Stefan Gröne - Senior Technical Architect / Sub-project Manager

• Sub-project management

• Designing the technical architecture and implementation

• MS Active Directory

• MS Azure Entra ID

• Omada Identity Suite

Strategic realignment of the hybrid identity architecture of a regulated bank. Consolidation and security-focused standardization of multiple Active Directory environments and building a bank-wide Microsoft Entra ID structure. Migration of users and groups into a hybrid identity architecture and integration of Entra ID into existing governance and access processes (Omada). Implementation of regulatory requirements and establishment of audit-ready lifecycle processes to reduce structural security risks.

• Project lead for migration of MS Windows and MS SQL Server to current versions

• MS Active Directory

• Omada Identity Suite

Development and documentation of a security-focused detailed concept for the strategic realignment of the on-prem Active Directory architecture of a regulated bank. Definition of the target architecture with consideration of tiering models, governance requirements, hybrid identity preparation, and integration into existing IGA processes. The goal was to create a standardized, auditable, and cloud-ready AD structure as a basis for the subsequent transformation.

• Creating a concept for optimization and automation of Active Directory

• MS Active Directory

• MS PowerShell

• Omada Identity

Architecture and implementation of a security-focused realignment of Active Directory to meet regulatory requirements and reduce administrative complexity. Restructuring the OU and GPO architecture and analyzing and cleaning up about 18,000 permission groups to reduce permission sprawl and improve auditability. Development and implementation of an automated interface to the identity governance system (Omada) to fully map the user lifecycle and enable audit-ready control of permissions. Result: significant increase in transparency, governance capability, and security in the identity environment while reducing manual administration efforts.

• Develop overall concept for redesigning Active Directory and the filesystem

• MS Active Directory

• Omada Identity

• MS DFS

• NetApp vServer

Architected and implemented the technical integration of Active Directory and the filesystem into a bank-wide identity governance system (Omada). Redesigned the AD and filesystem structure to support role-based permission models and to prepare for audit-proof, centrally managed permission assignment. Created the overall concept and implemented the required interfaces. Result: established a governance-compliant, centrally managed permission architecture as a basis for regulatory compliance and future hybrid identity transformation.

• Analyze existing infrastructure and application systems

• Support the migration

• MS Active Directory

• MS Windows Server 2003, 2008R2, 2012R2

• VMWare ESX

Harmonized IT infrastructure as part of ThyssenKrupp Elevator GmbH's global unITe project. Described system and application dependencies and developed transition strategies for the Future Model Operations.

• Project control

• Planning and conducting workshops to document and optimize processes

• Modeling processes

• Integrating processes into a workflow tool

• MS Windows Server 2008R2

• MS IIS

• MS SQL Server

• Cabacos CMS

• EPK

Analysis, optimization and modeling of processes in the technical service of the commercial vehicle plant. Implementation and rollout in a workflow tool.

• Leading employees
• Project planning, leadership, management and controlling
• Process analysis and optimization in the context of software changes and implementations
• Participating in organizational adjustments
• IT procurement
• Server administration
• Managing user support (1st/2nd/3rd level)
• Advising management and staff on IT issues
• Developing IT training programs
• Introducing a training system
• Drafting works agreements
• Contractual matters