DMZ Experts in Germany
in minutes with vetted, available specialistsHire experts who design and harden DMZ layouts, firewall rules, reverse proxy paths, and segmented access for public-facing services. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used DMZ
Gerhard Kolar
Last position:
Senior Project Manager and Construction Manager at HENSOLDT Optronics GmbH
- Building the data center in Oberkochen (defense area)
- Planning the fiber optic ring, simulation of Wi-Fi coverage
- Cable routing plan for WAN and LAN cables for office and production (infrastructure)
- Adaptation of the SAP system (R3) for the Oberkochen site (software)
- IT transformation of the SAP system to SAP HANA
- Planning network infrastructure and server technologies in the SAP environment
- Pré-sales support and setting up change management
- Independent coordination of utilities according to time, budget and quality
- Mapping the project in MS Project and SERVICENow
- Development and design of hardware and software
- Demand management and portfolio management
- Building a risk register and migration plan
- Preparation of payment-supporting documents in coordination with the responsible finance and commercial functions
- Budget: 5 Mio. - 34 FTE
Tezcan Dilshener
Last position:
Solution Architect / Project Manager at German Football Association
- Overall responsibility for the project lifecycle from scope definition to completion
- Close collaboration with platform teams, IT leaders, and external service providers
- Application of SAFe principles and structured sprint work
- Creation of a migration roadmap with clear milestones
- Monitoring of the lifecycle: onboarding, repository migration, replication of permissions, and system tests
- Visualization of the architecture with PlantUML and Gliffy as well as documentation in Confluence
- Regular status reports and running knowledge transfer sessions
Christian Wonneberger
Last position:
Software Engineer, cross-platform Application Manager at International major bank
- Creating interfaces between the legacy platform and the new container solution
- Coordinating required contributions from line units
- Moderating regular status meetings with the software vendor
- Minimally invasive conversion of TWS scheduling from the old to the new platform
- Environment: IBM Mainframe, DB2, CICS, MQ, Red Hat Linux, Oracle, Kubernetes, Kafka, Helm, GitLab, Jenkins
Matthias Schmälzle
Last position:
Subproject Manager / Head of Monitoring at IT service provider (Berlin/Kolbermoor)
- Subproject Manager / Head of Monitoring for facility management and handling operational project parts as well as coordinating operations
- CheckMK consulting: central monitoring infrastructure with CheckMK master and distributed CheckMK satellites
- Implementation of advanced monitoring approaches, integration of new plugins and customization of the CheckMK agent
- Graphic representation of performance metrics with InfluxDB and Grafana, creation of NagVis/Grafana templates and dashboards
- Monitoring of Linux/UNIX/Windows systems and active components using CheckMK agents/MRPE as well as hardware monitoring via SNMP
- Development of monitoring plugins based on Bash scripting
- Inventory and cross-disciplinary analysis for application-specific monitoring
- Concept design, testing and documentation for integrating CheckMK status messages and performance data into a higher-level umbrella system (Data Leak)
- Technical and conceptual point of contact
Christian Decker
Last position:
Managing Director and Senior Consultant at business-security (b-sec®) GmbH
- Conceptual consulting for securing business processes
- Consulting on planning and implementation of IT and IT security projects
- Security and policy checks, process optimizations, emergency planning
- Project management and interim management in IT infrastructure and information security
Overview of relevant projects:
- 2025: Consulting on a DLP concept for Digid GmbH.
- 2025: Consulting a client after a cybersecurity attack that compromised the IT infrastructure and where the attacker obtained M365 tenant admin rights. Investigated the IT infrastructure and restored it. Developed recommendations to improve IT security.
- 2025: Continued the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
- 2024: Created a DNS concept including advice on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones, and automation. Created a DHCP concept including advice on DHCP design, a central DHCP management system and automation. Advised on operating the mentioned products, the operational processes, and updated IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
- 2024: As-is analysis and assessment of the network and security infrastructure established by providers in terms of overall architecture including design and components. Designed solution proposals to improve current operations for performance and security maximization as well as complexity reduction. Presented the results to C-level, their causes and possible solutions including required decision templates. Developed a SASE concept based on a zero-trust architecture for Norddeutsche Landesbank.
- 2024: Continued the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
- 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proofs of concept for DDoS protection and digital experience monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on zero trust, redesigning a Cisco ISE implementation, and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
- 2023: Continued the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
- 2022: Created and reviewed whitepapers for infrastructure and security architectures, and planned new network infrastructures for the German Aerospace Center.
- 2022: Developed a concept for the technical and procedural modernization of a disaster recovery plan for United Nations Volunteers.
- 2022: Developed a concept for migrating measurement data to a cloud environment, introduced network access control, and conducted an awareness training for Digid GmbH.
- 2022: Developed a network segmentation concept for DZ Hyp AG.
- 2022: Developed a network segmentation concept for the Federal Employment Agency.
- 2021: Developed a new load balancer architecture concept for Bundeswehr Fuhrparkservices GmbH.
- 2021: Conducted a vulnerability scan and penetration test of a web frontend including analysis and recommendations for remediation considering risk and likelihood for the client ifi GmbH.
- 2021: Consulting, design, and subproject management for implementing a network access control solution (certificate authentication and MAC address bypass) and macro segmentation (area and zone concept based on dynamic device assignment) in office and production IT for Vaillant Group GmbH.
- 2021: Upgraded and optimized LAN and WLAN infrastructure for United Nations Volunteers.
- 2021: Developed a target concept for modernizing the IT security infrastructure including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet connections, admin and management networks, and the wireless LAN, including overseeing implementation for the Federal Institute for Geosciences and Natural Resources.
- 2021: Created a micro-segmentation concept based on Cisco DNA, SGT, and zero trust for Union Investment IT-Services GmbH.
- 2021: Reviewed and updated ISMS level 3 policies and created procedure instructions for Software AG.
- 2021: Project lead for the global tech refresh project Meraki WLAN 2.0, coordinated the outsourcing of LAN/WLAN infrastructure to a managed service provider, and created a WLAN concept for automated guided vehicles for Heraeus Infosystems GmbH.
- 2021: Project management and technical support for the 'Transition of SIEM/SOC Services' project migrating a client to a shared environment, and took on the interim role of Head of Security Operations at Datagroup SE.
- 2021: Conducted a workshop for the future implementation of mobile device management for Allgeier Experts Go GmbH.
- 2021: Subproject management for implementing a firewall rule management tool and recertifying NAC endpoints based on 802.1x and MAB for Union Investment IT-Services GmbH.
- 2020: Developed a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
- Recorded and analyzed the current network architecture including project initiation.
- Designed a micro-segmentation concept in the data center and access network.
- 2020: Infrastructure and security architecture audit for Stuttgarter Versicherung AG.
- Analyzed the IT infrastructure and security architecture regarding network and security component configurations. Also reviewed contracts, process documents, and manuals for completeness. Developed recommendations to improve the stability and operation of the infrastructure. Created a network segmentation concept and led the project to implement the measures from the audit.
- 2020: Consulting on setting up an ISMS-light for Josera foodforplanet GmbH & Co. KG.
- 2020: Security architecture consulting for Datagroup SE.
- Developed a future IT infrastructure and IT security architecture.
- Documented the current IT architecture of all 23 entities.
- Made recommendations to optimize the IT infrastructure and drafted a comparison of a traditional perimeter security concept versus a zero trust model.
- Created a security zone concept.
- Designed an IT infrastructure architecture in coordination with all entities.
- 2018 - 2019: Stream lead in the cybersecurity program at Deutsche Lufthansa AG.
- Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
- Project area: Network segmentation and access control.
- Project area: Security architecture.
- Project area: Privileged, identity & access management.
- Project area: Simplify user authentication (MFA).
- Project area: Mobile & endpoint security.
- Project area: OT security.
- Project area: E-enabled aircraft.
- 2018: Security architecture consulting for Deutsche Lufthansa AG.
- Project management for the development, evaluation, and management of the company-wide information security architecture.
- Developed a security strategy and a roadmap to align the security architecture with the zero trust model.
- Evaluated market security solutions, services, and tools.
- Defined requirements for RFPs and assessed proposals.
- Developed, maintained, and monitored security architecture artifacts.
- Conducted security assessments of existing and new IT systems and security services.
- 2018: ISMS consulting for GLS IT Services GmbH.
- Advised on implementing and initially operating an ISMS based on ISO27001.
- Audited the IT environments of GLS country subsidiaries.
- Analyzed and assessed IT security risks and derived necessary measures.
- Developed solution proposals in coordination with relevant stakeholders.
- Managed the project and handed over the ISMS to operations.
- 2016 - 2018: Security pre-sales consultant for Cisco Systems GmbH.
- Provided nationwide strategic and conceptual consulting to major enterprise and financial and insurance clients on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch, and ISE.
- 2017 - 2018: Designed and implemented an ISMS for Verivox GmbH.
- Conducted various BIAs and gap analyses.
- Developed security policies based on ISO 2700x.
- Served as interim information security officer.
- 2017: Developed an emergency concept for VPV Lebensversicherungs-AG.
- Reviewed and updated the IT emergency manual.
- 2016: Consulting and project management for designing cloud & hosting services for Vodafone Group Services GmbH.
- Analyzed and optimized the sell-build-run process.
- Created detailed level designs for cloud products.
Benno Zabel
Last position:
Freelance Data Protection Officer at SUMTEC
- Drafting the data protection concept under EU GDPR including DPIA and implementing TOMs
Marcus Wiederstein
Last position:
Administrator, DevOps at KZVB
- Planned and implemented new network infrastructure (VLAN, LACP, DMZ, structured cabling)
- Migrated from VMware to KVM using Oracle Linux Virtualization Manager (OLVM), including CPU pinning
- Hardened the entire environment using SELinux (KVM hosts, container hosts, database servers)
- Configured and operated the virtualization platform with OLVM and Ansible-based provisioning
- Containerized and redeployed critical services: WordPress, Jenkins, PostgreSQL, MariaDB, Subversion with Apache + AD integration
- Developed Ansible playbooks for automated deployment and configuration management
- Integrated Foreman for repository and security management in the DMZ
- Produced technical documentation in Markdown; organized in Bookstack
- Coordinated with external vendors (e.g. HPE) for hardware installation and setup
- Delivered all contributions documented and reproducible in Markdown
Peter Viehöver
Last position:
Cross Project Excellence at Energy provider
- Overarching technical coaching and support for project managers during the migration of regional companies into the group's O365 infrastructure (Azure).
- Creation and use of content, technical, and methodological synergies between the individual subprojects.
- Project duration: 9 months.
Discover over 15,000 top freelancers
Statistics of experts using DMZ
Aggregated from the professional profiles of matched freelancers.
Experience
29 years
Position duration
2.8 years
Positions per freelancer
17
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Telecommunication, Banking and Finance
Certification focus areas
Information Technology, Human Resources, Legal
Bachelor's degree or higher
100%
Master's degree or higher
50%
Doctorate
50%
Certifications per freelancer
8
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using DMZ
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
DMZ basics
A DMZ, or demilitarized zone, is a network segment that sits between the internet and internal systems. It is used to place public-facing services in a controlled area, so external traffic never lands directly inside the trusted network.
Where it fits
- Web portals and customer apps
- Mail gateways and DNS services
- VPN entry points and remote access
- Reverse proxies and load balancers
- Public APIs that need tight isolation
Core skills
Strong DMZ specialists understand firewalls, routing, NAT, segmentation, and packet flow. They also know how to design allowlists, log traffic, and keep the screened subnet aligned with zero trust and least-privilege rules.
Common stack
A DMZ setup often includes next-gen firewalls, reverse proxies, WAFs, load balancers, IDS or IPS tools, and secure jump hosts. Good experts can work across on-premise networks, hybrid cloud environments, and vendor-specific security controls without breaking service access.
When to bring in help
Companies usually need freelance expertise when a perimeter design is being rebuilt, a legacy network is being cleaned up, or an audit exposes weak exposure control. In Germany, this often comes up during cloud migration, regulated infrastructure work, or when teams need short-term help with implementation and documentation.
What strong experts deliver
A reliable DMZ specialist does more than place servers in a separate subnet. They document traffic paths, reduce exposed ports, test failover and access rules, and make sure the DMZ supports operations without widening the attack surface. Strong work is clear, minimal, and easy to review.
Frequently asked questions
Curious about DMZ? Here are the answers that come up again and again.
A DMZ is used to host public-facing services in a separate network zone. It limits how far an attacker can move if one exposed service is compromised. Common examples are web portals, mail relays, DNS, and remote access entry points.
A DMZ is a design pattern, not a single device. Firewalls enforce the rules, while VLANs can help separate traffic at layer 2, but the DMZ defines where exposed systems should live and how they may communicate. A strong setup usually combines all three.
Yes, in many environments the DMZ still matters. Cloud services and zero trust change the design, but public endpoints still need controlled exposure and clear traffic paths. Many teams now build a DMZ-like perimeter around hybrid services, reverse proxies, and ingress points.
A good DMZ specialist should design the network layout, define firewall rules, and document allowed flows. They should also validate DNS, NAT, routing, logging, and failover behavior. Clean handover material is a strong sign that the work is solid.
A DMZ project usually needs strong knowledge of firewall platforms, routing, load balancing, and Linux or Windows server administration. In larger environments, cloud networking, WAFs, certificate handling, and vulnerability management also matter. Security documentation is part of the job, not an extra.
A DMZ project needs someone who has already handled real traffic patterns and production change control. Simple reviews may be enough for a focused task, but redesigns and migrations need deeper network security experience. The best specialists can explain trade-offs in plain language.
Most DMZ design and review work can be done remotely if the specialist has secure access to diagrams, configs, and change windows. On-site time can help when hardware, legacy appliances, or sensitive operations are involved. In Germany, many teams mix remote planning with short on-site sessions.
Look for a DMZ specialist who reduces complexity instead of adding it. Good work includes clear rule sets, minimal exposure, tested rollback steps, and documentation that operations teams can actually use. If the design is hard to explain, it is usually too complex.
The average hourly rate of freelancers in Germany who have used DMZ in their recent projects is 117 €, which corresponds to a daily rate of about 932 € based on an 8-hour working day.
Of the freelancers in Germany who have used DMZ in their recent projects, 100% hold at least a Bachelor's degree, 50% hold at least a Master's degree, and 50% hold a doctorate.
On average, freelancers in Germany who have used DMZ in their recent projects have 29 years of professional experience, with a single engagement typically lasting around 2.8 years.
The most common languages among freelancers in Germany who have used DMZ in their recent projects are German (100%), English (100%), and French (38%).
The most common industries among freelancers in Germany who have used DMZ in their recent projects are Information Technology (100%), Telecommunication (75%), and Banking and Finance (63%).
The most common business areas among freelancers in Germany who have used DMZ in their recent projects are Information Technology (100%), Operations (100%), and Project Management (100%).
Main locations of FRATCH Experts, who have recently used DMZ
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
