Active Directory Experts in Munich
matched in minutes with vetted specialists and the power of AI.Hire experts who design, secure and clean up Microsoft Active Directory environments, manage domain services and group policies, and handle identity and access work across hybrid Windows estates. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Munich, who have recently used Active Directory
Vicenco Kenk
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Alexander Alawi
Last position:
Onsite Support Administrator at Sana Kliniken AG
- Processing and coordination of IT tickets (Helix, Omnitracker) incl. VIP support and remote support (Microsoft Teams, RDP, FastViewer)
- Onsite support at the main location as well as support for modern conference and meeting room technology (e.g. MeetingBoard 75 Pro)
- User and rights management in Active Directory (Active Roles), Azure AD, Exchange and MDM
- VDI support and monitoring with Citrix Director and Aruba Networking
- Endpoint management and policy administration via Ivanti
- Deployment, configuration and lifecycle management of clients (Dell notebooks, iPhones, iPads)
- Hardware rollouts for new employees incl. shipping across Germany
- Asset and license management as well as organization of site migrations
Thomas Martin
Last position:
Lead AI-/Agentic-Engineering at AI-/Agentic-Engineering (Own research)
AI-supported development and PM acceleration with agentic workflows; deep reinforcement learning; fully automated 24/7 setup.
Mohamad Dib-Skhni
Last position:
DevOps Engineer & IT-Security-Architect at BMW Group
- Set up Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
- Developed Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
- Hardened CI/CD pipelines using Jenkins, SonarQube, Fortify SSC, and Contrast AST
- Integrated SAP BTP/Kyma and ServiceNow GRC
Serge Kalinin
Last position:
MLOps (machine learning operations) at REWE Digital GmbH
- It is like a startup within REWE, where we have to build a new forecasting system on Google Cloud Platform from the scratch. Although, officially my role is called MLOps, my actual tasks also include development of data processing pipelines (data engineering) and data scientists tasks such as feature engineering and model trainings.
- GCP: Terraform (tofu), Vertex AI (Kubeflow), Cloud Run, IAM, Google Cloud Storage, BigQuery, Artifact Registry
- Data engineering: Snowflake as the main data warehouse, Terraform, DBT for data model implementations
- CI/CD: GitLab. We have built a CI/CD pipeline that automates deployments of new releases up to production environment
Stefan Wimmer
Last position:
Architect/Software Developer at Global Logistics Support GmbH
Task
- Further development of a new ERP system with Blazor
- Creation of e-invoices in the XRechnung and ZUGFeRD formats
- UI/UX design Client-server system
- Windows 11 Technology
- Microsoft .NET 9, Git, Azure DevOps, ASP.NET, MSSQL, Blazor Programming languages
- C#, MVVM Development tools
- Microsoft Visual Studio .NET 2022 Database
- MSSQL Industry
- Other
Florian Großmann
Last position:
Senior IT Project Manager Security & Infrastructure & Business Development Manager HealthCare at CGI
- Responsible project manager for complex international infrastructure projects
- Coordinator and decision-maker for IT architects in network infrastructure and software with over 100,000 users
- End-to-end project management
- Launch and implementation of initiatives
- Project management of international infrastructure projects with C-level reporting
- Leading and coordinating IT architects
- Technical project management for merger and cloud transformation
- Delivery of international software and hardware rollouts
- Implementation of IT security projects and compliance
- Work with key technologies (e.g. 5G/6G standard)
- Support of complex defense and aerospace projects (e.g. Ariane 6, Eurodrone)
- Building the healthcare and life sciences business unit
- Creating and leading internal employee trainings
Harald Laschitz
Last position:
Project Management at Loocid LLC
- Conducted a comprehensive due diligence review for a potential acquisition of a Swiss manufacturing company as part of a pre-merger analysis
- Assessed production capacities and technical infrastructure
- Evaluated integration possibilities into existing business processes
- Performed risk assessment and developed recommendations for action
- Documented the findings and presented them to management
Tobias Walther
Last position:
External Contractor at Government Agency
- Project support for VMware/Active Directory
- Operational support for administration, process execution
- Creation and review of documentation
- Active Directory, Powershell, VMware VSphere 7, Confluence, Jira
- Windows Server 2016/2019/2022/2025 GUI/Core
- Concept and rollout of Windows Update Services (approx. 500 client/server systems) and takeover of a central WSUS gateway company-wide
- Takeover and redesign KMS/RDS systems company-wide
Michael Møller
Last position:
Freelance Senior Consultant & Cloud Architect at Rheinmetall AG
- Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
- Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
- Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
- Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.
Rupesh Kumar Sendge
Last position:
IT Baseline Compliance Consultant at Consultant
- Baseline compliance verification against MAS audit findings
- Building technical architecture concept for 30 technologies to build hardening standard artifacts
- Identifying and building automation possibilities for given technologies based on CIS
- Building the standard baseline configuration based on internal security standard
- Responsible for building Cloud Native Application Protection Platform (CNAPP) architecture artifacts based on Azure cloud platform
- Responsible for RFQ and RFP for different CNAPP solutions (Qualys Total Cloud, CrowdStrike, Azure Security Center)
- Supporting compliance verification and validation via automated scripts for a sample population of IT devices and instances
- Responsible for complete vulnerability management lifecycle using Nexpose, remediation, reporting and integration of results with Splunk, HPSM and Tableau
- Audit support for MAS
Ales Loncar
Last position:
Senior DevOps Consultant (Freelance) at European Union Agency (via IBM)
- Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
- Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
- Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
- Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
- Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
- Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
- Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
- Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
- Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
- Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.
Stephan Sahm
Last position:
Senior Data/ML Consultant & Technical Lead at Jolin.io
Role: Software Engineer & Applied Mathematician (Mathematical optimization for scheduling; duration: 1 months; team setting: Team of 2, remote; technologies: JuMP, Julia, Pluto, Svelte, JavaScript, TypeScript, JetBrains Space, Terraform, Nomad)
Role: Software & Cloud & Web Engineer (Building scalable data science compute cluster from scratch; duration: 11 months; team setting: Team of 1, on-site; technologies: Terraform, Kubernetes, k8s ingress, k8s services, k8s RBAC, k8s networking, k3s, etcd, S3, DNS, certificates, Julia, Pluto, JavaScript, Tailwind, Astro, npm, Parcel, Preact, MUI, JWT, AWS SQS, AWS RDS, Python, GitLab, GitHub)
Role: AI & Web Engineer (Custom ChatGPT service; duration: 1 months; team setting: Team of 2, remote; technologies: Python, Poetry, LangChain, Tailwind, ChatGPT API, Flask, FastAPI)
Role: Architect & Data Engineer (Central datalake setup and ingestion; duration: 9 months; team setting: Team of 5, remote; technologies: Infrastructure-as-code, AWS CDK, Python, Boto3, PySpark, AWS Glue, IAM, S3, ECS, Fargate, Lambda, Apache Hudi, DeltaLake, Databricks, GitHub, Jira, Miro)
Role: Software Engineer (PoC Julia migration of scikit-decide; duration: 1 months; team setting: Team of 2, remote; technologies: Python, Julia, GitHub)
Rick Grassmann
Last position:
Interim IT Security Analyst at GLS IT Services GmbH
- Risk Management
- Incident Management
- Security Analysis
- Secure Coding
- Information Security Management System (ISMS)
Marco Fischer
Last position:
System Engineer–Vmware, Veeam at DCSO
- About 800 different server VMs, operation and lifecycle/asset management of about 40 ESXi hosts (Lenovo)
- Upgrade of all clusters to ESXi/VCSA 7.0U3 and 8. Planning patch management for all hosts
- Cleaning up the AD – many different domains that all needed to be migrated into the main environment. Planning/execution
- Veeam – check the configuration and migrate to a newer, partly virtual infrastructure to make the setup leaner and faster
- VMware – upgrades/updates, general maintenance
- Proxmox POC – evaluate if an alternative to VMware
- Documentation for Veeam/VMware/storage
- Implementation of the uniflow cloud solution
- NetApp migration to new storage, CIFS maintenance and administration of SVMs
Discover over 15,000 top freelancers
Statistics of experts using Active Directory
Aggregated from the professional profiles of matched freelancers.
Experience
20 years (Germany: 19 years)
Position duration
1.5 years (Germany: 3 years)
Positions per freelancer
13 (Germany: 14)
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Banking and Finance, Manufacturing
Certification focus areas
Information Technology, Project Management, Business Intelligence
Bachelor's degree or higher
72% (Germany: 69%)
Master's degree or higher
50% (Germany: 36%)
Doctorate
11% (Germany: 5%)
Certifications per freelancer
4
Most common languages
English, German, French
Speak two or more languages
100% (Germany: 97%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Munich using Active Directory
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
Identity control
Active Directory is the Microsoft directory service that handles identities, logins and access across Windows-based environments. It is used to manage users, groups, computers and permissions in a central place.
Where it fits
It is common in office networks, hybrid IT and regulated environments where access must be controlled tightly. In Munich, it often appears in enterprises with complex Windows estates, branch offices and mixed on-site and remote work setups.
Typical work
- Domain and trust setup
- Group Policy design and cleanup
- User, group and OU structure
- Permission and access reviews
- Migration and consolidation work
Related tools
Strong specialists work with DNS, Windows Server, PowerShell, certificate services and identity synchronization tools. They also understand replication, authentication flows, delegation and how AD connects to file servers, VPNs and business apps.
When to bring help
Companies bring in freelance expertise for broken logins, messy permissions, slow replication, mergers, restructures and domain migrations. Help is also useful when internal teams need a second pair of eyes before major changes or audits.
What good specialists do
A strong expert keeps the structure simple, documents changes clearly and avoids hidden access paths. They know how to diagnose Group Policy issues, secure privileged accounts and keep Microsoft Active Directory stable as the environment grows.
Frequently asked questions
Quick answers to the questions that come up most around Active Directory.
Active Directory is used to centralize identities, authentication and access control in Windows environments. It helps companies manage users, groups, computers and policies from one place instead of handling them system by system.
Active Directory is the classic on-premises directory service for Windows domains, while Azure AD is now Microsoft Entra ID and focuses on cloud identity. Many companies use both in a hybrid setup, so the right specialist should understand how they connect and where each one fits.
A project usually needs Active Directory expertise when login issues, broken permissions, domain changes or trust relationships become risky. The same is true for mergers, migrations, Group Policy cleanup and security hardening.
A strong Active Directory specialist usually knows DNS, Windows Server, PowerShell and certificate services. Knowledge of VPNs, file permissions, backup strategy and identity synchronization is also useful because AD rarely stands alone.
Active Directory includes LDAP-style directory functions, but it is more than a basic directory. It adds Windows domain services, Group Policy, Kerberos-based authentication and tight integration with Microsoft infrastructure.
Simple user and group administration can be handled by an expert with limited project scope, but domain design, migrations and security cleanup need deeper Active Directory experience. The more touchpoints there are with DNS, replication and policy design, the more important proven practice becomes.
Yes, most Active Directory work can be done remotely if the specialist has secure access, clear change windows and the right approvals. On-site support is still useful for outages, data center work or projects that depend on local infrastructure and hands-on checks.
Look for clear documentation, structured troubleshooting and safe change handling in Active Directory projects. Good specialists explain the reason for each change, spot security risks early and leave the environment easier to maintain.
The average hourly rate of freelancers in Munich, Germany who have used Active Directory in their recent projects is 100 €, which corresponds to a daily rate of about 800 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used Active Directory in their recent projects, 72% hold at least a Bachelor's degree, 50% hold at least a Master's degree, and 11% hold a doctorate.
On average, freelancers in Munich, Germany who have used Active Directory in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 1.5 years.
The most common languages among freelancers in Munich, Germany who have used Active Directory in their recent projects are English (100%), German (96%), and French (21%).
The most common industries among freelancers in Munich, Germany who have used Active Directory in their recent projects are Information Technology (96%), Banking and Finance (58%), and Manufacturing (58%).
The most common business areas among freelancers in Munich, Germany who have used Active Directory in their recent projects are Information Technology (100%), Operations (83%), and Project Management (63%).
Main locations of FRATCH Experts, who have recently used Active Directory
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Cologne 
Frankfurt 
Dusseldorf 
Essen 
Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
