Citrix Experts in Munich

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Cisco SDA LAN network
• Transition and Transformation

• Processing and coordination of IT tickets (Helix, Omnitracker) incl. VIP support and remote support (Microsoft Teams, RDP, FastViewer)
• Onsite support at the main location as well as support for modern conference and meeting room technology (e.g. MeetingBoard 75 Pro)
• User and rights management in Active Directory (Active Roles), Azure AD, Exchange and MDM
• VDI support and monitoring with Citrix Director and Aruba Networking
• Endpoint management and policy administration via Ivanti
• Deployment, configuration and lifecycle management of clients (Dell notebooks, iPhones, iPads)
• Hardware rollouts for new employees incl. shipping across Germany
• Asset and license management as well as organization of site migrations

• It is like a startup within REWE, where we have to build a new forecasting system on Google Cloud Platform from the scratch. Although, officially my role is called MLOps, my actual tasks also include development of data processing pipelines (data engineering) and data scientists tasks such as feature engineering and model trainings.
• GCP: Terraform (tofu), Vertex AI (Kubeflow), Cloud Run, IAM, Google Cloud Storage, BigQuery, Artifact Registry
• Data engineering: Snowflake as the main data warehouse, Terraform, DBT for data model implementations
• CI/CD: GitLab. We have built a CI/CD pipeline that automates deployments of new releases up to production environment
• Development of feature store and data synchronization between environments
• Data science: evaluation of different forecasting models, including CatBoost, Contextual Gamma and Random Forest; implementation of training pipelines using Kubeflow on Vertex AI; scaling and development of an event-driven interface using Kafka as a forecasting service; evaluation of MLFlow for model tracking and model registry
• Implementation of REST API using KeyCloak OAuth2 and OpenID (JWT)
• Monitoring: implementation of dashboards with Grafana, Prometheus, Mimir, Streamlit and Loki to monitor prediction metrics, GCP and Snowflake costs for pipelines, and system metrics
• Development of Copilot Agent Skills

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

• Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
• Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
• Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
• Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.

• Responsible project manager for complex international infrastructure projects
• Coordinator and decision-maker for IT architects in network infrastructure and software with over 100 000 users
• Holistic project management
• Launch and implementation of initiatives
• Project management of international infrastructure projects with C-level reporting
• Leadership and coordination of IT architects
• Technical project management for merger and cloud transformation
• Execution of international software and hardware rollouts
• Implementation of IT security projects and compliance
• Working with key technologies (e.g. 5G/6G standard)
• Management of complex defense and aerospace projects (e.g. Ariane 6, Eurodrone)
• Establishment of the healthcare and life sciences business unit
• Creation and management of internal employee training

• Conducted a comprehensive due diligence review for a potential acquisition of a Swiss manufacturing company as part of a pre-merger analysis
• Assessed production capacities and technical infrastructure
• Evaluated integration possibilities into existing business processes
• Performed risk assessment and developed recommendations for action
• Documented the findings and presented them to management

• Project support for VMware/Active Directory
• Operational support for administration, process execution
• Creation and review of documentation
• Active Directory, Powershell, VMware VSphere 7, Confluence, Jira
• Windows Server 2016/2019/2022/2025 GUI/Core
• Concept and rollout of Windows Update Services (approx. 500 client/server systems) and takeover of a central WSUS gateway company-wide
• Takeover and redesign KMS/RDS systems company-wide

• Chief Information Officer with more than two decades of international leadership experience in publicly traded and regulated industrial environments.

• Responsible for the structural realignment of complex, long-standing IT organizations to bring transparency, control, and financial stability.

• Leading global IT organizations with budgets up to €120 million and up to 320 employees.

• Developing and rolling out centrally managed operating models, setting up transparent financial and governance structures, and consistently delivering business-critical platform initiatives (e.g., SAP S/4HANA).

• Focused on restoring decision-making, prioritization, and execution power during transformation phases under increased organizational pressure.

• Leveraging technology as a strategic tool to increase efficiency, stabilize operations, and support sustainable business development.

• Global IT Transformation & Operating Models

• SAP S/4HANA & Platform Harmonization

• Digital Manufacturing & Industry 4.0

• Governance, Compliance & Cyber Resilience

• International Organizational Leadership

• Sourcing & Location Strategies

• Overall responsibility for strategy, governance, budget, and operations of the global IT function with an annual budget of approximately €45 million and an international team of about 95 employees across all locations.

• Direct reporting line to the executive management and close strategic coordination with the CFO and COO.

• Realigned a historically decentralized IT landscape of 28 legally independent entities and separate budget and control logics into a centrally managed, internationally standardized operating model.

• Introduced transparent governance, reporting, and financial structures with clear separation and active management of CapEx and OpEx budgets at the corporate level.

• Established group-wide IT financial and performance management with clear investment prioritization, transparent CapEx/OpEx structure, and active portfolio governance to sustainably enhance decision-making at the executive level.

• By consistently centralizing, standardizing, and harmonizing platforms (including global rollout of SAP S/4HANA), structural complexity was significantly reduced.

• IT cost base was sustainably cut by about 15% while significantly improving performance and service levels and increasing transparency and control for executive management and leadership.

• At the same time, strategically expanded the production IT architecture in the context of Industry 4.0 by integrating MES and IoT systems in OEM-related, safety-critical production environments and building audit-ready governance and security structures while meeting regulatory requirements (e.g., automotive standards, TISAX-like frameworks, global compliance rules).

• Maintained strict focus on strategically relevant initiatives by clearing parallel projects, reducing redundant structures, and establishing clear responsibilities to noticeably increase speed, commitment, and execution power in the organization.

• High international presence with operational responsibility at production sites and an active role as a strategic sparring partner to the executive management.

• Transformation project to S/4HANA
• Test management and coordination of functional tests for SAP
• Preparation and support of tests (SIT 1+2, MOCK 1+2, UAT) as part of the SAP S/4HANA rollout (SD, MM, FI/CO, MD)
• Creation of test strategies, test plans, and test cases to ensure system quality
• Monitoring and compliance with service level agreements (SLAs) as well as ensuring the timely delivery of agreed performance indicators
• Coordination of the approach with test managers from other regions (US, JP)
• Planning of European test activities in the SAP implementation project in cooperation with test managers from the supplier
• Coordination of interdisciplinary business and technical test teams in Europe
• Business collaboration with global implementation partners
• Use of Tricentis qTest and ValGenesis as test management tools (for validation-relevant processes)
• Training functional consultants in testing and test tools
• Creation and evaluation of change requests, including effort estimation, prioritization, and tracking
• Reporting on test progress

• Lead Architect to design and implement the data lake and ETL Pipeline using AWS Stack
• Performance Optimization of Data Ingestion of ETL Pipeline
• Development of Data Validation using Great Expectations
• Leading of the data migration for two sources exchanges
• Data Modeling in AWS Redshift

MLOps

• Model inference implementation by mlflow and AWS SageMaker
• Feature Engineering for the running ML Models ( Recommender Engineer, Clustering )
• Implementatino of Model Registry and artifactory using mlflow
• Historization an Profiling of the Input Data Using AWS Glue Crawler and AWS Data Catalog
• Feature importance using mlflow

Tech. Stack: Python 3, AWS Glue, AWS Step Fucntion, AWS Lambda, AWS EventBridge, AWS IAM Role, AWS SageMaker, AWS EC2, AWS Glue Crawler, AWS CloudWatch, MLFlow, ETL, Data lake, GitHub Action, Terraform, Jenkins, Ansible playbooks (Infrastructure as Code), CI/CD, GitLab, SQL, PySparkSCRUM, Agile, Jira, BigData, VSCode, DBeaver, MSSQL, MySQL, grafana, Docker, Linux, Bash, MapReduce, Data Modeling (ORM), Pandas, YAML, SQL-Alchemy

• Pentesting of mobile applications
• Code review
• Gematik audit
• Development of secure software development methods
• Creation of security and test concepts
• Penetration testing of software and architecture
• Vulnerability analysis
• Automation and information security
• Use of Confluence and Jira
• Working with databases, J2EE, JavaServer Faces, Liquibase, Apache, Maven, Mercurial, Oracle Financials
• Documentation and creation of security policies
• Management of software systems, SharePoint, PrimeFaces, Git
• Compliance with security regulations and .NET, AWS, API
• Tools: MobSF, Frida, Android Studio, Drozer, Objection, Azure