BGP Experts in Germany
in minutes from over 15,000 CVs with the power of AI.Hire experts who design BGP routing, tune route policies, and stabilize peering across ISP, cloud, and data center networks. They handle Border Gateway Protocol, BGP communities, route filters, and failover planning, with fast, precise matching to vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used BGP
Karlheinz Götz
Last position:
Consultant / Test Analyst / Supporter at Insurance office, Spaichingen
Project: Process optimization & IT support in an insurance broker office.
Project activities:
- Analysis of processes and definition of requirements
- Consulting for the implementation of a cloud solution (soho)
- Installation and verification of new infrastructure HW
- Cloud installation & configuration
- Definition and creation of use cases
- Performing user acceptance tests (UAT)
- User training / training
- IT support (cloud, PC, server, printer, network)
Label: Insurance, infrastructure, configuration, training, support
Halil Oeztoprak
Last position:
Senior Cloud Operations & DevSecOps Engineer (Azure / Terraform / CI-CD) at KfW Bankengruppe
Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).
Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.
Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.
Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.
Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.
Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.
Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.
CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.
Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.
Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.
OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.
Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).
Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.
Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.
Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.
SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.
Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.
Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.
CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.
Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.
Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.
Tom Klein
Last position:
Volunteer Member at Johanniter-Unfall-Hilfe
Volunteer helper at the Johanniter in medical services and disaster response, highlighting teamwork and coordination even in times of crisis.
Jens Schneeweiß
Last position:
Network Technology at ISP, Internet Service Provider, BGP Peering
- Optimization of the transmission media of the data links in the Ruhr area
- Configuration/expansion of switches and routers for an autonomous system AS
- Improve the network protocols used Layer 2/3 (OSI model), RSTP, broadcast, etc.
- Laying cables, crimping, antennas, routers, switches
- Maintenance, expansion, selection and prioritization of troubleshooting measures for network monitoring (PRTG, The Dude)
- Organization and new connection of another BGP peering, data center, NGN fiber optic
- VPN IPSec site connections for 6 sites with PFSense, Fritzbox
- Configuration of WLAN devices (Mikrotik, UBNT
Label: TCP/IP, VLAN, BGP, OSPF, MPLS, VPLS, routing protocols, WLAN, EoIP, PPPoE, routing, SNMP, DHCP, DNS, NAT, native IP, VLAN, Ethernet, VoIP., switches and routers from: Nortel, Cisco, MikroTik, UBNT., network management systems: The Dude, PRTG, UISP
Mustafa Kederoglu
Last position:
Senior Network Design and Engineer at Helaba
Designed and specified the technical network integration of a new business-critical application system (MUREX) in the capital markets area in a complex interface and outsourcing environment.
Created component specifications, a catalog of measures and an implementation plan.
Ensured proper integration of the developed results in line with the bank’s framework: IT compliance, IT security, change and release management.
Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.
Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.
Acted as technical interface between the bank, service providers and consulting partners.
Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.
Analyzed and diagnosed all security and network failures, glitches and malfunctions.
Initiated continuous improvements to ensure efficient resource use and acceptable response times for users.
Provided network support in a financial services organization and prepared operational changes on production banking network infrastructure for both large and small projects within strict change management discipline.
Designed, defined, tested, governed and improved engineering standards.
Performed the role of network architect for medium to large projects involving team resources.
Tom Heinrich
Last position:
Network Architect / System Engineer at Teleperformance
Professional focus: Fortinet rollout / site standardization / cloud / ISP migration
- Network analysis, design and optimization, change
- ISP changes
- Commissioning of service providers and decentralized IT support teams
- Setting up a central management platform
- Routing optimization for dynamic routing
- Optimizing and creating firewall rules
- AWS connection / design
- MS Azure connection / design
Technologies / tools: Fortigate, Palo Alto, WAN, SDN WAN, VPN, BGP, OSFP, Fortimanager, Panorama, Meraki, Alcatel, AWS, MS Azure, Network Architecture
Sami Bejaoui
Last position:
German Customer (Pharma Supply-Chain Sector)
- Integration of a FortiManager into the existing FortiGate firewall infrastructure to centralize and optimize firewall management.
Andreas Wißkirchen
Last position:
Freelancer at Infrafibre Networks GmbH
- Assessing the current status (planning stage / rollout status) of the so-called inter-polygon routes
- Creating an end-to-end project plan for the individual routes, considering active and passive components and tasks
- Monitoring and controlling the implementation of the plan
- Optimizing the chosen network architecture
- Creating network and splice diagrams
Stephan Krausenegger
Last position:
Migration Coordination at ITZBund
- Analysis and assessment of government business processes with regard to migration capability
- Definition and preparation of the technical framework conditions in the new master data center
- Development and optimization of migration procedures and processes
- Transformation of existing solutions to new technical standards (technology refresh)
- Coordination of architecture and technical cross-cutting topics
Hisham Elsharawy
Last position:
System Engineer Network & Security at Isringhausen GmbH
- Operation, maintenance and administration of the global network & security system landscape
- Troubleshooting and support in 2nd & 3rd levels and provide technical advice to other dept.
- Configuration of complex LAN/WAN/SD-WAN and WLAN network infrastructures (N5K, N9K, ASR 8000, Wireless Controller WLC9800, AP C91xx and VMware Velo Cloud)
- Control of external service providers as part of service and escalation management
- Implementation and monitoring of system updates (software upgrades, minor/major changes)
Matthias Weigel
Last position:
Self-employed at maweos GmbH
Valentin Oprea
Last position:
Network Architect at IT Service Provider - Public Sector
- Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
- Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
- Automated configuration deployment in the testing environment with Ansible
- Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
- Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
- Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
- Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
- Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
- Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series
Mohamad Alosman
Last position:
Systems Engineer for Network Security at Bechtle AG
- SD-WAN solution by Aruba – Swiss energy company (330 sites): design and implementation of an SD-WAN branch solution with Aruba 9004 gateways, encrypted overlay, policy-based routing, WAN load balancing, and centralized management via Aruba Central.
- LAN/WLAN & security – schools in Germany (9 sites): deployment of Aruba switches & AP-505, FortiGate 80F firewalls; setup of Checkmk monitoring, incident and change management, and secure admin access (BeyondTrust).
- Multi-site security – energy billing company (20 sites): deployment of a complete Fortinet solution (FortiGate HA cluster, FortiSwitch PoE, FortiAP), IPsec remote-access VPN via FortiClient, centralized management via FortiCloud, IntraID authentication, operations and incident management.
- Data center migration – German client: migration of data center switches (Mellanox), firewall cluster, and OfficeConnect switches to a new data center; securing configurations, implementing HA designs, testing, monitoring, and coordinated change and incident processes. Setup of two new 6300 M VSX clustered switches.
- Data center security – university hospital: implementation of a high-availability FortiGate 400F firewall cluster across three data centers; security policy design, operational support, and change/incident management.
- Enterprise campus & network access control – manufacturing company in Germany: introduction of Aruba ClearPass NAC, setup of a VSX-based switching architecture, secure WLAN access with MPSK, and integration into existing networks.
- EU client (Germany & Poland) – Sophos firewalls: operations, incident and change management of Sophos firewalls including IPsec VPN; troubleshooting and ongoing optimization of security configurations.
- Network modernization – pharmacy client in Germany: design and rollout of core and access switching (Mellanox, Aruba Instant On), migration from Sophos to Fortinet firewalls, network segmentation, and security hardening.
Martin Frlička
Last position:
IT Security Consultant at Freelance
Christopher Mäuer
Last position:
Mobile & Full-Stack Engineer at Propstack GmbH
- Refactored the mobile app by reimplementing stores, models, API client, screens and components using Typescript
- Added performant on-device storage for stores as preparation for offline mode
- Integrated RNUILib to achieve a minimal and modern UI design quickly
- Implemented native packages to provide additional features such as displaying of caller IDs
- Planned feature development and UX improvements following initial refactoring and redesign
Discover over 15,000 top freelancers
Statistics of experts using BGP
Aggregated from the professional profiles of matched freelancers.
Experience
24 years
Position duration
3 years
Positions per freelancer
14
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Manufacturing, Telecommunication
Certification focus areas
Information Technology, Operations, Project Management
Bachelor's degree or higher
64%
Master's degree or higher
43%
Certifications per freelancer
6
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using BGP
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
What BGP does
BGP, or Border Gateway Protocol, is the routing protocol that moves traffic between networks on the internet and inside large private environments. It decides which paths are preferred, which routes are accepted, and how traffic shifts when links change.
Where it is used
Companies bring in BGP specialists for:
- ISP and carrier peering
- multi-homed enterprise networks
- cloud edge and data center routing
- network redesigns and migrations
- traffic engineering and failover
Tools and skills
Strong BGP professionals work with route maps, prefix lists, communities, and policy design. They often know Cisco, Juniper, Arista, FRRouting, and common monitoring tools. Good work is precise, because small policy mistakes can change how traffic enters or leaves a network.
When freelancers help
Freelance expertise is useful when a team needs short-term support for a routing change, a new upstream provider, or a difficult incident. In Germany, companies often ask for remote help first, then on-site work for cutovers, audits, or hands-on troubleshooting in critical network rooms.
What strong experts deliver
A good BGP expert documents the current routing state, checks import and export policy, and tests convergence before changes go live. They can also explain whether the issue is in BGP, upstream reachability, DNS, or a broader network design problem.
Common hiring signals
You likely need a specialist if you see route leaks, unstable peering, asymmetric traffic, or repeated outage patterns after network changes. You also need help if your team must connect providers, support redundancy, or clean up a long-running BGP configuration that no one wants to touch without care.
Frequently asked questions
What clients ask us most about BGP — answered in short.
BGP is used to exchange routing information between networks and to control how traffic enters, leaves, and moves across them. Companies rely on it for peering, multi-homing, failover, and traffic engineering in internet-facing and private backbone environments.
BGP is for inter-domain routing and policy control, while OSPF is usually used inside a network for faster internal path selection. Static routing is simpler, but it does not scale well when links, providers, or traffic policies change often.
A strong BGP specialist usually understands IP addressing, subnetting, VLANs, routing policy, and packet troubleshooting. Knowledge of Cisco IOS, Juniper Junos, Arista EOS, or FRRouting helps, as does comfort with tracing, logs, and network diagrams.
A BGP project that only needs a simple peer setup is very different from one that involves multi-homing, route filtering, or incident recovery. For production networks, companies usually want someone who has already handled live routing changes and can explain the risk before touching the configuration.
Many BGP tasks can be done remotely, especially design reviews, policy changes, and troubleshooting with access to logs and device output. On-site work is useful for cutovers, hardware access, or network rooms where a change window needs hands-on support, including in Germany-based teams with strict coordination.
Look for clear explanations of routing policy, not just device commands. A strong BGP freelancer can describe why a prefix is accepted or rejected, how communities are used, and how they will test rollback before any live change.
BGP communities are tags that help apply routing policy across many prefixes, while route filters decide what gets in or out. They matter because they keep complex networks predictable and reduce the chance of leaking routes or sending traffic the wrong way.
No, BGP is common in ISP and carrier networks, but it is also used by enterprises, cloud-heavy companies, and data centers. Any organization that connects to more than one upstream path or needs tight control over routing can benefit from it.
The average hourly rate of freelancers in Germany who have used BGP in their recent projects is 105 €, which corresponds to a daily rate of about 841 € based on an 8-hour working day.
Of the freelancers in Germany who have used BGP in their recent projects, 64% hold at least a Bachelor's degree and 43% hold at least a Master's degree.
On average, freelancers in Germany who have used BGP in their recent projects have 24 years of professional experience, with a single engagement typically lasting around 3 years.
The most common languages among freelancers in Germany who have used BGP in their recent projects are German (100%), English (100%), and French (13%).
The most common industries among freelancers in Germany who have used BGP in their recent projects are Information Technology (87%), Manufacturing (52%), and Telecommunication (52%).
The most common business areas among freelancers in Germany who have used BGP in their recent projects are Information Technology (100%), Operations (87%), and Project Management (74%).
Main locations of FRATCH Experts, who have recently used BGP
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
