CMDB Experts in Germany

• Independently designed, conducted and evaluated a research project examining dynamic management capabilities (DMCs) in the implementation of HR practices at different management levels (top, middle and frontline management).
• Focus on the strategic role of frontline management in implementing effective HRM measures.
• Self-initiated project with academic collaboration involving York St John University, Robert Kennedy College and the University of Cambridge.

• Focus on optimizing and further developing the internal customer EBICS application
• Functional and technical consulting for Aareal First Financial Solutions AG on EBICS standard products and applications in the areas of operations and further development, as well as project-related communication with external development partners and the product manufacturer to implement the corresponding technical optimizations
• As the functional coordinator, providing advice on content-related and regulatory requirements as well as technical prerequisites and requirements, and bringing these together at the functional level
• Consulting on the use of EBICS formats
• Reviewing the current EBICS standard for optimization and further development potential
• Analyzing the current state to identify development potential and deriving appropriate recommendations for action while considering regulatory requirements
• Conducting EBICS tests throughout the project
• Functional responsibility for requirements management and, in this context, recording and documenting requirements for such tests
• Designing a functional and sustainable test management system
• Conducting and evaluating tests
• Consulting on sustainable quality assurance and audits
• Project language: German and English
• Tools/Methods: MS Project, MS Office, MS Visio, TestRail, Confluence, Jira, Business Logics Bankkrecher, Business Logics Test Data Generator, Business Logics Banking Tool, Business Logics Test System, DBEAVER, Squirrel, Unix Virtual Machines, WinSCP, Kitty, Putty, various Aareal Bank products, Online Banking Portal, Aareal Sign, core banking system, SAP Blue Eagle, SAP RE-FX, Aareon Wodis Sigma, Haufe Real Estate Wowinex, GAP Group Immotion, UTS Karthago, SAP IS-U/Waste, SIV kVASy, various EBICS clients

• Functional management and further development of a team of 28 IT employees (internal & external) in the areas of HelpDesk / HelpLine, RHEL (Red Hat), MUREX (trading system & applications), SAP basic operations
• Management of external service providers (including FI-TS for SAP basic operations)
• Personnel, resource and budget planning for the IT department and projects
• Introduction and establishment of regular communication formats (regular meetings, team and cross-departmental meetings)
• Ensuring application operations in a hybrid environment (Windows / Linux with database and web/application servers)
• Support for transformation projects to modernize the application landscape (e.g. DevOps approaches)
• Building and introducing digital IT procurement for hardware & software (e.g. with DELL)
• Development and management of the „IT Operations DOS" department based on the company strategy
• Preparation of management reports & decision papers on IT projects, optimization potential and automation opportunities
• Representing the department in Rentenbank committees and ensuring regulatory compliance (BaFin §44, DSGVO, BSI, MaRisk)

• Project: ESU Windows and SQL Server Consolidation / Configuration Management in ServiceNow
• Prepared an as-is analysis of all servers worldwide
• Prepared an as-is analysis of all SQL servers worldwide
• Conducted requirements analyses for SQL and server migrations
• Coordinated requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
• Facilitated regular status meetings (Jour Fixe)
• Developed roadmaps and solution models for server migrations
• Set up test scenarios
• Facilitated workshops for the rollout of a global admin team
• Designed data models (CMDB) in ServiceNow
• Led workshops for the CMDB data model
• Developed solution models for the CMDB
• Created end-to-end configuration documentation and work instructions for the CMDB
• Prepared reports for license management
• Defined KPIs for data quality in ServiceNow
• Created a service catalog
• Facilitated workshops to define service requests
• Acted as interface between requirements analysis and the ServiceNow development team
• Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Expert in the company's architecture management area

• Support for standardizing the company's IT landscape

• Further development of architecture management

• Shaping the company's business architecture

• Restructuring, administration and maintenance of all IT assets

• Support in creating a unified software asset management and CMDB

• Creation of unified document management (e-file)

• Transition of documents into a central DMS structure

• Link between architecture management and the department's internal business process management

• Support in developing strategic and tactical development plans

• Organizing communication with key stakeholders

• Support in the conception, organization and coordination of the architecture office to be built up

• Accompanying and advising the entire architecture management process

• Advising the company's business units on architectural topics and their framework conditions

• MS Office, Windows 10, VBA

• ITIL, TOGAF, PowerBi, Kanban, Scrum

• Internal agency tools

• Open Touch Conversation, Webex, wire, bdbos

• MS Sharepoint, JIRA, Confluence

• ARIS, Archimate, BPMN

• Technical leadership across hardware, firmware, and software teams; scope: hardware/firmware team (4 people) and leadership group (5 people)
• Consolidated and documented a product family that had grown over more than 15 years and aligned it with CRA compliance — from the bare-metal I/O module to the cloud interface.
• Provided the most important customer product with the essential requirements and architecture documentation within two months — for a firmware landscape that had grown over more than 15 years. It now supports the customer’s modernization strategy.
• Established a monthly reporting line to the supervisory board and executive board within three months: nine meetings since 12/2025. The report itself is versioned and built from the CI pipeline; it is based on automatically collected activity and release data instead of assessments.
• Built a container-based CI/CD infrastructure from scratch: cross-compilation, host tests, and documentation builds in one continuous pipeline.
• Introduced declarative QA gates for DevOps and development artifacts — from the start using lefthook instead of pre-commit, executed in a dedicated container image.

Technologies used: arc42, req42, tpo42, docToolchain, PlantUML, ArchiMate, C4 model, ADR, C, C++ (GTest), CMake, Bare Metal (ARM Cortex-M3/M7), OCI containers, Jenkins, lefthook, Prometheus, Grafana, SBOM, CRA, OPC, SCADA, PLC integration, IPv6 migration, Zero Trust, Sociocracy 3.0, Cynefin

• Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
• Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
• Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
• Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
• Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
• Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
• Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables

Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Red Hat OpenShift Container Platform

Scope:

• Operation and configuration of the Red Hat OpenShift Container Platform, including network, storage, and security design.
• Implementation of centralized observability solutions (Prometheus, Grafana, alerting).
• Development of CI/CD pipelines, GitOps workflows, and automation frameworks.
• Training and enablement of operations and development teams.

Result: Accelerated service delivery, transparent operational metrics, and sustainable knowledge transfer.

• Documenting the current Incident Management, IT Service Request Management, Problem Management, Change Management and Service Configuration Management processes (including CMDB)
• Conducting maturity assessments for these processes based on the ITIL® 4 Maturity Model
• Analyzing the various service value streams based on the ITIL® 4 value stream model
• Agreeing on maturity levels for the assessed processes
• Developing and approving a roadmap to achieve and measure the respective maturity levels
• Presenting the approach, including milestones, to management for approval
• Managing external service providers in 1st Level Support

Product Owner ServiceNow

Scrum Master and agile project management for the further development of ServiceNow and its IT interfaces

Coordinating requirements with all Process/Service Owners and external providers (Incident, Problem, Knowledge, Change, Service Request, Catalog, Software Asset/Hardware Asset/Config Management, Financial Management, SecOPS)

Managing internal/external software developers

Coordinating interfaces and catalogs for new IT providers

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

Interim Lead ITSM Transformation

Industry: Retail & Industry – Optics (partly critical infrastructure)

Mandate: Transition of ITSM governance to the product- and capability-oriented governance model already established across the Group, as well as acceleration and partial automation of service volumes through optimized entry channels. Design and system-based implementation of an ITSM target operating model.

• ITSM target process design based on the capability owner model: target processes and ownership for Incident, Service Request, Problem, Change Enablement, CMDB, Service Level, Supplier and Knowledge Management, derived from the Group-wide target operating model
• AI-supported Enterprise Service Management: Reorganization of currently mixed requests into a structured, cross-functional service model including a new self-service portal. AI-supported classification and automation considered in the architecture model
• Migration & Cloud Architecture: Planning and management of the end-to-end migration, coordination of cutover management and go-live support; ensuring productive stability during the hypercare phase. Consideration of a multi-source CMDB (~500,000 assets), connection of go-live-critical field service and vendor interfaces
• Scaling & Blueprint: Central instance for headquarters and production, designed as a blueprint for additional international retail and production sites
• Delivery and Stakeholder Management: End-to-end management from target vision to go-live with regard to time, budget & quality. Building consensus and balancing interests between independently managed IT units up to CIO level