Christian D.-Managing Director and Senior Consultant

• Strategic consulting for securing business processes
• Consulting on the planning and implementation of IT and IT security projects
• Security and policy checks, process optimization, emergency planning
• Project management and interim management in IT infrastructure and information security

Overview of relevant projects:

• 2026: Analysis and assessment of an IT security architecture in terms of its existing design and the components in use. Development of proposed solutions to maximize security and reduce complexity. Development of a Zero Trust strategy and IT security architecture for DG Nexolution EG.
• 2026: Continuation of the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
• 2025: Consulting on a DLP concept for Digid GmbH.
• 2025: Advised a customer following a cybersecurity attack in which the IT infrastructure was compromised and the attacker gained M365 tenant admin rights. Investigation and recovery of the IT infrastructure. Preparation of recommendations to improve IT security.
• 2025: Continuation of the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
• 2024: Development of a DNS concept, including consulting on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones and automation. Development of a DHCP concept, including consulting on DHCP design, a central DHCP management system and automation. Consulting on the operation of the relevant products, their operating processes, and updates to IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
• 2024: Assessment of the current state and evaluation of the network and security infrastructure established by the providers in terms of the overall architecture, including its design and components. Development of proposed solutions to improve current operations, maximize performance and security, and reduce complexity. Presentation of the findings to C-level management, including their causes and possible solutions, with the required decision documents. Development of a SASE concept based on a Zero Trust architecture for Norddeutsche Landesbank.
• 2024: Continuation of the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
• 2023: Consulting on addressing findings from an IT security assessment of the IT infrastructure; conducting proof-of-concepts for DDoS protection and Digital Experience Monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX); developing a new security architecture based on Zero Trust; redesigning a Cisco ISE implementation; and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
• 2023: Continuation of the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), the Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
• 2022: Development and review of white papers for infrastructure and security architectures; planning new network infrastructures for the German Aerospace Center.
• 2022: Development of a concept for the technical and process-based modernization of a disaster recovery plan for United Nations Volunteers.
• 2022: Development of a concept for moving measurement data to a cloud environment, implementing Network Access Control, and delivering an awareness training session for Digid GmbH.
• 2022: Development of a network segmentation concept for DZ Hyp AG.
• 2022: Development of a network segmentation concept for the Federal Employment Agency.
• 2021: Development of a new load balancer architecture for Bundeswehr Fuhrparkservices GmbH.
• 2021: Vulnerability scan and penetration test of a web frontend, including analysis and recommendations for remediation based on risk and likelihood of occurrence for customer ifi GmbH.
• 2021: Consulting, solution design and sub-project management for the introduction of a Network Access Control solution (certificate authentication and MAC address bypass) and macro-segmentation (area and zone concept based on dynamic endpoint assignment) for office and production IT for customer Vaillant Group GmbH.
• 2021: Upgrade and optimization of the LAN and WLAN infrastructure for customer United Nations Volunteers.
• 2021: Development of a target concept for modernizing the IT security infrastructure, including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet access, admin and management networks, and wireless LAN, including support for implementation for the Federal Institute for Geosciences and Natural Resources.
• 2021: Development of a micro-segmentation concept based on Cisco DNA and SGT and Zero Trust for Union Investment IT-Services GmbH.
• 2021: Review and update of ISMS Level 3 policies and development of procedures for customer Software AG.
• 2021: Project management for the global Tec-Refresh project Meraki WLAN 2.0, coordination of the outsourcing of the LAN/WLAN infrastructure to a managed service provider, and development of a WLAN concept for automated guided vehicles for customer Heraeus Infosystems GmbH.
• 2021: Project management and technical support for a customer's “Transition of SIEM/SOC Services” project to a shared environment, and taking on the interim role of Head of Security Operations at customer Datagroup SE.
• 2021: Workshop on a future Mobile Device Management implementation for customer Allgeier Experts Go GmbH.
• 2021: Sub-project management for the introduction of a firewall rule management tool and recertification of NAC endpoints based on 802.1x and MAB for customer Union Investment IT-Services GmbH.
• 2020: Development of a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
• Assessment and analysis of the current network architecture, including project initiation.
• Development of a concept for micro-segmentation in the data center and access network.
• 2020: Infrastructure and security architecture audit for customer Stuttgarter Versicherung AG.
• Analysis of the IT infrastructure and IT security architecture in terms of the configuration of network and security components. Additional review of contracts, process descriptions and manuals for completeness. Recommendations to improve infrastructure stability and operations. Development of a network segmentation concept and project management for implementing the measures identified in the analysis project.
• 2020: Consulting on setting up an ISMS-Light for customer Josera foodforplanet GmbH & Co. KG.
• 2020: Security architecture consulting for customer Datagroup SE.
• Development of a future IT infrastructure and IT security architecture.
• Assessment of the current IT architecture across all 23 companies.
• Recommendations for optimizing the IT infrastructure and a comparison of the traditional perimeter security concept with the Zero Trust model.
• Development of a security zone concept.
• Development of an IT infrastructure architecture in coordination with all companies.
• 2018 - 2019: Stream Lead in the cybersecurity program of Deutsche Lufthansa AG.
• Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project leads and experts.
• Project area: Network Segmentation and Access-Control.
• Project area: Security Architecture.
• Project area: Privileged, Identity & Access Management.
• Project area: Simplify User Authentication (MFA).
• Project area: Mobile & Endpoint Security.
• Project area: OT-Security.
• Project area: E-enabled Aircraft.
• 2018: Security architecture consulting for customer Deutsche Lufthansa AG.
• Project management for the development, evaluation and management of the company-wide information security architecture.
• Development of a security strategy and roadmap to align the security architecture with the Zero Trust model.
• Evaluation of security solutions, services and tools available on the market.
• Definition of requirements for RfPs and evaluation of bids.
• Development, maintenance and monitoring of security architecture artifacts.
• Conducting security assessments of existing and new IT systems and security services.
• 2018: ISMS consulting for customer GLS IT Services GmbH.
• Consulting on the introduction and initial operation of an ISMS based on ISO27001.
• Auditing the IT environments of GLS subsidiaries.
• Analysis and assessment of IT security risks and identification of required measures.
• Development of proposed solutions in coordination with relevant stakeholders.
• Project management and handover of the ISMS for ongoing operations.
• 2016 - 2018: Security Pre-Sales Consultant for customer Cisco Systems GmbH.
• Strategic and solution consulting for major enterprise customers and financial and insurance customers across Germany on Cisco and Meraki security products and services, such as Firepower, WSA, ESA, Stealthwatch and ISE.
• 2017 - 2018: Design and setup of an ISMS for customer Verivox GmbH.
• Conducting various BIAs and GAP analyses.
• Development of security policies based on ISO 2700x.
• Took on the interim role of Information Security Officer.
• 2017: Development of an emergency plan for VPV Lebensversicherungs-AG.
• Review and update of the IT emergency handbook.
• 2016: Consulting and project management for the design of cloud and hosting services for customer Vodafone Group Services GmbH.
• Analysis and optimization of the sell-build-run process.
• Development of detailed-level designs for cloud products.

• Upgrade of Windows Server 2003 to 2008.
• New employee performance review system.
• Project management for project leads 1 – 4.
• Creating visual materials and presentations.

• Avaya Advanced 1st and 3rd-level support.
• Experience with Enterasys PEN, IDS, IDS-Advanced.
• Experience with Kobil SmartKey, SmartToken, SecOvid and mIDentity.
• Varysys Packetalarm administrator.
• Experience with Enterasys routing, VPN, UPN and IDS.

Network Planning and Design Specialist

• Airport management.
• Cisco router configurations based on IOS.
• Conflict management, moderating and presenting.

Network Installation Service Specialist

• Installation and operation of network components
• Troubleshooting
• Passive and active networks