Enterprise Architecture Experts in Berlin

Consumer Cards Solution Architect

• Provided architectural leadership in Consumer Cards Domain establishing best practices and improving architectural transparency and maintainability by designing a structured documentation framework to enable reverse engineering of legacy card systems.
• Standardized architectural artefacts including BIAN Business Capabilities, UML diagrams in draw.io format (Use Case, Component, Sequence), naming conventions, document repository, design templates and blueprints, microservices.
• Produced high-level and low-level designs aligned with enterprise architecture governance processes and artefact standards.
• Provided architectural support to the Strategic Card Simplification Programme, focusing on card product migrations and application decommissioning across all countries. Agile environments (Scrum/SAFe).
• Analysed and designed AI use cases in the architecture domain.

Project: Payment Card Industry Data Security Standards (PCI DSS) Strategic Programme

• Analysed and documented existing data flows across card products and geographic regions to assess PCI DSS compliance.
• Identified areas involving sensitive data at rest and data in motion requiring encryption or masking, ensuring adherence to PCI DSS requirements.
• Collaborated with security, infrastructure, and application teams to align encryption strategies with regulatory and organizational policies.
• Provided strategic advisory services on data strategy, data governance, data management, data quality, data architecture, data mesh, MEGA HOPEX, DAMA-DMBOK, event-driven architecture, end-to-end data flows and card product harmonization models.
• Ensured solution design alignment with regulatory compliance (BCBS 239, DORA, GDPR) and internal policies.

Project: Denmark ATM Outsourcing Project

Objective: Outsource ATM operations and maintenance to a third-party provider while expanding the Denmark ATM fleet, with Nordea retaining ownership of ATMs and cash for the existing and extended infrastructure.

• Led a cross-functional delivery team (project management, business analysis, and architecture) and documented the as-is ATM ecosystem architecture, including end-to-end data flows, integrations, and internal/external application interfaces.
• Designed end-to-end processes for authorization, reconciliation, and settlement, aligning operating model, controls, and compliance requirements across Nordea and the outsourced service provider.
• Produced high-level and low-level solution designs using standardized UML artefacts (Use Case, Component, and Sequence diagrams) to support vendor onboarding, integration planning, and implementation.
• Ensured architectural alignment and decision-making across enterprise stakeholders and third-party providers, managing dependencies and interfaces in the context of the outsourcing initiative.

• Supported orderbird in setting up and driving an internal advanced analytics project for the internal customer dashboard
• Structured the internal dashboard project for later development

• Senior program director and enterprise architect with nearly 30 years of operational experience in HR, ERP, security, risk management, finance, PLM and SLM.
• Expertise in IT program and project management, engineering, process management and organizational development.
• Experience working for the world leader in service management software, rail transportation and a leading tier 1 automotive supplier.
• Subject matter expertise in finance, automation processes, logistics, ERP and PLM and integration, including related end-to-end lifecycle data management and enterprise architecture.
• Specializes in managing large and complex engagements, programs and projects from demand, idea and strategy to operation, including stakeholder and change management.
• Expertise areas: HR, ERP, SecOps, integrated risk management, supply chain and operations, finance, SLM, product strategy, lifecycle management, shared services, IT and PLM.
• Industry experience in technology, tier 1 automotive, transportation and logistics, manufacturing, high technology and software industries, banking and insurance, and railway.
• Experience with SecOps (security incident response and vulnerability management), digital portfolio management, integrated risk management, service portfolio management and business continuity planning.
• Experience defining and designing integrated risk management including security and operations (response plans), CMDB initiatives and shared service implementations.
• Implemented integrated risk management including digital business continuity plans, disaster recovery plans, digital maturity assessments and security risk registers.
• Technology skills include SAP, HR, time and attendance, ERP, PLM, ALM, ITSM and CAD systems.
• Experience with cloud-based services and master data management.
• Familiar with TOGAF, IT4IT, SAFe and PPM.
• Project client exposure to companies such as Siemens, BMW, Daimler, BASF, Bayer, Bosch, DHL, DB Schenker, ServiceNow, Bombardier, KION, Johnson Controls, Schaeffler, Deutsche Telekom, SAP, FEMSA, CEMEX, Nestlé, Heineken, Air France/KLM, Airbus, Vodafone, Majorel, Virgin Trains, Equinor, ASML and Volvo.
• Holds a master’s degree in informatics and a bachelor’s degree in applied economics.

IT infrastructure / SAP Grantor / SAP BTP transformation project at the Berlin Ministry of Finance to digitalize public funding programs. The goal was a clean-core-oriented SAP BTP solution architecture with CAP/RAP services, APIs, integrations, and operational readiness for run, AMO, and AMS structures.

• Industry: Federal authority, FM Berlin
• Budget 2026: 5 million EUR
• Planned budget for 2027: 8.7 million EUR
• Team size: 45 FTE

• Development of a Target Operating Model for integrated hardware, firmware and software delivery.
• Establishment of a PDMO governance model with clear roles, responsibilities and decision rights.
• Improvement of portfolio and delivery transparency for senior management and executive management.
• Integration of a stage-gate product development process with agile software delivery.
• Redesign of release, quality, change and prioritization processes.
• Development of a scalable tooling and reporting architecture for Jira and PPM systems.

• Managing the further development of IT network service management

• Overall leadership of the transition, consulting on the transition of IT network services

• IT coordination of a tender in the area of IT network services

For (3) Further development of IT network service management Managing follow-up work for the transition (including setup of issue management) Managing and monitoring the performance of external service providers Consulting and managing the further development of IT network service management (processes, procedures, organization, tools)

For (2) Transition of IT network services Overall leadership of the transition (transfer of operational responsibility for IT network services to an IT service provider) Definition and setup of transition governance Planning and tracking of milestones, dependencies and cutover windows Managing the preparation, achieving operational readiness & process/tool integration Carrying out service handovers (cutover, parallel run, stabilization) Ensuring risk management, progress tracking, steering committee and management reporting, stakeholder management

For (1) IT coordination of the IT network services tender Managing all IT work streams of an IT network tender Coordinating the creation of all service descriptions IT review / evaluation of offers IT representative in bidder talks/negotiations Creating presentations/decision papers

• Led cross-industry initiatives in product management, IT governance, agile transformation, and business development.
• Advised executives on portfolio strategy, innovation roadmaps, governance frameworks, and operational execution.
• Developed KPI dashboards and frameworks translating strategy into measurable results.

• Subject matter expert for the client on modeling and developing Camunda BPMN 2.0
• Development of new features and APIs, and coordination of tasks
• Design and development of RESTful APIs with Swagger (code first)
• Creation of target designs, high-level concepts, and requirement specifications
• Analysis and evaluation of alternative solution approaches
• Integration of external IT systems (ANUBIS, SES, ZPS) via Google GCP Pub/Sub and RESTful web services
• Pair programming, code reviews, and collaboration with API product owners
• Consulting on transforming legacy BPMN workflows and configuring Camunda BPM
• BPMN and DMN modeling and implementation in short iterations
• Operational support, bug fixing, and knowledge documentation
• Use of TDD, static code analysis with SonarQube, and integration tests
• Automation of test cases in Java and analysis of stack traces/logs on GCP-PROD
• Identification and execution of test data and documentation of test results

• Leading 20+ staff in development, site reliability engineering, and architecture.
• Leading the group-wide agentic AI initiative (Norway, Poland, Germany).
• Hands-on solution architect and AI consultant for over 50% of my working time on client projects in the publishing sector – from local publishers to international corporations.
• Strategic consulting and technical implementation of AI workflow platforms (n8n, Workato).
• Developing prototypes for traditional, AI-based, and agentic AI workflows.

• Responsibility for IT infrastructure across 8 sites, 2,500 users, 80 systems, 8,000 assets
• Responsibility for IT/non-IT procurement with €18M annual budget
• Central service provider management, digitalization of contracts and procurement
• Project management for scanning solution, site integration, MS SharePoint
• Leadership of 18 FTE across 3 teams
• Agile leadership in implementation of Digital Office and Digital Coach

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Participated as a public speaker regarding leadership and transformational topics at the WeAreDevelopers World Congress with 15 thousand visitors.