Available for opportunities

Alexander Gellert

AI Automation & Platform Engineer · Security Researcher

I build connected business systems: custom CRM extensions, AI-assisted WhatsApp workflows, and web tools backed by secure infrastructure. My current work combines n8n automation, EspoCRM development, Nextcloud apps, and a local AI website-generation prototype. With 5+ years of experience in banking technology and application operations, I focus on reliable state handling, clear access boundaries, and maintainable deployments. Based in Cambodia and working remotely, I also continue independent web security research.

Email me

Career

Experience

Impactful roles & highlights

07/2024 – Present
Independent AI Automation, Software & Platform Engineer · Remote · Cambodia

Independent engineering and security research, with current work focused on connected business tools through Gellert-Innovation.

n8n EspoCRM PHP / JavaScript Podman Vault
- Develop AI-assisted WhatsApp lead qualification and appointment workflows with configurable campaigns, reminders, duplicate handling, and durable conversation state.
- Build EspoCRM extensions for pipeline boards, explicit portal sharing, and CRM-to-CalDAV publishing, with server-side access checks and conflict handling.
- Develop Nextcloud productivity apps, including Opsdash calendar analytics and reporting.
- Prototype WebsitePitcher: AI-generated websites with isolated builds, desktop and mobile review, versioned artifacts, and expiring demonstration access.
- Operate self-hosted services using rootless Podman, NGINX, Vault PKI, and documented deployment and recovery procedures.
- Continue authorized web security research and build repeatable reconnaissance workflows.
03/2023 – 07/2024
IT Service Owner & Senior Consultant, ixtrac · Zug, Switzerland

IT service owner and senior consultant for Appway Platform 10/11 with a DevOps focus.

Appway Octopus Linux
- Owned the lifecycle of Appway servers and application stacks across environments
- Designed and maintained Octopus pipelines for automated, repeatable deployments
- Provided L3 support with deep technical analysis and incident response
- Partnered with business and compliance on KYC workflows in finance and banking
02/2020 – 11/2022
Application Specialist, Julius Baer (RM IT) · Zurich, Switzerland

Application specialist and DevOps engineer on Appway Platform 9–11 in a private banking environment.

Appway Automation Testing
- Improved operations with monitoring and automation
- Increased testing throughput with automation and better tooling
- Bridged technical analysis with business context to solve complex issues
- Maintained two critical KYC/AML applications in banking
02/2018 – 01/2020
IT Consultant, Syncordis (Nielsen+Partner) · Zurich, Switzerland

IT consultant and software engineer on Appway Platform 6–8 for international banking clients.

Appway Cloud
- Built a reusable, cloud-ready Appway template adopted across projects
- Delivered four KYC/AML onboarding applications for banking clients
05/2017 – 01/2018
Student Assistant, NTNU · Trondheim, Norway

Student assistant for COINS – Institute of Computer and Information Security.

WordPress Plugins
- Maintained and customized WordPress sites, developed plugins, and supported daily IT operations
03/2016 – 08/2016
Student Assistant Software Developer, AAC Infotray AG · Winterthur, Switzerland

Student software developer and IT consultant.
- Designed a concept for automated GUI testing
- Integrated external systems and applications into existing workflows
- Implemented features for image editing, barcode recognition, and automated testing

Core capabilities

AI & Workflow Automation n8n · modular workflows and runtime configuration · WhatsApp / Twilio · qualification and appointments · Conversation state, idempotency and retry handling · LLM / API integration and tool workflows

CRM & Application Engineering EspoCRM · PHP / JavaScript extensions · Portal authorization and record sharing · CalDAV publishing · ETags and conflict handling · Nextcloud apps · PHP / Vue

DevOps & Platform Docker · Podman (rootless, daemonless) · Linux (Ubuntu/Debian) · Octopus Deploy

Showreel

Projects

Selected work with stack highlights

2026 Business automation

WhatsApp Lead Qualification & Appointment Automation

AI-assisted WhatsApp workflows that collect lead details and guide appointment selection. Configurable campaigns, guarded reminders, duplicate handling, and critical state persistence before replies make the conversation flow easier to maintain and troubleshoot.

n8n Twilio / WhatsApp JavaScript Airtable LLM integration

2026 Active development

Custom CRM Extensions & Calendar Integration

EspoCRM extension work covering configurable pipeline boards, explicit record sharing for portals, and CRM meeting publishing to CalDAV. Development emphasizes server-side permissions, conditional calendar writes, and conflict handling; complete production acceptance remains separate.

EspoCRM PHP JavaScript CalDAV Stalwart

2026 Local prototype

WebsitePitcher — AI Website Builder

Local prototype for generating and improving website drafts. Isolated agent and build environments, desktop and mobile screenshots, source-bound review evidence, and versioned artifacts support a controlled path from generation to expiring demos.

AI agents Rootless containers Browser checks Versioned artifacts

2026 Independent project

Opsdash — Nextcloud Calendar Analytics

Nextcloud app that turns permitted calendar data into period summaries, dashboard widgets, and email recaps. A PHP backend and Vue frontend separate calendar access, event normalization, aggregation, and presentation, with reporting built around the same summary model.

Nextcloud PHP Vue Calendar data Email reporting

Ongoing Independent infrastructure

Rootless Infrastructure & Vault PKI

Self-hosted application platform with per-service Unix users, rootless containers, layered NGINX proxies, and Vault-managed secrets and certificates. Ongoing work covers certificate rotation, service health checks, and documented deployment and recovery procedures.

Podman Linux NGINX Vault / PKI mTLS

Ongoing Security research

Web Security Research & Stateful Recon

Independent web application security research supported by repeatable reconnaissance workflows. Stateful host inventories, differential results, staged HTTP probing, and targeted scanning help organize changes for manual investigation.

Caido Burp Suite Jenkins Nuclei Python / Bash

Current Service initiative

Privsec — Privacy-Focused Mobile Guidance

Privacy-focused service initiative around GrapheneOS onboarding, device migration, and practical security guidance. The site presents a consultation-led offering for individuals and teams, with an emphasis on understandable setup and everyday use.

GrapheneOS Android Privacy Security guidance

Strengths

Skills

Tools, stacks, specialties

AI & Workflow Automation

n8n · modular workflows and runtime configuration

WhatsApp / Twilio · qualification and appointments

Conversation state, idempotency and retry handling

LLM / API integration and tool workflows

AI website generation · isolated build prototypes

CRM & Application Engineering

EspoCRM · PHP / JavaScript extensions

Portal authorization and record sharing

CalDAV publishing · ETags and conflict handling

Nextcloud apps · PHP / Vue

REST APIs, webhooks and system integration

DevOps & Platform

Docker

Podman (rootless, daemonless)

Linux (Ubuntu/Debian)

Octopus Deploy

CI/CD pipelines (build/test/deploy)

Nginx, Traefik

Vault & PKI (secrets, certificates)

WireGuard, IPsec VPN

firewalld, nftables

Security & Bug Bounty

Web App Security (OWASP, XSS, IDOR, auth)

Bug Bounty (HackerOne, YesWeHack)

Burp Suite, Caido

Nuclei, httpx, ffuf, Axiom (recon)

Frida, Objection (Android testing)

Languages

Python

JavaScript

Java

Bash/Zsh scripting

C / C++ / C#

Cloud, Databases & Monitoring

AWS

PostgreSQL, MySQL

MongoDB

Splunk

Dynatrace

Graylog

Frameworks

Appway Platform

Spring Boot

AngularJS

jQuery

EJS

WordPress

Nextcloud App Framework

Self-Hosting & Tools

Nextcloud

Synology

Homelab & infrastructure as code

tmux, zsh, CLI tooling

Certificates

CompTIA Security+

Fit for Finance

Offensive Security Wireless Professional (OSWP)

Learning

Education

2013 – 2017

B.Sc. in Business Informatics, HTWG Konstanz – University of Applied Sciences

Focus areas: software engineering, architecture, QA, web technologies, information security

2011 – 2013

Vocational diploma: Assistant for Information and Telecommunication Technology

Training program for IT assistants

Beyond work

Interests

Sports

Triathlon Muay Thai Ultra trail running

IT Security Research

Privacy Mobile Homelab & home networking

Reading

Finance Security research