Huawei Experts in Germany

• Manage and coordinate site design, deployment, new Core/DWDM implementation, and optimization of a robust and scalable fiber optic network infrastructure
• Create high-level design (HLD) and low-level design (LLD) documents for core and aggregation network
• Define scope of network elements and establish operational and deployment guidelines
• Determine core-site strategy, integrate voice and ISP systems, and swap core components of 60 existing sites
• Develop site design, execute proof of concept, and deploy additional core sites

• Operation, maintenance and administration of the global network & security system landscape
• Troubleshooting and support in 2nd & 3rd levels and provide technical advice to other dept.
• Configuration of complex LAN/WAN/SD-WAN and WLAN network infrastructures (N5K, N9K, ASR 8000, Wireless Controller WLC9800, AP C91xx and VMware Velo Cloud)
• Control of external service providers as part of service and escalation management
• Implementation and monitoring of system updates (software upgrades, minor/major changes)

• As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.

• I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.

• I managed user accounts, implemented security policies, and monitored system performance.

• I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.

• I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.

• I managed file servers and NTFS permissions to ensure secure and efficient data access management.

• I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.

• I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.

Technologies used:

• Citrix XenApp and XenDesktop
• Microsoft Windows Server 2012R2 and 2022
• Exchange 2016 and Exchange Online
• Entra ID (Azure AD)
• Entra ID Connect
• BitLocker
• PowerShell scripting
• Microsoft Intune
• LDAP (Lightweight Directory Access Protocol)
• DNS services (Domain Name System)
• Active Directory Certificate Services (AD CS)

• Led marketing and corporate communications team (8 FTE) with budget and team responsibility to 250+ clinic customers and 150K patients, managing all aspects of marketing, brand messaging and public relations
• Led development of multi-channel demand gen and partner marketing with Sales and CSM (LinkedIn, webinars, email, field marketing, medical briefings in orthopedics, neurology, long-covid, oncology), achieving +180% leads, +120% webinar signups, +35% MQL conversion
• Architected new PLG/app marketing playbook with Product and Data to streamline and leverage product launches, achieving +150% 5-star app reviews from patients and +10 NPS
• Launched ingredient branding strategy, securing two major clinic chain partnerships and patient testimonials. Led proactive PR media and KOL campaigns (+20% sentiment)
• Introduced MarTech AI for marketing automation and campaign efficiency (SFDC, ActiveCampaign, Plausible, Figma), aligned with Legal on GDPR, PDSG, ISO:27001 compliance

• Planning the migration approach from the old to the new ZEWIS system
• Configuring the modules (basic module, project recording, assembly billing, etc.)
• Setting up interfaces and data imports
• Coordinating the rollout and aligning with departments
• Supporting the team during the go-live and troubleshooting
• Quality assurance and preparation for acceptance
• Documenting all steps for smooth operations

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

• Led a small team of Storage/Backup consultants responsible for EMEA region data center transformation across 200 DCs
• Developed and defended HLD and LLD designs for SAN (Brocade), block storage (HPE Primera/Alletra), NAS (EMC Unity), object storage (Iternity with iCAS FS), and backup (Commvault)
• Performed build and configuration of ~25 data centers, coordinating with network, compute, and security teams
• Developed new processes and standards for infrastructure builds and finalized hardware purchases and BOM preparation
• Created and executed testing approach including DR tests, and handed over builds to operation and migration teams
• Trained other storage consultants to ensure SLA compliance
• Technologies: Brocades, HPE/IBM/EMC/NetApp/CEPH, vSAN, NSX, TSM, Veeam, Commvault, tape libraries, drives & VTLs

• Consulting and execution of migration from Cisco AireOS to Cisco IOS-XE controller
• Solution design
• Configuration and staff training
• Products: Catalyst Center, Cisco controllers and IOS and COS access points, 9800-40, 5520, 8510, 9120, 9136, 9166, Catalyst switches, Aruba Clearpass
• Keywords: Tags, profiles, SSIDs, 802.1X authentication, captive portal, Identity PSK (iPSK), VLANs, troubleshooting, automation, RESTCONF, NETCONF, YANG

• Coordination of network orders
• Quoting
• Control and monitoring of external service providers
• Change creation for mobile communication
• SPOC of Data Center in Frankfurt for WAN connections
• Resource management for the department budget
• Technical contact for the WebEx platform
• Coordination tasks for the head of department
• Moderation of team meetings

• Project review, restructuring, and PM for the migration of a total of 12,000 Windows workplace systems (650 applications) from SCCM and Empirum/Matrix42 to MS-Intune after a merger.
• Took over a heavily delayed / not ideally managed project in the role of the "firefighter".
• Completely revised and adjusted/updated the planning of the customer and the involved service provider.
• Introduced planning baselining as well as tracking/mitigation of current risks.
• Introduced an efficient, partially automated planning/reporting interface between MS Project Planning (service provider) and Jira (customer).
• Restructured meetings to increase efficiency and remove redundant appointments.
• Completed the analysis and design phase and created base data for migrations from heterogeneous systems of the two merged companies.
• Started the User Acceptance Test (UAT).
• Technologies: MS Autopilot, Zero Touch.

• Business intelligence and KPI specification and playbook for 35 European companies.

• Org design & HR transformation project.
• OKRs development.

• At ING-DIBA AG, transform all local infrastructure applications into a private cloud environment as part of consolidation. This active architecture environment has high application density and represents the core of the banking business. Based on a DevOps architecture, a uniform and standardized environment will be created in the target design, which is highly scalable and meets the requirements of regulatory authorities and the bank's internal security standards.

• Developed the target concept with involved departments.

• Defined VPN/DNS naming conventions and network segmentation.

• Designed the required load balancer system.

• Created a transfer solution for non-routable IP addresses.

• Identified application dependencies in the initial design.

• Coordinated application owners, data protection, information security, and identity managers.

• Developed a validation POC to test and optimize the cloud migration.

• Defined development, test, quality, and production environments in the cloud design, considering an agent-based initial architecture.

• Used existing CMDB systems and adapted the database structure in the target design.

• Established an Office 365 environment for international collaboration for the migration project (classic Office environment including Power BI, SharePoint, Teams)

• Implementation of Cisco Catalyst Center wireless network for a federal ministry in Berlin with focus on wireless topics
• Troubleshooting of day 0, day 1 and ongoing templates for zero-touch provisioning of switches and access points
• Client authentication and authorization troubleshooting using Cisco ISE
• Wireless guest access via Cisco ISE captive portals
• Ekahau site surveys and WLAN survey reports
• Cisco DNA Center, Cisco WLC and Cisco ISE
• LAN and WLAN network design and planning based on existing HLD and LLD documents
• C9300L and C9500 series switches, CW9166i access points