ITIL Foundation

• Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
• Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
• Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
• Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
• Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
• Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
• Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
• Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.

Europe-wide re-platforming & centralization

• Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
• Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
• Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
• Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
• Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
• Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
• Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
• Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• ITSM consulting, analysis and optimization of IT capacity with BMC TSCO / BMC Helix
• Drafting "Governance guidelines for operational capacity management"

• Management and optimization of a portfolio of about 100 projects (launches, in-field solutions, data & analytics, digital solutions, digital products)
• Optimization of the existing project standard (playbook) and alignment with the European and global organization (USA)
• Coaching project managers on setup, planning, cooperation with business, GDPR, GxP, data security and launches
• Preparing projects for works council information and project closeout communication
• Optimization of resource management (tracking, allocation, prioritization)
• Taking over individual project leads (off-/transboarding, event management, checking whether WhatsApp is allowed on a business smartphone)
• Supporting the hiring of external project managers
• Optimization of meeting structure, project controlling (KPIs), change and demand management
• Optimization of risk, issue, dependency and quality management and support during internal audits (GxP)
• Optimization of the portfolio steering tool (Smartsheet) on national, European and global level
• Design and implementation of a Business Value Complexity Scoring
• Building a strategic PMO with a sister department and optimizing cross-functional teams
• Reporting, communication and escalation at management level
• Leadership coaching for several future leaders (short-time assignment)
• Development of the concepts "PPM as a Service" and "Internal Customer Approach"
• Development and review of a concept "AI Data Governance" including roles and processes
• Selection and onboarding of the successor

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Manage and oversee various software development projects between product management and agile dev teams of external service providers
• Communicate with all stakeholders
• Promote transparency and focus on project topics
• Facilitate alignments between business units and external partners
• Support product managers and product owners in preparing and managing requirements in workshops and tools
• Use short feedback loops to optimize agile collaboration
• Support hybrid and agile collaboration

• Coached teams in Agile methodologies and Scrum framework implementation.
• Aligned the product roadmap with business goals such as increasing bookings, improving user experience, and expanding supplier integrations.
• Collaborated with developers and third-party providers to ensure smooth API integration and end-to-end functionality.
• Created and continuously refined the product backlog with user stories, bugs, and technical improvements.
• Prioritized backlog items based on business value, revenue impact, and regulatory deadlines.
• Worked closely with backend and frontend teams to clarify dependencies and prioritize technical debt.

• Migration of the existing Brainloop application to a new infrastructure
• Management of project activities and stakeholder communication
• Management of complex relationships with customers, internal departments, IT partners and external contacts
• Planning and managing project finances, including cost estimates and financial control
• Initiating and managing projects with third-party solutions, working with procurement
• Ensuring compliance with project management methods and quality standards
• Supporting portfolio project delivery processes and regular reporting on project status
• Skills and tools used: communication, reporting, presentation, project management, MS Exchange, MS Outlook
• Team size: 15 people

• Built and successfully certified the Information Security Management System (ISMS) according to ISO 27001 in seven country organizations (Ghana, India, Bangladesh, Uzbekistan, Serbia, Kosovo, Albania).
• Full implementation of the ISMS from kick-off phase to certification, including defining the governance structure and process landscape.
• Developed and delivered target-group-specific trainings, workshops, and coaching sessions for local responsible persons on the basics of information security and ISMS operations.
• Designed and continuously improved training concepts and content to increase understanding and acceptance.
• Identified and implemented improvements in processes and tools, including risk management for international projects.
• Optimized central ISMS core processes from the idea through pilot operation and fine-tuning to global rollout.
• Optimized knowledge management, as well as work aids and methods for the global ISMS team.
• Built and moderated cross-functional coordination with key interfaces to the ISMS.
• Microsoft Teams, Excel, SharePoint Lists, Power Apps.

• Introducing 5 different process applications for various teams

• Release planning: scope and time management

• Resource/capacity planning

• Conducting sprint planning / retrospectives

• Increment planning (multiple sprints)

• Preparing steering committee meetings / reporting to the executive board

• Coordinating / aligning with external suppliers / deliveries

• Multi-project resource planning

• Aligning with the business unit and development team

• Identifying best practices with IBM BAW

• Cost control and planning for the project team and external service providers

• Collecting KPIs using LogScale

• Analyzing application errors with LogScale / queries

• Defining user stories / aligning requirements with the business unit and development team

• Testing and defect tracking

• UI/UX design of the application

• Preparing and facilitating brown-paper workshop

• Test concept, test data, test organization, test execution

• Recording team velocity / metrics

• Executing tests

• Scripts for automated testing

• Organizing tests with the business unit and IT

• Recording and prioritizing defects

• Setting up and operating the application

• Setting up application monitoring with LogScale dashboards

• Checking health endpoints with PowerShell

• Post mortem analysis

• Setting up incident management

• Setting up problem management

• Analyzing errors using LogScale queries and dashboard

• Pre-processing data for AI

• Conducting evaluation with AI language models (Meta Llama 3.3 LLM and deepset Haystack) and RAG

• Installing runtime environments for LLMs (large language model)

• Evaluating various LLMs

• Installing RAG (retrieval augmented generation) and integrating with LLM

• Extracting unstructured data with LLM and RAG

• Project based on IBM BAW (Business Automation Workflow), WebSphere Liberty, Domea, d.3, REST, LogScale (formerly Humio), Swagger, PowerShell, JIRA, Confluence, Lucom Interaction Platform (LIP), Mattermost, Jabber

• Migration of SEPA direct debits, credit transfers & card clearing to Worldline's internal platform as part of the outsourcing contract

• Definition of the MIGR strategy

• Mobilization of the community (300+ experts at client & Worldline)

• Creation of the MIGR runbook (100+ workshops)

• Close collaboration with upstream project streams: BUILD & TEST, as well as with the operating units

• Set up of the governance framework, capacity management & reporting

• 100% of SEPA DD, CT & CC transaction traffic migrated (7 months)

• ~80 migrations carried out with a success rate of 70% ("first-time right")

• Set up technical & manual production monitoring

• Established a "fast-track" incident management process in the MIGR & hypercare phases

• Set up 20+ exception handling processes

• Conducted trainings

• Implemented SLAs & billing