Nima Majidi

• Optimized GitLab CI/CD pipelines: Docker Bake, JUnit XML test reporting, and merge-request templates, cutting build ramp-up time.
• Established GitLab governance across multiple teams: golden merge-request and repository rules, automated mandatory-reviewer assignment, and a Premium-vs-Free cost-optimization analysis and authored the supporting guidelines.
• Designed and shipped modular, pip- and .exe-distributable Python CLI tooling (PyInstaller, Nuitka, pip-tools, uv) published to an internal Nexus, maintaining supported Python versions via dependency analysis.
• Built and scaled DHCP infrastructure with Kea DHCP containers, BIND9, and KEA DDNS over bonded VLANs, including static IP reservations and per-VLAN scaling.
• Delivered MFA-secured remote access: Dockerized RDP Gateway (rdpgw) federated with Microsoft Entra ID (OIDC), NGINX TLS termination and routing, and self-hosted noVNC with WebSocket access restricted to setup owners.
• Owned Windows endpoint provisioning end-to-end: PowerShell automation, package installation, Windows/WSL integration, Microsoft Intune management, and unattended installation with Autopilot enrollment (Unattend.xml).
• Extended internal infrastructure libraries and APIs (browser namespace, vm_switch_setup endpoint, SPICE/proxy configuration, VM IP/hostname mapping) and added Selenium-based authentication across Chrome, Edge, and Firefox.
• Built a status page and admin dashboard to monitor and control hardware setups (including remote power control), and authored the company-wide AI usage policy.

• Built Windows container images (CUDA, CMake, Conan) and Azure Pipelines agents.
• Automated provisioning with Ansible as Infrastructure as Code (IaC).
• PowerShell scripting for task automation and system administration.
• Virtualization with Proxmox VE: provisioning and maintaining VMs and servers.

• Built CI/CD pipelines for Android (Gradle) and iOS (Xcodebuild) projects.
• Developed Docker containers, automated artifact deployment, and Python/Bash tooling.

• Maintained build & deployment processes with CI/CD pipelines for Bluetooth encoders.
• Web automation and testing with CI/CD; web scraping with Selenium.
• Developed web-based hearing tests (PHP, JavaScript, Python) deployed on AWS.
• Designed a SQL-backed search website that reduced Fraunhofer delivery lookup times.

• Tutor: Software Engineering (2023–24) & “Programming with Python” prep course (2021, 2022).
• Research Assistant: Speech Enhancement; Lab Assistant: Statistical Signal Processing (2021–22).

• Instructor: Deep Learning, IEEE FUM Student Branch (Oct – Dec 2020).
• Teaching Assistant: Electric Circuits, Engineering Mathematics, Technical English (Sep 2017 – Mar 2019).

• Designed, built and operate a production Next.js/TypeScript platform for portfolio analytics, market data and financial education (~25k LOC, 350 commits).
• Owned the full delivery chain: multi-stage Docker build, GitHub Actions, GHCR, automated SSH deployment to a self-hosted Linux host with runtime secret injection.
• Implemented authentication and entitlement control: Google OIDC (NextAuth), session-level authorization, and middleware-gated routes over a single audited server-side API.
• Enforced least-privilege data access on PostgreSQL: row-level security on every table with no public policies, service-role credentials confined to server routes.
• Built resilient market-data ingestion (Yahoo Finance, CoinGecko) behind a shared cache with throttle-aware batched requests.
• Shipped a GDPR-compliant double opt-in mailing system: consent timestamps, per-list unsubscribe tokens, and an admin-authenticated send path with explicit confirmation.

Personal and family capital only, no external investors, no advisory service.

Master's thesis at Fraunhofer IIS (Low Delay Audio Coding): “Optimization of transient coding in mixed lossless/lossy coding schemes”; thesis grade 1.7.