Avaya Experts in Germany

• Defined and established the areas of responsibility
• Built a governance model for the department and its areas of responsibility
• IT strategy, project management, process management, and quality and sustainability management
• Developed a communications strategy for the group
• Created the IT strategy
• Designed templates, guidelines, and processes for consistent ways of working
• Recorded strategic guidelines and grouped ongoing projects – derived a roadmap for strategic planning
• Reviewed ongoing projects
• Prepared staffing calculations and capacity planning
• Defined job profiles

• Conceptual consulting for securing business processes
• Consulting for planning and implementing IT and IT security projects
• Security and policy checks, process optimization, contingency planning
• Project management and interim management in IT infrastructure and information security

Overview of relevant projects:

• 2025: Consulting on a DLP concept and for Digid GmbH.
• 2025: Consulting for a customer after a cybersecurity attack in which the IT infrastructure was compromised and the attacker gained M365 tenant admin rights. Investigation and recovery of the IT infrastructure. Preparation of recommendations for increasing IT security.
• 2025: Continuation of the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
• 2024: Preparation of a DNS concept including consulting on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones and automation. Preparation of a DHCP concept including consulting on DHCP design, the central DHCP management system and automation. Consulting on the operation of the products mentioned, operating processes, and adapting the IT documentation and IT service description for Thyssenkrupp Marine Systems.
• 2024: Analysis and assessment of the network and security infrastructure established by the providers with regard to the overall architecture, consisting of the design and components. Development of proposed solutions to improve current operations, maximize performance and security, and reduce complexity. Presentation of the results, their causes and possible solutions to C-level management, including the required decision templates. Development of a SASE concept based on a Zero Trust architecture for Norddeutsche Landesbank.
• 2024: Continuation of the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
• 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proof-of-concepts for DDoS protection and Digital Experience Monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on Zero Trust, redesigning a Cisco ISE implementation and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
• 2023: Continuation of the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Bundesanstalt für Geowissenschaften und Rohstoffe (until 05/2023) and Union Investment IT-Services GmbH (until 07/2023).
• 2022: Preparation and review of white papers for infrastructure and security architectures, planning new network infrastructures for Deutsches Luft- und Raumfahrtzentrum.
• 2022: Development of a concept for the technical and process-related modernization of a disaster recovery plan for United Nations Volunteers.
• 2022: Development of a concept for moving measurement data to a cloud environment, introducing Network Access Control and conducting an awareness training session for Digid GmbH.
• 2022: Development of a network segmentation concept for DZ Hyp AG.
• 2022: Development of a network segmentation concept for Bundesagentur für Arbeit.
• 2021: Development of a new load balancer architecture for Bundeswehr Fuhrparkservices GmbH.
• 2021: Vulnerability scan and penetration test of a web frontend, including evaluation and preparation of recommendations for remediation, taking risk and probability of occurrence into account, for customer ifi GmbH.
• 2021: Consulting, concept development and sub-project management for introducing a Network Access Control solution (certificate authentication and MAC address bypass) and macro-segmentation (area and zone concept based on dynamic assignment of endpoints) in office and production IT for customer Vaillant Group GmbH.
• 2021: Upgrade and optimization of the LAN and WLAN infrastructure for customer United Nations Volunteers.
• 2021: Development of a target concept for modernizing the IT security infrastructure consisting of the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet access, admin and management networks and wireless LAN, including support during implementation, for Bundesanstalt für Geowissenschaften und Rohstoffe.
• 2021: Creation of a micro-segmentation concept based on Cisco DNA and SGT and Zero Trust for Union Investment IT-Services GmbH.
• 2021: Review and update of ISMS Level-3 policies and preparation of process instructions for customer Software AG.
• 2021: Project management for the global Tec-Refresh project Meraki WLAN 2.0, coordination of outsourcing the LAN/WLAN infrastructure to a managed service provider and preparation of a WLAN concept for automated guided vehicles for customer Heraeus Infosystems GmbH.
• 2021: Project management and technical support for the “Transition of SIEM/SOC Services” project of a customer into a shared environment and assumption of the interim role of Head of Security Operations at customer Datagroup SE.
• 2021: Workshop for a future implementation of Mobile Device Management at customer Allgeier Experts Go GmbH.
• 2021: Sub-project management for introducing a rule management tool for firewalls and recertifying NAC endpoints based on 802.1x and MAB at customer Union Investment IT-Services GmbH.
• 2020: Development of a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
• Recording and analysis of the current network architecture, including project initiation.
• Development of a concept for micro-segmentation in the data center and access network.
• 2020: Infrastructure and security architecture audit for customer Stuttgarter Versicherung AG.
• Analysis of the IT infrastructure and IT security architecture with regard to the configuration of network and security components. Additional review of contracts, process descriptions and manuals for completeness. Development of recommendations to improve the stability and operation of the infrastructure. Preparation of a network segmentation concept and project management for implementing the measures from the analysis project.
• 2020: Consulting on setting up an ISMS-Light for customer Josera foodforplanet GmbH & Co. KG.
• 2020: Security architecture consulting for customer Datagroup SE.
• Development of a future IT infrastructure and IT security architecture.
• Analysis of the current IT architecture of all 23 companies.
• Recommendations for optimizing the IT infrastructure and preparation of a comparison between a classic perimeter security concept and the Zero Trust model.
• Preparation of a security zone concept.
• Preparation of an IT infrastructure architecture in coordination with all companies.
• 2018 - 2019: Stream Lead in the Cyber Security program of Deutsche Lufthansa AG.
• Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
• Project area: Network Segmentation and Access Control.
• Project area: Security Architecture.
• Project area: Privileged, Identity & Access Management.
• Project area: Simplify User Authentication (MFA).
• Project area: Mobile & Endpoint Security.
• Project area: OT Security.
• Project area: E-enabled Aircraft.
• 2018: Security architecture consulting for customer Deutsche Lufthansa AG.
• Project management for the development, evaluation and management of the company-wide information security architecture.
• Development of a security strategy and roadmap to align the security architecture with the Zero Trust model.
• Evaluation of security solutions, services and tools available on the market.
• Definition of requirements for RfPs and evaluation of offers.
• Development, maintenance and monitoring of security architecture artifacts.
• Conducting security assessments of existing and new IT systems and security services.
• 2018: ISMS consulting for customer GLS IT Services GmbH.
• Consulting on introducing and initially operating an ISMS based on ISO27001.
• Auditing the IT environments of the GLS country companies.
• Analysis and assessment of IT security risks and derivation of required measures.
• Development of proposed solutions in coordination with the relevant stakeholders.
• Project management and transition of the ISMS to later operations.
• 2016 - 2018: Security Pre-Sales Consultant for customer Cisco Systems GmbH.
• Nationwide strategic and conceptual consulting for major enterprise customers and financial and insurance customers on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch and ISE.
• 2017 - 2018: Design and implementation of an ISMS for customer Verivox GmbH.
• Conducting various BIAs and GAP analyses.
• Preparation of security policies based on ISO 2700x.
• Assumption of the interim role of Information Security Officer.
• 2017: Preparation of a contingency concept for VPV Lebensversicherungs-AG.
• Review and update of the IT contingency manual.
• 2016: Consulting and project management for the design of cloud and hosting services for customer Vodafone Group Services GmbH.
• Analysis and optimization of the sell-build-run process.
• Preparation of detailed-level designs for cloud products.

• Designed and specified the technical network integration of a new business critical application system (MUREX) in the capital market area in a complex interface and outsourcing environment.

• Created component specifications, catalog of measures and implementation plan.

• Ensured proper integration of developed results in accordance with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous enhancements to guarantee efficient resource utilization and acceptable response times to users.

• Provided network support in financial service organization and operational change preparation on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed role of network architect for medium-large projects involving team resources.

• Planning the migration approach from the old to the new ZEWIS system
• Configuration of the modules (basic module, project recording, assembly billing, etc.)
• Setup of interfaces and data transfers
• Coordination of the rollout and alignment with specialist departments
• Supporting the team during go-live and troubleshooting
• Quality assurance and preparation for acceptance
• Documentation of all steps to ensure smooth operation

INTRODUCTION OF AI OPERATING SYSTEM & DEVELOPMENT OF DIGITAL INFRASTRUCTURE

Technology / Start-up – Munich, 3 employees

Objective:

Selection and implementation of an AI operating system, development of a structured knowledge base, and creation of AI agents and skills to increase efficiency across the entire company

• Requirements analysis and evaluation of suitable AI operating systems based on the company’s specific needs
• Design and development of a central knowledge base as the foundation for AI-supported processes
• Development and configuration of AI agents and skills for recurring business processes
• Prompt engineering for precise, context-based outputs from the AI agents
• Personal coaching for the founders and employees on using AI independently and effectively
• Overall project management, including planning, prioritisation and progress tracking
• Documentation of the implemented solutions and creation of usage concepts for sustainable operation

Tools: Langdock, SharePoint, Prompt Engineering, AI agents, AI skills

• Project manager for transition and migration of IPC Trader Telephony to 3CX-based dispatcher and Cloud9-based trader telephony
• Planned and managed company-wide replacement of IPC Trader Telephony with 3CX and Cloud9 solutions
• Continuous improvement of implementation processes and development and execution of optimization measures
• Planned, coordinated and tracked delivery of IT equipment and service provision at all sites
• Led a team of IT site managers to ensure IT services were delivered on time, within budget and with required quality
• Defined project scope in coordination with all business resources
• Planned and executed software and hardware rollouts, including user support during implementation
• Communicated with key customers and service organizations and collaborated with traders, telephony architects, app owners, testers and technical IPC teams
• Conducted stakeholder analysis for creation and maintenance of change management processes
• Managed full change process: prepared change requests, defended them in change board, communicated at company and user level, and supported change implementation

• Designed and implemented Azure Kubernetes Clusters, and managed DNS and Firewall solutions, enhancing network security and reliability.
• Led projects using Agile Scrum methodologies to streamline development cycles and improve project efficiency.
• Fostered and maintained relationships with suppliers to ensure timely project deliverables and resource availability.
• Managed continuous integration and delivery (CI/CD) pipelines using Jenkins, Sonar, GitHub, Bitbucket, and Terraform within the BMW Azure Cloud environment.
• Utilized Fortify SSC and Contrast AST for robust application security testing.
• Directed DevOps engineering initiatives on the SAP Business Technology Platform (BTP), focusing on streamlining development and deployment processes.
• Service Now governance, risk und compliance (GRC&IRM).

• Responsibility for time, budget and quality targets of the sub-project
• Creation and maintenance of the sub-project plan including dependencies to FI, CO, PP, SD
• Definition of work packages, resource planning and progress monitoring
• Risk and change management within module scope
• Analysis of as-is processes in procurement, logistics and warehouse management
• Design of to-be processes according to SAP standard (EWM warehouse processes such as goods receipt, put-away, picking, goods issue)
• Coordination with key users and specialist departments
• Support for interface development with external warehouse systems and supplier portals
• Organization of test data, error tracking and test documentation
• Support for deployment preparation and key user training
• Participation in the cutover plan (data migration, go-live preparation)
• Support of the department during the hypercare phase after go-live
• Assistance in mapping EWM core processes
• Management of external service providers
• Use of Jira, Confluence, Signavio, MS Teams, Aqua ALM

• Requirements Engineering / UI / Testing
• Analysis, elicitation and preparation of user stories
• Definition of acceptance criteria and quality requirements
• Creation of wireframes and mock-ups
• Roadmap planning and backlog prioritization
• Test management, test case creation and execution
• Creation and tracking of bugs
• Identification and planning of automated tests
• Management of cooperation partners
• Organization of project employees, including project controlling and budget planning
• Coordination meetings with stakeholders
• Facilitation of retrospectives
• Onboarding, coaching and trials with customers
• Conducting webinars

• As-is analysis of the existing heterogeneous telecommunications infrastructure (128 locations)
• Requirements analysis for call center solution and VoIP / Unified Collaboration and Communication services
• Creation of a solution proposal and a technical concept
• Tendering for the new services
• Contract negotiations
• Support during the pilot phase

• Enterprise and IT strategy
• Digital transformation
• Process and portfolio management
• Interim IT management

• Basic NIS-2 impact assessment
• NIS-2 registration
• Conducting a current state analysis
• Creating the requirements specification
• Monitoring the implementation of NIS-2 compliance
• Establishment of reporting procedures in the context of NIS-2
• Risk analysis and security for information systems
• Handling security incidents
• Maintenance and recovery, backup management, crisis management
• Supply chain security, interfacility security, third-party security
• Security in development, procurement and maintenance, vulnerability management
• Evaluating the effectiveness of cybersecurity and risk management
• Cybersecurity and cyber hygiene training
• Cryptography and encryption
• Personnel security, access control and asset management
• Multi-factor authentication and continuous authentication
• Secure communication (voice, video and text)
• Secure emergency communication

• Advising companies and institutions in the areas of customer service, customer experience, customer centricity, user journeys, CRM strategy, operations, digital banking, payments, and energy
• Selection and implementation of CRM systems
• Selection and implementation of billing/ERP systems
• Selection and implementation of omnichannel systems
• Selection and implementation of knowledge management systems
• Interim manager (COO, CCSO)
• Project management for CRM and IT projects as well as software rollouts
• Incident management (leading task forces)

• Project Management for an implementation of a BI Application (EURP) based on QlikView at a global client in Hattersheim
• Project Management for a global client in the automotive business (Development Project) in Braunschweig
• Overall responsibility of the time & cost-effective realization based on the given contract
• Managing 3rd party suppliers
• Coaching other project members
• Support administrative and organizational tasks
• Budget responsibility for the project