IT Consultants in Germany

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

In-house consulting provider and driver of transformation within the group, multi-stakeholder environment and C-level.

Realignment and stabilization of a cross-functional transformation and scaling program within the group. Sharpening the target picture, priorities, and set of measures, as well as building reliable governance, planning, and steering structures. Structuring roles, responsibilities, and strategic initiatives while including AI and IT automation ideas.

• Designed program realignment and project portfolio management

• Developed strategy model and target picture for IT projects

• Structured portfolio, roadmap, and priorities

• Established governance and regular meetings

• Worked out operating model for flagship projects

• Assessed AI and automation ideas

• Clarified roles and responsibilities

• Implemented change measures

• Developed, moderated, and evaluated workshops

• Transformed 17 initiatives into a steering model

• Increased transparency and decision-making ability

• Strengthened commitment in steering

• Sharpened the operating model structurally

• Integrated three top-5 institutes

• Involved over 80% of stakeholders

• Governance

• Portfolio steering (PPM)

• Change management

• Artificial intelligence

• Workflow automation

• AI use case assessment

• Confluence

• Jira

• Stakeholder management

Digitalization of real places with 3D/LiDAR scans to make spatial data usable for AI applications and derive concrete use cases and prototypes from it.

• Digital capture of real places as a basis for faster planning and analysis
• Browser-based access to 3D data for easier use and coordination
• Turning spatial data into concrete use cases, prototypes, and AI training scenarios
• Planning basis for urban development and other digital future applications

Keywords: LiDAR, 3D scan, AI, use cases, AI training, prototyping, Python, web development, data models, architecture

• Team leadership: Prioritization and coordination of four cross-functional teams.
• Platform strategy: Development and implementation of strategies to optimize existing IT platforms.
• Stakeholder management: Active management of expectations and communication with internal and external stakeholders.
• Program and innovation management: Prioritization and coordination of cross-department projects as well as innovation initiatives.
• Product Owner consulting: Advising Product Owners with a focus on product development and continuous product improvement.
• Organizational development: Improving communication and decision-making structures across all organizational levels.
• Change management: Implementing best-practice change management methods to ensure continuous optimization and innovation.
• Quality assurance: Ensuring high quality standards in processes, services, and deliverables.

• Marketing consulting for the business units EDL@Home and Commodity (electricity & gas)
• Development and implementation of the marketing/sales strategy in close coordination with the department head
• Definition and expansion of key channels (web, app, portal, social, paid, sales partners)
• Goal, annual, and budget planning for the EDL@Home business unit
• Leading and running team workshops to define goals & develop campaigns
• Campaign/content planning for different target groups
• Concept and implementation of the regional multi-channel sales campaign incl. A/B testing
• Optimization of the customer experience across all channels
• Technical support/advice for the product teams during iterative implementation
• Building and managing a campaign dashboard to measure success
• Managing external agencies and internal teams
• Regular results presentations and reporting to department leadership
• Active stakeholder management

• Designed and developed a multi-tenant SaaS platform enabling organizations to build their own knowledge bases and chat with brand-customized AI assistants (white-label approach with dynamic branding per organization).
• Implemented a scalable RAG architecture with a GPT-4o tool-use loop, hybrid semantic search, and strict tenant isolation at database and search index level.
• Built persistent, project-like chat sessions including a streaming API (SSE), multilingual support, and speech input/output (STT/TTS).
• Delivered the cloud infrastructure as Infrastructure-as-Code, fully automated per-customer CI/CD pipelines, and an onboarding process for new tenants.

Technologies used: Python, FastAPI, Pydantic (v2 noted), Next.js, React, TypeScript, Tailwind CSS, OpenAI / LLMs (GPT-4o), Azure AI Search, Cosmos DB, Azure Blob Storage, Azure Cognitive Services Speech, Azure App Service, Azure Container Registry, Retrieval-Augmented Generation (RAG), Server-Sent Events (SSE), Docker, Terraform, GitHub Actions, REST, OpenID Connect (OIDC), Multi-Tenancy

• Supported an integration project between SAP S/4HANA and a MES / Siemens Opcenter system via Azure Middleware.
• Responsible for SAP-side analysis, mapping and provisioning of relevant data objects such as material master data, production orders and process orders using SAP standard APIs and OData services.
• SAP-side mapping for Material Master, Production Orders and Process Orders
• Usage of API_PRODUCT, API_PRODUCTION_ORDER_2_SRV and API_PROCESS_ORDER_2_SRV
• Consideration of SAP S/4HANA Advanced Available-to-Promise for order confirmation, production availability and downstream MES execution
• Support for SAP Gateway and OData service topics
• Interface coordination between SAP S/4HANA, Azure Middleware and MES / Siemens Opcenter
• Support for testing, monitoring and error analysis
• Worked with BTC Cockpit and Deloitte ASADEV Tool

Technical and commercial risk assessment for an investment project in the hardware sector (scaling potential, liability risks, operational processes) Process consulting for two SMEs in the engineering environment, focusing on workflow digitization, PLM

As part of the preparation and operational support of a business succession:

• Company analysis: Analysis of the overall economic, organizational and structural situation (current state, strengths/weaknesses, risk potentials)
• Process analysis: Recording and documentation of all relevant business processes (BPMN, UML) in the areas of management, finance, procurement, sales and operations
• Process optimization: Identification of weaknesses and inefficiencies, development and operational implementation of improvement measures
• Stakeholder management: Identification and analysis of all relevant internal and external stakeholders; structured communication and coordination with previous and future owners, shareholders and employees
• Change management: Supporting the workforce and management through the handover process; building acceptance and trust among all participants
• Governance & documentation: Creation and handover of structured operation manuals, process documentation and organizational handbook for the new business owner
• Risk & vulnerability analysis: Assessment of operational and strategic risks in the handover process and development of recommended actions
• Operational support: Interim takeover of leadership tasks; ensuring business continuity during the transition phase

As project manager for the Odoo implementation at a small company, I was responsible for designing, implementing, and training a fully integrated CRM and accounting system. Through structured requirements analysis, precise data migration, and targeted change management, I was able to complete the rollout in just eight weeks. The project led to a significant reduction in manual tasks, faster business processes, and increased real-time transparency.

Main Responsibilities

Requirements analysis and process mapping Configuration of Odoo modules: CRM, Sales, and Accounting Data migration (Excel/CSV → Odoo) and quality control Creation of workflows, automated email rules, and dashboards Conducting training sessions and providing support after go-live Project coordination (budget, schedule, stakeholder communication)

Key Achievements

Full implementation of the Odoo suite within the set timeframe (8 weeks) 30% reduction in accounting time and 25% acceleration of the lead-to-sale flow 100% customer satisfaction after go-live, based on survey results Successful migration of 100% of existing master data without data loss Establishment of a sustainable support infrastructure (3-month post go-live support)

Impact

Improved decision-making through real-time dashboards and automated reports Increased efficiency and cost savings (≈ €8,000/month) Scalability for future growth (additional modules can be integrated seamlessly) Strengthened sales and finance departments through seamless process integration

This summary highlights how I created concrete and measurable value for the company through structured project work, technical expertise, and targeted training.

• Onboarded and conducted comprehensive documentation and system analysis to assess the existing data infrastructure, facilitating rapid integration and collaboration across functional data teams (modelling, processing, reporting).
• Collaboratively defined the architecture and project structure for a central data pipeline repository, including hierarchical standards, knowledge management strategies, and role-specific responsibilities, enhancing maintainability and onboarding speed.
• Evaluated and validated open-source data routing tools (Airbyte, Apache NiFi, Dragster) for ingest and sync requirements in retail analytics, including local benchmarking and error-state testing.
• Led the design and deployment of Airbyte in Kubernetes, creating customized Helm charts, securing secrets handling, and configuring Ingress with TLS and internal DNS routing, ensuring full API and UI accessibility.
• Troubleshot and resolved Ingress controller issues, iterating through multiple stages of debugging and testing, and documented setup and replication steps for scalable reuse.
• Mapped data models to ARTS standard, supporting schema alignment for ERP and reporting use cases, and coordinated review loops to align future data processing logic.
• Drafted strategic 1-pagers comparing MinIO, Pub/Sub, and routing architectures, providing technical guidance for architectural decisions and investment planning.
• Enabled secure access and authentication mechanisms, including initial evaluation for SAML integration, cluster-level configuration reviews, and service annotation improvements.

Testing adjustments to customer requests for warehouse / logistics software

Windows 10 / 11 Atlassian Tool Chain Agile testing / Kanban

• Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), access control policy, vulnerability management policy, business resilience programme, risk governance plan
• Consolidation into an integrated emergency handbook (12 chapters) with immediate checklists for six emergency scenarios, a prioritized action table, and a formal approval structure
• Review of a penetration test report (Greenbone) with complete remediation of all findings and formal risk acceptance of a residual risk with documented compensating control
• Review and documentation of NIS2 and HinSchG applicability, including the legal reasoning for non-applicability

• Short description: Lead of a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations management, while maintaining the autonomy of decentralized business units within regulatory frameworks.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of a company-wide cloud governance structure (Azure), including target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps), including decision and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework based on the Azure Cloud Adoption Framework (CAF), including landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), including cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts including RBAC design and "breaking glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a consistent, auditable governance and control set for Azure (policies, standards, compliance mapping), laying the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operating and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and corporate rules).

• Significantly increased workload compliance during lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud Shared Responsibility Model.

• Hub-and-spoke connectivity / central shared services (from hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "breaking glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.