Specializing in secure software delivery, automation, and sustainable software infrastructure. Advocate for open source, digital sovereignty, and transparent software supply chains. Contributor to ISO 5230:2020 and ISO 18974:2023 via theLinux Foundation’s OpenChain Project, the ZenDiS/BSI SSDLC initiative, Bitkom’s Open Source Guidelines, and the PostgreSQL community.
Computer Scientist from HSNR.

OSS Platform @ ZenDiS GmbH
Building secure, sovereign infrastructure for the public sector
since 2024

OSS Audit & Consulting @ PwC GmbH WPG
Enterprise-scale open source compliance and risk management
2020–2024

OSS Infrastructure @ credativ GmbH
Designing and managing high-performance open source infrastructure
2014–2020

Sovereign Infrastructure & DevSecOps: Since 2024, part of the founding team at ZenDiS, developing sovereign software supply chains for Germany. Currently serving as Technical Product Manager at openCode, focusing on security infrastructure, SBOMs, CVE & VEX/CSAF workflows, attestations, legal documentation, and compliance-as-code for OSS delivery at scale.

Audit, Compliance & Secure Delivery: At PwC, scaled enterprise OSS audit and strategy frameworks. Integrated license compliance, security, and quality-control into regulated industries, M&A, and enterprise open source adoption.

Engineering & Infrastructure Automation: At credativ, focused on PostgreSQL, high-availability and general High-Performance OSS Data infrastructure. Built tooling for automated deployments, backup orchestration, and observability.

Publications

Sichere Lieferketten(2024–2025)

Primary author of the whitepaper on secure software delivery, co-published by ZenDiS and BSI.

Bitkom Open Source Guide(2020–2024)

Co-author of the Bitkom "Open Source 3.0" guide, contributing primarily to the "Use" section.

ISO 5230 / ISO 18974(2020–2024)

Contributor to international standards for OSS compliance and vulnerability disclosure (Tooling Group & Audit Practices).

Public Talks ( excerpt )

SCCON 2025

VITAKO-Workshop: Einheitlicher kommunaler Standard für Cybersicherheit

SCCON 2025

Building an Open Source Ecosystem for the public administration

SCS Summit 2025

Deutschlandstack – Mehr Chance als Risiko – eGovernment Podcast

BFOSS 2024

Reliable openness for the public administration

BFOSS 2023

OSS Compliance Data Management

FROSCON 2024

Lecture: Balancing Scrutiny and Collaboration - Making OS Work for the Public Administration

BFOSS 2022

Lieferketten und SBOMs – Die neuen Maßstäbe für Open Source Integration

Open Compliance Summit 2020

OSS Compliance Audit - What to Expect In and From an Audit

PGCONF US 2016

Power on Power