Kai-Uwe Petzhold-Technical Project Management

• CHG Meridian AG is a financial company focused on leasing in the areas of IT technology, logistics and medical technology and is regulated by BaFin. One part of the company is Return to Remarketing, where devices delivered to the technology center (notebooks, smartphones, tablets, etc.) are prepared for resale. The project I supported was responsible for enabling damage assessment of returned lease devices, documenting them visually in the form of pictures, enabling invoicing for the customer, and making the pictures available via the in-house customer platform. This was achieved through a combination of in-house development within the internal development department and the use of SaaS products. The second project was the transition of SaaS tendering software, purchased by the business unit, into the operations of the CHG IT department. Evaluation of security questions in relation to BaFin requirements, development of an authorization concept, implementation of single sign-on, documentation of the application in the CHG systems (CMDB, iKnow, etc.) and handover into operations.

Used technologies and methods: NIS2, DORA, agile software development, Scrum, Kanban, ServiceNow, SaaS, MS Teams, MS SharePoint, Active Directory, Entra ID, CMDB, incident management, change management, request management, service level agreement

• Technical project management for the carve-in of an acquired manufacturer (130 employees) of battery containers with customers in both the civilian and military sectors. Performed a data classification for the data stored in the MS cloud, taking into account group requirements and the DSGVO (personal data, military data), and later migrated the data according to the classification to online or on-premise. Planning the transfer of the battery container management network (MDEX network) into the group infrastructure. Planning and migration of the MS Teams, OneDrive and SharePoint Online environment into the group infrastructure. Planning and tracking the migration from Doku-Wiki to Atlassian Confluence. Planning and integration of the site into the group network infrastructure. Planning and migration of the site's telephony solution to MS Teams. Creation of the technical project plan. Tracking the different migration workstream tasks via Atlassian Jira (client, user management, server & storage, voice, network, mail, collaboration). Advising the site on future infrastructure and developing migration plans. Planning and coordination of the migration weekend and go-live, including coordination of prior training sessions. Support during the hypercare phase and post-go-live support for the site.

Used technologies and methods: data classification, MDEX, Citrix, VDI, MS Teams, MS OneDrive, MS SharePoint, Confluence, Jira, OpenVPN, Docker, LXC containers, Ansible, InfluxDB, Bachmann Solution Center, Device Manager, DSGVO, CMDB, incident management, change management, request management, service level agreement

• IT service management for the business service of the Nessy project (software for billing on the electricity market). Support during the transition phase into operations and to an offshore service provider. Support in reaching Quality Gate 4. Planning and expansion of Prometheus monitoring. Tracking team tasks and activities via Atlassian Jira. Creation of application documentation based on Confluence. Creation of service reports. Maintenance of the various service documents (security concept, SysDoc, service level agreement, risk assessment). Support of incident, change, problem and request management for the business service.

Used technologies and methods: ITSM, Linux, Red Hat, Kubernetes, AWS, Jira, Confluence, Grafana, Splunk, Docker, InfluxDB, Portainer, Ansible, monitoring, BaseIT, NexusIQ, Teckel, Azure DevOps, Prometheus, microservice, Docker, containerd, CMDB, Influxd, incident management, change management, request management, service level agreement

• Project manager for various subprojects as part of a company-wide security initiative My work as a security project manager included coordinating 4 subprojects as part of the overall initiative. 1.) Rollout and migration of disk encryption Project management for the rollout of MCAfee Drive Encryption on the 6,300 notebooks used in EMEA across the company Project management for the migration of 700 notebooks encrypted with Sophos Safeguard to the new company standard MCAfee Drive Encryption 2.) Virtual desktop environment for external employees Setup and rollout of an Azure-based virtual desktop environment for about 1,000 external employees with the goal of securing access to Olympus resources 3.) Vulnerability management Project management for carrying out a vulnerability scan across the external interfaces of the Olympus infrastructure and leading the remediation of the findings 4.) Cleanup of service accounts and password renewal Project management for analyzing the service accounts used in the company, cleaning them up, and renewing passwords The projects were international, and the project language was English.

Technologies and methods used: MCAfee Drive Encryption, MCAfee ePolicy Orchestrator, Sophos Safeguard, Azure VDI, vulnerability management, issue management, process optimization, Rapid7 InsightVM, Windows, Linux, Service Now, CMDB

• Project manager for the infrastructure area for the introduction of a new insurance platform based on the Guidewire Suite (PolicyCenter, BillingCenter, ClaimCenter and ContactManager). The Guidewire Suite at Zurich is a new cloud-based platform for underwriting, policy administration, claims management, commission management, and incoming/outgoing payments as an integrated solution for all business areas, and it is intended to replace all policy and claims systems (mainframe) from life, health, motor, liability, and other areas, as well as some incoming/outgoing payments systems. My work as an infrastructure project manager included, in addition to leading the team and prioritizing all tasks and work packages, developing new concepts for automated interfaces (e.g. BiPro), resource planning, and leading the setup of the new cloud-implemented environments (IaaS in the test environment, PaaS in the production environment), including support for test management in error analysis and remediation, and presenting the various status updates in management slides at the weekly status meetings. In addition, I was responsible for managing several providers both for setup/commissioning and for operating the platforms, including the assessment and improvement of security measures (e.g. authorization concept, process analysis, periodic checks of firewall openings, patch management, certificates). The project team has more than 800 employees. The project language is English (collaboration in an international team)

Technologies and methods used: Guidewire Suite (insurance solution for policy / commission / claims / customer management - [link] Linux (RedHat), Windows Server 2012R2, Tomcat 7, WebSphere 8.5, JBoss 10, Nagios monitoring, Ansible, MS SQL Server 2012 Enterprise Edition, SVN, Bitbucket, Jenkins, Maven, Confluence, Jira, Service Now, CMDB, Sharepoint, Keycloak, Axway API-Manager, vulnerability management, patch management, MQSeries (interface between the Guidewire instances and GW/OutputMgmt), BiPro, ASF and GMC (solutions for print/PDF), BigIP/F5, Nevis Proxy, Samba, NFS, Bee4IT

• Wincor Nixdorf AG (from 2016 Diebold Nixdorf AG), headquartered in Paderborn, is a global provider of IT solutions and services for retail banks and trading companies. My main tasks at Wincor Nixdorf AG included leading two migration projects. The first project was the migration of about 450 MS Windows 2003 servers still in worldwide use beyond the end of the manufacturer's support to a current operating system. This involved going through a complete project cycle, from creating the project charter to stakeholder analysis, an environment analysis, and the project plan including the related work packages and later monitoring of them. In addition, I supported the specialist departments in demand management, the development of their new architecture, including the assessment of necessary security measures, the management of external providers, and the coordination of the approval process with Global Information Security. The second major project assigned to me at Wincor Nixdorf AG was the project management for replacing the around 16,000 public folders used worldwide and based on Microsoft Exchange. Like in the first project, I also supported the specialist departments in this project alongside the actual project management in demand management, the analysis of alternatives, coordination with Information Security, and monitoring of the migration activities. Other tasks assigned in parallel to my main responsibilities were: - - Support in planning and coordinating the Office 2016 rollout for all global locations. - - Support in creating a new service catalog and aligning the SLA with the provider - - Support in project management for the move of a data center from Austin, Texas to Toronto, Canada - - Main contact person for the Asian locations regarding infrastructure topics and the related requirements management

Technologies and methods used: MS Windows 2k3, 2k8, 2012; SuSE Linux Enterprise Server 11 & 12, Redhat Enterprise Server; Apache, Tomcat, Java, Nessus Security Center, MS Exchange 2007, 2013; MS SharePoint, MS Project, MS Office, MS Visio, Oracle CRM, ITIL; environment analysis, stakeholder analysis, risk analysis, project charter, project plan, work packages

• Planning, implementation, and support of application environments in the web environment of EnBW and Yellostrom. Technical project support in the Apache, IIS, Tomcat, JBoss, MySQL environment, including master/slave replication, Subversion on Linux systems, SUN Solaris, and Windows cluster systems Technical project support for carrying out hardening measures on various server systems Support of the patch management process, planning of patches, implementation, and tracking of patch measures Planning and commissioning of a Windows cluster for a map service server, including setting up a virtual test environment (VMWare Server/ESX) Planning, commissioning, and release management of a cluster system for managing key boxes distributed across the company locations, including setting up a virtual test environment (VMWare Server/ESX) Planning, commissioning, and release management of an e-learning platform; coordination with the individual companies and multi-stage company-wide rollout Coordination and control of changes, incidents, releases, and problem management in the EnBW and Yello environment according to company guidelines and ITIL. Creating a concept/process for introducing patch management, supporting implementation, and handling issues Planning, commissioning, and documentation of a monitoring solution with Nagios V3.0 including NDOUtil and NagVIS Planning, commissioning, and documentation of a syslog cluster system split into DMZ/intranet based on Heartbeat/DRBD/syslog-ng, including development of scripts for synchronization and signing of the corresponding log files

Technologies and methods used: SuSE Linux Enterprise, Apache, Tomcat, jBoss, MySQL, MySQL cluster, Oracle DB, Nagios, Heartbeat, DRBD, syslog-ng, VMWare ESX, Subversion, Barracuda NetContinuum, Eclipse, patch management, problem management, process optimization, change management, release management