Digital Archiving Experts in Essen

• Led the subproject for implementing Vulnerability Response as part of DORA
• Documented the current processes in compliance, risk & security
• Created the functional design for introducing application, infrastructure, and cloud vulnerabilities
• Agile management of the integration service provider, the technical department, and the company's cross-functional teams
• Integrated the V scanners Tenable, Qualys and Defender, as well as NVD and CISA/KEV
• Integrated GitLab Ultimate for importing and processing SBOMs
• Developed automation rules to match scan results with CIs in the CMDB, assign vulnerabilities and remediation tasks, handle approvals (false positives, exceptions) and closures
• Calculated multiple risk scores and priorities
• Defined dashboards and reports (Workspaces, Performance Analytics)
• Aligned the new processes, especially to improve the CMDB data quality (according to CSDM)

In my role as Managing Director of QFITS GmbH, I support companies throughout the entire project cycle - from requirements gathering and process analysis to the design of suitable system solutions and all the way to implementation and quality assurance. My focus is on the introduction and integration of POS and ERP systems as well as their seamless connection to existing backend systems and interfaces.

Direct food sales (09/2025 – 05/2026) Support of a project from requirements analysis to the introduction and integration of a new POS system for a direct food sales company. A special focus was on archiving POS logs as well as preparing and providing them as transactions for connected surrounding systems. In addition, design and setup of functional tests and performance tests for the existing backend system, which had to be seamlessly integrated with the POS system.

• Gathering, analyzing, specifying, and prioritizing requirements for the 'Archive and Delete' module of the Chambers of Industry and Commerce in a Scrum team
• Capturing and specifying screen/form designs, functionality, and data types in Confluence, as well as creating user stories in Jira
• Preparing PowerPoint presentations for the 'Archive and Delete' module
• Coordinating and supporting the Chambers of Industry and Commerce in the implementation of the module
• Writing SQL scripts for an Oracle database
• Technologies used: Scrum, Confluence, Jira, MS Office, Postman, JavaScript, REST API, JSON, DBVisualizer, SQL

• Requirements analysis
• Provisioning of SharePoint sites and permissions
• Provisioning of SharePoint libraries and lists as data storage
• Development of the UI with Power Apps
• Development of automations with Power Automate to transfer data from Power Apps using Dataverse connectors
• Creation, customization, and management of Power Platform security roles
• Creation and management of Power Platform pipelines
• Development of UX design with Power Apps

• Enhanced quality assurance of documents, processes and required evidence in preparation for the upcoming KRITIS audit 2025.
• Reviewing and commenting on all relevant documents.
• Advising authors and document owners on inquiries and during the creation process.
• Supporting departments with IT security inquiries.
• Used tools/Frameworks MS Office, SharePoint, Jira, Confluence, ISO27001+, NIS-2 (EU 2022/2555), B3S (Statutory Health & Private Health Insurance), BSIG / IT-SIG 2.0, BSI-KritisV, BSI-C5, BSI Baseline Protection (200-2, 200-4), ServiceNow, RCE (EU 2022/2557), SGB, GDPR

• Self-employed as owner of Kuhlma IT Solutions since July 2015• Consulting on and executing IT consulting projects in client management and email archiving• Supporting and implementing baramundi Management Suite solutions• Performing system updates, packaging applications, and training staff