Cybersecurity Experts

• Project management in the energy sector – planning and coordinating the Blue Milestone Celebration in Berlin and preparing for the PRM Conference in Dresden.
• Stakeholder & vendor management – coordinating tasks, schedules, and processes with internal teams, external vendors, and venue teams.
• Process coordination, event communications & attendee management – coordinating invitation and registration processes and maintaining and reconciling attendee lists.

Data Center Migration

Public Sector, Berlin

Technical project manager for data center migration

• Led the six-member project group
• Project planning, schedule coordination, and resource management
• Coordination with departments and analysts
• Planned and managed migrations
• Reviewed and adapted migration processes
• Managed and developed change management processes
• Directed activities for internal and external clients toward defined goals
• Considered and implemented all quality assurance requirements
• Ensured project and results documentation
• Integrated the project into the company context
• Prepared status reports and coordinated with project portfolio management

Citrix, VMware, network technology and security (including firewalls, DMZ, IDS, IPS)

• Lead the team responsible for providing millions of home appliances with trust.
• Certification authority management at scale: Over 300 million certificates issued.
• Certificate lifecycle management, HSM hardening and air gap-based security controls.
• Prepared PQC transition, NIS2 and CRA readiness initiatives.
• Developed and implemented comprehensive security controls and vulnerability management, based on industry best practices and standards.
• Listed top on Bosch Products Hall of Fame 2025 for disclosure of vulnerabilities.
• Achieved a 50%+ team performance improvement through AI automation.

Career roles and levelling framework for an AI startup. Defining role scope, progression criteria, and how promotion decisions get made and communicated — including the question most frameworks now have to answer: what "senior" means when a large part of the work is AI-assisted.

With more than 30 years of experience in enterprise IT sales, managing strategic major accounts, and successfully leading complex transformation projects, I have a deep understanding of demanding customer organizations and their digital development goals. In my current role as an independent consultant, I was responsible for sales of enterprise cloud, data, and transformation solutions across the DACH region. My focus is particularly on building lasting customer relationships at C-level and successfully supporting complex sales cycles in highly regulated and technologically demanding environments.

My career includes roles at Bechtle, Insight Technology Solutions, and Intershop, where I gained many years of experience building and developing strategic enterprise accounts and delivering large-scale IT projects. In addition, as managing director of my own company, I took on broad responsibility for sales, operations, and business development.

What especially interests me about the advertised position is the combination of cybersecurity, transformation, and enterprise sales. I see this as an environment where I can make the most of my experience advising decision-makers, developing customer strategies, and building sustainable growth opportunities.

I would welcome the opportunity to discuss my experience in more detail in a personal conversation.

• Patch management and system hardening for Linux and Windows via AWS Systems Manager, including Maintenance Windows; image pipelines (AWS Image Builder), Ansible, and PowerShell DSC
• IT security & compliance: IAM/KMS/MFA, secrets management, Policy-as-Code (Checkov, tfsec, cfn-nag), AWS Config, CloudTrail, and Security Hub; infrastructure security audits, internal audits, penetration tests, and incident response exercises
• Analysis of cloud security reports and implementation of preventive measures; automated security and compliance tests; backup strategies using snapshots and S3 Glacier
• Administration of multiple AWS accounts (VPCs) with up to 2.500 Linux and Windows servers and hybrid networks
• Automation using Terraform, OpenTofu, CloudFormation, Ansible, and PowerShell DSC; CI/CD with GitLab CI and GitHub Actions
• Planning of rollouts, upgrades, and lifecycle management for key components; coordination with DevOps, security, and development teams; preparation of concepts and decision papers

• Fast Onboarding

• Independent Execution

• Confident Decision-Making

• Stakeholder Alignment

• Creative Solutions

• Full project ownership.

• Flexible availability.

• Half the cost of a full-time role.

Connecting stakeholders, translating requirements and driving progress. Details are taken care of, priorities kept clear, and decision-makers involved at the right moments.

SIEM/SOC Wazuh Implementation

Logistics

Wazuh | OpenSearch | Use Cases | Dashboards | Training

• Advised and provided technical support for the implementation of Wazuh as a SIEM solution
• Prepared and coordinated with teams involved in firewall, network, and IT operations
• Installed and configured Wazuh on the designated server infrastructure
• Developed security-related use cases and dashboards for centralized monitoring
• Delivered employee training on using and analyzing data from the SIEM solution

System Transformation Audit

Supporting a project-related IT audit of a system transformation within the financial services sector, focusing on controls associated with different types of system migrations. The work involves reviewing migration-specific documentation and supporting evidence to assess whether the controls for each migration type are adequately evidenced and sufficient to address the associated migration risks. Particular emphasis is placed on the adequacy of control measures, the reliability of supporting evidence, and safeguards relating to data integrity and migration-related risks.

Team Size: 2 project managers, 1 delivery manager, 2 senior consultants

Tasks & Responsibilities:

• Reviewing documentation and supporting evidence for different types of system migrations.
• Assessing migration-specific control procedures and evaluating whether the controls are appropriate and sufficient to address the associated risks.
• Evaluating the adequacy and completeness of evidence provided to demonstrate that migration controls have been performed as intended.
• Reviewing relevant control measures designed to safeguard data completeness, accuracy, and integrity during migration, where applicable.
• Identifying potential control gaps, insufficient evidence, and areas requiring further clarification or additional audit procedures.
• Assessing whether the documented migration approach and associated controls adequately address the risks arising from the respective migration type.
• Coordinating with relevant project stakeholders to clarify migration procedures, obtain supporting documentation, and follow up on open audit questions.
• Documenting audit procedures, evidence reviewed, control assessments, and observations in accordance with the engagement's audit methodology.

Audit Standards, Methodologies and Regulatory Frameworks: Migration Controls Assessment, Migration Risk Assessment, Evidence Review, Control Testing, IT Audit Documentation.

Areas of Expertise: System Transformation, System Migration Controls, Migration Risk Assessment, Control Evaluation, Evidence Assessment.

Main Results & Achievements:

• Contributing to the assessment of migration controls and the identification of potential control gaps.
• Identifying evidence deficiencies and areas requiring further clarification.
• Documenting audit observations and supporting the evaluation of migration-related risks and control effectiveness.

Project management for fiber-optic network expansion

• Ticket automation for smart devices; SharePoint
• Python, JavaScript, Java, Gradle
• CI/CD Git pipeline and secure programming

Financial reporting as an MVP. Follow-up assignment.

• Reports on profit and loss, balance sheet and cash flow
• Budget and personnel metrics (FTE)
• Implementation as an MVP with a fixed scope

Goal:

Protect customer domains from spoofing by establishing and securing DMARC compliance, and ensure secure and stable operation of the Exchange and Microsoft 365 environment while keeping legitimate mail flows running smoothly.

Responsibilities:

• Project management, including reporting, customer coordination and budget responsibility
• Set up and secure DMARC, including DKIM and SPF
• Ongoing analysis of DMARC reports to detect and resolve issues early
• Replace EWS connections before Microsoft's shutdown on 01.10.2026 by switching to Microsoft Graph
• Introduce sensitivity labels in Microsoft Purview to protect sensitive information
• Automate recurring administrative tasks with PowerShell
• 3rd Level Support and ongoing administration of Exchange Online and Exchange on-premises

Technologies: Exchange Online, Exchange Server (on-premises), Microsoft 365, Microsoft Graph API, EWS, Microsoft Purview / Sensitivity Labels, DMARC, DKIM, SPF, RUA-Reporting, PowerShell, HCL Notes