Active Directory Experts in Hamburg

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Software packaging and distribution with SCCM/MECM
• Application responsibility and support (50–100 applications)
• Documentation via ticket system
• User management via AD console
• Software updates and distribution
• Maintenance and updating of software packages
• Customizing scripts with PowerShell
• Rolling out and implementing new software
• Supporting IT security and compliance

Tools and software: Confluence, M365, Active Directory, Intune, Endpoint Management, SCCM/MECM, PowerShell, VMware Hardware: Lenovo, Cherry, Plantronics, Jabra + peripherals

• Monitoring the health and performance of internal IT systems (servers, networks, endpoints)
• Performing routine checks on Active Directory, SCCM, antivirus, and MDM platforms
• Diagnosing and resolving hardware/software issues on Windows, macOS, and mobile platforms
• Conducting quality checks when implementing new technologies
• Creating accurate documentation of incidents, changes, and service requests
• Tracking and managing IT equipment inventory

• Specialized in development and implementation of IT and OT security strategies
• Conducting risk analyses, vulnerability management and security assessments
• Administration of Microsoft Cloud and server solutions
• Establishment and maintenance of ISMS according to ISO 27001, NIS2, BSI and IEC 62443
• Planning and management of security projects in industrial and production environments
• Ensuring regulatory compliance with incident response, emergency management and awareness
• Collaboration with business units, management and external service providers
• Preparation of IT infrastructure for audits

• Consulting on a wide range of open science hardware projects in the fields of electronics, mechatronics, and optoelectronics
• Comprehensive system analysis and DFM optimization of a novel open hardware miniaturized two-photon microscope
• Exchange with scientists from renowned academic institutions to align the customer’s work in the best possible way
• Production coordination with local and international partners for PCB assembly, CNC machining, and optics
• Process analysis for product design, production planning/execution, product lifecycle, and product data management
• Coaching employees from all departments on the requirements that complex technical products place on business processes
• Development of a comprehensive PLM & PDM concept tailored to the needs of development and manufacturing
• Initiating intensive and direct cross-departmental exchange to identify improvement potential
• Planning shopfloor layout improvements with the production team and supporting the implementation process
• Quick onboarding of two new English-speaking colleagues in technical product management and development
• Ad-hoc and in-depth training of employees in the use of software tools such as KiCad or Autodesk Inventor
• Consulting on long-term development into a scalable, even stronger partner for the open science hardware community

• Electronic logbook app developed for research centers to maintain their investigations.
• Emphasizes user-driven organization of communication: experiment groups can configure information structure and notifications, while principal investigators maintain full access control.
• Real-time integration with the facility’s metadata catalogue, control system Karabo, and data analysis tool enables the automatic logging of key events, complemented by manual entries as needed.

• Lead Drupal 10 developer for several greenfield projects in the health sector
• Drupal architecture in a cloud environment
• Set up and maintain GitLab pipelines and Kustomize scripts for Kubernetes deployments
• Development of Docker images
• Developed custom Drupal modules for features such as OAuth and FHIR
• Drupal frontend theming using Bootstrap 5 and Single Directory Components
• Set up and maintain automated Playwright tests

• Planning of projects and consulting services: professional, technical and commercial, focusing on transformation for public transport
• Identification and assessment of project risks with development of measures and recommendations for risk minimization and avoidance
• Evaluation of projects and reporting
• Execution of projects and delivery of consulting services on time, with required quality and within budget
• Project, hardware and consulting services forecasting
• Disciplinary and professional staff management
• Team development and coaching
• Resource planning across various locations
• Stakeholder management
• Client management with service and support
• Development of contingency plans

• Planning, coordination and tracking of tasks for database administration (DBA)
• Coordination with application developers and test managers (QA) involved in the project
• Migration of existing databases in several stages
• Coordination and communication with stakeholders
• Technologies: MariaDB
• Tools: MS Office, Confluence, Jira
• Methods: project management according to the client's process
• Project language: English / German

• Migration of POS and back-office systems in the IAM environment
• Deployment using Intragen Deployment Manager and partial rollout planning with Test Accelerator
• Implementation and extension of the sync project (data copy) for working copies at branches for special hardware
• Migration and support of the SuccessFactors integration with the IAM system; switch from the old data import to the new SuccessFactors interface

• Client support, 2nd, 3rd level, server administration
• Project and process coordination
• Support of MS365 services
• Linux administration
• Provider management

• Implemented AJO (Adobe Journey Optimizer)-AEP (Adobe Experience Platform) integration with AEM for an Australian Govt. project which has a significant business impact in terms of how AEP manages the customer data and engages the customer with AJO driven push notifications, Email etc.
• Developed a POC to integrate AEM-FTP and set up monitoring alert by Sling Job.
• Implemented Groovy scripts which help to modify the JCR nodes without touching the core code.
• Developed and optimized pipeline code for DEV deployment using Bitbucket. Enhanced security by modifying the pipeline to utilize repository variables from Bitbucket, effectively replacing all sensitive hardcoded values within the code repository.
• Implemented complex components such as Listicle component which dynamically fetch and display content from the experience fragments and leveraged sling model, services to streamline the integration process and created custom dialog validation for components which help me brush up my front-end knowledge as well.
• Created MCP tool for deleting old packages in higher environments e.g. UAT, stage as part of maintenance task.
• Implemented custom rollout configuration for a component which gets populated by experience fragments for all locales.
• Developed a custom solution where sitemap reads custom GWS URLs from the ACS commons list.
• Consistently created JUnit test classes as part of my day-to-day activity to increase code coverage for the entire code base.
• Explored on useful tools like Bulk Template/component updater tool, Content Sync tool (which can sync content from higher environment to local without creating any package) etc. and brought them to the team’s attention by documenting and providing demos on them.
• Gained limited experience on OneTrust, Lionbridge interface for AEM related cookie and translation tasks.
• Actively supported the team members in a cross-functional team and regularly participated to meet the code quality standards.