HPE 3PAR Experts in Germany

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

• Planned and implemented new network infrastructure (VLAN, LACP, DMZ, structured cabling)
• Migrated from VMware to KVM using Oracle Linux Virtualization Manager (OLVM), including CPU pinning
• Hardened the entire environment using SELinux (KVM hosts, container hosts, database servers)
• Configured and operated the virtualization platform with OLVM and Ansible-based provisioning
• Containerized and redeployed critical services: WordPress, Jenkins, PostgreSQL, MariaDB, Subversion with Apache + AD integration
• Developed Ansible playbooks for automated deployment and configuration management
• Integrated Foreman for repository and security management in the DMZ
• Produced technical documentation in Markdown; organized in Bookstack
• Coordinated with external vendors (e.g. HPE) for hardware installation and setup
• Delivered all contributions documented and reproducible in Markdown

• Projects for federal networks (NdB).
• CR management, EoL change requests, design and documentation according to ITSCM.
• Data center planning.
• Project management and engineering subproject management.
• Software development for virtual server environments according to BSI.

Restructuring email authentication across the entire domain inventory of an international industrial company with 1,000 to 5,000 users: around 45 domains in more than 20 countries.

• Inventory of all domains and classification as sending, non-sending, or unclear; target design for each domain group
• DMARC reporting (rua) as the data basis before any policy tightening, with aggregate reports analyzed over several weeks
• SPF lookup budget (limit of 10 lookups) counted rather than estimated; several assumptions from previous findings were thus disproved
• Analysis of the multi-stage mail flow across on-premises Exchange, Microsoft 365, and security gateways, and its impact on DKIM alignment and SPF
• Assessment of external findings based on evidence: confirmed, false positive, or context-dependent, with justified disagreement presented to the assessor
• Change proposals with before/after state, risk, and rollback; implementation is handled by the customer
• Tenant-to-tenant migration analysis for a group company: read-only audit, technical assessment, management summary, migration paths
• Analysis of a service shared mailbox according to CISO and data protection requirements: anonymized in the transformation layer, without personal data analysis

Technologies: Exchange Online, Exchange Hybrid, Entra ID, Microsoft Graph, PowerShell, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, Power BI

• Led a small team of Storage/Backup consultants responsible for EMEA region data center transformation across 200 DCs
• Developed and defended HLD and LLD designs for SAN (Brocade), block storage (HPE Primera/Alletra), NAS (EMC Unity), object storage (Iternity with iCAS FS), and backup (Commvault)
• Performed build and configuration of ~25 data centers, coordinating with network, compute, and security teams
• Developed new processes and standards for infrastructure builds and finalized hardware purchases and BOM preparation
• Created and executed testing approach including DR tests, and handed over builds to operation and migration teams
• Trained other storage consultants to ensure SLA compliance
• Technologies: Brocades, HPE/IBM/EMC/NetApp/CEPH, vSAN, NSX, TSM, Veeam, Commvault, tape libraries, drives & VTLs

• Operation of VMware, Veeam and further development of the system
• Implementation of BSI requirements in the design/construction
• Control and analysis of the VMware environment using PowerShell scripts
• Working according to ITIL processes
• Version control of scripts with TortoiseSVN

• Overall coordination of service providers for all infrastructure topics at a production site being set up in Baden-Württemberg
• Design and finding solutions for internet connectivity, building office communication networks, setting up WLAN in production and administration buildings, IP address management, password policies, time tracking, access control systems, backup strategies, emergency power planning, operating concepts, cost planning, event management, workplace setup including laptop/mobile phones/telephony, remote support, print servers
• Selecting suitable external service providers and planning to meet needs for spare parts, repairs, on-site service, network and workplace support including on-site system replacement by providers
• Choosing suitable external service providers for facility management and building technology (fiber optic connections, data center infrastructure, cable ducts etc.)
• Coordination with clients and service providers
• Escalation management, schedule control
• On-site presence for service meetings and managing service providers

• Administration of Brocade SAN

• Optimization of processes in the Pure Storage environment

• Automation in the storage environment

• Administration of block, file and S3 storage (NetApp / Pure Flash Blade)

• Software/Tools: BNA, SANnav, bash, python, Remedy ARS

• Providing, as a senior IT specialist, advisory to internal teams and gematik
• Actively member of a new advisory & regulatory Design Authority team
• Creating simplified overview diagrams of complex situations
• Creating and updating documentation in the document tool Confluence

• As-is assessment of data center rooms and data center infrastructure at the Jena data center, including analysis and documentation based on BSI IT-Grundschutz, EN 50600, EN 50001/EMAS, ISO 27001, ASHRAE
• As-is assessment of the IT infrastructure at the Jena site, including analysis and documentation based on ISO 27001
• Development of a concept for the data center infrastructure and IT infrastructure of the Jena data center
• Development of a concept for the IT infrastructure at other sites
• Creation of the technical specification of the bill of quantities for the tender