Enterprise Resource Planning Experts in Stuttgart

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Project-based support for industrial and technology companies in transformation, growth, and turnaround situations at executive level
• Founder of VisionBridge Global Consultancy as a platform for strategy development, market entry programs (Middle East), operational excellence, change management, and executive development
• Focus on project-based mandates with the option of long-term leadership roles

• Managing the operational back office
• Handling quotations and invoicing
• Supporting preparatory accounting
• Coordinating appointments and operational alignments
• Interface management between management, clients, and external partners
• Structuring administrative processes in day-to-day business

By taking over operational back office tasks, management is noticeably relieved. Administrative processes run in a more structured, reliable, and efficient way, creating more time for clients, projects, and entrepreneurial decisions.

• Go-to-market and campaigns for SAP-related software solutions from positioning to execution.
• Buyer’s guides and sales tools,
• DACH and UK including tracking and attribution,
• Selection and management of the performance agency,
• Content concept for the DSAG Annual Congress trade fair booth,
• quality assurance of SAP-related content.
• Evaluation of two marketing platforms as a decision basis for management, implementation in HubSpot.

Two complementary tracks: (a) building my own AI products and open-source tools under the Neckarshore AI brand, with a focus on AI-supported multi-agent development processes and documentation automation; (b) freelance support for industrial, logistics, and financial companies in IT-related transformation projects.

Current product portfolio under the Neckarshore AI brand:

• Omnopsis Documenter — AI-powered documentation engine: generates compliance, technical, and release documentation from Git, Jira, and Confluence. 500+ automated tests, 100+ API endpoints, RBAC, monitoring stack.
• TrustScope — trust analysis for public GitHub repos: deterministic three-pillar report (Security & Supply Chain, Governance, Community) based on OpenSSF Scorecard, with constructive fix suggestions instead of a single misleading score.
• md-viewer — dependency-free Markdown viewer for macOS (Finder Quick Action) and web, split view of rendered document and raw text.
• Obsidian Vault Autopilot — AI-supported vault automation for Obsidian × Claude Code: sorts the inbox, renames notes, enriches frontmatter.
• Phonesis Voice Bank — voice archive for families, hospices, and cultural archives (guided recordings, inheritable archive, optional voice cloning); currently in the GDPR compliance phase (Art. 9, biometric data).
• Multi-Agent Development Process — 12+ specialized agents (architecture, implementation, security, refactoring, marketing) with structured handoff protocol, parallel execution, and automated quality assurance — powers the entire product development.
• Freelance consulting: Technical Product Ownership for production, logistics, and compliance/AML systems; steering international rollouts including test, cutover, and change management.

Stack: NestJS, TypeScript, PostgreSQL, Redis/BullMQ, Next.js, Claude Code (Opus), Docker, GitHub Actions, Vercel

The project covered the introduction of SAP S/4HANA including EWM. The customer makes tools for the international market, where 300 production orders and 2,000 shipments need to be processed every day. The project started with the "Explore phase", where the target business and SAP processes were defined, and ended with reaching the productivity goals with S/4HANA. My role was key user trainer and optimizing the live processes.

• Alignment of procurement for EPC project execution for a scale-up company in charging infrastructure, including governance, role models, and integration with project and growth requirements.

• Ensuring seamless end-to-end processes from ordering to billing.

• Establishment of proactive internal and external stakeholder management across organizational and company boundaries.

• Definition of responsibilities (Definition of Work / DOW), development and use of RACI matrices, and establishment of structured escalation levels for reliable decision-making and conflict resolution.

• Consulting, design, analysis, software architecture and development
• Designing, developing, and implementing a Pimcore environment and connecting multiple external API systems in a Kubernetes environment, as well as various PIM and ERP systems
• Technologies: Unix environment, design, Symfony development, PHP 8+, software architecture, MySQL/SQL, shell scripting, Git DevOps tasks, AI coding support, Pimcore 12, Shopware 6
• Team size: >10 people

• Designing the migration strategy for WLS applications to the BKA cloud and Stack IT

• Creating a hybrid cloud for internal testing and development with Kubernetes

• Transforming the IT landscape from a legacy monolithic architecture to a cloud-based architecture

• Integrating new CI/CD processes using Azure Pipelines

• Quadrupled the throughput of personnel security checks

• Migrated personnel security clearance applications to Docker-based applications

• Built CI/deploy pipelines with Azure DevOps

• Environment: Java Spring Boot, Kubernetes, Oracle WebLogic, OpenID, Camunda, JUnit, TOGAF

• Project focus: Strategic realignment of global market clusters and design of future-proof data architectures.
• Results & achievements:
• TOM design SEA & General Distributors: Development of a hub-and-spoke operating model for Southeast Asia (Thailand, Vietnam, Malaysia, Singapore) including site evaluation. Goal: Achieving significant savings in FTE and EUR.
• Data Intelligence Architecture: Conceptualization of a "Data Intelligence Unit" and a Central Data Hub for Europe, including role and process definition.
• AI-Driven Knowledge Management: Implementation of AI-based knowledge management in after-sales to consolidate heterogeneous sources.

• Advising companies and institutions in the areas of customer service, customer experience, customer centricity, user journeys, CRM strategy, operations, digital banking, payments, and energy
• Selection and implementation of CRM systems
• Selection and implementation of billing/ERP systems
• Selection and implementation of omnichannel systems
• Selection and implementation of knowledge management systems
• Interim manager (COO, CCSO)
• Project management for CRM and IT projects as well as software rollouts
• Incident management (leading task forces)

• Process and project management to optimize products and development processes for energy systems
• Technical risk management
• Requirements engineering and system architecture
• System FMEA of power generator units and energy storage modules aiming for generic structures
• Claims management according to Section 313 of the German Civil Code
• Regulatory environment: military and NATO standards, AQAP, VG norms

Main project lead and consultant for the ePPDS rollout

• Role: Lead consultant for the ePPDS rollout, main project lead for the ePPDS rollout
• Project content: 4) Carried out the pre-project for selecting the detailed planning tool 5) Project planning and team staffing for the ePPDS rollout 6) Solution architect for the digital process landscape around digital production

Technologies: Consulting, project management, customizing

• Comprehensive strategic and technical development of three key suppliers