Active Directory Experts in Germany

• Creating concepts and architecture for domain integration (SEAT into the VW structure)
• Domain trusts and administration
• Operation and administration of Windows 2022/ 2025 servers and domains
• Domain restructuring
• GPO and SG editing and migration
• DNS restructuring and migration

Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users

Project – Evaluation and development of databases for a new product line for a measuring equipment manufacturer

• Current-state analysis
• Requirements analysis of the data storage layer
• Writing benchmark tests
• Design of the new database schema
• Database migrations
• Development of audit logging and Part11
• Creation of backup and recovery concepts
• Design of the persistence layer API
• Writing unit tests
• Creating requirements in Azure

Tools: C#, Visual Studio 2022, Azure DevOps, SonarQube, Git, RestSharp, WebServer, PostgreSQL, MS SQL, SQLite, MinIO, Podman, Docker, DataGrip, SQL Management Studio, HeidiDB, pgAdmin

As part of preparing and providing operational support for a company succession:

• Company analysis: Analysis of the overall economic, organizational and structural situation (current status, strengths/weaknesses, potential risks)
• Process analysis: Recording and documentation of all relevant business processes (BPMN, UML) in the areas of management, finance, purchasing, sales and operations
• Process optimization: Identification of weaknesses and inefficiencies, development and operational implementation of improvement measures
• Stakeholder management: Identification and analysis of all relevant internal and external stakeholders; structured communication and coordination with former and future owners, shareholders and employees
• Change management: Supporting employees and management throughout the handover process; building acceptance and trust among all parties involved
• Governance & documentation: Preparation and handover of structured operating manuals, process documentation and an organizational manual for the new business owner
• Risk & weakness analysis: Assessment of operational and strategic risks in the handover process and development of recommendations for action
• Operational support: Interim assumption of management responsibilities; ensuring business continuity during the transition phase

• Engaged within the Information and Security Management division for a Proof of Concept (PoC) project focused on developing a Client Security Portal.
• Managed project resources across the UK, India, and Germany.
• Architected and deployed the PoC solution leveraging a modern Java stack, Google Cloud Platform (GCP) with Kubernetes, and Active Directory (Entra ID) for authentication.
• Implemented OAuth 2.0 for authorization.
• Ensured DORA alignment according to Deutsche Bank security rules and regulatory preparation.

• Create and lead roadmap forecasting of support opportunities, including colleague training, process design and improvement, and new hire onboarding.
• Collaborate seamlessly with cross-functional teams including Professional Services, Support, Product, Sales, and Solution Engineering.
• Manage business and financial KPIs in alignment with overall business objectives.
• Industrial IT & Data Integration: Implement, configure, and integrate OT/IT systems and data flows, connecting control-layer sources (DCS, PLC, SCADA) to historians, data platforms, and enterprise systems through APIs and standard interfaces.
• AVEVA PI & Historian: Configure, maintain, and extend AVEVA PI (PI Data Archive, Asset Framework, interfaces/connectors) to capture, contextualize, and serve real-time and historical operational data.
• Alarm Management: Support and optimize alarm management systems – e.g. Honeywell Alarm Management – including alarm rationalization, classification, and the analysis of alarm performance, critical alarms, and alarm floods.
• Connectivity & Protocols: Set up and troubleshoot industrial connectivity using OPC UA and OPC A&E, including the configuration of tunnelers / wrappers to bridge OT data sources securely and reliably.
• Production Data Flow: Ensure seamless, secure, and well-structured data flow across the industrial IT landscape, transforming raw operational data into meaningful information for operations and decision-making.
• System Support & Troubleshooting: Provide ongoing support for OT/IT applications, troubleshooting issues across networks, software, and data integrations to keep systems running efficiently.
• Knowledge Management & Best Practices: Contribute to internal documentation, best practices, and troubleshooting guides, and help continuously improve how we deliver industrial IT and data solutions.

Tools & Software: Aveva PI, Salesforce, Active Directory, Microsoft Dynamics 365, Jira, Microsoft, Scrum, DevOps, Docker, CI/CD, Jenkins, GitHub.

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

• Act as project manager and first point of contact on the project side
• Coordinate with teams to ensure required information is available for project completion
• Ensure both general contractors and internal teams store information correctly
• Monitor compliance with the project checklist and follow-up
• Plan and execute the project plan
• Perform budget and project calculations based on expected price calculations and estimated effort
• Participate in project meetings
• Review progress of Actoom (external partner handling data)
• Answer queries from Actoom regarding data migrations to retrieve data from internal partners or general contractors
• Contact subcontractors to obtain missing information
• Communicate with insolvent companies to obtain missing information

• Project: ESU Windows and SQL Server Consolidation / Configuration Management in ServiceNow
• Prepared an as-is analysis of all servers worldwide
• Prepared an as-is analysis of all SQL servers worldwide
• Conducted requirements analyses for SQL and server migrations
• Coordinated requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
• Facilitated regular status meetings (Jour Fixe)
• Developed roadmaps and solution models for server migrations
• Set up test scenarios
• Facilitated workshops for the rollout of a global admin team
• Designed data models (CMDB) in ServiceNow
• Led workshops for the CMDB data model
• Developed solution models for the CMDB
• Created end-to-end configuration documentation and work instructions for the CMDB
• Prepared reports for license management
• Defined KPIs for data quality in ServiceNow
• Created a service catalog
• Facilitated workshops to define service requests
• Acted as interface between requirements analysis and the ServiceNow development team
• Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

Planning and updating the entire environment to Windows Server 2022 and 2025

• Hardening of DCs and servers, setup of event log forwarding
• Migration of all existing Windows 2019 servers (including Active Directory DCs, DNS and CA) to Windows Server 2022 and 2025
• Automation of security patches for the Hyper-V clusters via PowerShell (CAU)
• Network administration
• Continuous operation and support of the MS Hyper-V environments

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

A nationwide service provider for occupational medicine, occupational safety and health management, focusing on prevention, health and digital transformation.

• Role: Responsible for establishing and further developing professional project portfolio management in the Digital Transformation & Data area. Managing and supporting strategic IT and transformation projects, as well as supporting the introduction and establishment of project management standards, methods and governance structures.

Key areas:

• Establishment and further development of IT project portfolio management
• Analysis and structuring of business and technical requirements
• Management and coordination of cross-functional IT initiatives
• Stakeholder management at department, management and service provider level
• Introduction and further development of project management methods and tools (including Jira, Confluence, MS Planner)
• Preparation of decision-making documents, target visions and implementation concepts in the context of digital transformation
• Management and coordination of transformation, digitalization and organizational projects
• Preparation of decision templates and management documents for executive committees
• Conducting workshops and stakeholder management with departments and IT teams
• Definition of requirements for dashboards, reporting and KPI management
• Participation in the Wissenskompass project (requirements analysis and MVP concept)
• Analysis and evaluation of AI support opportunities in Knowledge Management
• Investigation of AI use cases to improve knowledge provision and use
• Consideration of AI requirements as part of the Wissenskompass concept
• Coordination with strategic departments to further develop project management standards
• Introduction, configuration and training for Microsoft Planner to support project and task management
• Conducting user training and supporting employees in the introduction of new ways of working and tools

• Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
• Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
• Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
• Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
• Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
• Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
• Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
• Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
• Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
• Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

• Responsible for the backlog and roadmap of a production SaaS compliance platform for the EU Deforestation Regulation (EUDR), with around 30 customers on AWS and Docker.
• Coordinated feature development and API integrations across 2 external and internal development teams.
• API integrations with the EU EUDR API and SAP.
• 70% fewer customer-reported issues, supporting ISO-27001 certification.