Astaro Experts in Germany
matched in minutes from over 15,000 CVsHire experts who configure Astaro Security Gateway environments, manage firewall and VPN policies, and support migrations to Sophos UTM. Get fast, precise matches with vetted, available freelancers for your network security project.
Meet FRATCH Experts in Germany, who have recently used Astaro
Andreas Z.
Last position:
Transformation Architect / Business Analyst at IT Consulting
- Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
- Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
- Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
- Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
- Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
- Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
- Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables
Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban
Christian D.
Last position:
Managing Director and Senior Consultant at business-security (b-sec®) GmbH
- Conceptual consulting for securing business processes
- Consulting for planning and implementing IT and IT security projects
- Security and policy checks, process optimization, contingency planning
- Project management and interim management in IT infrastructure and information security
Overview of relevant projects:
- 2025: Consulting on a DLP concept and for Digid GmbH.
- 2025: Consulting for a customer after a cybersecurity attack in which the IT infrastructure was compromised and the attacker gained M365 tenant admin rights. Investigation and recovery of the IT infrastructure. Preparation of recommendations for increasing IT security.
- 2025: Continuation of the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
- 2024: Preparation of a DNS concept including consulting on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones and automation. Preparation of a DHCP concept including consulting on DHCP design, the central DHCP management system and automation. Consulting on the operation of the products mentioned, operating processes, and adapting the IT documentation and IT service description for Thyssenkrupp Marine Systems.
- 2024: Analysis and assessment of the network and security infrastructure established by the providers with regard to the overall architecture, consisting of the design and components. Development of proposed solutions to improve current operations, maximize performance and security, and reduce complexity. Presentation of the results, their causes and possible solutions to C-level management, including the required decision templates. Development of a SASE concept based on a Zero Trust architecture for Norddeutsche Landesbank.
- 2024: Continuation of the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
- 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proof-of-concepts for DDoS protection and Digital Experience Monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on Zero Trust, redesigning a Cisco ISE implementation and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
- 2023: Continuation of the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Bundesanstalt für Geowissenschaften und Rohstoffe (until 05/2023) and Union Investment IT-Services GmbH (until 07/2023).
- 2022: Preparation and review of white papers for infrastructure and security architectures, planning new network infrastructures for Deutsches Luft- und Raumfahrtzentrum.
- 2022: Development of a concept for the technical and process-related modernization of a disaster recovery plan for United Nations Volunteers.
- 2022: Development of a concept for moving measurement data to a cloud environment, introducing Network Access Control and conducting an awareness training session for Digid GmbH.
- 2022: Development of a network segmentation concept for DZ Hyp AG.
- 2022: Development of a network segmentation concept for Bundesagentur für Arbeit.
- 2021: Development of a new load balancer architecture for Bundeswehr Fuhrparkservices GmbH.
- 2021: Vulnerability scan and penetration test of a web frontend, including evaluation and preparation of recommendations for remediation, taking risk and probability of occurrence into account, for customer ifi GmbH.
- 2021: Consulting, concept development and sub-project management for introducing a Network Access Control solution (certificate authentication and MAC address bypass) and macro-segmentation (area and zone concept based on dynamic assignment of endpoints) in office and production IT for customer Vaillant Group GmbH.
- 2021: Upgrade and optimization of the LAN and WLAN infrastructure for customer United Nations Volunteers.
- 2021: Development of a target concept for modernizing the IT security infrastructure consisting of the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet access, admin and management networks and wireless LAN, including support during implementation, for Bundesanstalt für Geowissenschaften und Rohstoffe.
- 2021: Creation of a micro-segmentation concept based on Cisco DNA and SGT and Zero Trust for Union Investment IT-Services GmbH.
- 2021: Review and update of ISMS Level-3 policies and preparation of process instructions for customer Software AG.
- 2021: Project management for the global Tec-Refresh project Meraki WLAN 2.0, coordination of outsourcing the LAN/WLAN infrastructure to a managed service provider and preparation of a WLAN concept for automated guided vehicles for customer Heraeus Infosystems GmbH.
- 2021: Project management and technical support for the “Transition of SIEM/SOC Services” project of a customer into a shared environment and assumption of the interim role of Head of Security Operations at customer Datagroup SE.
- 2021: Workshop for a future implementation of Mobile Device Management at customer Allgeier Experts Go GmbH.
- 2021: Sub-project management for introducing a rule management tool for firewalls and recertifying NAC endpoints based on 802.1x and MAB at customer Union Investment IT-Services GmbH.
- 2020: Development of a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
- Recording and analysis of the current network architecture, including project initiation.
- Development of a concept for micro-segmentation in the data center and access network.
- 2020: Infrastructure and security architecture audit for customer Stuttgarter Versicherung AG.
- Analysis of the IT infrastructure and IT security architecture with regard to the configuration of network and security components. Additional review of contracts, process descriptions and manuals for completeness. Development of recommendations to improve the stability and operation of the infrastructure. Preparation of a network segmentation concept and project management for implementing the measures from the analysis project.
- 2020: Consulting on setting up an ISMS-Light for customer Josera foodforplanet GmbH & Co. KG.
- 2020: Security architecture consulting for customer Datagroup SE.
- Development of a future IT infrastructure and IT security architecture.
- Analysis of the current IT architecture of all 23 companies.
- Recommendations for optimizing the IT infrastructure and preparation of a comparison between a classic perimeter security concept and the Zero Trust model.
- Preparation of a security zone concept.
- Preparation of an IT infrastructure architecture in coordination with all companies.
- 2018 - 2019: Stream Lead in the Cyber Security program of Deutsche Lufthansa AG.
- Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
- Project area: Network Segmentation and Access Control.
- Project area: Security Architecture.
- Project area: Privileged, Identity & Access Management.
- Project area: Simplify User Authentication (MFA).
- Project area: Mobile & Endpoint Security.
- Project area: OT Security.
- Project area: E-enabled Aircraft.
- 2018: Security architecture consulting for customer Deutsche Lufthansa AG.
- Project management for the development, evaluation and management of the company-wide information security architecture.
- Development of a security strategy and roadmap to align the security architecture with the Zero Trust model.
- Evaluation of security solutions, services and tools available on the market.
- Definition of requirements for RfPs and evaluation of offers.
- Development, maintenance and monitoring of security architecture artifacts.
- Conducting security assessments of existing and new IT systems and security services.
- 2018: ISMS consulting for customer GLS IT Services GmbH.
- Consulting on introducing and initially operating an ISMS based on ISO27001.
- Auditing the IT environments of the GLS country companies.
- Analysis and assessment of IT security risks and derivation of required measures.
- Development of proposed solutions in coordination with the relevant stakeholders.
- Project management and transition of the ISMS to later operations.
- 2016 - 2018: Security Pre-Sales Consultant for customer Cisco Systems GmbH.
- Nationwide strategic and conceptual consulting for major enterprise customers and financial and insurance customers on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch and ISE.
- 2017 - 2018: Design and implementation of an ISMS for customer Verivox GmbH.
- Conducting various BIAs and GAP analyses.
- Preparation of security policies based on ISO 2700x.
- Assumption of the interim role of Information Security Officer.
- 2017: Preparation of a contingency concept for VPV Lebensversicherungs-AG.
- Review and update of the IT contingency manual.
- 2016: Consulting and project management for the design of cloud and hosting services for customer Vodafone Group Services GmbH.
- Analysis and optimization of the sell-build-run process.
- Preparation of detailed-level designs for cloud products.
Florian K.
Last position:
LAN Planner at Global Network AG
- As-is assessment of the current network infrastructure and its documentation, including on-site inspections
- Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
- Planning of new copper and fiber optic cabling, including patch panels
- Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
- Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
- Additional support after the components go live (hypercare phase)
- Regular communication with project management and client stakeholders
Christian E.
Last position:
IT Consulting / IT Rebuild at IT Rebuild (PF)
- Analysis of requirements and the current situation
- Migration of an old domain structure and Tobit to Exchange 2019 with connection to MS365
- Review of implementation options and planning for the protection of sensitive data
- Planning with regard to BSI Grundschutz, BDSG, and DSGVO
- IT governance and IT security backtests
- Support with ERP setup and securing mail transfer
- Hyper-V 2016/2022, Microsoft Terminal Services Cluster, Microsoft Exchange 2019
- Office 365, Microsoft 365, Azure AD, Teams, Salesforce
- Cisco, Zyxel, and HP switches, Sophos firewalls/UTMs, SecurePoint
- Microsoft IIS 2022, IPv4/IPv6, Veeam, Wortmann Online Backup, NextCloud
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, group policies (GPO), SIEM, remote work, home office, high availability, failover, VLAN, PRTG
David B.
Last position:
Acting Partner at Bliestal Consulting UG
- Redesigning cablewise infrastructure with CAT 8.1 keystones, measuring the speed and quality of the new installation with Pockethernet, documentation at a local saddlery
- CAT 8.1 installation and building a data center, site linking, VPN and VLAN configuration for a local car dealership, implementation of IT-Security standards like virus protection (G Data) and firewalling (OPNSense)
- Relocation of a tax office with redesign of the IT infrastructure, virus protection (G Data) and backup solutions (QNAP)
- Planning, conception and implementation of an inhouse data center, BSI-compliant for commercial laundry (including Proxmox-based virtualization of existing infrastructures, QNAP, G Data, OPNSense, APC)
- Implementation and conception of security solutions in the SME sector
- Collaboration on the IT-security concept for the Bremen network of authorities (in the dLAN network)
- Creation of IT-security concept VOIS (modules MESO, KFZ/iKFZ) including audit preparation for KBA
- Expansion of the IT-security concept for the online service for electronic residence registration (eWA) to include use as an eFA (one-for-all) service (nationwide)
- Expansion of the IT-security concept to include modules wos & wvp
- Concept development for the implementation of DIN SPEC 27076 at MSEs and SMEs
- Creation and evaluation of emergency concepts
- Creation and evaluation of response actions and BCM plans
- Assessment of existing business continuity management (ISO 22301)
- Development of BCM strategy options
- Conducting awareness training
Andreas K.
Last position:
Manufacturing
- IT interim management
- Functional leadership, establishment and management of the local IT team
- Responsibility for all IT services (e.g. server, storage, backup, network, security and OT services), including planning, setup and operation of these services for the site
- Responsibility for all business services (ERP, sales / configuration, development), including planning, setup and operation of these services for the site
- Ensuring the overall strategic direction of the IT team and integrating this team into the overarching holding functions
- Budgeting and execution of controlling processes, including risk analyses
- Supporting the development of project management standards and methods
- Supporting IT project portfolio management, including the continuous improvement of portfolio standards and methods
- Developing and aligning standards and methods for process management
- Responsible for the availability, capacity and continuity of the relevant IT services
- Responsibility for IT resource management processes
- Project management for various infrastructure projects:
- Storage migration from NetApp to Huawei
- Windows 11 rollout
- Rebuilding a Citrix environment
Tools/Werkzeuge/Methoden: Confluence, Jira
Hardware: HP servers, Fortigate NGFW, storage: Huawei OceanStor, network: HP and Huawei switches, Fortinet WLAN
Software: VMware vSphere, network: Dell switches, Fortinet WLAN, Windows 11, Citrix
Applications: Office-Suite M365, Exchange Online, Azure AD / Entra ID
Szabolcs K.
Last position:
Senior Network Security Consultant at Mann+Hummel
- Network segmentation in the production IT environment
- Firewall migrations
- Integration of remote access sites
- Implementation of POCs (Backup, SCADA)
- Working in a multicultural environment
- Technologies used: Panorama & Palo Alto Firewalls, Checkpoint, ServiceNOW, MS Azure Cloud
Andreas F.
Last position:
Project Manager & Portfolio Owner for Infrastructure (Automotive) at MHP Management- und IT-Beratung GmbH
- Overall coordination of service providers for all infrastructure topics at a production site being set up in Baden-Württemberg
- Design and finding solutions for internet connectivity, building office communication networks, setting up WLAN in production and administration buildings, IP address management, password policies, time tracking, access control systems, backup strategies, emergency power planning, operating concepts, cost planning, event management, workplace setup including laptop/mobile phones/telephony, remote support, print servers
- Selecting suitable external service providers and planning to meet needs for spare parts, repairs, on-site service, network and workplace support including on-site system replacement by providers
- Choosing suitable external service providers for facility management and building technology (fiber optic connections, data center infrastructure, cable ducts etc.)
- Coordination with clients and service providers
- Escalation management, schedule control
- On-site presence for service meetings and managing service providers
Markus K.
Last position:
Administration / Support at Hessische Zentrale für Datenverarbeitung
- Operation and development support (Linux, Tomcat)
- Web release builds with Jenkins and deployment
- Monitoring and operation planning
- Support for Online Access Act (OZG)
- Data queries and corrections in Oracle SQL via CloudBeaver and Rundeck
- Keycloak administration
- Regression testing and documentation in Jira
- Development of complex address database with MS Access/VBA
- Creation of documentation and guides in XWiki
H̊akan K.
Last position:
Consultant at Simulina GmbH
- Planning of photovoltaic systems for a citizens' initiative
- Design of billing systems.
Andreas M.
Last position:
Managing Director at ESIS-ERP GmbH
- Took over management of the company
Marco K.
Last position:
Freelancer at IBM Deutschland GmbH NGNCC
- Design and setup of infrastructure concepts for virtualized servers with VMware vSphere and VMware vCenter
- Migration from vCenter 7 environments to vCenter 8
- Automated deployment of virtual machines using Microsoft PowerShell and VMware PowerCLI as well as Ansible Tower
- Prototype setup and test migration of applications in various container environments
- Administration of firewalls and network components (routing and switching)
- Migration of VPN connection for all employees from Sophos UTM to Fortigate IPSec VPN with FortiToken
- Automation of OS installations on Linux with Ansible and GitLab
- VMware vSphere 8 with VMware vCenter 8
- VMware API
- VMware NSX-T
- VMware vSAN
- VMware Tanzu
- Red Hat OpenShift
- Docker
- SLES 15, Red Hat 9 and Microsoft Windows Server
- Microsoft Windows PowerShell
- GitLab
- Ansible Tower (AWX)
- SUSE Manager 4 and 5
- Fortigate Firewalls
- Fortinet Analyzer and Manager
- Juniper and Cisco switches and routers
Heiko S.
Last position:
Consultant Managed Print Service at ALDI Einkauf SE & Co. oHG
- Incident management of the existing printer fleet (multivendor)
- Technical consulting and support for the transition to a managed print service based on HP hardware and LRS software (VPSX / mfpsecure / VSPA) as the backend for a secure print / Follow Me solution
- Design and implementation of a hybrid operation for direct printing in branches
Discover over 15,000 top freelancers
Statistics of experts using Astaro
Aggregated from the professional profiles of matched freelancers.
Experience
25 years
Position duration
2.5 years
Positions per freelancer
15
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Banking and Finance, Telecommunication
Certification focus areas
Information Technology, Project Management, Human Resources
Bachelor's degree or higher
22%
Master's degree or higher
11%
Certifications per freelancer
6
Most common languages
German, English, French
Speak two or more languages
92%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using Astaro
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Astaro experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Banking and Finance (69%)
- Telecommunication (62%)
- Manufacturing (54%)
- Government and Administration (54%)
- Automotive (46%)
- Media and Entertainment (38%)
- Professional Services (38%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Astaro in practice
Astaro is a network security technology best known for Astaro Security Gateway, a unified threat management appliance for protecting business networks. It combines firewalling, VPN access, web and email security, intrusion prevention, application control and traffic monitoring in one administrative environment. The product line is now associated with Sophos UTM after Astaro became part of Sophos.
Core capabilities
Astaro Security Gateway gives companies central control over network boundaries and remote access. Professionals work with stateful firewall rules, site-to-site and remote-access VPNs, web filtering, malware protection, routing, authentication and detailed reporting. They also manage high-availability designs and segmented networks where reliability and controlled access matter.
Typical projects
Astaro specialists contribute to projects such as:
- Designing firewall zones, NAT rules and secure outbound policies
- Connecting offices and remote users through IPsec or SSL VPN
- Tuning web, email and intrusion-prevention policies
- Replacing ageing appliances or preparing a Sophos UTM migration
- Reviewing logs, access rules and backup configurations
Ecosystem and tooling
Astaro work often includes networking fundamentals, DNS, DHCP, VLANs, routing and certificate management. Depending on the environment, specialists also connect directory services such as Active Directory or LDAP, authentication systems, virtualization hosts, monitoring tools and SIEM workflows. Sophos UTM knowledge is especially relevant when an organisation continues the platform under its current vendor name.
When companies need specialists
Freelance expertise is useful when internal teams inherit an undocumented appliance, face recurring connectivity problems or need a controlled security-policy review. Companies in Germany may also bring in a specialist for on-site network changes, remote troubleshooting across branch offices or migration planning. Clear documentation and communication in English or German can be important when several teams share responsibility for the environment.
What strong professionals deliver
Strong Astaro professionals begin with the traffic model and business requirements rather than copying existing rules. They separate administrative, user and service networks, apply least-privilege access, test VPN failover and keep rollback plans ready. They explain every policy change, protect configuration backups and leave concise runbooks that allow internal teams to operate the environment safely after the engagement.
Frequently asked questions
Key details about Astaro, drawn from the questions we get asked most.
Astaro is used to secure the boundary between internal networks, the internet, branch offices and remote users. Astaro Security Gateway combines firewalling, VPN, web protection, email security, intrusion prevention and traffic reporting in one system.
Astaro Security Gateway is the earlier product name and foundation of what became Sophos UTM. The management concepts and many security functions are closely related, but a project should confirm the exact appliance, software release, licensing model and migration path before work begins.
A strong Astaro specialist should understand TCP/IP, VLANs, routing, DNS, certificates and network segmentation. Experience with IPsec, SSL VPN, Active Directory or LDAP, virtualization, monitoring and Sophos UTM makes the specialist more useful in mixed environments.
The required depth depends on the scope. Astaro support for a rule review or VPN fault may need focused operational knowledge, while a redesign, high-availability setup or migration calls for experience with security architecture, testing and rollback planning.
Many Astaro tasks can be completed remotely through a controlled administrative connection, especially policy reviews, log analysis and configuration work. On-site support can still matter for appliance replacement, cabling, physical failover checks or changes in facilities without reliable remote access.
A company should assess Astaro replacement when hardware is difficult to support, required security functions are no longer available, licensing no longer fits the environment or the platform cannot meet current capacity and integration needs. A specialist can separate a correctable configuration issue from a genuine migration requirement.
Quality Astaro work is documented, tested and tied to approved traffic flows. Look for clear rule naming, least-privilege policies, verified VPN behaviour, protected backups, useful monitoring and a rollback procedure rather than a configuration that merely appears to work.
Before taking on Astaro work, clarify the appliance model, software state, network diagram, authentication sources, VPN users, change window and access method. Also confirm whether the goal is troubleshooting, hardening, operational support or a move to Sophos UTM, because each requires a different delivery plan.
The average hourly rate of freelancers in Germany who have used Astaro in their recent projects is 111 €, which corresponds to a daily rate of about 887 € based on an 8-hour working day.
Of the freelancers in Germany who have used Astaro in their recent projects, 22% hold at least a Bachelor's degree and 11% hold at least a Master's degree.
On average, freelancers in Germany who have used Astaro in their recent projects have 25 years of professional experience, with a single engagement typically lasting around 2.5 years.
The most common languages among freelancers in Germany who have used Astaro in their recent projects are German (100%), English (92%), and French (54%).
The most common industries among freelancers in Germany who have used Astaro in their recent projects are Information Technology (100%), Banking and Finance (69%), and Telecommunication (62%).
The most common business areas among freelancers in Germany who have used Astaro in their recent projects are Information Technology (100%), Operations (85%), and Project Management (85%).
Main locations of FRATCH Experts, who have recently used Astaro
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
