Rudolf E.-Datacenter Engineer, Network & Security Administrator
Check rate
Experience
Datacenter Engineer, Network & Security Administrator
International Insurance Group
Operation and further development of the network and security infrastructure.
Monitoring, analysis and resolution of network and security incidents.
Cross-departmental collaboration with other teams on operations and further development, and reporting.
Firewall vulnerability analysis.
Firewall access requests.
Troubleshooting IP communication issues on network and firewall infrastructure.
Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.
Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5
Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI
F5 Migration Project Sub-Project Lead/Consultant / Cybersecurity Consultant
Healthcare, content and data center provider for health insurance companies
Analysis of the current state of 500 virtual servers, followed by development of several migration scenarios to a new F5 load balancer infrastructure.
Sizing calculations, capacity utilization analysis. Reporting as sub-project lead.
Adjustment of WAF policies (Web Application Firewall).
Vulnerability analysis.
Firewall access requests.
Troubleshooting IP communication issues on Palo Alto FW.
Products: F5 LTM VPR-B2250, F5 5200v, F5 R12600, Journeys-Tool, BIG‑IP Application Security Manager (ASM), F5 Release V14 & V17, Palo Alto Networks Firewalls
Network and Security Administrator (Firewall Rules / VPN Access)
Stadtwerke NRW
- Technical support and third-level support for LAN networks / firewall security / VPN access.
- Administration of VPN access.
- Setup, review and verification of existing firewall rules.
- Coordination of LAN & Security service providers.
Security Architect / Firewall Auditor
Deutscher Glasfaser
Internal firewall auditor.
Overall review and assessment of firewall rules with the goal of raising the IT/ISP security level.
Recording all audit findings/events and making improvement suggestions with specialist teams.
Re-certification of existing FW rulesets, establishing re-certification and requirements processes in FW administration/change requests.
Reporting on ISSUES and “Findings” related to FW rules during the audit.
Identifying solutions to prevent security threats.
Products: Fortinet Firewalls, Forti Manager, Forti Analyzer, Sophos Firewall, Palo Alto Networks Firewall, Shorewall Firewall
Sub-Project Lead / Security Consultant - Worldwide Firewall Rollout
Bayer/Arlanxeo
- Providing a timely and technically suitable replacement solution for the Plant & Office Firewall Solution and rolling it out to all ARLANXEO locations (based on Fortigate).
- Provider coordination.
- Technical Decision Papers.
- Roll-Out Plan.
- Review and adjustment of 150 existing FW configurations.
- Re-certification of existing firewall rules.
- Creation of a master security policy for all FWs.
- Project reporting.
Network/Security Consultant – Subproject Lead (VPN Access – LMS)
Bayer/Currenta
- Provided a timely and technically suitable replacement solution for: SiZe - UMTS-VPM LMS Access, SiZe - Remote Access Points for LMS.
- Pilot project “Specific VPN Access”; solution design with technical service provider TCS.
- Provider coordination / service management for ITK/NetSit and TCS service providers.
- Aruba Wireless Access Points.
- Network expansions.
- LAN & WAN connections to campus and datacenter.
- Created and reviewed FW/VPN security policies.
- Created an IT process with Signavio.
Network Architect
Stadtwerke Duisburg NRW
Provided technical support for the Europe-wide tender “City Netz” MPLS network 100 Gbit as One Network.
Removed the SDN layer and combined all networks into “One Network” based on MPLS.
Created network plans / planned fiber-optic routes (Path-Diversity) / verified technical tender specifications.
Reviewed bills of materials and evaluated vendor proposals.
Advised on the use of MPLS and Metro-Lan technologies.
Participated in vendor workshops and tested equipment for potential use in the project.
Created and pilot-tested a QoS concept for rollout in the WAN network.
Created an L2 Virtual Etherlink template for future MPLS L2 services with QoS.
Set up an L2 QoS pilot link in the city of Duisburg between two hospitals.
Planned the use of GPON (Huawei) to provide internet access in the “Neubaugebiet” district of Duisburg.
Technical assessment / feasibility analysis.
Capacity planning (Data-MUX) per residential block, etc.
Workshop with Huawei – clarified technical implementation and security questions.
Products: Huawei Router, GPON-Router, Cisco Router, Cisco ACI.
Technologies: MPLS, LDP, BGP, Metro-LAN, Cisco ACI, VPWS, VRF, QoS, GPON, Provider-WAN Solutions, MPLS-L2-VLAN.
Security Consultant
Metro Hauptverwaltung
Analyzed and approved security policy rules for the Metro Group worldwide.
Independently prepared and activated new security policies or assigned the work to the external security team; changes followed the ITIL standard.
Products: Algosec Analyzer, Check Point 61000 Appliance, Check Point Smart Domain Manager R80, Check Point SmartLog R.80.
Technologies: Security Access Control / VPN Remote Access, Web Security Application Gateway / SSL Application Security Gateway from Checkpoint.
Datacenter Engineer
AXA Versicherung
Migrated several hundred VPN connections from Checkpoint to Cisco ASA 5555.
Analyzed the current state and defined updated security standards for VPN.
Planned and carried out migrations with external partners.
Products: Algosec Analyzer, Check Point 61000 Appliance, Check Point Smart Domain Manager R77-20, Check Point SmartDashboard R77-20, Check Point Virtual System Firewall VSX R76, Check Point SmartLog, Cisco ASA 5555 V9.4, F5 BIG-IP V12.1.2, Cisco Nexus 7000/5000, Netscout nGenius.
Technologies: SDN / Cisco EPIC, Cisco ACI VPN IKv2.
IP Network Planner
Thyssenkrupp
WAN MPLS migration – 300 locations worldwide.
Collected, consolidated and evaluated operational and planning data, as well as existing documentation.
Analyzed device configurations (switches, routers) and compared them with the existing documentation.
Reverse-engineered undocumented physical and logical connections.
Identified logical dependencies and potential obstacles to the migration.
Planned and carried out the migration (created configuration specifications, communication matrix and routing tables).
Verified, adjusted and re-certified firewall rules for each TK location.
Coordinated and monitored implementation steps between operations departments and the MPLS provider.
Proposed and created specifications for the UNAT tool (User-Acceptance-Tool), which was successfully used for automated testing.
Technologies: TCP/IP, Firewalling, Routing, UNAT, ITIL Changes.
Third Level Support / Network Designer
Evonik
Third Level Support / Network Design Services / Network Design Verification.
Network Designer: New secure worldwide OOB-Access Solution (All IP).
Design support for international Multiprovider MPLS Network.
Replacement of old Cisco switching network for European and ASEAN locations with Cisco 3650 switches; zero failure, zero downtime approach.
Products: Cisco ASR Router, Cisco 3650, FWSM, IDSM, CSE.
Technologies: Mutual OSPF redistribution, BGPv4, BGPv4 Routefilter, BGPv4 Communities, Largescale MPLS Inter_VRF-Routing, Advanced-Routing, IOS-XE, IOS-XR, IPv6 Introduction & Migration, IPv6 Tunnel, IPv6 Peering.
Project Engineer
HP
Migration of extensive FW rules to new Checkpoint FW systems.
Vulnerability scanning with freeware and commercial products.
Penetration testing using BSI procedures.
Products: Cisco ASA, Checkpoint HP-D2, HP-D8, VMware, Checkpoint R70-Cluster, Checkpoint VSX, Multi-Domain Manager, HP ProCurve Switches.
Technologies: Security, FW, VPN, Access, Virtualization.
Security Testing: Nmap, Nessus, Wireshark, HPing, John the Ripper, Egressor, BSI OSS Security Suite, BackTrack, Metasploit.
WAN Site Planner
Bayer
WAN migration/outsourcing to Verizon VzB.
Migration of more than 300 sites and 600 WAN connections to a new worldwide MPLS network.
Network Mgmt: Eramon.
Project Engineer
Deutsche-Bank / Postbank-Bank Zentrale
Expansion and update of the existing SIEM solution (ArcSight).
Measures for SOX compliance certification in the area of security logging.
Products: ArcSight Logger, ESM, Smartconnector, Oracle Database 11g.
Technologies: SIEM, CEF, RBAC, Syslog, Databases, Oracle(RAC), LDAP.
Network Automation
Bayer
Developed an EXPECT TCL script to automatically monitor OOB Management Access for 200 sites (~1000 ports).
Using the script saves 4MT per test case, with a 2-month ROI for the solution.
Products: Cisco product range of switches & routers, DSL/Analog dial-up modems.
Technologies: TCL/EXPECT.
Security & Network Architecture
Daimler/Fujitsu
Design for 4 global datacenters.
Datacenter infrastructure for 200.000 users (Applications: MS-Exchange, Sharepoint, Lync).
Products: Cisco product range of switches & routers, Cisco ASA + IPS, Nexus 5000.
Network Mgmt: CA Spectrum, ManageNow.
Datacenter Relocation, Planning & Network Migration
ERGO
Planning and migration of ERGO datacenter networks to the new Düsseldorf data center.
Products: Cisco product range of switches & routers, 6500 VSS, Cisco 3750X Cluster.
Network Mgmt: Command.
Technologies: MPLS, VRF, LDP, EIGRP, BGP, Etherchannel, HSRP, Spanning Tree (802.1w), LACP, QoS, VoIP.
Subproject Lead: “Project Gematik” / Implementation Engineer / Test Engineer / 3rd-Level Support
T-Systems
Introduction of the health card in Germany: setup and testing of the L2TP/IPsec VPN Remote Access solution with PKI/Smartcard authentication.
High-availability configuration of VPN and access network, security configuration of the security zone.
Took over subproject leadership for “Secure Access Network”.
Operation & Support (3rd-level) for shared datacenter infrastructure: implementing changes, resolving incidents (Routing/Switching).
Delivered a VPN/Security training.
Proof of Concept: datacenter relocation for a regional bank - reviewed the network design and verified failover capabilities.
Products: Cisco product range of switches & routers, Cisco FWSM, Cisco CSS, F5 Loadbalancer.
Network Mgmt: Cacti, Nagios, MRTG, Peregrine ServiceCenter.
Technologies: MPLS, VRF, EIGRP, BGP, Etherchannel, Tunnel-Interfaces, L2TP, HSRP, Spanning Tree, QoS, IPsec-HA, PKI, Certificates, FW-Contexts.
Security Architect / Implementation Engineer / 3rd-Level Support
AXA Colonia
Designed and tested a Network Admission Control solution for 5000 remote users (Checkpoint Integrity / Cisco).
Designed and tested an Identity Access Management solution for remote users based on Smartcard authentication (PKI/certificates) with dynamic access rules.
Security Process Management: created security documentation for Second-Level and Helpdesk.
Security Compliance Management.
Products: Cisco ASA 5544, Checkpoint NGX R65, Checkpoint Integrity Server, Microsoft PKI/CA, ActivIdentity Smartcards, Cisco ACS, Microsoft IAS, Microsoft IIS.
Network Designer / Testlab Engineer
KDDI
Network redesign to introduce QoS on an MPLS-based network (Cisco).
Expansion of the POP (Point of Presence) in Düsseldorf.
Connected an additional internet uplink for redundancy and load sharing via BGPv4.
Products: Cisco 7600, Catalyst 6500.
Network Mgmt: HP Openview.
Design/Implementation Engineer
Santander Bank
High-performance central firewall system based on Checkpoint/Nokia (VPN-1 NGX) and Cisco Catalyst 6500.
Developed a migration strategy to maintain 99,999% availability during the switch.
Created security rules taking VoIP and CTI applications into account.
Maximum throughput of the security solution: 10 Gbit.
Products: Checkpoint/Nokia (IPxxx, VPN-1 NGX), Cisco Catalyst 6500.
Support and Design/Implementation Engineer
Vodafone
Support and Design/Implementation Engineer for “ONE Network”, Vodafone’s international MPLS-VPN network.
Set up VPN-IPsec remote access connections.
Cisco management automation using the “EXPECT” language.
Designed a VoIP toll bypass between international sites by connecting the PBXs over MPLS (ROI < 6 months).
Products: Cisco ONS, GSR 12000, Cisco 7600, Catalyst 6500.
Implementation and Integration Engineer
Local Service Provider
Installed and integrated a new multiservice data and voice backbone based on MPLS.
Used traffic engineering for load balancing and availability.
VPN services over MPLS-VPN and multiprotocol BGP.
Products: Cisco Catalyst 6500, Cisco 3800, Cisco 2800/800.
Security Consultant
Mid-sized pharmaceutical company
- Developed a security policy.
- Conducted internal security audits, penetration testing, and social engineering.
- Guided the company toward BSI Grundschutz compliance and prepared the network for certification according to BSI/ISO 17799 / ISO27001.
Security Integration Engineer
Clinic in Cologne
- Integrated a UTM (Universal Threat Management) solution to centrally scan network data for viruses, worms, and email spam.
Security Concept Specialist
Mobilprovider
- Creation of a concept to secure billing (user cost calculation) and improve the accuracy and availability of the billing process.
Security Specialist
Papierfabrik
- Setup of a highly available, network-based virus scanner and intrusion prevention system for an international company in the paper processing industry.
Technical Engineer / Sales Engineer
Fortinet
Consulting and technical support for ASIC-accelerated UTM (Universal Threat Management) systems.
Product improvements in collaboration with product management and engineering.
Products: FortiGate, FortiManager, FortiLog.
Security Consultant
Mobile-Provider
- Creation of a concept for secure data exchange over the GRX (GPRS Roaming Exchange Network) of mobile network operators.
- GTP inspection, intrusion detection, and data encryption.
Security Project Engineer
Mobile-Provider
- High-performance centralized firewall project to protect the Gi interface between the provider's wireless network (UMTS/GPRS) and the internet.
Security Architect
Mobile Network Operator
- Created a concept and POC (Proof of Concept) for a large-scale universal IPsec-VPN to connect partner companies’ extranets.
Consulting Engineer (Mobile Solution Team)
Cisco Systems
- Provided security consulting in EMEA for leading mobile network operators such as Vodafone, O2, Orange and T-Mobile.
- Designed new security solutions specifically for mobile network operators (GTP Inspection, URL-Filtering, Secure CMX).
- Provided pre- and post-sales support for account teams.
- Trained the AM and SE community in security.
- Troubleshot and supported projects for large security projects.
Infrastructure & Security Administrator
International Import/Export Agency
- Set up new switch infrastructure and secured network segments and internet access using a central firewall.
- Administered Windows 2000 servers and desktop PCs.
- Developed and implemented a security concept for desktop PCs.
MySAP Contentnetworking & Security Project
RAG-Informatik
- MySAP Contentnetworking & Security project based on a highly available Cisco CSS11500 cluster.
- Tested the components involved, created a POC, developed a highly secure operating concept and implemented it.
Security Consultant
Service Provider
Secure management in the central management network for a web server hosting farm.
Products: Cisco Catalyst 6500, IOS Security Features.
Internetworking Consultant
Cisco Systems
Network and security consulting in Europe for leading service providers and mobile operators.
Security Architect: Supporting service providers in building secure security solutions based on Cisco products.
Knowledge transfer to the Cisco Sales Force as a member of the “Virtual Security Team”.
Technologies: LAN switching, routing, MPLS, xDSL, security management.
Firewall Cluster Consultant
Bank in Poland
Securing authentication servers with a highly available firewall cluster.
Products: Checkpoint, Nokia.
BGP Routing Consultant
Service Provider in Poland
- POC (Proof of Concept) and setup of BGP4 routing in the service provider backbone between Cisco routers and Nokia firewall routers.
Senior Network Consultant / Senior Technical Consultant
Nokia Internet Solutions Group
Security consultant for ISPs, channel partners, and enterprise customers in Europe.
Technical trainer for security and routing training (BGP4).
Planning highly available firewall clusters to protect ISP server farms.
Products: IP440 Firewall (IP330/650).
Network Engineer
ACI (Anixter)
WAN/LAN traffic analysis, planning, installation, and troubleshooting.
New network infrastructure for Renault-Germany in Bonn based on Bay Networks.
New network infrastructure for Continental Reifen AG in Frankfurt based on Bay Networks and IBM.
Design and integration of a new backbone for Karmann Automobile based on ATM and Tokenring.
Products: IBM MSS 8210, 8260, 8274, 8271/72, Bay Networks.
Network Administrator / LAN/WAN Administrator
Keiper-Recaro
- Implementation of a new LAN/WAN infrastructure for more than 3000 employees worldwide.
- Support and administration of the WAN network.
Service Engineer / Substitute Technical Manager
Equant / ITS
Setup and commissioning of a data communications hosting data center in Düsseldorf.
Setup and maintenance of a service provider POP in Düsseldorf for approximately 200 international company locations.
Planning and installation of the IT infrastructure for United Airlines at Düsseldorf Airport.
Technologies: Frame-Relay, X.25, X.28, HDLC, SDLC, TCP/IP.
Service Engineer
Fiedler Datentechnik
- Installation and repair of computer equipment from IBM, Compaq, Toshiba and others.
Computer Consultant
Schmitt-Computersysteme
- Computer consulting.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Telecommunication, Manufacturing, Chemical, Insurance, and Healthcare.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Operations, Project Management, Customer Service, Audit, and Product Development.
Summary
20 years of experience in IT working for top customers with a focus on networking & security.
Proven ability to deliver high-class consulting as a permanent employee for top vendors like CISCO, FORTINET and NOKIA/CHECKPOINT at CCIE level.
Known for the ability to establish effective customer relationships and meet customer, reseller and vendor goals.
Expert in Networking and Security in one person for design, implementation and support
IDC Security conference Speaker
Skills
Security Compliance
- Iso 17799
- Bsi Grundschutz
- Basel Ii
- Sox
Vulnerability Scanning / Penetration Testing
- Vulnerability Scanning With Freeware, Commercial Tools And Custom-Built (Purpose-Built) Script Tools
- Penetration Testing According To Bsi Procedures
- Security Testing With: Nmap, Nessus, Wireshark, Hping, John The Ripper, Egressor, Bsi Oss Security Suite, Backtrack, Metasploit
- Source Code Analysis
- Development Of Attack Methods
Application Security
- Analysis, Activation And Review Of The Manufacturer'S Security And Data Protection Requirements For Effectiveness At The Application And Data Levels (In This Order: Network Security / Os Security / Application Security)
- Areas Reviewed: Rbac, Authentication, Encryption, Accesscontrol, Dos Stability
Mobile-Wireless
- Technologies: Gsm, Gprs, 3g, Umts, Gtp, Smsc, Ran, Billing Charging-Mediation, Lawfull Interception
- Products: Cisco Cmx, Itp
- Openwave: Basic Products Knowledge
Other Areas Of Knowledge
- Project Management: Ms-Project, It Project Sub-Project Lead
- Operating Systems: Sun Solaris V.8, Windows 2000/2003 Server, Xp
- Linux Distributions: Debian, Gentoo, Redhat
- Open Source Security Software: Iptables, Ethereal, Nmap, Snort, Nessus, Openvpn, Metasploit, Clamav, Spamassassin
- Programming: C, C++, Perl, Visualbasic, Java, Wmi-Scripting
- Shell-Scripting: Bash/Csh
- Assembler Intel, Motorola 68k
- Database: Sql, Mysql, Ms Sql, Dbase, Clipper
- Www: Webserver: Apache, Iis
- Software: Excel, Power Point, Visio, Word, Access, Ms-Project, Corel-Draw, Adobe Photoshop, Blender-3d, Mindmanager
Languages
Education
Telekolleg II
University of Applied Sciences entrance qualification through evening school · University of Applied Sciences entrance qualification · Germany
Staedt. Gemeinschaftsgrundschule an der Helmholzstraße
Germany
Heinrich-Hertz-Kollegschule
Intermediate school leaving certificate · Electrical Engineering · Germany
Certifications & licenses
ISC^2
Checkpoint Certified Security Administrator-CCSA
CHECKPOINT
Checkpoint Certified Security Engineer-CCSE
CHECKPOINT
Cisco Certified Internetworking Professional Security-CCIP-SECURITY
CISCO SYSTEMS
CISCO SYSTEMS
Cisco Certified Security Professional-CCSP
CISCO SYSTEMS
IBM Certified Solution Engineer Level II
IBM
LPI Linux Professional Level I
Linux Professional Institute
Microsoft
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Rudolf is based in Ratingen, Germany and can operate in on-site, hybrid, and remote work models.
Rudolf speaks the following languages: German (Native), English (Intermediate).
Rudolf has at least 39 years of experience. During this time, Rudolf has worked in at least 40 different roles and for 41 different companies. The average length of individual experience is 1 year and 11 months. Note that Rudolf may not have shared all experience and actually has more experience.
Based on recent experience, Rudolf would be well-suited for roles such as: Datacenter Engineer, Network & Security Administrator, F5 Migration Project Sub-Project Lead/Consultant / Cybersecurity Consultant, Network and Security Administrator (Firewall Rules / VPN Access).
Rudolf's most recent position is Datacenter Engineer, Network & Security Administrator at International Insurance Group.
In recent years, Rudolf has worked for International Insurance Group, Healthcare, content and data center provider for health insurance companies, Stadtwerke NRW, Deutscher Glasfaser, and Bayer/Arlanxeo.
Rudolf is most experienced in industries like Information Technology, Telecommunication, and Manufacturing. Rudolf also has some experience in Chemical, Insurance, and Healthcare.
Rudolf is most experienced in business areas like Information Technology, Operations, and Project Management. Rudolf also has some experience in Customer Service, Audit, and Product Development.
Rudolf has recently worked in industries like Insurance, Chemical, and Manufacturing.
Rudolf has recently worked in business areas like Information Technology, Project Management, and Audit.
Rudolf attended Telekolleg II for University of Applied Sciences entrance qualification.
Rudolf has 10 certificates. Among them, these include: CISSP #115361, Checkpoint Certified Security Administrator-CCSA, and Checkpoint Certified Security Engineer-CCSE.
Rudolf is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 5 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Christian D.
Mustafa K.
Jin-Ho Y.
Bernhard B.
Stephan S.
Andreas A.
Thomas H.
Eddy A.
Pierre G.
Frank J.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Datacenter Engineer, Network & Security Administrator
Christian E.
Minh Duc F.
Federico L.
Pascal F.
Sami B.
Nikolaus B.
Daniel J.
Axel D.
Miguel S.
Sascha P.
Nearby freelancers
Professionals working in or nearby Ratingen, Germany
Felix B.
Matthias B.
Axel F.
Markus M.
Alwin F.
Lutz E.
Dirk V.
Humayun S.
Amit S.
Borja C.
