# Moritz Schacke > Software Developer & Business Informatics Specialist – Clarity. Maintainability. Performance. I build software to a plan: understandable for whoever develops it next, maintainable through years in production and fast for everyone who uses it. Since 2020 I have been building and running the support ecosystem of the Behnke Group. Alongside, I take on commissions with devgineers: software, development processes and product security. - Saarland, DE · Remote worldwide - 6+ years of coding - 5 years of platforms in continuous production - B.Sc. Business Informatics - 6 entry offers via devgineers **Software, built to plan.** - **Understandable:** Code the next person understands without me. Clear names, clear boundaries, no magic. - **Maintainable:** Built for years in production, not just until launch. Tests, updates and monitoring are part of the plan. - **Fast:** Performance is a requirement, not an afterthought. Measured, not guessed. ## devgineers (Part-time self-employed – taking on commissions) Software. Processes. Security. Through devgineers I take on commissions alongside my job: custom software, modernisation and rebuilds, websites with hosting and maintenance, Linux servers, development processes (secure SDLC, Scrum) and technical product security and CRA consulting – in sprints where every interim state is visible. - https://devgineers.de - https://devgineers.de/kontakt - https://moritzschacke.de/en/projekte/devgineers ## Experience ### Owner – software engineering, secure SDLC & CRA consulting – devgineers 10/2026 – present Alongside my employment I take on commissions with devgineers – as the single contact from the first question to handover. - Custom software, modernisation and rebuilds in sprints with a working state after every sprint. - Websites with hosting and maintenance, and setting up, hardening and maintaining Linux servers. - Development processes and product security: secure SDLC, Scrum, CRA gap assessments and secure SDLC reviews. ### Product and Development Security Coordinator (PDSC) – Telefonbau Behnke GmbH 10/2026 – present In addition to my role as a developer, I am responsible for product and development security: from the Cyber Resilience Act to secure development processes and evidence in CI/CD. - Implementing the Cyber Resilience Act (Regulation (EU) 2024/2847) for the products: requirements and risk analysis, technical documentation and alignment with harmonised EU standards such as EN 18031. - Vulnerability management: a central reporting point for vulnerabilities, confidential handling within the deadlines of CRA Art. 14 and GDPR Art. 33, published security advisories. - Secure development processes: requirements, reviews, tests and approvals traceable from commit to release – as the basis for conformity assessment and updates throughout the support period. - CI/CD with GitLab Ultimate: security scans for code, dependencies and secrets, software bills of materials (SBOM), tests and coverage as evidence in the pipeline. - A secure supply chain down to production: signed, encrypted software releases as well as signed firmware and secure boot when devices are first programmed. ### Business Informatics Specialist, Software Development – Telefonbau Behnke GmbH 01/2026 – present Developing and running the group's web platforms and internal tools – secure, documented and with AI-assisted tooling. - Support ecosystem: the new support server (PHP 8.5, REST API, sign-in with TOTP and passkeys), the security reporting point, the status page and the wiki system for product documentation in three languages. - Secure and documented code: strict typing, static analysis at the highest level (PHPStan max), automated tests in GitLab CI, security built into the framework rather than case by case, and documentation maintained alongside the code. - AI in development: AI-assisted work with Claude Code and Codex, integrating LLM APIs and AI platforms – with review, tests and clear limits on what an agent may read and change. - Internal tools and infrastructure: licence-secured APIs for firmware, manuals and changelogs, a shared CDN for all web projects and tools for production. ### Business Informatics Specialist, Software Development – Notrufzentrale Behnke GmbH 10/2025 – 12/2025 ### Working Student (Master of Science) – Telefonbau Behnke GmbH 04/2025 – 09/2025 Development of new features and internal tools, extension of core systems. ### Working Student (Bachelor of Science) – Telefonbau Behnke GmbH 10/2020 – 03/2025 Modernisation of existing PHP and Java tools. ### Temporary Assistant, Technology & Support – Telefonbau Behnke GmbH 08/2020 – 10/2020 ## Education ### Master of Science in Business Informatics IWi im DFKI, Universität des Saarlandes, Saarbrücken · 04/2025 – 09/2025 Discontinued after one semester. Data Engineering, Artificial Intelligence, Computer Graphics, Project Management, IT Law ### Bachelor of Science in Business Informatics IWi im DFKI, Universität des Saarlandes, Saarbrücken · 10/2021 – 03/2025 Bachelor's thesis “AI as an Innovator for Automating Process Modelling”: a comparison of eight LLMs for BPMN generation. Programming, Algorithms, Software Engineering, Big Data, Strategic Management, Game Theory ### Bachelor of Science in Computer Science SIC, Universität des Saarlandes, Saarbrücken · 10/2020 – 09/2021 Transferred to Business Informatics. ### Abitur (German university entrance qualification) Theodor-Heuss-Gymnasium, Sulzbach (Saar) · 09/2012 – 07/2020 Advanced courses in Mathematics and English. ## Skills Every level is backed by projects. ### Programming Languages - PHP – Expert (since 2020) - JavaScript – Expert (since 2020) - SQL – Expert (since 2020) - HTML5 & CSS – Expert (since 2020) - Java – Advanced (since 2020) - TypeScript – Advanced (since 2026) - Bash – Advanced (since 2021) - Python – Proficient (since 2024) - C/C++ – Basics ### Backend & Frameworks - Framework-Design (PSR-7/11/14/15/16) – Expert (since 2026) - REST-API-Design & -Dokumentation – Expert (since 2025) - Software-Architektur – Expert (since 2025) - Legacy-Modernisierung & Migration – Expert (since 2020) - Node.js & TypeScript-Ökosystem – Advanced (since 2026) - JSON Schema & Validierung (opis, Zod) – Advanced (since 2026) - PDF-Erzeugung (mPDF, Dompdf) – Advanced (since 2022) - OAuth 2.0 – Proficient (since 2026) - Laravel – Basics - Symfony – Basics - Spring – Basics ### Frontend & Mobile - Vanilla JS (UI ohne Framework) – Advanced (since 2020) - React Native & Expo – Proficient (since 2026) - React – Proficient (since 2026) - Bootstrap – Proficient ### Databases - MySQL – Expert (since 2020) - Schema-Migrationen – Advanced (since 2025) - SQLite – Proficient (since 2026) - PostgreSQL – Basics ### Cloud, Infrastructure & DevOps - Linux-Server (Ubuntu): Einrichtung, Härtung, Betrieb – Expert (since 2020) - Git & GitLab – Expert (since 2020) - Monitoring & Health-Checks – Expert (since 2025) - Release-Signierung & -Verschlüsselung – Expert (since 2025) - Cron-Jobs & Hintergrundprozesse – Expert (since 2022) - GitLab CI/CD – Advanced (since 2026) - Docker – Advanced (since 2022) - AWS (S3, Polly, AWS SDK) – Advanced (since 2024) - Hosting & Serververwaltung (VPS, Plesk) – Advanced (since 2020) - Cloudflare Workers – Proficient (since 2026) - SIP / Kamailio – Basics (since 2021) ### Security & Compliance - Cyber Resilience Act (EU) 2024/2847 – Expert (since 2025) - Coordinated Vulnerability Disclosure – Expert (since 2026) - Web-Security: CSRF, Sessions, parametrisiertes SQL, Security-Header – Expert (since 2020) - Authentifizierung: JWT, TOTP, WebAuthn/Passkeys – Advanced (since 2025) - Kryptografie in der Praxis (libsodium, Ed25519, Signaturen) – Advanced (since 2025) - EN 18031 – Proficient (since 2026) - Secure Boot (Produktion) – Proficient (since 2026) - DSGVO (Meldefristen, Privacy by Design) – Proficient (since 2026) ### Quality & Process - PHPStan (Level max) – Expert (since 2025) - PSR-12 & php-cs-fixer – Expert (since 2025) - Technische Dokumentation – Expert (since 2022) - Code Review (auch KI-gestützt) – Advanced (since 2025) - PHPUnit – Advanced (since 2026) - Semantic Versioning & Release-Management – Advanced (since 2026) - Vitest & Jest – Proficient (since 2026) - Agile / Scrum – Proficient ### Accessibility, i18n & SEO - Mehrsprachigkeit (DE/EN/FR und mehr) – Expert (since 2020) - Barrierefreiheit (OpenDyslexic, Kontrast, Lesehilfen) – Advanced (since 2022) - SEO (JSON-LD, Meta, OG/Twitter) – Advanced (since 2021) ### AI & LLMs - KI-gestützte Entwicklung: Claude Code, Codex – Expert (since 2026) - KI-gestützte Workflows – Expert (since 2026) - Prompt Engineering – Expert (since 2024) - LLM-Evaluation & Benchmarking – Advanced (since 2024) - Model Context Protocol (MCP) – Advanced (since 2026) - KI-Agenten-Infrastruktur – Advanced (since 2026) - Claude, GPT, Gemini, Ollama – Advanced (since 2024) ### Game Development - Minecraft: Spigot & Forge – Advanced (since 2020) - libGDX & OpenGL – Proficient - Entity Component System – Proficient - Client/Server-Spielarchitektur – Proficient (since 2026) ### Hardware-near Development - Board-Programmierung in der Produktion – Proficient (since 2026) - Geräteerkennung im Netzwerk (mDNS) – Proficient (since 2022) ### Tools - VS Code – Expert - Composer & npm – Advanced - IntelliJ IDEA – Proficient - Gradle & Maven – Proficient ## Languages - German: Native - English: C1 - French: B1 - Dutch: A1 ## Contact - info@moritzschacke.de - https://moritzschacke.de/en/kontakt