Christian E.-Enterprise Security Architecture · Cloud & Hybrid · Critical Infrastructure

Cyber Trust Austria Silver Certification

• Led application and implementation of the Cyber Trust Austria Silver label (KSV1870 Cyber Risk A-Rating; 25 validated controls)
• Mapped and fulfilled requirements covering risk management, incident response, access control, vulnerability and penetration testing, BCM, and supply-chain security, aligned with ISO/IEC 27001/27002 control themes and NIS 2 / NISG 2026 expectations
• Coordinated stakeholders, compiled audit evidence, and completed KSV1870 validation

Carve Out - Enterprise Security Architecture

• Strategic carve-out coordination, finalization, and governance-ready handover of a full-site security landscape including privileged access management, Defender XDR, Microsoft Sentinel, Entra ID, Active Directory, and Azure
• Cross-functional coordination with internal stakeholders, counterparty teams, and implementation functions
• Target architecture definition and design decisions for key security components with risk-based prioritization in alignment with the requirements of relevant standards and regulations like ISO27001 and GDPR

Security Architecture for Laboratories

• Lead architecture position
• Designing lab security architecture from scratch in alignment with the requirements of relevant standards and regulations like ISO27001 and GDPR
• Application of the Microsoft Tiering model and adaptation of the Purdue model to fit the OT environment across all layers including PLCs, SCADA servers, HMI systems, Operator Workstations, Historians, Engineering Workstations, AD, and Industrial DMZ, comprising Jump servers and other critical components.
• Topics: network architecture, remote access, IAM, secure file exchange, user provisioning, PIM/PAM, Citrix, lab workstations, network detection and response (Vectra AI), and application gateways.

• Enterprise Security Architecture consulting for multinational corporation in a regulated field in alignment with the requirements of relevant standards and regulations like ISO27001 and DSGVO
• Member of the security board
• Security and risk assessment of complex IT security infrastructures on enterprise level including capability transparency, dependencies, and maturity status
• Security solution architecture covering all levels from OT, on-premise server and network infrastructure, cloud infrastructure with strong focus on Azure Cloud, big-data pipelines, endpoint protection, IAM, as well as global monitoring and SIEM
• Architecting of Microsoft tiering concept covering on-premise Active Directory (AD), and Entra ID in a complex multi-forest and multi-tenant environment
• Architecture of privileged access, PIM/PAM and JIT strategy for an environment with hybrid identities
• Application-level security architecture including threat modeling, residual risk assessment, and formal architecture/design reviews
• Security training workshops for developers and IT staff with documented control handover and governance alignment

• Development lead of a secure Big Data Management and Analytics Platform for Autonomous Driving Assistance Systems (ADAS)
• Consolidate business needs and translate them to platform requirements
• Development of the overall system architecture
• Coordination of development teams and external partners
• Leading role in the acquisition of customer projects with larger OEMs
• Within less then two years we were able to develop an end-to-end solution that enables the scalable analytics of automotive time-series data as well as complex object data coming from smart ADAS sensors. The platform can be operated in the cloud or on-premise and is based on state-of-the-art open source technologies including Kubernetes, Hadoop, Spark, Azure Databricks, TensorFlow, Elastic Search and Kafka.
• My second major role was content manager and solution architect of AVL's Data.CONNECT initiative. In this initiative we have established several base technologies for the secure integration of AVL's core products. One major output was a federated identity and access management solution, based on OpenID Connect and OAuth2, which is to be rolled out company-wide for AVL's products. The other focus was on a unified and secure data integration framework based on data virtualization and ETL technologies, supporting attribute-based access control.

• Global technical and strategic project coordinator
• Project focus: Mixed-criticality integration for dependable embedded systems in the automotive, aerospace and railway domain

• Research activities in DECOS - Dependable Embedded Components and Systems (integrated project within the EU FP6)
• Consulting and know-how transfer between the Robert Bosch GmbH and the Vienna University of Technology in the field of fault tolerant systems in the automotive sector
• Definition of the EU ARTEMIS Strategic Research Agenda (SRA), personal assistant of Professor Kopetz for leading the SRA group on Reference Designs and Architectures