IAM Consultant in Germany

• Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
• Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
• Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
• Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
• Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
• Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
• Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
• Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.

As the only large integrated energy company in Germany, EnBW covers the entire value chain - from energy production through distribution to customers. It expands its renewable energy sources, advocates for a socially responsible coal exit, and drives key technologies like green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developed and implemented a holistic process view covering both technical and organizational aspects  Ensured end-to-end control of all IAM-related technical services  Established clear responsibilities and accountabilities within the IAM landscape  Collaborated with different departments to identify and optimize a holistic architecture and act as Single Point of Contact (SPoC) for Information Security  Introduced and monitored governance policies to ensure compliance and security  Continuously improved IAM processes and systems through regular audits and evaluations  Participated in external audits of the process as part of official ISO audits  Further developed the policy for setting administrative requirements and procedures and aligned it with administrative units  Conceptually advanced the KPI system to measure process quality

• Planning and control: Responsible for the timely integration of 50 applications into the company-wide GIAM platform
• Stakeholder workshops: Organizing and moderating workshops with technical and business contacts (application owners, compliance, QA, GIAM core team)
• Technical analysis: Review and analysis of existing role and permission models, mapping to the GIAM structure, selection of the right onboarding track
• Concept adaptation: Further development of the GIAM onboarding framework while taking regulatory requirements and individual application needs into account
• Process integration: Embedding the new IAM processes into existing operations, release, and support processes without service interruption
• Communication and reporting: Ongoing coordination with stakeholders, management of feedback and changes, progress and risk reporting
• Quality assurance: Definition of test strategies, execution of functional and interface tests, documentation of all onboarding steps

• Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
• Leading the “Identity & Directory Management” product (8 people) as Product Owner.
• Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
• Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
• Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.

• Creation of a current-state analysis of the bi-Cube system with the goal of delivering a concept incl. recommendations on how the bi-Cube system can be replaced by IdentityIQ (SailPoint) while ensuring ongoing operations and taking into account the processes and the modification of the IAM workflow by third parties.
• On-site IAM workshop to carry out an IAM system analysis.
• Creation of an implementation concept and recommendations for the transition from bi-Cube to IdentityIQ (SailPoint) while ensuring ongoing operations and taking into account the processes and the modification of the IAM workflow by third parties.
• Evaluation and further development of the role model for the migration, taking activities/functions and SoD rules into account.
• Creation of detailed technical documentation according to UML standards in Confluence (Atlassian).

• Leading the product lifecycle for sovereign AI platform and operating system teams for enterprise & government clients and internal stakeholders (infra, solution delivery, support, revenue)
• Built and scaled the platform from a 200-user beta to a full rollout of 70K+ members at the Bundesagentur für Arbeit (BA), secured with ISO 42001 and EU AI Act compliance
• Architected the shift to a multi-tenant shared inference, increasing GPU cluster utilization from 20% to 85% and reducing infrastructure cost-to-serve by 40% for SaaS clients
• Shipped model quantization, allowing clients to run advanced LLMs on legacy hardware (A100s GPUs) instead of the H100s, saving upwards of 70% cost per enquiry
• Abstracted complex Helm configurations into a dynamic model manager, reducing the time to install or swap models by ~80%
• Killed an expensive move to build own dashboard service, pivoting to an API-first data strategy that clients can consume directly and saving €100Ks in opex and capex
• Built a safety-first agent marketplace and control plane lighthouse project for a Tier-1 bank, allowing internal teams to deploy autonomous agents within strict regulatory guardrails

• Project management
• Building an internal IAM team
• Okta
• Project management
• IAM processes

• Analysis of interface structures (One Identity Manager V9.2)
• Creation of an implementation concept

• Set up and manage IAM authorization projects, including methodology, processes, and reporting standards
• Develop and maintain templates, guidelines, documentation, and audit-proof storage
• Analyze and integrate regulatory requirements (especially DORA)
• Stakeholder management and structuring project and line communication
• Training and enablement of internal staff (training sessions, office hours, coaching, kick-offs)
• Risk-based campaign and resource planning, including reprioritization of project changes
• Technical evaluation, quality assurance, and exception handling of authorization concepts
• Technical coordination with application owners and global teams
• Set up and operation of a central repository, including automation
• Managing project team members using agile methods
• Designing and implementing efficient, lean workflows and automation processes
• Transition of processes, tools, and documentation into operational use

• Analysis of the One Identity Manager installation on enterprise systems
• Database consistency check
• Error analysis of database integrity and consistency
• Data analysis
• Creating recommendations based on the collected data and errors
• Designing an update strategy

• Migration of POS and back-office systems in the IAM environment
• Deployment using Intragen Deployment Manager and partial rollout planning with Test Accelerator
• Implementation and extension of the sync project (data copy) for working copies at branches for special hardware
• Migration and support of the SuccessFactors integration with the IAM system; switch from the old data import to the new SuccessFactors interface