavaBeans), Front-End Entwicklung, Git, Hibernate (Java), J2EE (Java EE), J2SE (Java SE), Java (allg.), Java-Frameworks, JUnit, make (Software), Software engineering / -technik, Softwareentwicklung (allg.), Versionierung / Versionsverwaltung, Wordpress, XML, Advanced Packaging Tool (APT), Softwarepaketierung / Verteilung (allg.), Windows Installer (MSI), YUM (Yellowdog Updater Modified), 2nd & 3rd Level Support, Anwendungsadministration, Application-Management (AM), IT-Support (allg.), IT-Techniker (allg.), Cloud (allg.), Cloud Computing, Google Cloud, Acronis Backup, Back up / Recovery, Gerätetreiber, Hosting, Konfiguration, Migration, Router / Gateways, SAN / NAS, Scripting, Storage, Systemadministration (allg.), Cisco Switch, DHCP, DNS, Ethernet, HTTP, Infrastrukturarchitektur, Internet / Intranet, ISDN, LAN, NetBIOS, Router, SIP (Session Initiation Protocol), SMTP, SSH (Secure Shell), Telnet (Telecommunication Network), VLAN (Virtual Local Area Network), VoIP, VPN (Virtual Private Network), WAN, WLAN (Wireless Local Area Network), User Experience (UX), User Interface (UI), Hardware Virtualisierung, Intel VT (Intel Virtualization Technology), Software Virtualisierung, Virtualisierung (Allg.), Vmware (allg.), VMware Workstation, Ajax, CSS (Cascading Style Sheet), DOM (Document Object Model), Full-Stack, Google Adwords, Google Analytics, Hibernate (Framework), HTML, JavaScript, JavaScript Object Notation (JSON), JavaScript-Frameworks, jQuery, Magento, PHP, Web Analyse (allg.), Web Entwicklung (allg.), Webservices, Zend, Dokumentation (IT), Erstellung Programmiervorgaben, Hardware-Auswahl, Internet / Intranet- Integration (eBusiness), IT-Systemmanagement, Konzeption (IT), Linux Einführung, Softwareauswahl (Evaluierung), Systemeinführungsunterstützung, Management (allg.), Personalorganisation, Personalsuche / -auswahl, Projektleitung / Teamleitung, Projektorganisation, Corporate Culture, Corporate Identity, eBusiness-Strategie, Service-Level-Management (SLA), Content Marketing, E-Mail Marketing, SEO / SEM, Social Media Marketing, Sponsoring, Werbung, CRM (Customer Relationship Management), Filialsysteme, Projektmanagement - Softwaretool-Schulung


Ausbildung

Software and Network Engineering
(Master of Science)
Jahr: 2019
Ort: University of Duisburg Essen

Applied Computer Science
(Bachelor of Science)
Jahr: 2014
Ort: University of Duisburg Essen

Qualifikationen

Stripe Payments, AWS CloudFormation, AWS CloudFront CDN, AWS ElastiCache, AWS RDS, AWS EC2, AWS RDS, AWS ECR, Sentry, CoreOS, Docker, ReactJS, AWS Lambda, AWS S3, AWS Route 53, AWS Application Load Balancer, Memcached, Ruby, Java, C, C++, Haskell, Elm, JavaScript, ECMAScript, TypeScript, PureScript, CoffeeScript, PHP, Python, C#, Smalltalk

Über mich

I am used to very high learning curve and can learn any required technology in very short time. I am used to work with foreign legacy source code and can take over any project. I am more than a regular full-stack developer. I can work from low level (kernel development, x86, x64, aarch32, aarch64, ARMv8-A, ARM TrustZone, ...) to high level (web development, back-end, front-end). I have even experience with Robotics (Robotic Operating System), neural networks and genetic algorithms. Furthermore I can take over product development and management tasks (e.g. lean startup, customer development à la Steve Blank).

Persönliche Daten

Sprache
  • Deutsch (Muttersprache)
  • Englisch (Fließend)
  • Französisch (Grundkenntnisse)
  • Arabisch (Grundkenntnisse)
Reisebereitschaft
DACH-Region
Arbeitserlaubnis
  • Europäische Union
Home-Office
bevorzugt
Profilaufrufe
304
Alter
33
Berufserfahrung
13 Jahre und 11 Monate (seit 05/2006)
Projektleitung
6 Jahre

Kontaktdaten

Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.

Jetzt Mitglied werden »