Bernhard B.-Senior Cyber Security Architect | Technical Project Manager | VS-NfD / BSI Expert

Check rate
Experience
Technical Project Manager – VS-NfD Security Project
- Preparation of a complete IT security concept (ISiKo)
- Implementation of BSI / NATO / national security requirements
- Risk analysis, documentation, audit preparation
- Consulting and management of development teams in Cybersecurity Recovery and Resilience
- Genua firewalls, VPN, VS-NfD migration from Checkpoint and PaloAlto firewalls
- Administration of log sources: firewall traffic, ALG (SIP calls), ATP, DLP
- System administration – servers, AD, clients (according to BSI)
- Stakeholder communication (C-level / government agencies)
Senior Security Architect
Intermediate Beratung
- Consulting in an ongoing project in the area of IT security architecture
- Documentation of the previous progress and planning of the next steps
- Application and implementation of BSI IT Basic Protection
- Establishment and maintenance of security management systems
- Application of the ISO 27001 series of standards
- Integration of ITIL processes into security architectures
- Cooperation with public-sector clients, supervisory authorities, and internal and external service providers
Security Consultant / Project Manager
- Security of a large Europe-wide network in the VS-NfD project in the KRITIS sector
- Consulting, planning, review, and documentation
- Technical consulting in the network area, including migration planning, segmentation, and IP harmonization
- Support in the regular operation of the security infrastructure based on BSI C5 and BSI 200-2
- Focus on SIEM and SOC platforms as well as the generation of use cases and playbooks
- Identification, planning, and independent implementation of projects to improve the security infrastructure
- Technical, active project management and leadership of internal teams
- Compliance with VS-NfD requirements and VSA Classified Information Directives
Cyber Security Engineer
- Consulting, planning, and active hands-on project management for a closed on-premises high-security network
- Focus on BSI, VS-NfD, VSA, ITSCM as well as SOC, SIEM, and ISMS/KRITIS in the OT/IoT area
- Technical consulting in the network and data center areas
- Support in the regular operation of the security infrastructure and LAN/WAN environment
- Further development of use cases and playbooks on the Splunk platform
- Implementation of security infrastructure projects in the existing data center
- Development and continuous updates of the GENU VPN architecture
- Architecture and development work in Windows and Linux environments
- Network segmentation as well as review and expansion of the LAN/WLAN environment
- Review and update of the HPE/Aruba switching platform and gateway
- Introduction of EDR (Endpoint Security) and DriveLock encryption
- Improvement of email security through DLP and ProofPoint
- SharePoint project management and reporting to C-level and Board of Directors
- Management of the IT security department and coordination of vendors and service providers
Project Manager / Consultant
- Consulting on the architecture of an on-premises hospital network
- Renewal of the network to the current B3S security standard
- Management of infrastructure services such as DNS, DHCP, and RDP
- Consulting on security regulations in the healthcare sector
- Introduction of a SIEM and SOC platform
- Consulting during the tendering and implementation of a closed high-security network
Lead Architect – Government Network & Data Diode Platform
- Architecture, design and implementation of a complete rebuild of a third-party connection platform and data diode
- Support of several thousand users in the VS-NfD environment with NATO security classification
- Integration of Deep Security Enterprise solutions such as Opswat, Infodas and S-Dot
- Documentation and vulnerability analysis in the IoT/OT area
- Introduction of IAM/PAM/LDAP in the government network in compliance with BSI KRITIS requirements
- Development of connection solutions such as Thin Client, SINA, Terminal Services and ReCoBS
- Requirements analysis for data diodes and SOC platforms with Splunk
- Script development with PowerShell, VBS, Batch and Ansible
- Management of the BCM-GRC HyScout Suite
- Compliance with the Verschlusssachenanweisung (VSA) and EU and NATO requirements
- Conducting training workshops and creating audited project documentation
Network Architect
- Network architecture according to BSI Grundschutz for on-premises environments
- Design and rebuilding of a SIEM (Splunk, Wazuh) and planning of SOAR/SOC/CDC as well as IAM/PAM
- Development of a cyber security strategy for on-premises and cloud environments
- Support of the DriveLock implementation from design through production
- Setup and design of a geo-redundant data center
- Introduction of Elastic SIEM with Siemplify SOAR
- Container management with Kubernetes
- Analysis of security events and incident response planning
- Introduction of IAM/PAM tools such as CyberArk REST API, Omada and Saviynt
- Configuration of Stormshield and Cisco firewalls in separate private networks
- Rollout of TrendMicro Deep Security servers and agents
Technical Pre-Sales Manager
ERP/ SCM System Singapore Pte
- Preparation of a blockchain-based security platform (PAM/IAM/SIEM/SOC/SOAR)
- Management of the sales team and technical training
- Architecture and customized concepts for new customers
- Preparation of proposals and technical support during commissioning
- Development based on blockchain technology and Wazuh
Head of Development
SecureScrypt Team
- Development of a cloud management platform with payment gateway for SaaS sales
- Architecture of a private cloud without a connection to AWS or Azure
- Development of the SentosaXchange payment gateway for marketplace transactions
- Introduction of Splunk as a security platform including SOC use cases and playbooks
- Integration of IAM and PAM services
- Training staff in the administration of cloud services
Project Manager / Consultant
- Integrator of a complete EPM-IAM-PAM-PSM-Vault system with onboarding of 64 AWS environments in a military environment
- Setup of a system with security gateways, HSM, DDI and PKI
- Implementation of BSI and BMWI requirements according to NATO level
- Setup of an endpoint security solution with DriveLock
- Migration and implementation from BeyondTrust to CyberArk REST API
- Administration of RHEL Openshift and integration of the OMADA IAM/PAM Identity Suite
- Script development with PowerShell, VBS, Batch and Ansible
- Migration of CyberArk environments from version 10.X to 11.X
Security Developer
SecureScrypt Pte. Ltd.
- Development of a blockchain security structure
- Implementation of encryption using QKD (Quantum Key Distribution) via Fiber Optics between two data centers
- High-security development for financial applications
Lead Project Manager / Consultant
- Cyber Security in embedded Automotive platforms
- Planning and implementation of CyberArk (EPM, PAM, PSM), IAM and SIEM/SOC
- Container management with Kubernetes
- Integration of the OMADA (OIS) IAM/PAM Identity Suite
- Conducting penetration tests with Wireshark and Aircrack
- Budget planning and negotiations with suppliers
Sub-Project Consultant
- Introduction of SOC/SOAR platforms including Siemplify, Splunk and Wazuh
- Technical consulting, planning and implementation in the aviation and logistics sectors
- Pre-sales design and vendor management
- Introduction of business continuity processes (ITSCM) and ISMS in the KRITIS sector
- Conducting penetration tests in the Azure Cloud environment
- Creating scripts with PowerShell and documentation in an agile environment
Project Manager / Technical Project Manager
- Design and implementation of a Europe-wide security system for the EZB 4CB network
- Integration and adaptation to BAIT and MaRisk requirements
- Integration of HiScout GRC as part of BSI Grundschutz
- Cloud operations with QRadar, NexPose and TheHive
- Planning penetration tests with Burp Suite and Metasploit
- Preparation of the cloud migration to Azure and AWS
Global Project Manager
- Architecture, planning and integration of DLP, ATP, EDR and AntiDDoS systems
- Implementation of ISMS, SIEM and SOC
- Preparation of the cloud migration with Splunk in an agile environment
- Introduction of the OMADA IAM platform for cloud environments
- Development of a blockchain security infrastructure
- Design and rollout of the Azure Cloud migration
- Management of system integrators and vendors
Security Compliance Consultant
Deutsche Bank
- Creation of an ISMS concept in compliance with the GDPR
- Contributed to the development of a global network of approx. 25,000 servers
- Development of a SIEM based on Splunk and HP ArcSight
- Implementation of patch and update processes in mainframe, Unix, and Linux environments
- Endpoint security management with IBM BigFix and Tanium
- Conducting penetration tests in WLAN and cloud networks
- Reorganization of admin rights (AMR4V)
Senior Enterprise Security Architect
- Documentation and implementation of security requirements according to BSI 100 Grundschutz and ISO 27XXX
- Consulting on 3G/5G network security and risk analysis
- Planning of a SOC/ISMS and development of a VMware concept (SaaS)
- Use of automation tools such as Ansible and Terraform
- Creation of cryptography solutions for mobile environments and documentation of embedded software
Consultant / Trainer
- Development of IT security training concepts based on BSI Grundschutz and ISO 27001
- Conducting workshops on SOC and SIEM
- Development of defense measures against targeted attacks
- Conducting penetration tests and security analyses with Wireshark
- Consulting on securing firewalls and VPN gateways
Consultant / Team Member
- Expansion and securing of the GSM-R network and planning the transition to LTE
- Introduction of an ISMS based on BSI Grundschutz and ITSig
- Establishment of a SOC/SIEM including use case and playbook frameworks
- Threat analysis according to ISO 27001 and BNA 109
- Risk and change management as well as vendor management
Team Member / Project Manager
- Data center migration and expansion as well as reconstruction of the data center
- Connection to Black Fibre and system analysis
- Structuring of the SOC and expansion of the SIEM
- Installation of PKI components and work with hardware security modules (SINA, SafeNet)
- Migration from SSL-SHA1 to SHA-2 and ADS patching
- Risk and residual risk analysis for high-availability networks
Technical Director
Neoi Pte. Ltd.
- Software and hardware development as well as PCB layout
- Development of security concepts in Windows and Unix environments
- Development of modern encryption solutions for the military and government sectors
- Development of television and payment applications for Android and iOS
- Management of an international development group of over 100 people
- Implementation of a network security platform with SINA and AVDA
- Securing clouds with PKI-based security
Senior Systems Engineer / Manager
PIC Pte. Ltd.
- Management of 200 technical employees in Hong Kong, China and South America
- Design of new IT security and network solutions
- Design and implementation of IP/VoIP systems for service providers
- IT risk management, analysis and training delivery
VP IT / Head of Asia Pacific Group
Credit Suisse First Boston
- Management of the Global Engineering and Infrastructure Support Team
- Analysis of existing networks for security risks
- Development of new risk solutions and migration of systems to Windows
Senior Systems Engineer
- Planning of 5G mobile networks while taking security standards such as 3GPP into account
- Installation of terminal server networks for Swiss banking groups
- Experience with Packet Protocol as the basis for GSM systems
- Development of encrypted mobile devices and satellite phones
SVP
Goldtron Group Singapore Pte. Ltd.
- Head of the Singapore development group and main coordinator of the Hong Kong team
- Design of the MXI platform for combined mobile and VoIP services
- Installation of the first VoIP network in Malaysia
Interim CTO
Lintux Hong Kong Ltd.
- Acquisition of new customers and coordination of orders with Chinese factories
- Training of technical staff and technology transfer
- Development of IP systems
Senior Consultant
Merrill Lynch International Inc.
- Network migration from Novell to Windows and Transaction Server
- Development of investment applications for monitoring the stock market
- Integration of Reuters and Bloomberg live feeds
- Implementation of the first security policies for banks in the investment sector
Contract Engineer
PIC Intl. Hong Kong
- Project implementation in Iraq, Lebanon, Syria and Saudi Arabia
- Installation of complete radio communication networks
- Development of the first encrypted satellite phone
RF Development Engineer
Pathcom Inc.
- Development of CB and UHF radio systems
- Supervision of manufacturing in the USA and Japan
- Development of the first Asian-made radio synthesizer and UHF transceiver
Developer
Taitoma Group
- Development and design of software and hardware for Asian manufacturers
- Implementation of project management methods and strategic leadership
- Development of solutions for IT security and risk reduction
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Aerospace and Defense, Banking and Finance, Telecommunication, Government and Administration, and Professional Services.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Project Management, Product Development, Procurement, Sales, and Audit.
Summary
More than 30 years working as a technical IT Engineer, PM, Sales Analyst, more in the complete CV.
For over 15 years, I have specialized in digital (cyber) security and bring extensive technical and consulting expertise in highly sensitive areas such as VS-NfD, NATO security projects, aviation security (LSÜ2), and government IT security. I am Ü2-certified and have extensive experience with BSI courses and international standards (ISO 27001, NIST, ENISA).
I have designed, proposed, developed, and hands-on implemented VSA-compliant security solutions for data processing up to the classification level „GEHEIM“ several times – both in consulting and technical roles.
Skills
Help And Support For Clients In Finding The Right Business And Technology Solutions By Working As A Consultant And Consultant On Design Trend-Setting Security Architectures.
Expert In The Classified Information Directive (Vsa), Especially In The 4 Classification Levels, Vs-Nfd, Vs-Vertraulich, Geheim, Streng Geheim.
Core Topics:
- Secure Hardware Development (Layer 2 Network Devices, Mobile Security Solutions)
- Security Architectures According To Vs-Nfd Guidelines
- Development And Securing Of Mobile Platforms (Smartphones, Tablets)
- Vulnerability Analysis And Implementation Of Protective Measures
- More Than 15 Years Of Experience As An Analyst With Security In It, Ot, Etc.
- Ot - Managing Physical Operations
- Iot - Bridges The Two By Connecting Physical Devices (Ot) To Digital Systems (It)
- Kritis - Critical Infrastructures – In The Areas Of Information Technology And Telecommunications, Finance And Insurance, Energy (Electricity, Gas, Oil, District Heating), Public Sector, Military Environments
- Vsa - Classified Information Directives For The Four Classification Levels
Professional Strengths & Technological Expertise – Consulting & Technical Implementation (Selection):
- Many Years Of Experience As A Certified Security Consultant (Bsi 100–200, C5, Vsa Isms, Grc, Bcm, Hiscout Suite)
- Kritis Implementation With An Isms In Risk Management And Ensuring The Shared Protection Goals Of Availability, Confidentiality, And Integrity Of Information And Systems
- Hands-On Project Management And Technical Implementation In Soc, Siem, Soar (Splunk, Ibm Qradar, Exabeam, Thehive, Cortex, Arcsight)
- Use Of Drivelock (Edr, Device & Application Control), Cyberark Epm, Pam, Psm, Beyondtrust, Zscaler And More
- Consulting On The Processing Of Classified Information Under Vs-Nfd Criteria (National & International)
- Architecture And Implementation Of It Security Solutions In Government Environments (Germany, Nato, Eu, Usa, Embassies)
- Kritis: Critical Infrastructures That Must Be Specially Protected Against Cyberattacks And System Failures To Ensure The Stability And Security Of Society
Iam & Pam Expertise:
- Implementation Of Abac-/Rbac Solutions In Connection With Identity & Access Management (Iam)
- Development Of Secure Access Architectures For Cloud And Devops Environments (E.G. Cyberark Rest Api, Empowerid, Saviynt)
- Planning And Integration Of Pki, Ssl Certificates, Hsm, Ms Ndes, Safenet, And More
Project Experience & Roles (Skill Focus):
- Project Management, Pmo, Agile Coach, Technical Project Manager (Hands-On), Security Consultant
- Development Of Secure Products (Hardware And Software), Including Mobile Border Scanners, Fingerprint Solutions, And Sim Card-Based Authentication
- Customer Focus: Public Sector, Military, Government Agencies, Banks, Insurance Companies, Automotive, Energy, And Transport
Industry Expertise & Regulation:
- Financial Sector: Dora, Bait, Vait, Risk And Compliance Management, Incident Response
- Industry & Military: Itscm, Network Security, Vs-Nfd, Nato Standards, Bsi Basic Protection
- E-Government: E-Banking, Secure Digital Identities, Smartcard Authentication
Technology Stack (Selection):
- Security Tools: Splunk, Arcsight, Qradar, Wazuh, Exabeam, Thehive, Cortex, Misp, Nexpose, Zalert
- Penetration Testing: Wireshark, Metasploit, Acunetix, Burp Suite, Aircrack
- Cloud Platforms: Aws, Azure, Strato, Telekom Cloud – Including Cloud Security & Migration
- Scripting & Programming: Powershell, Batch, Vbs, Java, C++, Sql, .Net
- Os & Infrastructure: Windows Server (2003–2022), Linux/Unix, Rhel/Openshift, Oracle
- Protocols & Architecture: Vlan, Ngw, Ddi, Pap Structures, Secure Segmentation
- Blockchain & Quantum Security: Own Platform Development & Research Since 2020
Soft Skills & Working Style:
- Analytical And Structured Approach
- Strategic Thinking With A Focus On Implementation
- Expert-Level Technical Understanding
- Team Leadership Of Up To 80 People, International & Remote
- Very Good Documentation, Training, And Presentation Skills
Hardware Expertise (25+ Years Of Experience) – Security Hardware & Biometrics:
- Development Of The First Portable Android-Based Passport Scanner With Integrated Multi-Fingerprint Recognition For Border Protection, Police, Bka, And Banks
- Development Of Patented Biometric Systems Based On Fingerprint Recognition (E.G. Nurugo Technology)
- Integration Of Secure Sim And Sd Cards For Passwordless Authentication In Mobile And Stationary Security Applications
Embedded Systems & Cryptography:
- Experience In Designing And Implementing Security-Critical Embedded Hardware With Hardware-Based Encryption Mechanisms (Aes-256, Diffie-Hellman, Quantum Ready)
- Research And Development In Quantum-Computing-Based Encryption (Since 2020)
Security Components & Interfaces:
- Development And Integration Of Nfc And Smartcard Technology
- High-Security Solutions For Transactions (Uaf, Biometric-Based)
- Hardware Security Modules (Hsm) & Key Management Systems (Kms)
- Pap Architectures (Packet Filter, Application Layer Gateway)
Production & Technical Implementation:
- Management Of Prototype Development, Production Control, And Documentation Of Security-Critical Hardware
- Rollout Of Security-Certified Devices In Cooperation With Government Agencies, Military, And Civilian Organizations Worldwide
Software And Technology Expertise – Cloud & Infrastructure:
- Planning, Architecture, And Migration Of Cloud Environments (Aws, Azure, Strato, Telekom Cloud)
- Development Of Secure Cloud Platforms With Marketplace Integration For Cloud Services (Xaas, Saas, Iaas)
- Virtualization And Automation Solutions (Vmware Vrealize, Vmware Cloud Foundation, Ansible)
Cybersecurity Solutions:
- Siem/Soc/Edr: Splunk, Ibm Qradar, Exabeam, Hpe Arcsight, Elk/Elastic Siem, Thehive, Cortex, Nexpose, Misp
- Endpoint Security: Fireeye, Sophos, Trendmicro, Drivelock (Device Control, Application Control, Encryption)
- Iam & Pam: Empowerid, Cyberark, Beyondtrust, Saviynt, Psm, Pvwa, Cpm, Abac/Rbac Integration, Epm, Pam, Psm
- Pki & Certificate Management: Ms Ndes, Safenet, Ssl/Tls, Hsm Integration
Network & Security:
- Network Analysis And Segmentation: Vlan, Ngw, Ddi, Pap Architecture
- Penetration Testing: Metasploit, Burp Suite, Acunetix, Aircrack, Wireshark
- Security Architectures For Classification Levels: Vs-Nfd, Vsa, Nato Secret/Restricted, Usa/Tc Standards
Software Development & Scripting:
- Languages: Java, C++, .Net, Sql, Json
- Scripting: Powershell, Vbs, Batch
- Source Code Analysis, Extensions, Adaptations & Corrections
- Version Control & Devops: Git, Gitlab, Ci/Cd Integration
Standards & Regulation:
- Iso/Iec 27001, Bsi 200-2, Bsi C5, Nist, Enisa, Gdpr, Dora, Bait, Vait
- Emergency Management According To Bsi 100-4
- Risk Management, Grc, Business Continuity Management (Bcm)
- 5g Security Tools, Palo Alto Networks, Zscaler Zero-Trust, Cisco, Fortinet, Proofpoint
Roles & Responsibilities In Projects – Project Leadership & Management:
- Project Manager/Pmo For Complex It And Security Projects With Up To 80 Team Members – Locally And Internationally (Remote/On-Site)
- Responsibility For Project Planning, Budget, Time Management, Quality And Risk Control
- Application Of Agile Methods (Scrum, Kanban, Safe), Certified In Jira & Atlassian Suite
Consulting & Technical Expertise:
- Enterprise Security Consultant Focused On High-Security Requirements In Government/Military And Industrial Environments
- Analysis And Assessment Of Existing Security Architectures
- Development Of Customized Security Solutions According To International Standards
- Contact Person For Classified Information Processes (Vs-Nfd, Nato, Eu, Usa, Embassies)
Security Operations & Incident Response:
- Establishment And Operation Of Siem And Soc Environments Including Use Case Development, Playbooks, Escalation Chains
- Consulting And Technical Implementation Of Soar Automation (Splunk, Cortex, Etc.)
- Vulnerability Management & Vulnerability Assessment Including Cdc Interface And Incident Documentation
Product Development & Innovation:
- Development Of New Security Products (Hardware & Software) From Concept To Market Launch
- Technical And Commercial Leadership In Pre-Sales And Sales Situations
- Support For Research Departments With Trend Analyses And Market Launches Of Innovative It Security Solutions
Languages
Education
Philipp Reitz Polytechnikum
Diplom Ingenieur
Humanistic Gymnasium Wiesbaden
TU Darmstadt
Electrical Engineering, Electronics, Mathematics, Physics
Certifications & licenses
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Bernhard is based in Wiesbaden, Germany and can operate in on-site, hybrid, and remote work models.
Bernhard speaks the following languages: German (Native), English (Advanced), Spanish (Advanced), Chinese (Advanced).
Bernhard has at least 23 years of experience. During this time, Bernhard has worked in at least 22 different roles and for 8 different companies. The average length of individual experience is 1 year. Note that Bernhard may not have shared all experience and actually has more experience.
Based on recent experience, Bernhard would be well-suited for roles such as: Technical Project Manager – VS-NfD Security Project, Senior Security Architect, Security Consultant / Project Manager.
Bernhard's most recent position is Technical Project Manager – VS-NfD Security Project.
In recent years, Bernhard has worked for Intermediate Beratung and SecureScrypt Pte. Ltd..
Bernhard is most experienced in industries like Information Technology, Aerospace and Defense, and Banking and Finance. Bernhard also has some experience in Telecommunication, Government and Administration, and Transportation.
Bernhard is most experienced in business areas like Information Technology, Project Management, and Product Development. Bernhard also has some experience in Procurement, Sales, and Audit.
Bernhard has recently worked in industries like Information Technology, Banking and Finance, and Government and Administration.
Bernhard has recently worked in business areas like Information Technology, Product Development, and Project Management.
Bernhard attended Philipp Reitz Polytechnikum.
Bernhard has 18 certificates. Among them, these include: AISP, BSI 100 / BSI 200 / C5-Testierung, and BSI C5.
Bernhard will be available full-time from January 2027.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 5 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Technical Project Manager – VS-NfD Security Project
Nearby freelancers
Professionals working in or nearby Wiesbaden, Germany
