Microsoft Certified Technology Specialist (MCTS)

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

• Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
• Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
• Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
• Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
• Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
• Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
• Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
• Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.

• The Agent Support Interface is an internally used software that is used by all 1st- and 2nd-level customer advisors and shows information about the customer and their cases in a central and compact form.

• The system provides links to other platforms and systems to improve the agent's workflow.

• In an agile SCRUM team, all challenges were implemented independently and as a team.

• Consulting in the areas of software architecture, DevOps strategies, and agile development processes.

• Supporting the team in decision-making and introducing best practices for test automation and code reviews.

• Technologies: Microsoft .NET, Microsoft Azure, C#, MVC, CQRS, Akka.Net, Angular 18, NGXS, Typescript, Cypress/Playwright, Wiremock, CI/CD, DevOps.

• Optimization of the transmission media of the data links in the Ruhr area
• Configuration/expansion of switches and routers for an autonomous system AS
• Improve the network protocols used Layer 2/3 (OSI model), RSTP, broadcast, etc.
• Laying cables, crimping, antennas, routers, switches
• Maintenance, expansion, selection and prioritization of troubleshooting measures for network monitoring (PRTG, The Dude)
• Organization and new connection of another BGP peering, data center, NGN fiber optic
• VPN IPSec site connections for 6 sites with PFSense, Fritzbox
• Configuration of WLAN devices (Mikrotik, UBNT

Label: TCP/IP, VLAN, BGP, OSPF, MPLS, VPLS, routing protocols, WLAN, EoIP, PPPoE, routing, SNMP, DHCP, DNS, NAT, native IP, VLAN, Ethernet, VoIP., switches and routers from: Nortel, Cisco, MikroTik, UBNT., network management systems: The Dude, PRTG, UISP

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

• Analysis and remediation of security vulnerabilities in a risk assessment system for energy trading
• System analysis
• Threat modeling
• Decision-making on vulnerability mitigation strategies
• Implementation of vulnerability detection mechanisms
• Security scans
• DevSecOps practices
• Technical environment: Visual Studio Code, JetBrains Suite, MS Threat Modeling Tool, DevSecOps, Git, AWS, DynamoDB, SQL Server, Endur, Snowflake, Orca
• Languages: C#, JavaScript, TypeScript, Python, PowerShell, Bash, Terraform, SQL

• Implemented the BI solution and replaced the old BI landscape
• Led the “Sales Bonus Plan” subproject: expanded the existing solution and migrated to Azure (Databricks)
• Led the “Cognos Migration” subproject: expanded existing data warehouses based on MS technologies (source systems: Oracle), analyzed business requirements and designed the technical solution
• Expanded the relational DWH database
• Developed ETL processes using SSIS
• Developed the multidimensional database (OLAP Cubes/SSAS)

• Migration of backups and complete workloads to AWS and Azure, including setup and management of AKS & EKS clusters.
• Automation with Terraform & ArgoCD, CI/CD pipelines implemented with GitLab.
• System monitoring on OpenShift 4 (on-premise) with Grafana & Prometheus, use of CloudWatch and X-Ray for analysis and logging.
• Building and maintaining secure network infrastructures (VPCs, SGs, WAF, ACLs), integration of Azure Log Analytics.
• Close collaboration with infrastructure and development teams, maintenance of technical documentation with Confluence, ticket handling via Jira, and promoting cloud knowledge within the company.

• Consulting and creation of various web applications based on SharePoint and the React framework for different clients
• Development and testing of accessible apps for SharePoint
• Creation of various test cases for test automation
• Development of various solutions based on Azure
• Creation of various web services based on .NET
• Development of various SharePoint Framework solutions
• Development of various UI solutions based on SharePoint
• Consulting and creation of various Power Apps applications and Power Automate for the steel industry and an IT consulting company
• Support, consulting, and development with offshore teams for SharePoint 2013, 2016, and microservices for a logistics company
• Consulting, concept design, and development of microservices and web applications based on Microsoft technology and the React framework for a logistics company
• Consulting, concept design, and development of various SharePoint Framework solutions on SharePoint 2016 for logistics
• Consulting for the migration from SharePoint 2010 to 2016 for an IT consulting company

• New development of project room functions
• Connection of REST API of a self-developed web service (.NET 7/8) as Azure App Service
• UI tests with Playwright
• Extension of Azure DevOps pipelines
• Migration to Azure SQL Server
• Software / technology: SharePoint Online, PowerShell scripts, SharePoint Framework, MobX, C#, Logic Apps, Playwright, Azure SQL Server, Graph API

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• The goal of Afworki GmbH IT-Consulting is to make small and medium-sized companies more competitive by overcoming challenges in digitalization, automation, and data management.

• Tailored technology, strategy, and specialist consulting designed to meet the individual needs of each company.

• Analyzing the company's current situation and developing the best possible solution together with the client.

• Using both agile and classical IT project management methods to deliver projects on time and within budget.

• Focusing on automating and orchestrating all data flows in a data warehouse to create a unified and standardized data foundation.

• Considering the dependencies between IT and business to achieve sustainable positive effects.

• Employing modern strategies and tools specifically tailored to the company's needs.

• Supporting digitalization, the introduction of agile working methods, and the creation of up-to-date reports and analyses.

• Objective: streamlining management and enabling well-founded, data-driven decision-making.

• Development and maintenance of database-driven applications for managing supplier and food contracts, with extensive use of Oracle PL/SQL for complex business logic and data processing
• Optimization of PL/SQL procedures, functions, and triggers to ensure the performance and scalability of Oracle database solutions
• Ensuring compliance with best practices in PL/SQL development and implementing standards for code quality and data integrity
• Close collaboration with backend and frontend teams to ensure smooth integration between the Oracle database, C#-based APIs, and Azure cloud services

• Group-wide transformation program to replace a legacy Lotus Notes/Domino application landscape with a standardized, multi-tenant SharePoint Online target platform for the Italian Raiffeisen banking group.
• Total scope:
• 21 legally independent banks
• approx. 350 live Notes databases
• several thousand end users
• parallel operation of legacy and cloud platforms
• high regulatory requirements (audit, traceability, governance)
• Program designed as application, organizational and platform transformation – not just a technical migration.
• Definition of multi-tenant target architecture based on SharePoint Online
• Design of tenant separation including security, permissions and governance model
• Analysis and classification of Notes applications by criticality and complexity
• Definition of migration strategies (standard migration, redesign, retirement)
• Development of a multi-stage migration approach (pilot, test, production)
• Planning of fallback, rollback and stabilization measures
• Technical support and quality assurance of migration runs
• Development of automations (PowerShell, WebParts)
• Central technical interface between central IT, bank tenants, business departments and service providers
• Support in escalations and critical decision situations
• Technologies: SharePoint Online, Microsoft 365, Azure, PowerShell, Quest Notes Migrator