Building resilient backends · Hardening infrastructure · Automating CI/CD security
I am a software developer with a strong focus on Secure Coding & DevSecOps, finishing my degree as an IHK Certified IT Specialist in Application Development (FIAE) in February 2027.
My engineering approach is rooted in understanding systems from the inside out: writing clean, defensive backend code and establishing automated security guardrails directly inside CI/CD pipelines (Shift Left). Rather than treating security as an afterthought, I build applications that are secure by design.
Beyond application development, I actively manage and harden my own Linux server environments and develop privacy-first Progressive Web Apps.
A series of privacy-first Progressive Web Apps built for computer science students in Germany. Designed for 100% offline learning with zero tracking.
- Architecture: Complete offline capability via Service Workers, responsive Vanilla CSS3, zero external runtime dependencies, and local state persistence.
- Reach & Distribution: Over 2,900 flashcards actively used across Germany. Available on the web and currently rolling out on the Google Play Store.
- Stack: HTML5 · Vanilla CSS3 · Vanilla JavaScript · Service Workers / PWA · LocalStorage
- Live Apps: AP1 · AP2 FIAE · AP2 FISI
- Source:
ap1-tracker·ap2-tracker·ap2-fisi-tracker
A hardened RESTful API demonstrating secure backend architecture and automated testing practices.
- Security Highlights: JWT lifecycle management, bcrypt password hashing, Pydantic schema validation, and granular rate-limiting.
- Infrastructure: Containerized with rootless Docker and verified through automated test suites in Pytest.
- Stack: Python · FastAPI · PostgreSQL · Docker · Pytest
- Status: In active development.
A production-ready defense gateway designed to inspect, sanitize, and audit traffic to Large Language Models.
- Security Highlights: Prompt injection mitigation, automated PII redaction, token-based rate limiting, and immutable PostgreSQL audit logs.
- Stack: Python · FastAPI · Redis · PostgreSQL · Docker · GitHub Actions
- Status: Capstone Architecture (Roadmap 2027).
- IHK Certified IT Specialist for Application Development (FIAE)
Professional Degree · Expected Completion: February 2027 - Core Competencies: Secure Software Design, Linux Server Administration, Container Security & CI/CD Pipeline Automation.
- Roadmap & Cloud Focus (2027): Microsoft Azure (AZ-900 / SC-900), Cloud Identity (Entra ID) & Infrastructure as Code (Terraform).



