ITIL Foundation

• Introduction of a new digital product in the Chinese market as part of a global growth strategy.

• Connection point and coordinating interface between central product management, local Chinese teams, and international stakeholders.

• Management of the full program management to coordinate complex digital projects.

• Successful launch of a digital product in China (including successful certification for the Chinese market).

• Balancing local requirements with global priorities while taking tax and regulatory conditions into account.

• Introduction of a new way of working to improve collaboration and governance across locations.

• Development and implementation of a scaling strategy for the digital business model in China.

• Use of Jira, Confluence, Miro, Scrum, Agile work, SAFe.

• Project language: English.

• Development and implementation of tailored information security strategies

• Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

• Risk management and creation of security concepts

• Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

• Building and improving security organizations

• Creation and implementation of guidelines, policies, work instructions, and process descriptions

• Audit support and certification preparation

• Conducting trainings, workshops, and awareness campaigns

• Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

• Conducting penetration tests and vulnerability analyses

• Consulting on the selection, integration, and management of security architectures in complex IT environments

• Consulting on ITSM and managed security services and SOC

• Leading and managing complex projects to improve information security

• Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

• Introduction and quality assurance of management, documentation, and knowledge management systems

• Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

• Development and implementation of risk analysis procedures

• Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

• Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

• Awareness campaigns to promote security culture in companies

• Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

• Simulations and exercises to prepare for information security incidents

• Interim management for leading information security projects or IT security organizations

• Taking on the role of an external CISO (Chief Information Security Officer)

• Support in developing and implementing IT security and corporate strategies

• Coaching and mentoring of managers in the field of information security

• Building and leading security departments as well as recruiting and qualifying employees

• Temporary assumption of management responsibility in critical situations

• Strategic and operational leadership of the technical service organization
• Improvement of all processes and workflows
• Development and introduction of a service management IT tool incl. AI database, customer app, and self-service portal

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

Stabilizing an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

Due to the steady growth of the customer organization and the associated increase in the number of projects in a wide range of areas, including IT/digitalization, sales and organizational development, and controlling, the demands on the projects are increasing. Projects are often started but not implemented within the planned time frame, resources are not clearly assigned, and the business value is not clearly demonstrated. The goal of the assignment as Interim Head of PMO is to further develop and embed an existing project organization from the CDO area at management level. It is important that the governance is pragmatic, easy to understand, and simple to apply in daily project work. The tasks and roles are to be defined, embedded in the organization, and this strategic PMO is also to be supported by an IT solution. This solution is to be selected and introduced. In addition, all ongoing projects are to be gradually transferred into PMO governance and project control is to be centralized.

support SAFe adoption at team, ART and Portfolio level with consulting, coaching and training. Establish hierarchical enterprise backlog and Kanban Systems integrating portfolio, value stream and team level. Make e2e value stream flow across organisational boundaries visible and measurable. Teach "stop starting, start finishing" and Limit WiP.

• As part of the project, the further development of the identity management system was driven forward. This included a comprehensive refactoring of the interfaces to the connected target systems. In addition, several special systems were successfully connected to the IAM to ensure end-to-end identity and authorization management.
• Technical design and solution proposals for IAM system development
• Requirements analysis and requirements management (IREB, BABOK)
• Alignment of the strategy with the future target architecture (TOGAF)
• Prototyping of solutions
• Documentation of requirements (Innovator)
• Analysis and documentation of requirements and creation of process models (UML, BPMN, ArchiMate)
• Modeling of requirements and system functionalities (OOA/OOD, UML)
• Further development of interfaces (SOAP, REST)
• Carrying out architecture reviews

• PMO lead for Security Clearance 2 (SÜ2) cleared
• Reporting to sub-program management GMN
• System maintenance 25+
• Functional control and coordination of Jira setup
• Preparation of decision papers (e.g. project planning, steering model, communication plans, controlling models, role and responsibility matrices)
• Development of program-wide knowledge management using Confluence, creation of Jira concept
• Development of an access concept for all project tools
• Analyzing existing processes, identifying improvement potential, and designing solutions to increase efficiency and effectiveness
• Development of a concept for introducing automation approaches in existing tools
• Creating intranet articles as project marketing
• Responsible for project governance through reporting and resource planning in the sub-program
• Agile further development of the project method
• Gathering customer requirements (requirements engineering)
• Preparation and support of contract negotiations (7-year term, budget of over 500 million)

• Recurring problem in my own AI-assisted projects: requirements analysis, use cases, and architecture decisions are created quickly with AI support, but they remain hard to trace and are scattered across Markdown files – knowledge is lost as soon as it is no longer in the context window. arknet turns requirements engineering and architecture knowledge into structured, verifiable data instead of plain text: requirements, use cases, and architecture decisions as a fully linked knowledge graph, traceable from the requirement to the architecture decision – queryable for both people and AI agents. Technically built on RDF/OWL and its own MCP server.

• Result: MCP daemon running, Docker image automatically published to GHCR, nine hexagonal modules, eleven ADRs (including an open-core license model). Requirements engineering and ubiquitous language hexagon active. Public since 07/2026 as a Community Edition under Apache-2.0 (github.com/kogn-io/arknet), together with the Claude Code plugin and the GHCR image; open-core model.

• Label: Java, Maven, RDF, RDF4J, OWL, SPARQL, Model Context Protocol, Spring AI, Docker, GitHub, Git, Claude Code, Obsidian, DDD, Hexagonal Architecture, ArchUnit, JUnit, AssertJ

Digitalization of real places with 3D/LiDAR scans to make spatial data usable for AI applications and derive concrete use cases and prototypes from it.

• Digital capture of real places as a basis for faster planning and analysis
• Browser-based access to 3D data for easier use and coordination
• Turning spatial data into concrete use cases, prototypes, and AI training scenarios
• Planning basis for urban development and other digital future applications

Keywords: LiDAR, 3D scan, AI, use cases, AI training, prototyping, Python, web development, data models, architecture

• Integration of highly regulated countries such as China and South Korea into a company-wide M365 tenant.

• Technical contact for integrating special requirements for the executive board and German subsidiaries that are subject to BaFin compliance requirements.

• Subproject management.

• Coordination of requirements within the overall architecture.

• Design of the use of DLP features from Microsoft Purview.

• Design of special access restrictions via Entra ID Conditional Access.

• Support in designing the provisioning of Teams teams and SharePoint sites with higher compliance requirements.

• Technical support for implementing information classification with sensitivity labels for SharePoint Online and Teams.

• Technical support for the subproject introducing CoPilot for M365.

• Skills: M365, Purview, DLP, Entra ID, Sensitivity Labels, CoPilot, Teams, SharePoint Online.