CompTIA Network+

• Tech stack: Flutter/Dart, Unity3D, React, NextJS, JavaScript, TypeScript, HTML, CSS, SASS, SCSS, Tailwind, Bootstrap, Ollama, llama.cpp, LangChain, MCP, RAG, n8n, Node-Red, PlatformIO, Arduino, ESP, C, C++, Python/Django, NodeJS, C#, .NET, PostgreSQL, MySQL, MS-SQL, MongoDB, AWS, Azure, GCP, GitHub Actions, GitLab CI, Azure Pipelines, Ansible, Terraform, Docker, Postman, REST, WebSocket, Figma, Penpot, Adobe Illustrator, Adobe InDesign, VS Code, Android Studio, Visual Studio, Unity3D, Jira, Confluence, Traefik, Rclone, Authentik, pfSense, Cloudflare, Proxmox, MQTT

• Previous projects:

• n8n automation that reads incoming emails from an Office mailbox and routes them to stakeholders

• FastMCP 2 server exposing internal services via REST API to an LLM

• Terraform migration of cloud infrastructure with Azure VMs, network, blob, storage and cloud-init

• Azure Pipelines for automated testing, deployment, and artifact management

• Terraform, Ansible, Cloudflare Tunnel integration with Docker container provisioning and backups

• GitHub Actions CI/CD for Flutter app builds, testing, automated screenshots, and App Store deployment

• Flutter app with SSO, local database, backend integration, BLE synchronization

• GCP setup with Cloud DNS, App Engine, Cloud SQL

• AWS environment with EC2, S3, Route 53, ECS

• Workshops delivered on Docker, Git, Terraform, Ansible, Cloudflare, DevOps, modern software development practices

• Backend development with Python Django REST Framework, PostgreSQL, MQTT

• SSO identity provider with OIDC, OAuth, LDAP, Cloudflare Tunnels, Authentik

• Architected and implemented a Data Value Framework as a decision-making basis for strategic prioritization and determining data-driven value contributions along the corporate value chain, connecting data value with business objectives.
• Designed standardized use cases to assess the maturity levels for quantifying business value and data value.
• Integrated the framework within SAFe structures in Lean Portfolio Management and ARTs to guide strategic investment decisions.
• Developed metrics and evaluation procedures for prioritizing business areas based on quantitative data.
• Redesigned data governance, including the introduction of the data owner role with clearly defined responsibilities and differentiation from the data steward role.
• Derived MVP priorities using gap analyses across key areas and value stream analysis.

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• .net C# - IIS Application Management
• Graylog, MS Windows Server AD, DNS, DHCP, Failover Cluster Manager, Ansible Linux for Deployment, MS SQL Server

• Operation and development of the global server and virtualization infrastructure
• Operation and maintenance of storage systems deployed worldwide
• Active management of global Active Directory services
• Providing 2nd- and 3rd-level support in these areas
• Independently overseeing and leading small IT projects

• Expert in the company's architecture management area

• Support for standardizing the company's IT landscape

• Further development of architecture management

• Shaping the company's business architecture

• Restructuring, administration and maintenance of all IT assets

• Support in creating a unified software asset management and CMDB

• Creation of unified document management (e-file)

• Transition of documents into a central DMS structure

• Link between architecture management and the department's internal business process management

• Support in developing strategic and tactical development plans

• Organizing communication with key stakeholders

• Support in the conception, organization and coordination of the architecture office to be built up

• Accompanying and advising the entire architecture management process

• Advising the company's business units on architectural topics and their framework conditions

• MS Office, Windows 10, VBA

• ITIL, TOGAF, PowerBi, Kanban, Scrum

• Internal agency tools

• Open Touch Conversation, Webex, wire, bdbos

• MS Sharepoint, JIRA, Confluence

• ARIS, Archimate, BPMN

• Set up software development
• Project meetings
• Process planning
• Web and app development with backend services in the Azure Cloud
• Technological development

• Leading the service department in the DACH region with budget responsibility
• Process optimization and lean management
• Customer support and team leadership
• Planning and execution of repairs, installations and retrofit projects in collaboration with the parent company in Italy
• Implementing a central service inbox to shorten processing and response times and increase customer satisfaction
• Digitizing service reports to speed up billing
• Optimizing machine installations and reducing warranty costs
• Introducing clear filing structures to minimize search times
• Improving customer satisfaction through structured feedback systems

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

• Supporting 3000 Intune devices
• Intune AutoPilot deployments for kiosk devices and hardening
• Intune configuration profiling and troubleshooting

• Operation and further development of the network and security infrastructure.

• Monitoring, analysis and resolution of network and security incidents.

• Cross-department collaboration with other specialist teams for operations, further development and reporting.

• Firewall vulnerability analysis.

• Firewall rule approvals.

• Troubleshooting IP communication issues in the network and firewall infrastructure.

• Security-critical IT infrastructure, processing of personal data, compliance with legal regulations.

• Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5

• Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI

• Support across the entire Migros network
• MPLS, L3/L2, complex BGP network, Checkpoint and Fortinet firewalls/VPN, F5 proxies and load balancers, Cisco WLAN with Prime/CCC and DNAC (the largest in Switzerland), ISE, Bluecat DNS and IPAM, DAMS, PRTG, Git, Ansible, ACI with NCAE and NexusDashboard, SAN

Project: Process optimization & IT support in an insurance broker office.

Project activities:

• Analysis of processes and definition of requirements
• Consulting for the implementation of a cloud solution (soho)
• Installation and verification of new infrastructure HW
• Cloud installation & configuration
• Definition and creation of use cases
• Performing user acceptance tests (UAT)
• User training / training
• IT support (cloud, PC, server, printer, network)

Label: Insurance, infrastructure, configuration, training, support

• Deployment of a Customer Engagement & Loyalty solution in the cloud (AWS) and integration into the existing on-premise system landscape.

• Technology: AWS EKS - Kubernetes, Helm, AWS EC2, AWS S3, PostgreSQL, SAP GLIF, RabbitMQ, Git, GitLab, ArgoCD, GitOps, CI/CD, Terraform, HashiCorp Vault, JFrog Artifactory, Splunk, Prometheus, Grafana, Linux, bash, IntelliJ, draw.io, Confluence

• Result: Deployment of a cross-product bonus program for retail banking, embedded into online and mobile banking; actual and emotional customer engagement; improved profitability and loyalty; support for cross- and upselling; long-term improvement in customer satisfaction and positive impact on the company image.