Firewall Experts in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Designed and specified the technical network integration of a new business-critical application system (MUREX) in the capital markets area in a complex interface and outsourcing environment.

• Created component specifications, a catalog of measures and an implementation plan.

• Ensured proper integration of the developed results in line with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between the bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous improvements to ensure efficient resource use and acceptable response times for users.

• Provided network support in a financial services organization and prepared operational changes on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed the role of network architect for medium to large projects involving team resources.

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• Implemented an access control solution and prepared tender documents for a visitor management system.
• As project manager, I was responsible for the successful rollout of a cloud-based access control system for two sites with around 4,000 employees.
• Accountable for the successful execution of the project.
• Created and aligned project plans and status reports with all stakeholders.
• Prepared/coordinated an initial effort or cost estimate and related planning for operational services implementation.
• Identified interfaces.
• Ensured budget and schedule compliance.
• As tender manager / demand manager, the following specific tasks were my responsibility:
• Analyzing potential suppliers.
• Gathering requirements.
• Creating and aligning the requirements catalog.
• Developing an evaluation matrix.
• Preparing the tender documents.

• Provided coaching and support to Scrum teams to adopt and implement agile practices effectively
• Analyzed business requirements and identified IT solutions to support business goals
• Evaluated existing IT systems and processes to identify optimization opportunities
• Managed stakeholder relationships and coaching
• Facilitated Scrum ceremonies and ensured adherence to Scrum principles and practices
• Identified and implemented lean startup process optimizations to improve efficiency and effectiveness of development and business processes
• Developed and monitored daily business strategies to ensure development goals were met
• Developed and implemented OKR strategies to align team goals with company objectives
• Tools/Methodology: Jira, Confluence, Miro, PowerBI, team building & mentoring, conflict resolution, impediment resolution

• Recognition of national notified bodies
• Preparation of cybersecurity competency reports
• EU Radio Equipment Directive

• Project management
• Coordination of the rollout of 148 firewalls (Palo Alto) for 74 buildings at more than 14 locations in EMEA
• Management of the team (8 employees)
• Communication with senior management (local) and site managers (EMEA)
• Ensuring work packages were completed on time and according to requirements, including formal acceptance
• Extensive use of the relevant Microsoft tools
• Wrike (project management)

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

• GfK Data center IT Infrastructure project onsite coordinator (Equinix DC FR2/FR7) training FEs in Equinix DC Carla, FNT, Jira Confluence, ServiceNow (Change/Problem/Incident MGMT), DCIM, ITSM, ITIL
• Reporting significant incidents as the on-site technical coordinator and initial point of contact for vendor escort and smart hands
• Utilizing CMDB-GUI, NIQ-Browser, CMDB-Filtering-GUI, OSS-Radar, BigBrother, CheckMK, and TTWOS for 2nd and 3rd level troubleshooting support
• Maintaining MDF, IDF, computer rooms, and closets; coordinating with service desk, reception, and security for visitor access
• Managing asset lifecycle including operation, retirement, stocking, and destruction with proper SanDisk procedures
• Leading footprint data centre optimization and reduction in FR2/FR7; handling network, server, storage, desktop, hosting, IT security, video conferencing, and telephone operations
• Coordinating server relocations, fibre optics/copper cable preparations, CMDB updates, and stakeholder cooperation
• Implementing IT infrastructure design, maintenance, configuration, and construction following Dell/HP/Apple ESD safety precautions
• Single POC for change management network, Star Track, backup & storage, cloud, Linux, Windows, EUS teams & Software Centre installs
• Successfully completed DC Footprint Reduction Project 2021/2022 and GfK New Hardware DC Refresh Initiative
• Planning, configuring, and installing Dematic server rooms and switch configurations in Heusenstamm, Wurzburg, Kahl am Main, and Graz Austria
• Providing on-site media equipment setup for HP, hospitals, manufacturers, and laboratories
• Ensuring professional rack and cable management following best practices
• Maintaining up-to-date plant maps accessible to all teams showing technology space and spare locations
• Offering technical assistance for live events, town halls, forums, streaming, and hybrid events on and off campus
• Providing second level support for Poly video conferencing systems across multiple time zones
• Conducting frequent computer room walkthroughs, recording power, cooling, alarm, security threats, and mapping wireless environment and access points

• User account management and creation in Active Directory
• Group management and modification in Active Directory
• Permission management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

• Linux server migrations: planning and execution of the migration with SLES Linux deployment of VMs in VMware 8.0
• Guiding colleagues on configuring Linux VMs with vSphere Auto Deploy
• Application operations: ensuring smooth operation of applications on migrated servers
• Operations manuals: revising existing manuals, updating and creating new ones as needed
• Reviewing service offers: adjusting and optimizing service offerings of external providers
• Logistics software, Red Hat Linux, Ansible, Confluence / Jira

• The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.

• The internal audit is meant to ensure the company's quality standards.

• GDPR

• ISO 27001 ff.

• BSI

• DORA

• Patient data regulations

• Host / Cloud / S3 / Container / highly scalable / Nuxeo

• Budget: 50,000

• Team: 1