Active Directory Experts in Hamburg

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Software packaging and distribution with SCCM/MECM
• Application responsibility and support (50–100 applications)
• Documentation via ticket system
• User management via AD console
• Software updates and distribution
• Maintenance and updating of software packages
• Customizing scripts with PowerShell
• Rolling out and implementing new software
• Supporting IT security and compliance

Tools and software: Confluence, M365, Active Directory, Intune, Endpoint Management, SCCM/MECM, PowerShell, VMware Hardware: Lenovo, Cherry, Plantronics, Jabra + peripherals

Enterprise Content Management (ELO ECM) & Process Automation:

• Multi-Tenant System Architecture & Tenants: Designed, deployed, and maintained the ELO infrastructure for over 7080 legal entities (shipping and land-based companies with a total of 150+ active users in onshore/offshore operations).
• User & Group Administration: Full administration of ELO users, creation and maintenance of ELO groups, and implementation of granular, role-based access controls (RBAC).
• Dynamic Workflow Architecture: Designed, programmed, and implemented complex, dynamic approval workflows with hierarchical and cross-departmental approval levels (Multi-Tier Line Approvals, e.g. for invoice approvals and contract management).
• Operational Support & Troubleshooting: Daily troubleshooting of incoming workflow issues, continuous process adjustments, and error resolution during ongoing operations.
• Compliance, Archiving & Optimization: Managed archive structures, replaced paper-based processes with automated ELO pipelines, and ensured compliance with GDPR and audit standards.

Microsoft Dynamics NAV (Navision) – Administration & ERP Support:

• Tenant & User Management: Administration and permission management for complex multi-tenant environments with over 30 tenants (companies and shipping entities) in NAV.
• Master Data & Financial Processes: Created and maintained customers, vendors, posting groups, and supported intercompany transactions.
• Operational Support & Troubleshooting: Daily mid-level error handling for interfaces, document processing, and accounting processes across the various companies.

Hybrid Identity & Modern Workplace Management (M365 / Intune):

• Hybrid Directory Management: Administration of Active Directory (AD) and Entra ID (Azure AD) in a hybrid environment, including identity synchronization, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Endpoint & Security Management: Managed mobile devices and laptops through Microsoft Intune (MDM/MAM), implemented security baselines, compliance rules, and automated software rollouts.
• Security & Network Administration: Administration of Microsoft Defender for Endpoint and management of Sophos VPN authentication profiles to secure remote access.
• Collaboration Infrastructure: Administration of Exchange Online and Microsoft Teams Admin Center, including email hygiene, shared mailboxes, guest access, and SharePoint security policies.

• Lead Drupal 10 developer for several greenfield projects in the health sector
• Drupal architecture in a cloud environment
• Setup and maintenance of Gitlab pipelines and Kustomize scripts for Kubernetes deployments
• Development of Docker images
• Drupal custom module development for clients such as OAuth and FHIR
• Drupal frontend theming based on Bootstrap 5 and Single Directory Components
• Setup and maintenance of automated Playwright tests

• Monitoring the health and performance of internal IT systems (servers, networks, endpoints)
• Performing routine checks on Active Directory, SCCM, antivirus, and MDM platforms
• Diagnosing and resolving hardware/software issues on Windows, macOS, and mobile platforms
• Conducting quality checks when implementing new technologies
• Creating accurate documentation of incidents, changes, and service requests
• Tracking and managing IT equipment inventory

• Planning, coordination and tracking of the work for database administration (DBA)
• Coordination with the application developers and test managers (QA) involved in the project
• Migration of the existing databases in several stages
• Coordination with and provision of information to stakeholders
• Technologies: MariaDB
• Tools: MS Office, Confluence, Jira
• Methods: Project management according to the customer-specific procedure
• Project language: English / German

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

• Specialized in development and implementation of IT and OT security strategies
• Conducting risk analyses, vulnerability management and security assessments
• Administration of Microsoft Cloud and server solutions
• Establishment and maintenance of ISMS according to ISO 27001, NIS2, BSI and IEC 62443
• Planning and management of security projects in industrial and production environments
• Ensuring regulatory compliance with incident response, emergency management and awareness
• Collaboration with business units, management and external service providers
• Preparation of IT infrastructure for audits

• Consulting on a wide range of open science hardware projects in the fields of electronics, mechatronics, and optoelectronics
• Comprehensive system analysis and DFM optimization of a novel open hardware miniaturized two-photon microscope
• Exchange with scientists from renowned academic institutions to align the customer’s work in the best possible way
• Production coordination with local and international partners for PCB assembly, CNC machining, and optics
• Process analysis for product design, production planning/execution, product lifecycle, and product data management
• Coaching employees from all departments on the requirements that complex technical products place on business processes
• Development of a comprehensive PLM & PDM concept tailored to the needs of development and manufacturing
• Initiating intensive and direct cross-departmental exchange to identify improvement potential
• Planning shopfloor layout improvements with the production team and supporting the implementation process
• Quick onboarding of two new English-speaking colleagues in technical product management and development
• Ad-hoc and in-depth training of employees in the use of software tools such as KiCad or Autodesk Inventor
• Consulting on long-term development into a scalable, even stronger partner for the open science hardware community

• Electronic logbook app developed for research centers to maintain their investigations.
• Emphasizes user-driven organization of communication: experiment groups can configure information structure and notifications, while principal investigators maintain full access control.
• Real-time integration with the facility’s metadata catalogue, control system Karabo, and data analysis tool enables the automatic logging of key events, complemented by manual entries as needed.

• Planning of projects and consulting services: professional, technical and commercial, focusing on transformation for public transport
• Identification and assessment of project risks with development of measures and recommendations for risk minimization and avoidance
• Evaluation of projects and reporting
• Execution of projects and delivery of consulting services on time, with required quality and within budget
• Project, hardware and consulting services forecasting
• Disciplinary and professional staff management
• Team development and coaching
• Resource planning across various locations
• Stakeholder management
• Client management with service and support
• Development of contingency plans

• Migration of POS and back-office systems in the IAM environment
• Deployment using Intragen Deployment Manager and partial rollout planning with Test Accelerator
• Implementation and extension of the sync project (data copy) for working copies at branches for special hardware
• Migration and support of the SuccessFactors integration with the IAM system; switch from the old data import to the new SuccessFactors interface

• Client support, 2nd, 3rd level, server administration
• Project and process coordination
• Support of MS365 services
• Linux administration
• Provider management

• Implemented AJO (Adobe Journey Optimizer)-AEP (Adobe Experience Platform) integration with AEM for an Australian Govt. project which has a significant business impact in terms of how AEP manages the customer data and engages the customer with AJO driven push notifications, Email etc.
• Developed a POC to integrate AEM-FTP and set up monitoring alert by Sling Job.
• Implemented Groovy scripts which help to modify the JCR nodes without touching the core code.
• Developed and optimized pipeline code for DEV deployment using Bitbucket. Enhanced security by modifying the pipeline to utilize repository variables from Bitbucket, effectively replacing all sensitive hardcoded values within the code repository.
• Implemented complex components such as Listicle component which dynamically fetch and display content from the experience fragments and leveraged sling model, services to streamline the integration process and created custom dialog validation for components which help me brush up my front-end knowledge as well.
• Created MCP tool for deleting old packages in higher environments e.g. UAT, stage as part of maintenance task.
• Implemented custom rollout configuration for a component which gets populated by experience fragments for all locales.
• Developed a custom solution where sitemap reads custom GWS URLs from the ACS commons list.
• Consistently created JUnit test classes as part of my day-to-day activity to increase code coverage for the entire code base.
• Explored on useful tools like Bulk Template/component updater tool, Content Sync tool (which can sync content from higher environment to local without creating any package) etc. and brought them to the team’s attention by documenting and providing demos on them.
• Gained limited experience on OneTrust, Lionbridge interface for AEM related cookie and translation tasks.
• Actively supported the team members in a cross-functional team and regularly participated to meet the code quality standards.