Since 1998

Enterprise IT & AI — Consulting & Development

We design and implement complex software architectures for business-critical platforms — from architectural decisions to production-ready delivery. Including AI agent architectures with enterprise governance.

→Available for projects in the DACH region and remote (EU). Including AI architecture.

Request a project →View services

Services

What we deliver

Focused on the intersection of architecture, security, and operational excellence.

AI Agents & LLM Architecture

Architecture and implementation of production-ready AI agent systems — from platform selection and enterprise governance to scaling.

Automation ↑ · Time-to-value ↓

Typical problems

  • No governance over AI operations
  • LLM vendor lock-in
  • Uncontrolled costs without budget guards
  • No auditability of AI decisions
  • Isolated solutions without shared infrastructure

Principles

  • Fail-closed governance as a core principle
  • Multi-provider architecture without vendor lock-in
  • Agent lifecycle as a first-class concept
  • RAG-based knowledge integration
  • FinOps and cost control from the start

Technical focus

  • AI agent platform design
  • LLM provider integration (OpenAI, Anthropic, Ollama)
  • Governance architecture (policy engine, audit trail)
  • RAG implementation and knowledge fabric
  • Multi-agent coordination (supervisor/specialist)

When it applies

  • AI strategy without vendor dependency
  • Regulated environments with compliance requirements
  • Scaling AI experiments to production
  • Enterprise platforms with multi-tenant requirements

This competency is the foundation of structured project engagements.

Software Architecture

Design and assessment of distributed systems, microservices architectures and enterprise platforms.

Scalability ↑ · Coupling ↓

Typical problems

  • Poorly defined service boundaries
  • Missing failure domain isolation
  • Deployment coupling between services
  • Over-fragmentation without domain boundaries
  • Shared databases across services

Principles

  • Domain-driven design as the foundation
  • Failure domain isolation as a design objective
  • Explicit data ownership per service
  • Independent deployment boundaries
  • Contract-first versioning strategy

Technical focus

  • Service decomposition and boundary definition
  • Dependency graph analysis
  • Failure propagation modelling
  • Deployment topology review
  • Communication patterns (sync/async)

When it applies

  • Monolith blocks team autonomy
  • Deployments are coupled
  • Multiple teams on one codebase
  • Diverging scaling requirements

This competency is the foundation of structured project engagements.

IT Consulting & Project Management

Strategic technology consulting, feasibility studies, architecture reviews — combined with technical project leadership, nearshore/offshore management and risk management.

Risks ↓ · Decision quality ↑ · Predictability ↑

Typical problems

  • Technology decisions without architectural foundation
  • Missing technical leadership in critical phases
  • Poor nearshore/offshore coordination
  • Unclear or changing requirements
  • Milestones regularly missed

Principles

  • Architecture-first before implementation
  • Risk assessment in all phases
  • Transparent risk communication
  • Stakeholder management at eye level
  • Iterative planning with clear milestones

Technical focus

  • Architecture review and assessment
  • Feasibility studies and due diligence
  • Technical project leadership
  • Nearshore/offshore management
  • Requirements analysis and prioritisation

When it applies

  • Before strategic technology decisions
  • For projects in trouble
  • Complex multi-team projects
  • International development teams

This competency is the foundation of structured project engagements.

Software Development

Implementation based on proven standards: Java, Spring Boot, Microservices, Kafka, Kubernetes — from specification to production.

Quality ↑ · Time-to-market ↓

Typical problems

  • Technical debt from fast delivery
  • Missing test strategy
  • Poor observability in production
  • Unplanned scaling problems

Principles

  • Test-driven development where appropriate
  • Clean architecture and SOLID
  • CI/CD as a prerequisite
  • Observability by design

Technical focus

  • Java / Spring Boot backend development
  • Kafka event-driven systems
  • Kubernetes-native deployments
  • API design and versioning

When it applies

  • New development of critical platforms
  • Existing systems with quality issues
  • Scaling pressure on legacy systems
  • Team extension with senior expertise

This competency is the foundation of structured project engagements.

Security & Identity

OIDC/OAuth2 implementations, Zero Trust architectures, tenant isolation and compliance in regulated environments.

Attack surface ↓ · Compliance ↑

Typical problems

  • JWT without key rotation
  • Missing tenant isolation
  • Incorrect OAuth2 flows
  • Token forwarding without scope validation
  • Trust boundary violations

Principles

  • Zero Trust — never implicitly trust
  • Service-to-service identity (mTLS/SPIFFE)
  • Least privilege consistently applied
  • HSM/KMS for key management

Technical focus

  • OIDC/OAuth2 token flow analysis
  • Identity provider design
  • Multi-tenant isolation
  • API security review
  • Compliance architecture (GDPR, ISO 27001)

When it applies

  • Regulated environments (GDPR, eIDAS)
  • SaaS platforms with enterprise customers
  • Before security audits
  • After security incidents

This competency is the foundation of structured project engagements.

Cloud & Modernisation

Legacy system migration, cloud-native transformation, Kubernetes deployment and incremental modernisation strategies.

Operating costs ↓ · Agility ↑

Typical problems

  • Lift & shift without cloud-native adaptation
  • Poor resource configuration (OOM, CPU throttling)
  • No GitOps, no reproducible deployments
  • Missing pod security standards

Principles

  • Cloud-native design, not lift & shift
  • Immutable infrastructure
  • GitOps as single source of truth
  • Secure-by-default deployments

Technical focus

  • Cluster design and autoscaling (HPA/VPA)
  • Deployment strategies (canary, blue/green)
  • Cost optimisation
  • Migration strategy for legacy systems

When it applies

  • Cloud migration under time pressure
  • Rapid scaling required
  • Cost optimisation pressure
  • On-premise to cloud in regulated environments

This competency is the foundation of structured project engagements.

Consulting

Structured Project Engagements

Clearly defined analysis and development packages for complex enterprise systems.

How we start

A structured initial call (30 minutes). You describe your project — we provide an initial assessment and outline possible next steps.

Get in touch →

References

Trusted since 1998

We have delivered complex IT projects for some of Germany's most recognised organisations — across banking, telecommunications, aviation, automotive and the public sector.

Deutsche Bank
Deutsche Telekom
Lufthansa
Deutsche Bahn
KfW
Porsche
Commerzbank
T-Systems

Active since 1998 · Banking · Telecommunications · Aviation · Automotive · Public sector

Team

Experience that counts

Computer scientists (TU Karlsruhe / TU München) with decades of experience in critical enterprise projects.

SÖ

Sebahattin Özata

Principal Engineer · Distributed Systems & AI Architecture

Over 25 years of project experience

Diplom-Informatiker (Dipl.-Inf.) TU Karlsruhe (KIT)

Specialised in distributed system architectures, AI agent platforms, security design and multi-tenant platforms. Architect of OMEX AI — an enterprise AI agent platform with governance, RAG and FinOps. Projects for Deutsche Bank, Telekom, KfW, Lufthansa, Deutsche Bahn, Porsche, BAMF and the Federal Employment Agency.

MicroservicesKafkaKubernetesOIDC / Zero TrustSpring BootAI Agent ArchitectureLLM / RAGGovernance & FinOps
JS

Jan Szczepanski

IT Consultant · Enterprise Systems

23+ years of project experience

Diplom-Informatiker (Dipl.-Inf.) TU München

Focus on technical project management, complex enterprise systems and their integration, business process & workflow management, and service-oriented architectures.

Project ManagementSOA / IntegrationBusiness ProcessRequirements EngineeringNearshore / OffshoreEnterprise Systems

Contact

Ready for the next project?

Briefly describe your project — we will respond within 48 hours.

Request a project →sebo@brainforms.com