Microsoft Certified Technology Specialist (MCTS)

• Expert in the company's architecture management area

• Support for standardizing the company's IT landscape

• Further development of architecture management

• Shaping the company's business architecture

• Restructuring, administration and maintenance of all IT assets

• Support in creating a unified software asset management and CMDB

• Creation of unified document management (e-file)

• Transition of documents into a central DMS structure

• Link between architecture management and the department's internal business process management

• Support in developing strategic and tactical development plans

• Organizing communication with key stakeholders

• Support in the conception, organization and coordination of the architecture office to be built up

• Accompanying and advising the entire architecture management process

• Advising the company's business units on architectural topics and their framework conditions

• MS Office, Windows 10, VBA

• ITIL, TOGAF, PowerBi, Kanban, Scrum

• Internal agency tools

• Open Touch Conversation, Webex, wire, bdbos

• MS Sharepoint, JIRA, Confluence

• ARIS, Archimate, BPMN

• The Agent Support Interface is an internally used software application deployed by all 1st- and 2nd-level customer advisors. It displays information about customers and their cases in a centralized and compact format.

• The system provides links to other platforms and systems to improve the agent's workflow.

• All challenges were handled independently and as a team in an agile SCRUM team.

• Consulting in the areas of software architecture, DevOps strategies, and agile development processes.

• Supporting the team in decision-making and introducing best practices for test automation and code reviews.

• Technologies: Microsoft .NET, Microsoft Azure, C#, MVC, CQRS, Akka.Net, Angular 18, NGXS, Typescript, Cypress/Playwright, Wiremock, CI/CD, DevOps.

• C# development .Net 8.0
• Technical responsibility for architecture decisions (DDD, Clean Architecture, Microservices)
• Introduction and systematic evaluation of GitHub Copilot, analysis of efficiency benefits, identification of suitable application scenarios, assessment of code quality
• Development of best practices for using Copilot within the team, support during rollout and coaching of individual developers
• Conducting code reviews, architecture documentation according to Arc42
• Building stable CI/CD pipelines with Azure DevOps, introduction of automated quality assurance with SonarQube and .editorconfig
• Collaboration with stakeholders to continuously optimize technical concepts
• Technologies used: Azure Devops Server, Git, Sonarqube, Visual Studio 2022, Sparx EA 17, Nagios LS, Nagios XI, C#, Resharper 2.24.3, Clean Architecture, DDD, EF-Core, Arc24, Microservices, Angular, MediatR, SignalR, Copilot, OpenAI

• Design, installation, configuration, administration, optimization and further development of IT infrastructures in Citrix environments
• Updating older Citrix systems to the latest versions
• Installation, configuration and deployment of applications in Citrix environments
• 2nd- and 3rd-level support
• Performance analysis and optimization in complex Citrix environments
• Analysis and resolution of issues in complex Citrix systems
• Creation, updating and management of technical documentation
• Troubleshooting slow logons in Citrix XenApp / CVAD environments
• Analysis and resolution of printer issues in Citrix environments
• Creation, management and optimization of Citrix VDI policies
• Citrix Virtual Apps and Desktops (CVAD) 2402 LTSR, Citrix Virtual Desktop Infrastructure (VDI), Citrix Hypervisor / Citrix XenServer, Citrix Director / Citrix StoreFront, Citrix Machine Creation Services (MCS) / Citrix Provisioning Services (PVS), Citrix App Layering, Citrix Workspace Environment Management (WEM), Citrix Profile Management
• NetScaler SDX 14 / NetScaler Gateway 14 / NetScaler Console 14, NetScaler Load Balancing / Global Server Load Balancing (GSLB), NetScaler Applications Analytics (Web Insights, Security Insights, SSL Insights, TCP Insights, Gateway Insights, HDX Insights, ADC Infrastructure Analytics)
• Design, installation, configuration, administration, optimization and further development of IT infrastructures in Microsoft environments
• Updating older Microsoft systems to the latest versions
• Installation, configuration and deployment of applications in Microsoft environments
• Creation, management and optimization of Microsoft Group Policy policies
• Design, implementation and administration of Microsoft Azure environments
• Windows Server 2022 / Windows 11, Windows Group Policy / Active Directory, Remote Desktop Services (RDS), SQL Server 2022 / SCCM Server, RADIUS Server, FSLogix, PowerShell
• Implementation of standard changes in accordance with ITIL guidelines
• VMWare / Splunk

• Led the migration of the existing DWH, including HR data, application processes, project business and time tracking, from an MS SQL Server environment to Azure Databricks
• Refactored existing data models and ETL processes and extended them with new objects and functionalities
• Used Azure Databricks (Unity Catalog, Notebooks, Spark SQL, Databricks Dataflows) and Power BI
• Technologies: MS SQL Server 2019 (SSMS, SSIS), Power BI, Delta Lake, Azure Databricks

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

• Administration / configuration / operation / provision / troubleshooting of Windows Server systems (2012 - 2025) in a multi-domain infrastructure according to tiering level
• Operation of Windows systems (VMware, Hyper-V and physical)
• Automated installation and patch management via MECM / WSUS
• Creation of server hardening / operating system hardening according to BSI
• Administration / configuration / operation of Active Directory (AD)
• Administration / configuration / maintenance of GPOs / GPPs / DNS / DHCP
• Administration of cluster systems
• Support in the patch management process
• Support in the backup process
• Support with PKI deployment
• Granting, changing and revoking access permissions and access groups, control and documentation
• Control/coordination between business departments and different service providers
• Change management – review, evaluation and control of change requests
• Implementation of change requests
• Performance analysis to optimize operating systems
• Responsibility for resolving incidents and internal service requests
• Second- and third-level support
• Creation of documentation, operating manuals and presentations
• Working according to ITIL

• Analysis and remediation of security vulnerabilities in a risk assessment system for energy trading
• System analysis
• Threat modeling
• Decision-making on vulnerability mitigation strategies
• Implementation of vulnerability detection mechanisms
• Security scans
• DevSecOps practices
• Technical environment: Visual Studio Code, JetBrains Suite, MS Threat Modeling Tool, DevSecOps, Git, AWS, DynamoDB, SQL Server, Endur, Snowflake, Orca
• Languages: C#, JavaScript, TypeScript, Python, PowerShell, Bash, Terraform, SQL

• Software development
• Technical design of software architecture and design (considering functional and non-functional requirements)
• Frontend and Backend
• Refactorings
• Code reviews
• Unit tests
• Automated integration tests
• E2E tests

Global Identity Services (GIS) is the identity provider for the Digital Services Platform (DSP). GIS is responsible for authenticating and authorizing end users and other DSP services by issuing security tokens. This includes:

• Identity management (e.g., user registration, password reset and change, user profiles)
• Management of roles and permissions
• Single Sign-On (SSO) across DSP services
• Management of OAuth resources and terms and conditions

• Migration of backups and complete workloads to AWS and Azure, including setup and management of AKS & EKS clusters.
• Automation with Terraform & ArgoCD, CI/CD pipelines implemented with GitLab.
• System monitoring on OpenShift 4 (on-premise) with Grafana & Prometheus, use of CloudWatch and X-Ray for analysis and logging.
• Building and maintaining secure network infrastructures (VPCs, SGs, WAF, ACLs), integration of Azure Log Analytics.
• Close collaboration with infrastructure and development teams, maintenance of technical documentation with Confluence, ticket handling via Jira, and promoting cloud knowledge within the company.

• Consulting and creation of various web applications based on SharePoint and the React framework for different clients
• Development and testing of accessible apps for SharePoint
• Creation of various test cases for test automation
• Development of various solutions based on Azure
• Creation of various web services based on .NET
• Development of various SharePoint Framework solutions
• Development of various UI solutions based on SharePoint
• Consulting and creation of various Power Apps applications and Power Automate for the steel industry and an IT consulting company
• Support, consulting, and development with offshore teams for SharePoint 2013, 2016, and microservices for a logistics company
• Consulting, concept design, and development of microservices and web applications based on Microsoft technology and the React framework for a logistics company
• Consulting, concept design, and development of various SharePoint Framework solutions on SharePoint 2016 for logistics
• Consulting for the migration from SharePoint 2010 to 2016 for an IT consulting company

• Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
• Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
• Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
• Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
• Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
• Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
• Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
• Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• New development of project room functions
• Connection of REST API of a self-developed web service (.NET 7/8) as Azure App Service
• UI tests with Playwright
• Extension of Azure DevOps pipelines
• Migration to Azure SQL Server
• Software / technology: SharePoint Online, PowerShell scripts, SharePoint Framework, MobX, C#, Logic Apps, Playwright, Azure SQL Server, Graph API