Freelancer profile translated to English.
Back to original languageAbout Kushtrim
I support companies in the development, modernization, and security of complex backend and cloud systems. My focus is on scalable Java/Kotlin applications with Spring Boot, Kubernetes, and modern CI/CD and DevSecOps processes.
I have extensive experience in developing productive enterprise applications in the insurance and automotive sectors. I am responsible for both the conception and implementation of new services and the modernization of existing legacy systems, including reverse engineering, refactoring, and performance optimization.
A particular focus of my work is in the area of Application Security and Security-by-Design. This includes, among others, OAuth2/OIDC, SAST/DAST, Vulnerability Management, and the integration of security processes into modern CI/CD pipelines.
Typical topics and projects:
• Backend development with Java/Kotlin & Spring Boot
• Cloud-Native & Kubernetes
• CI/CD & DevSecOps
• API Design & Integration (REST/OpenAPI)
• Modernization of Legacy Systems
• Performance Optimization
• Application Security & OAuth2/OIDC
• Event-Driven Architectures with Kafka/Azure Service Bus
I work pragmatically, independently, and with a focus on stable, maintainable, and production-ready solutions.
German
Native or bilingual
English
Fluent
Albanian
Fluent
Can work on-site
Freiburg im Breisgau (up to 50km)
Experience
- Pax, Schweizerische Lebensversicherungs-Gesellschaft AG,Full Stack Software EngineerBANKING AND INSURANCEOctober 2023 - Today (2 years and 8 months)Basel, Switzerland• • Software Development & Architecture: Conception and implementation of new backend services and UI components; successful migration of central core components.• • Actuarial Science & Pricing: Implementation of complex mathematical formulas and calculation logic for integrating new tariff architectures.• • Modernization & Reverse Engineering: Systematic reverse engineering of historically grown legacy applications as a basis for in-depth refactoring and the establishment of clean architectural boundaries.• • Digitization of the Application Process: Technical implementation of end-to-end digitization of complex application processes, including the integration of event-driven workflows via Azure Service Bus and Azure Functions.• • Application Security (AppSec): Definition and implementation of a department-wide security roadmap. Introduction of Static Application Security Testing (SAST) and conception and in-house development of an automated DAST pipeline.• • Vulnerability Management & SCA: Development of a centralized security infrastructure for Software Composition Analysis (SCA), including the development of custom GitHub Actions for continuous SBOM routing and the implementation of strict policy gates in the CI/CD process.• • Cloud & Operations: Development of high-performance CI/CD pipelines, including custom GitHub Actions for deployment automation. Maintenance of Helm charts and Kubernetes manifests (Azure).• • Identity & Access Management: Introduction and migration to OIDC according to OAuth 2.1 (Authorization Code + PKCE), including scope/claim strategy.• • Performance Tuning: Systematic tuning of Spring Boot (threading, caching) and database optimization; acceleration of development cycles through test optimization and continuous improvement of CI pipelines.
- Mercedes-Benz Tech Innovation GmbHFull Stack Software EngineerAUTOMOBILEOctober 2021 - October 2023 (2 years)Stuttgart, Germany
- Microservices & Event-Driven Architecture: Further development of highly available applications based on Kotlin, Spring Boot, and Apache Kafka. Orchestration using Kubernetes.
- Reverse Engineering: Continuous feature development and systematic reverse engineering of existing monoliths for targeted modernization and refactoring (Java, Spring Framework, Angular), including full takeover of 2nd and 3rd level support.
- API Management: Design of new interfaces and central connection of external and internal systems via the Kong API Gateway.
- Project Transition: Technical implementation and support of system separation (Car/Truck split); ensuring a smooth transition and providing in-depth technical expertise for new external partners.
- Mercedes-Benz Tech Innovation GmbHDual Student Computer ScienceAUTOMOBILEOctober 2018 - October 2021 (3 years)Stuttgart, Germany
- Predictive Analytics (Bachelor Thesis): "Design of a model for predicting increases and decreases in system resources" (LSTM/ARIMA, Python, Keras, InfluxDB).
- Observability & Monitoring: Evaluation and establishment of a central logging system (ELK Stack), including adaptation of source code logic using Python and FastAPI.
- Process Automation: Architecture conception and full-stack development
- Development of internal applications with Java/Spring
Recommendations
Be the first to recommend Kushtrim
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Dual Student Computer ScienceMercedes-Benz Tech Innovation GmbH / DHBW StuttgartDualer Student Informatik
- Bachelor of ScienceDuale Hochschule Baden-Württemberg Stuttgart2021Bachelor of Science