Cybersecurity Experts in Munich

The program supports the comprehensive realignment of the German Consumer Panel Services business. It combines a significant panel boost with the reprocessing of historical data and the integration of new receipt data. By significantly expanding and stabilizing the panel with the involvement of external partners, the aim is to improve the validity of the data base and create a reliable foundation for methodology, weighting and customer reporting. At the same time, historically grown processes for data delivery, OCR, matching, item QC, methodology and reporting are being harmonized, further developed technologically and reorganized. The goal is a scalable end-to-end landscape with higher data quality, clear responsibilities, reliable governance and sustainably manageable operational processes.

• Overall management of the restatement program, including the integrated roadmap as well as milestones, dependencies, risks and management decisions.
• Coordination of the panel boost and alignment of the required data deliveries, quality requirements and prerequisites for methodology, weighting and reporting.
• Alignment of business, product, data science, technology, operations and external partners around a shared target picture, aligned priorities and an integrated approach.
• Design of the organizational change triggered by the fundamental realignment of the data base, methodology and management logic, which has a lasting impact on established decision-making and collaboration patterns.
• Establishment and further development of governance, reporting and escalation structures as well as program-wide monitoring and operational processes for reliable management and sustainable handover.
• Management of critical data, technology and provider dependencies, including reprocessing, OCR transition and the timely synchronization of delivery, testing, methodology and reporting.
• Orchestration of international collaboration with teams and stakeholders in Germany, the United Kingdom, Portugal and Romania, as well as with external suppliers in Germany and Austria.

Impact Areas and Expertise: Program & Delivery Leadership, Business & Technology Alignment, Organization & Transformation, Governance & Sustainable Operations, Strategy & Target, Methodic Leadership, Transformation & Change Leadership, Executive Advisory

• Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
• Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
• Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
• Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
• Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
• Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
• Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables

Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban

• Leading enterprise BI transformation across Power BI & Microsoft Fabric, delivering scalable data models, automated reporting, and high-performance analytics solutions for commercial and operational leadership.
• Building and optimizing Power BI Dataflows, Fabric Lakehouse datasets, semantic models, and automated reporting pipelines to improve data scalability, governance, and reporting performance.
• Driving dashboard modernization and KPI governance by translating complex business requirements into executive-level insights, interactive visualizations, and decision-ready analytics.
• Designing end-to-end Microsoft Fabric architectures integrating data ingestion, transformation, virtualization, and enterprise reporting across cross-functional business domains with SAP BW to Qlik to Power BI migration.
• Delivering AI-enabled reporting capabilities, threshold-based alerting, and automation frameworks within the Power BI ecosystem to accelerate business decision-making.
• Partnering with commercial leadership, analytics teams, and IT stakeholders to standardize KPIs, optimize BI strategy, and deliver scalable, business-critical reporting solutions.
• Recognized for combining strong stakeholder leadership, technical architecture expertise, and business-driven analytics to deliver impactful enterprise BI transformation initiatives.

• Rework demand, development and operational organizational set up for the Solution Train
• Rework requirement refinement process flow from strategic theme to user story
• Introduction of visualization tools (Canvas) of work dependencies over different requirement levels and Solution Train leadership coaching

• Building strong awareness within the company around nearshoring
• Engagement Manager in the Nearshore Competence Center
• Responsible for nearshore consulting, partner screening and technical onboarding, designing and implementing cooperation scenarios, change management, stakeholder management, participation in steering committees, and collaboration with IT and business units
• Tools used: Microsoft Office 365, Microsoft Teams, Azure Devops, Microsoft Sharepoint, Conceptboard
• Key results: Establishment of a nearshoring strategy, successful identification and implementation of outsourcing partnerships, delivery of change management and stakeholder management at the highest level

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

• Configured Topics, Microsites into rich content portal widgets, Content Library, landing pages and automated client portal data sync, reducing manual effort by 80% and elevating self-service engagement.
• Architected optimal display across devices and varying resolutions to enhance user accessibility and experience.
• Set up and customized Azure VM integration by utilizing Catalog Items, PowerShell scripting and workflow orchestration.
• Analyzed and translated business requirements into scalable solutions, leveraging ServiceNow scripting to enhance platform functionality and elevate user experience.

Key ServiceNow Skills: Service Portal, Widget Development, Catalog Items, PowerShell Scripting, Workflow Orchestration, Content Management.

• Overall responsibility for the project lifecycle from scope definition to completion
• Close collaboration with platform teams, IT leaders, and external service providers
• Application of SAFe principles and structured sprint work
• Creation of a migration roadmap with clear milestones
• Monitoring of the lifecycle: onboarding, repository migration, replication of permissions, and system tests
• Visualization of the architecture with PlantUML and Gliffy as well as documentation in Confluence
• Regular status reports and running knowledge transfer sessions

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• As-is assessment of the current network infrastructure and its documentation, including on-site inspections
• Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
• Planning of new copper and fiber optic cabling, including patch panels
• Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
• Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
• Additional support after the components go live (hypercare phase)
• Regular communication with project management and client stakeholders

• Set up Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Developed Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines using Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Customer interface and relationship management
• Requirements management and work coordination
• Technical and functional support focusing on automotive Ethernet

Consulting and support in the areas of sales/business/technology/development/marketing:

• Sales, Key Account Management
• Business Development, business/corporate development
• Partner management
• Program/project management
• Product management & marketing
• Technical marketing, content marketing
• New business, innovation and technologies

Until July 2021 active as advisor and consultant for Mixed Mode in the areas of Key Account Management, Project Management and Business Development.

From Q3/2021 successful delivery of various customer projects in the area of Business Development, corporate development, consulting, coaching, technical content management, sales and marketing:

• EMS service provider and PCB test house, inspection systems: revision of company portfolio and presentation. Integration of specialized distribution for optical inspection systems from Japan: content management, marketing, communication, web, sales automation, lead generation
• Full service marketing agency – technology marketing for industry: expansion of the existing B2B and B2C marketing portfolio with industrial and technology topics: content management, presentation and focus on "technical marketing", web, target market and customer analysis, lead automation, consulting
• Software product manufacturer & software development in the field of security for Embedded & IoT: company alignment and portfolio definition for an IoT and Embedded Security company with a SaaS solution for IoT device management: building a partner network to offer complete Embedded/IoT security solutions, technical content, company alignment and portfolio definition, strategy & planning, target market and customer analysis, product marketing/USPs for the security device management tool "IoT-Suite", standards and regulations for cyber resilience (e.g. CRA, NIS2, RED), web content, SEO, management of marketing and sales agencies, CRM, sales, presentations, trade fairs, congresses, building company webinars & events
• Software engineering service provider/system house for IoT, Embedded, web, mobile and desktop applications: business development, content creation, customer acquisition and sales
• Manufacturer of memory products with security features as an add-on: memory products in standard form factors (SD, CF, SSD...) are extended with security modules such as HSM, TPM or secure elements and thus offer users secure data storage, transfer and access. Also interesting as an upgrade or retrofit solution to meet the coming new regulations and requirements regarding cybersecurity such as CRA, RED and NIS2. Business & New Business Development for the area "Embedded IoT Solutions & Security", sales & marketing. Expansion of the pure semiconductor business to include security solutions and services. Interface between management, marketing, sales and product management. Building business partners, technology partners, system integrators and resellers from the Embedded, IoT, OT and IT environment. Creating reference designs/demos/lighthouse cases and proof of concepts for cross- and reference selling. Co-marketing with security partners. Technical content creation for web, sales and marketing, webinars, social media etc. Networking, participation in trade fairs, congresses and events. Lead generation, qualification, follow-up and conversion to customer. Product definition, USPs, features. Analysis of competitors, market positioning, target markets - strategy, concept and measures - go to market.
• Marketing agency group with sales and management consulting: consulting for companies on restructuring, market analysis and market entry, go-to-market concepts, customer acquisition and expansion, new customer generation, lead generation and management, concepts and execution of campaigns (web, mail, social media, phone outreach in person or with AI voice assistant, webinars...). Processing and managing customer product data for PIM product information and DAM data asset management systems. Focus on customers in the industrial and technology environment with products and services that need explanation.

• Responsible for the comprehensive integration of partner incentive compensation management into a transformation project based on a scaled agile framework (SAFe), ensuring consistent end-to-end implementation.
• Managed project activities and held functional responsibility as Business Requirement Owner to ensure consistent, business-oriented solutions in the transformation context.
• Analyzed, structured and quality-assured business requirements and business user stories using an internal company AI tool, including the definition of acceptance criteria.