Thomas Wimmer
Profile
I'm a software simplicity nerd who is passionate about software design, distributed systems, privacy & security — architecting systems that respect privacy and accelerate business. I consider myself a technology generalist rather than a specialist because, in my opinion, every technology is just another tool for a modern software engineer. I'm a team player, listener & communicator who enjoys taking ownership & leading by example. After several years in the payment industry — collaborating with banks & card issuers across Europe to bring innovative mobile payment/wallet solutions into your pocket — I now lead the Privacy Engineering team at Dynatrace, building and growing the team while bridging engineering with product, privacy & AI governance.
Experience
Dynatrace
Linz, AT
Engineering Manager - Privacy Engineering
Jun 2026 - Present
- Accountable for both the delivery and the people of the Privacy Engineering team
- Established a delivery framework following major stakeholder changes
- Leading the engineering team & shaping a working environment that supports their growth
- Driving critical architectural decisions for the team's software components -> establishing a new backend service to migrate core functionality out of the team's app, cutting technical debt & constraints to scale with growing customer demand
- Stakeholder management across the Quality, Security & Privacy and Product, Compliance & Certification departments
- Engineering Management
- People Management
- Leadership
- Execution Management
- Stakeholder Management
- Software Architecture
- Privacy
Product Owner & Senior Privacy Engineer
Dec 2024 - Jun 2026
- Responsible for the overall planning & execution of the Privacy Engineering team
- Established an agile delivery framework across product managers, product architects, product engineers & the team
- Mentored junior engineers & supported the growth of the team
- Drove the solution design for a major new product feature -> scanning logs for various types of sensitive data, serving Dynatrace's largest log ingest customer (>20 TB/day)
- Collaborated on the implementation of this feature together with the team
- Drove the adoption of architectural guidelines to support the growing feature demand of the codebase
- Successfully delivered an MVP, showcased at the biggest annual Dynatrace customer conference
- Continue shaping a more robust solution design to support future ingest growth & more advanced use cases
- Conducted a threat model for Dynatrace's customer-facing AI features with the AI governance team, forming the foundation for Dynatrace's first ISO 42001 audit
- Established AI-driven development practices & adopted agentic AI tools for everyday tasks & software development
- Product Ownership
- Leadership
- Mentoring
- Agile
- Software Architecture
- Privacy
- Threat Modelling
- AI Governance
- ISO 42001
- Agentic AI
Senior Privacy Engineer
Mar 2024 - Dec 2024
- Collaborated with Privacy Engineers, Product Architects, Product Managers & Security teams to establish the first official Privacy Engineering team at Dynatrace
- Drove the solution design & collaborated on the implementation of a Dynatrace app offering an export & deletion self-service to remove sensitive log records (React, TypeScript)
- Established code & architecture guidelines for the app
- Maintained an internal system to automate Data Subject Requests (DSRs)
- Supported security teams with privacy-related threat modelling practices & risk assessments
- Software Architecture
- React
- TypeScript
- Privacy
- Security
- Threat Modelling
- Risk Assessment
- Data Subject Requests
Netcetera
Linz, AT
Software Architect
Apr 2020 - Feb 2024
- Design & development of a modular framework for white-labeled mobile wallet apps
- Collaborated with product management & UX architect on the design of new features
- Collaborated with multiple development teams on software design & architecture aspects
- Supported the Presales team with offers, feasibility analysis & effort estimations
- Close exchange with clients (mainly banks & card issuers in Europe)
- Management of technical debt & improvements together with lead developers
- Consulted development teams in the software quality & testing area
- Supported migration from on-prem operations towards a cloud-native setup
- Management member of a value stream within the Digital Banking division
- Member of the 'Architects Office': Consulting & strategy body which supports CTO
- Executed code reviews with a focus on software design & security
- Collaborate with InfoSec team to improve the security & privacy of our solutions
- Requirements Engineering
- Agile
- DevOps
- Software Architecture
- Cloud-Native
- Java
- Kotlin
- Swift
- Spring Boot
- Android
- iOS
- Security
Senior Software Developer
Nov 2017 - Apr 2020
- Development of web services to manage tokenized cards for mobile contactless payments
- Integration of Mastercard Digital Enablement Service (MDES) & Visa Token Service (VTS)
- Design & development of unified security protocols to facilitate tokenization use cases
- Integration of hardware security modules & setup of key management procedures
- Integration of device attestation services for further application hardening
- Production setup in a PCI DSS compliant environment
- Support onboarding of card issuers (incl. key management, certification process)
- Maintenance: Continuous improvements, support, regulatory updates, PCI DSS audits
- DevOps
- Domain Driven Design
- CQRS
- Event Sourcing
- Java
- Spring Boot
- Axon Framework
- Payment
- Tokenization
- Security
- MDES
- VTS
- PCI DSS
Software Developer
Dec 2016 - Nov 2017
- Development & design of a mobile payment SDK for Android devices
- Implementation of EMV payment specification for contactless Mastercard & Visa payments
- Unified integration of scheme tokenization services
- Hardening of Android apps
- Penetration testing of Android apps
- Integration of Whitebox cryptography solutions
- Java
- Android
- Payment
- EMV
- MDES
- VTS
- Cryptography
- Hardening
- Penetration Testing
University of Applied Sciences Upper Austria
Hagenberg, AT
Lecturer
Nov 2024 - Feb 2025
Dec 2022 - Feb 2023
- UML & Testing course
in the Mobile Computing Master programme - Model Driven Development & UML
- Domain-Specific Languages & ANTLR4
- Software Quality & Testing
- Testing in the Software Development Lifecycle
- Unit Testing
- Test-driven Development
- Blackbox & Whitebox Testing
- Test Automation
- Static Testing
- Lecturing
- Software modeling
- DSLs
- Software quality
- Testing
- TDD
- Test automation
My Data Filter
Linz, AT
Software Architect & Developer
Mar 2022 - Dec 2022
- Design & implementation of a prototype for a platform to manage personal & sensitive data
- Multi-tenant setup for authenticating digital identities
- Access control & access request mechanisms between organizations & individuals
- Design approach on how to apply the zero-trust security model in the overall architecture
- Setup of entire infrastructure: CI-CD into Google or Digital Ocean cloud
- Software Architecture
- Cloud-Native
- Kotlin
- Spring Boot
- Privacy
- Security
Nexperts
Hagenberg, AT
Mobile Developer
Oct 2013 - Dec 2016
- Development of Android & iOS apps in the area of mobile payments/wallets
- Implementation of proxy generator for a proprietary web service protocol
- Part-time during studying at university
- Code generation
- Android
- iOS
- Payment
Porsche Informatik
Salzburg, AT
Intern
Jul 2012/13 - Sep 2012/13
- Development of Java web applications for car retail companies of the VW group
- Development of automated system tests for web components
- Java
- Spring
- Apache Tapestry
- Selenium
Education
Master of Science - Mobile Computing
Hagenberg, AT
Oct 2015 - Sep 2017 | passed with highest distinction
Distributed Systems, Cloud-Computing, Software Architecture
Bachelor of Science - Mobile Computing
Hagenberg, AT
Mar 2013 - Jul 2015 | passed with highest distinction
Distributed Systems, Cloud-Computing, Information Security, Web & App Development
Higher Technical College - Electronics & Informatics
Braunau am Inn, AT
Sep 2007 - Jul 2012
Electronics, Software Development, C/C++, Java, Java ME, C#, Android
- thomas.wimmer@proton.me
- Linz | Austria
- linkedin.com/in/thowimmer
- twitter.com/thowimmer
- github.com/thowimmer
Skills
- Leadership & Management
- Engineering Management
- Product Ownership
- Agile / Scrum
- Mentoring
- Stakeholder Management
- Privacy
- Privacy Engineering
- Privacy by Design
- Threat Modelling
- Privacy Risk Assessment
- Software Architecture & Design
- Software Architecture
- Software Design
- Distributed Systems
- Domain-Driven Design
- Event-Driven Architecture
- Cloud-Native
- Programming Languages
- Java
- Kotlin
- JavaScript / TypeScript
- Swift
- Objective-C
- C/C++
- Mobile Technologies
- Android
- iOS
- Web Technologies
- Spring MVC (Spring/Spring Boot/...)
- React.js
- Node.js
- HTML
- CSS
- Vue.js
- Angular
- CI/CD & Version Control
- Git
- Bitbucket
- Jenkins
- Gitlab
- GitHub
- CircleCI
- SVN
- DevOps
- Docker
- Kubernetes
- Helm
- Google Kubernetes Engine
- Digital Ocean Kubernetes
- ELK Stack
- Prometheus
- Grafana
- Databases
- ArangoDB
- MongoDB
- PostgreSQL
- MSSQL
- Redis
- Minio Object Storage
- Messaging Technologies
- RabbitMQ
- AMQP
- MQTT
- Websockets
- Operating Systems
- macOS
- Linux
- Windows
- Android
- iOS
- Hardware & IoT
- Home Automation with Home Assistant
- Basics in micro-controller programming with C
- Basics in electrical & electronic engineering
Languages
- GermanNative
- EnglishFluent
Interests
- Freeletics / Gym
- Standard & Latin Dance
- Tennis