Strategic IT leadership,
grounded in deep-level engineering.
IT Strategy · Full-Stack Development · Linux · Cybersecurity
My journey into IT didn't start in a boardroom; it started with the distinctive click of an Amiga 500 floppy drive. That's where I learned that real understanding means getting to the bottom of things. Writing C for industrial mail-sorting machines on Real-Time Linux, contributing to the Enlightenment Foundation Libraries, attending the Chaos Communication Congress: that's the ground I come from.
Today I lead IT strategy and build software that has to work. The range covers full-stack development, AI integration, cloud infrastructure and identity management, but the approach is always the same: understand the problem properly before touching the keyboard. Years at the hardware-software boundary make a measurable difference when things get complicated.
Responsible for group-wide IT business applications at a private school group, including a parent-facing mobile app used across all schools, a CRM rollout, and the construction of a central Data Warehouse.
Technical and disciplinary leadership of the engineering department at a cloud VoIP provider. Built and scaled a cross-functional team with Scrum and Kanban. Drove OpenAI and LLM integration for automated transcription and call routing, and oversaw the WebRTC and Keycloak (IAM) ecosystem. Led the migration from legacy monoliths to a microservices architecture and rebuilt CI/CD pipelines from scratch.
Responsible for IT operations and product development at a Berlin VoIP reseller. Evolved the platform in PHP, Python and MariaDB with JavaScript frontends, built Tableau business intelligence reporting interface, and developed custom features for enterprise clients that extended the platform's reach and kept them on it long-term.
Lead software architect for industrial mail-sorting machines built in C on Real-Time Linux with custom kernel modules. Designed CANopen and RTNET communication frameworks for sub-millisecond hardware synchronisation. Main point of escalation for failures at the hardware-software boundary, and responsible for the full IT infrastructure connecting shop-floor machines to enterprise systems.
Development of a Service Management System using Google Web Toolkit (GWT).
Full-stack web development in PHP, JavaScript and MySQL alongside Linux sysadmin for Debian servers: Apache, DNS, IPTables, Samba, VPN and Xen virtualisation.
CRM development in PHP, JavaScript and MySQL, plus Linux sysadmin across Debian and SuSE servers: Apache, DNS, firewalls, NFS, Samba and VPN. Also managed diskless SuSE workstations booting via NFS netboot.
Team leadership covering hiring, coaching from junior to senior and technical decisions. Goal-setting with OKRs, Scrum and Kanban in practice, budget planning and building teams that work well across locations.
Leadership · Agile · OKRs · HiringBuilding and operating infrastructure that holds up. Docker and Kubernetes for containerisation, KVM and Qemu for virtualisation, all on Linux.
Docker · Kubernetes · KVM · Qemu · LinuxLLM and OpenAI integration running in production, not just proof of concept. Automated voice bots, WebRTC pipelines and full-stack applications from database to UI.
AI · OpenAI · WebRTC · VoIPSecurity-first mindset shaped by years in the CCC community. IAM with Keycloak, firewall architecture, DNS, VPN, and cybersecurity strategy for cloud and on-premises environments.
Keycloak · IAM · CCC · Linux · VPNONGOING
Web application for documenting, managing and reporting illegally placed outdoor advertisements. Captures photos, GPS coordinates and case metadata in the field, with filters, PDF/Excel export, CSV import and an interactive map. Role-based user management and a full audit log cover accountability across multiple branches. Currently expanding into advertising site inventory management with a direct interface to the Berlin state authority for permit applications.
COMPLETED
Android rating app built with Java and a Python/Jasonette backend, rendering server-side JSON as native OS elements. Published on Google Play.
Full office management system built from scratch for a Berlin Mixed Martial Arts studio. Covers customer CRM, course scheduling, contracts, payments and automated email and SMS communication. Includes detailed reporting, a Google Maps view of customer locations and a digital display for in-studio advertising. Role-based access ensures each staff member only sees what is relevant to their work.
Rewrite of Easy_e17.sh for Enlightenment's move from SVN to Git. Automated the full checkout, compilation and installation of the EFL ecosystem across Linux, FreeBSD, macOS and SunOS, with four installation profiles (Basic, Full, Complete, Custom) covering EFL core, Enlightenment, 14 extra modules including the diskio module by morlenxus, applications like Terminology and Ephoto, and legacy E16. File-tracking for clean upgrades, per-user config, component skipping, ccache and multi-threading support, build notifications and post-install hooks. Co-developed with David 'onefang' Seikel and multiple community contributors. Licensed BSD.
C tool for recording a window's content to JPEG frames and encoding them as video via mencoder. Experimental.
Lightweight mplayer-based media player written in Python.
Active contributor to the Enlightenment window manager and EFL core libraries over more than a decade, listed in the official AUTHORS file. Work spans bug fixes and feature additions across mixer, task manager, window management, shelf, theming, and EFL internals such as file path handling and localization fallback. Also authored easy_e17.sh, a widely used build script for compiling Enlightenment DR17 from SVN.
Bash script that downloaded, compiled and installed Enlightenment DR17 and all EFL components from SVN in a single command. Included a file-tracking system for clean upgrades, per-user and global config support, selective component skipping and backup. Widely adopted across Ubuntu, Debian, Fedora and Arch Linux as the go-to way to run current E17 builds before an official release existed. Described in the community as "one of the best available" tools for E17 installation, and mentioned by name in a Linux Magazine E17 feature (05/2006) and a Linux User article (02/2007). Superseded by Easy_EFL.sh when Enlightenment moved from SVN to Git in 2012.
easy_e17-srcupdate.jpgeasy_e17-compiling.jpgeasy_e17-error.jpg
PHP website for a Berlin-based model train shop, covering catalogue and accessories.
The main community hub for Enlightenment DR17 content from 2002 to 2008. Hosted themes, wallpapers, modules, screenshots and application packages for E17, all open for user submissions, alongside an IRC channel (#get-e on freenode). One of two major E17 theme repositories of that era alongside E17-Stuff.org, filling the gap before an official exchange existed. Closed 2008-07-20; content and contributors moved to the newly launched exchange.enlightenment.org.
get-e-startpage.jpgget-e-themes.jpgget-e-closing.jpgget-e.org archive
ETK theme and wallpaper installer for Enlightenment DR17. C-based, experimental.
User-friendly Perl front-end for IPTables firewall configuration.
At its peak, the largest German website for techno and electronic music MP3 downloads, built before the music industry had any answer to free digital distribution. Grew into a large community archive with two contribution models: some contributors had direct upload access, while others sent CD spindles by post to be ripped and uploaded, the only practical solution given dial-up-era bandwidth. Perl/CGI handled the file upload logic and site dynamics. Eventually shut down after escalating conflicts with rival sites. A genuine piece of early-internet history.
Whether you need custom-developed software, a strategic architect for a complex migration, or a "deep-tech detective" for a critical failure - I'm ready.