PORTFOLIO
Table of Contents
Featured Works & Engineering Systems
I am a Senior Full-Stack Software Engineer with 7+ years of experience designing, developing, and maintaining production-grade web applications, enterprise platforms, AI-driven systems, cybersecurity software, and industrial IoT solutions.
Angular, React, Next.js, TypeScript, RxJS, PrimeNG, Material UI. Complex interactive dashboards, real-time UI updates, form engines.
Node.js, NestJS, C#, .NET / .NET, Express. High-throughput REST APIs, Server-Sent Events, background queue processing.
OpenAI & Azure OpenAI, RAG pipelines, Weaviate vector database, chunking, technical specification extraction, human-in-the-loop validation.
Keycloak, OAuth2, OIDC, JWT, RBAC. Docker, Kubernetes (AKS), Terraform, Helm charts, Azure Pipelines, Nginx, Traefik routing.
A significant part of my recent work has involved building AI and industrial software platforms—including document processing, RAG, vector databases, engineering specification extraction, industrial telemetry, machine monitoring, and enterprise authentication. I take full ownership from problem definition to robust delivery.
Proven tiered architecture applied across industrial platforms, mission-critical IoT telemetry, AI assistants, and enterprise customer portals.
| Languages | TypeScript, JavaScript, C#, SQL |
| Frontend | Angular (18–20), React, Next.js, PrimeNG |
| Backend | NestJS, Node.js, C# / .NET, Express |
| Databases | PostgreSQL, Redis, MongoDB, MySQL, Weaviate |
| Security & Auth | Keycloak, OAuth2, OpenID Connect, JWT, RBAC |
| Orchestration | Docker, Kubernetes (AKS), Helm, Terraform |
| CI/CD & Monitoring | Azure Pipelines, GitLab CI, Grafana, OpenTelemetry |
| Repository | Nx Monorepos, Multi-tenant Microservices |
Intelligent Factory Operations & RAG
Brings industrial machine data, maintenance documentation, and AI-assisted workflows into a unified enterprise environment. Features ShopfloorGPT: conversational RAG search over massive industrial documentation catalogs.
AI-Assisted Search
Document ingestion, intelligent chunking, and vector search over complex machine maintenance manuals.
Multi-Tenant Setup
Tenant-oriented administrative settings, isolated database configs, and dynamic environmental parameters.
Product Catalog
Specialized enterprise plugins (e.g. Neugart integration) with full trilingual support (EN, DE, IT).
Multi-Format Export
Conversation histories and technical extracts exportable directly as structured PDF, Markdown, and JSON.
End-to-end implementation of enterprise RAG, vector retrieval, and single sign-on authentication.
- Document Ingestion: Ingests high-volume industrial PDFs, technical schematics, and operator manuals.
- Semantic Chunking: Parses documents into semantically coherent fragments preserving engineering context.
- Vector Indexing: Embeddings generated via Azure OpenAI and stored inside a high-performance Weaviate vector database.
- Contextual Retrieval: Real-time cosine similarity search extracts high-affinity chunks matching technician queries.
- Mandatory Feedback Workflow: Integrated telemetry allowing engineers to validate accuracy and drive prompt fine-tuning.
- Keycloak SSO: Complete enterprise authentication leveraging OAuth2, OpenID Connect (OIDC), and signed JWTs.
- Role-Based Access Control (RBAC): Granular permissions ensuring operators only query authorized machinery catalogs.
- Routing & Ingress: Traefik and Nginx reverse proxies managing SSL termination, rate-limiting, and microservices routing.
- Cloud Deployment: Automated Azure Kubernetes Service (AKS) provisioning managed through Helm charts and Terraform.
Automated Technical Parameter Parsing
An AI-assisted engineering platform that parses technical documents to extract structured engineering parameters (flow rates, pressures, viscosity, ATEX certifications) that previously demanded hours of manual review.
Background Queue
Heavy OCR & LLM tasks run in a persistent asynchronous queue so the UI never blocks or freezes.
Server-Sent Events
Real-time progress streaming pushes live status updates to the Angular client without polling overhead.
Human-in-the-Loop
Extracted values feature interactive verification UI where engineers approve or correct values.
ExcelJS Reporting
Validated engineering data automatically transforms into formatted, production-ready Excel audit reports.
Industrial Drive Monitoring & Analytics
An enterprise IoT monitoring platform aggregating live drive telemetry (vibration, heat, torque, motor speed) into high-frequency visual dashboards for preventive maintenance.
Grafana Integration
Seamless integration of Grafana dashboards embedded alongside native Angular application charts.
Reference Run Diffs
Real-time comparison of live machine telemetry curves against golden baseline runs to spot early mechanical wear.
Multi-Board Sync
Synchronized multi-board monitoring allowing multi-sensor time-series alignment across distributed equipment.
Keycloak Security
Role-based telemetry inspection access ensuring certified plant engineers receive fine-grained permissions.
Packaging Machine Management & ERP
Customer-facing platform managing industrial packaging machinery fleets. Provides customers with structured asset hierarchies, QR code machine workflows, ERP debitor synchronization, and responsive technical documentation.
Machine Hierarchies
Structured equipment catalogs enabling fast navigation across multi-site production facilities.
QR-Code Scanning
Factory floor QR code generation & scanning linking field technicians instantly to machine manuals.
ERP Debitor Sync
Direct integration into SAP/ERP debitor pipelines for contract status and automated spare parts checkout.
Cloud DevOps
Automated deployments onto Azure Kubernetes Service provisioned via Terraform and Helm.
Comprehensive warehouse management (WTMS) and enterprise resource planning system engineered for a German logistics corporation, handling high-volume inventory, order dispatch, and audit workflows.
- Warehouse Traffic Management: End-to-end inbound and outbound freight scheduling, loading dock tracking, and inventory turnover algorithms.
- ERP Integration: Connected stock movements with financial ledger entries, supplier invoicing, and dispatch status.
- High-Throughput APIs: Engineered robust Node.js and TypeScript REST API endpoints handling real-time scanner inputs.
- Database Optimization: Optimized complex relational queries and indexing strategies to maintain sub-second response times during peak warehouse shift handovers.
- Frontend Development: Built interactive Angular dashboards displaying warehouse bay utilization, stock health, and operator task lists.
- Defect Remediation: Resolved complex edge-case concurrency bugs occurring during simultaneous picking and replenishment scans.
- Business Requirements Translation: Collaborated with German product leads to translate intricate supply-chain requirements into technical specifications.
06. Adey Generator
C# / .NET / BlazorWeb application automating the generation of complex compliance and legal documentation (Privacy Policies, Imprints, Terms & Conditions).
- Guided Input Workflows: Interactive questionnaire forms dynamically tailoring output clauses based on user inputs.
- Document Generation Engine: Structured templating system converting input data into formatted legal outputs.
- Engineering Scope: Full-stack development, C# API implementation, form workflows, maintenance in GitLab.
07. Coffee Supply Chain
Next.js / Node.jsWeb-based commodity platform tracking agricultural supply chain operations, lot origin data, and processing status.
- Next.js + Redux Architecture: High-performance frontend with predictable state management for lot movements.
- Material UI Systems: Clean, mobile-friendly interface for supply-chain clerks and quality inspectors.
- Engineering Scope: API integration, state management, business workflow logic, and production debugging.
Enterprise cybersecurity management platform designed to collect, process, and analyze mobile device threats across corporate mobile fleets.
- Real-Time Threat Telemetry: Ingestion engine handling device health, malicious payload warnings, and network anomaly signals.
- Backend API Architecture: Engineered robust .NET REST services capable of processing concurrent mobile heartbeat pings.
- Polyglot Persistence: Implemented hybrid database persistence using MongoDB for unstructured telemetry and MySQL for tenant relations.
- Administrative Cockpit: Built administrative workflows enabling security teams to set fleet-wide zero-trust compliance policies.
- API Development: Designed and deployed secure C# endpoints adhering to strict cybersecurity standards.
- Security Workflows: Built automated threat-remediation rules (device quarantine triggers, app isolation).
- Debugging & Performance: Traced bottlenecks in telemetry pipelines, ensuring low query latency for security dashboards.
09. MTD Sentinel Integration
SIEM PipelineDirect enterprise bridge channeling mobile threat telemetry into Microsoft Sentinel and broader SIEM/SOC workflows.
- Data Transformation: Normalizes heterogeneous mobile telemetry events into standardized CEF/JSON security formats.
- Reliable Egress: High-reliability API forwarding with automatic backoff and retry pipelines.
- Testing & QA: Comprehensive unit and integration test coverage verifying zero event loss under simulated load.
10. Bitdefender Agent Integration
Windows ServiceLightweight Windows background service agent capturing endpoint Bitdefender security incidents and routing to central cloud servers.
- Endpoint Agent: Native C# Windows Service operating silently in the background with minimal CPU/RAM footprint.
- Secure Relay: Windows Endpoint → Service Agent → Backend API → Central Security Platform.
- Incident Processing: Real-time capture and dispatch of antivirus alerts, malware detections, and host events.
Team Collaboration & Daily Reporting Hub
A comprehensive Slack-based project management platform enabling admins to manage projects, workspaces, and users — while developers and project managers track daily progress with automated Slack reminders.
RBAC Auth System
JWT-based auth with four roles: Super Admin, Admin, Project Manager, and Developer — each with fine-grained access.
Slack Integration
Link projects to Slack channels, create projects from channels, and auto-send daily report reminders to teams.
Daily Reporting
Users submit structured daily progress reports with history tracking and automated reminder scheduling.
Dockerized Deployment
Full-stack Docker Compose setup with PostgreSQL, backend API, and Next.js frontend — CI with Husky pre-push hooks.
Detailed architectural breakdown of the multi-tenant infrastructure, real-time data pipelines, and enterprise product integration ecosystem.
- Multi-Tenant Routing: Dynamic tenant resolution at the API gateway layer via subdomain-based routing, each tenant operating in a fully isolated namespace.
- Neugart Plugin System: Extensible plugin architecture allowing enterprise-grade integrations (e.g. Neugart gearbox catalog) to be bundled as self-contained feature modules.
- Trilingual UX: Full EN / DE / IT localization using Angular i18n with locale-specific number and date formatting for European factory teams.
- Redis Session Caching: Server-side Redis caching of active conversation contexts, reducing LLM token re-send overhead by keeping recent chat windows in memory.
- PDF / JSON / Markdown Export: Multi-format document export from ShopfloorGPT sessions, enabling engineers to archive AI-generated maintenance plans.
- Ingestion Microservice: Dedicated NestJS queue consumer handling concurrent PDF uploads without blocking the main API thread.
- Chunk Strategy: Overlap-window chunking preserving sentence boundaries for engineering specification continuity.
- Retrieval-Augmented Prompting: Top-k chunks dynamically injected into system prompts before each LLM call, with citation tracking.
- Feedback Loop: Technician accuracy ratings stored in PostgreSQL and used to retrain retrieval ranking weights quarterly.
Complete lifecycle of automated pump specification extraction from raw PDF datasheets to validated, export-ready Excel engineering tables.
- Nx Monorepo: All frontend and backend services managed under a unified Nx workspace, enabling shared DTOs and typesafe API contracts.
- Background Queue System: NestJS Bull queue ensures heavy OCR jobs process asynchronously without HTTP timeout risks, surviving server restarts.
- Server-Sent Events (SSE): Angular client subscribes to NestJS SSE endpoint; progress tokens stream token-by-token as the LLM generates output.
- Weaviate Context Store: Previously extracted specifications stored as vectors, enabling fuzzy-match lookups against historical engineering data.
- Hydraulic Parameters: Flow rate (m³/h), head/pressure (m), NPSH, efficiency curves, and differential pressure values.
- Mechanical Properties: Shaft seal type, impeller material, casing material, bearing arrangement, and weight specifications.
- Hazardous Area Compliance: ATEX zone classification (Zone 0/1/2) and equipment group (II 2G/2D) extraction from certificate references.
- Environmental Specs: Ambient temperature range, fluid temperature limits, max operating pressure, and IP protection ratings.
- ExcelJS Output: Formatted multi-sheet workbooks with colour-coded cells for human-reviewed vs. AI-proposed values, ready for audit submission.
Real-time condition monitoring for industrial gear drives — from raw sensor signals to Grafana visualizations and anomaly detection.
- Vibration Monitoring: High-frequency vibration signals from gear drives processed and compared against user-defined alarm thresholds.
- Thermal Telemetry: Continuous winding temperature monitoring with auto-alerts for overheating conditions in drive units.
- Torque & Speed: Real-time shaft torque and rotational speed (RPM) tracking with trend graphs and peak-detection markers.
- Multi-Board Sync: Synchronized multi-sensor boards with configurable time-window alignment for comparing simultaneous measurements across distributed equipment.
- Reference Run Comparisons: Engineers record a baseline "golden run" — live telemetry then auto-overlays against this baseline to surface early mechanical deviation.
- Angular 20 + RxJS Streams: Reactive chart components subscribe to telemetry WebSocket/SSE streams and update at 10Hz without triggering full change detection cycles.
- Grafana Embedding: Native Grafana panels embedded inside Angular iframes with shared Keycloak JWT authentication, presenting unified dashboards without context switching.
- Keycloak RBAC: Plant engineers receive machine-level data access grants — operators see only their assigned drive units.
- Nx Monorepo: Shared telemetry model DTOs between Angular and NestJS enforcing compile-time API contract integrity.
- NestJS 11 API: Structured REST and WebSocket endpoints with guard-protected routes, rate limiting, and per-tenant telemetry scoping.
Technical depth of the packaging machinery customer portal: asset hierarchies, ERP integration, cloud provisioning, and CI/CD pipeline design.
- Asset Hierarchy Builder: Recursive tree structure for equipment catalogs — factories → production lines → machines → components, built with a custom Angular CDK drag-drop interface.
- QR Workflow Engine: SVG-based QR code generation tied to machine serial numbers. Scanning a factory-floor label opens the machine's documentation portal on any mobile device.
- ERP Debitor Sync: REST integration with SAP/ERP systems to sync customer debitor records, contract status, and allowable spare-part checkout operations in real time.
- Responsive Document Portal: Technical documentation (wiring diagrams, spare part catalogs, operator manuals) rendered as mobile-optimized Angular views with search and filter.
- PrimeNG UI Framework: Consistent enterprise-grade UI leveraging PrimeNG data tables, tree components, overlays, and form validation.
- Azure Kubernetes Service (AKS): Production workloads containerized in Docker and orchestrated via AKS cluster with horizontal pod autoscaling.
- Terraform IaC: Complete infrastructure lifecycle (VNets, AKS node pools, PostgreSQL instances, Key Vault secrets) managed as Terraform modules.
- Helm Chart Releases: Versioned Helm charts for each microservice enabling zero-downtime rolling deployments and instant rollback.
- Azure Pipelines CI/CD: Multi-stage pipelines with build validation, Docker image push to ACR, and Helm upgrade on approval.
- Keycloak SSO: Enterprise identity provider managing both internal team and customer-facing authentication flows with custom realm configuration.
High-throughput warehouse management and enterprise resource planning built for a German logistics corporation — inventory, dispatch, and audit at scale.
- Dock Scheduling Engine: Time-slot-based loading dock reservation system with conflict detection and automated driver notification workflows.
- Inbound / Outbound Logistics: Distinct workflows for goods receipt (ASN matching, quality inspection), goods issue (pick lists, packing), and return merchandise authorization.
- Inventory Algorithms: FIFO/FEFO inventory rotation enforcement with lot tracking and expiry-date management across multi-bay storage zones.
- Scanner API Integration: Sub-100ms REST API endpoints designed to handle real-time barcode scanner inputs from warehouse handheld terminals without latency spikes.
- Query Optimization: Advanced PostgreSQL indexing strategies (partial indexes, materialized views) ensuring consistent performance during peak shift handovers.
- Financial Ledger Sync: Stock movements trigger automated financial journal entries in the connected ERP ledger — zero manual re-entry for inventory transactions.
- Supplier Invoicing: Purchase order receipt events auto-generate invoice matching records with three-way PO/GR/IV reconciliation.
- Angular Dashboards: Interactive warehouse-bay utilization heatmaps, operator task lists with priority queuing, and real-time stock health scorecards.
- Concurrency Bug Resolution: Fixed complex race conditions occurring when simultaneous picking and replenishment operations caused stock count divergence during high-volume shifts.
- Requirements Engineering: Collaborated with German product leads to translate supply-chain domain logic into precise TypeScript API contracts and Angular state management flows.
Summary of specialized experience across Retrieval-Augmented Generation, cloud container orchestration, and zero-trust authentication.
- End-to-end RAG architecture in production systems.
- Document chunking and token optimization.
- Weaviate vector database indexing and similarity queries.
- OpenAI & Azure OpenAI API orchestrations.
- Production deployments on Azure Kubernetes Service.
- Helm charts for microservice release versioning.
- Infrastructure as Code using Terraform.
- Azure Pipelines and GitLab CI/CD automation.
- Centralized Keycloak identity server setups.
- OAuth2 and OpenID Connect (OIDC) protocols.
- Signed JWT validation and claims parsing.
- Role-Based Access Control (RBAC) frontend & backend.
- Full end-to-end feature ownership.
- Diagnosing complex production incidents.
- Clean, testable, and maintainable codebases.
- Effective collaboration in remote distributed teams.
EXPERIENCE & CONTACT
Let's build scalable, reliable software together.