Hybrid Cloud Experts in Munich

Mohammed N.

Senior Cloud Solution Architect | Azure & Microsoft 365 Architect | Barracuda ESG Architect

Last position:

IT System Manager at Corporate Network Solution Provider

Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
Prepare security and compliance to support Microsoft 365 Copilot.
Implement information protection and data loss prevention by using Microsoft Purview.
Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.

Rallis T.

Senior Project Manager Datacenter, Cloud, Network and Collocation

Poing

Last position:

Freelancer Senior Program Manager at LTM Mindtree-Germany

Managed Microsoft Cloud Accelerator Factory (CAF) programs for global enterprise customers, ensuring Azure cloud implementations aligned with security, governance, and compliance best practices, including ISO 27001-aligned controls and cloud security frameworks.
Managed complex global enterprise transformation programs with strong focus on project delivery, financial governance, budget control, planning, risk management, and executive reporting, ensuring delivery within scope, timeline, and budget.
Led the implementation of e-invoicing solutions for Nestlé, coordinating finance, IT, business stakeholders, and external providers to ensure successful integration, testing, rollout, and delivery of electronic invoicing processes.
Managed an Oracle-to-PostgreSQL database migration, coordinating technical teams, application owners, testing activities, dependencies, risks, and cutover planning to ensure a controlled and successful transition.
Led cross-functional programs involving finance and payment-related processes, enterprise platforms, and system integrations, with strong stakeholder management across business, IT, vendors, and senior leadership.
Delivered transformation programs in FMCG environments, including Nestlé, managing complex international stakeholder structures, third-party providers, governance, RAID management, and business-critical dependencies.

Ales L.

Senior DevOps Consultant (Freelance)

Last position:

Senior DevOps Consultant (Freelance) at European Union Agency (via IBM)

Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.

Vicenco K.

Interim IT Team Lead / IT Service Management / IT Project Management / Solution Architect

Brunnthal

Last position:

ITSM Project Manager (self-employed)

Unified ITSM framework

Definition of a company-wide ITSM target picture
Introduction of a uniform service structure across all business units

SLA and OLA management

Building a standardized SLA framework
Definition of service classes (Business Critical, Standard, Low Priority)
Introduction of OLAs between internal teams
Building meaningful SLA reporting
Definition of KPI and service dashboards for business units

Service portfolio management

Definition of service descriptions
If needed, preparing possible cost and service billing

Ticketing & processes

Incident management
Uniform ticket categories
Standardized prioritization
Escalation matrix
Automations
Self-service optimization

Request fulfillment

Service catalog across all business units
Approval workflows

Problem management

Introduction of root cause analysis
Known error database
Problem review process

Complete asset management concept

Hardware lifecycle management
Software lifecycle management
Leasing lifecycle
Mobile device lifecycle
Monitor lifecycle
Phone lifecycle

Processes

Procurement
Goods receipt
Inventory
Assignment
Return
Disposal
Leasing return Goal: single source of truth for all assets

CMDB design

Definition of all configuration items:
Workplace
Notebooks
Monitors
Mobile phones
Printers

Infrastructure

Servers
Firewalls
Switches
WLAN
Storage
Backup systems

Cloud

Azure resources
Microsoft 365
SaaS services

Relationships

User ↔ Asset
Asset ↔ Service
Service ↔ Infrastructure
Location ↔ Asset
Goal: make all service dependencies visible

Software asset & license management

License management concept
License balancing
Compliance reporting
Microsoft license management
Adobe license management
SaaS management
Contract management
Renewal management

Interfaces & automation Existing systems

Workday
Joiner
Mover
Leaver

TESMA

Leasing data
Contract data

Matrix42

Asset synchronization
User synchronization

Active Directory / Entra ID

User management

Microsoft 365

License assignment
Group management

Dormakaba

Access processes
Lifecycle services

Monitoring platforms

PRTG
Palo Alto
Cisco

Reporting & KPI framework

Definition of a management dashboard
KPIs
Ticket volume
SLA fulfillment
MTTR
First resolution rate
Asset accuracy
License compliance
Change success rate
Service availability
Degree of automation

Network redesign support

Governance
Support of the network redesign from an ITSM point of view
Definition of affected services
Change management structure
Communication concept

CMDB integration

Recording of all network components
Service mapping
Dependency analysis

Validation of documentation and knowledge base articles

Network documentation
Operations documentation
Standard changes

Monitoring & event management

Target picture
Central monitoring concept
Event management process
Alerting strategy
Escalation model

Systems

Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions

Audit, compliance & information security

ISO 27001 consulting
TISAX consulting
NIS2 preparation - consulting
Audit-ready processes
Documentation structure
Evidence tracking in Matrix42

Roadmap

12-month roadmap
Prioritization of all measures
Quick wins
Medium-term projects
Long-term target picture
Documentation

Alexandru G.

Head of Cloud Infrastructure

Last position:

Principal Cloud DevOps Architect at BP

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

Infrastructure as Code: Terraform, AWS CDK, Ansible.
Containers: Kubernetes on EKS, AKS, Docker.
Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
Backend: Python with FastAPI, also Node.js with NestJS.
Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
Monitoring and Observability: Prometheus and Grafana.
Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

Tadeusz A.

Enterprise Architecture • Security Architecture • Infrastructure • Network • Cloud

Last position:

Lead Architect Enterprise Architecture & Security at CGI

Lead Architecture in an interdisciplinary architecture team covering enterprise, solution, NOOTS, cloud and security architecture as well as regulatory and European interoperability requirements.
Public / Government
Development and management of target architectures, principles, standards and technical guardrails; assessment of Security-by-Design, IAM, data protection and interface/integration architectures; architecture reviews, security assessments, risk analyses, and preparation of decision records, target visions, roadmaps and decision papers. Architectural knowledge and consideration of relevant AD-NOOTS requirements, particularly for IAM, authorization, secure integration and interoperability.
Technologies / Methods: Enterprise Architecture, Solution Architecture, Security Architecture, Cloud Architecture, NOOTS / EU-OOTS, IAM, Authorization, Security-by-Design, API/Integration Architecture, Interoperability, Risk Analysis, Architecture Governance
Security and integration requirements as well as technical decisions are structured in reliable architecture and decision artifacts.

Marc E.

IT Transformation Lead | Strategy • TOM • Post Merger Integration • Carve Out

München

Last position:

Agile Transformation and Team Development Lead - DevOps & Cloud Adoption at IT Business Unit of Leading European OEM

Guided a large-scale agile transformation, improving team agility, DevOps adoption, and cloud readiness.
Supported DevOps & CI/CD practices to optimize cloud deployment strategies and reduce time-to-market.
Led agile coaching initiatives to enhance cross-functional collaboration between IT and business teams.
designed agile governance structures to align executive leadership with cloud and digital transformation goals.
Technologies & Frameworks: Agile (Scrum, SAFe), DevOps, Cloud Adoption, IT Governance, CI/CD, Change Management

Wolfgang D.

Managing Director

Grünwald

Last position:

Independent Transformation Executive at Digital Transformation & Operational Excellence

Ongoing independent executive practice for ERP/MES, digital manufacturing, IT/OT and program delivery in industrial and regulated environments.
Lead transformation and recovery programs across Europe, the US and Asia across programs with total value exceeding EUR 180M. Focus areas include governance reset, multi-site execution, vendor control, ERP/MES target architecture, executive steering and transition to stable operations.

Selected current and recent work:

PE-backed Industrial Carve-out, Europe | Transformation & Separation Advisor | February 2026 – Present Supporting carve-out preparation and execution with focus on separation logic, operating model, governance, TSA implications, IT/ERP dependencies and Day-1 readiness. Translating transaction perimeter into executable workstreams across business, IT, operations and finance, with clear decision cadence and risk transparency.
Industrial Software & Automation, Europe | Industry Strategy & Value Proposition Advisory | Jul 2025 – Apr 2026 Shaped industry strategy, value proposition and executive positioning for focused industrial software and automation providers in adjacent but distinct markets, including warehouse automation, enterprise architecture, process intelligence and manufacturing transformation. Work included ICP clarity, use-case framing, GTM logic, customer value realization and the translation of ERP/MES, IT/OT and shopfloor reality into scalable, provider-specific market narratives.
AI LegalTech Platform, Switzerland | Interim CTO | Sep 2024 – Jun 2025 Defined product, data and technology roadmap for an AI-enabled LegalTech platform under DACH regulatory constraints. Implemented RAG architecture and delivered MVP, pilot clients and partner setup for first revenues and investor readiness.
Industrial Components, Switzerland | Manufacturing Transformation Program Lead | Jan 2023 – Dec 2024 Re-established governance and roadmap for an eight-year stalled MES replacement across multiple plants. Aligned ERP and Quality interfaces, restored delivery cadence and improved OEE by more than 15% in a CHF 550M business unit.
Pharma & Chemicals, Ireland | GxP Manufacturing Systems Program Lead | May 2020 – Dec 2022 Took over a failing MES/DNC rollout in Covid-19 vaccine manufacturing under strict GxP constraints. Reset governance, validation and site support, restoring operational stability and Day-1 compliance.
Premium Automotive, Italy | Paint Shop Digitalization Program Manager | Sep 2020 – Dec 2021 Stabilized a failed MES rollout that had reduced throughput to 8–9 cars per day versus 23 contracted. Increased output to 26–28 cars per day, securing continuity of a premium product line worth more than EUR 1B.
Automotive Tier-1, Germany | Manufacturing Transformation Program Manager | Oct 2019 – Jun 2020 Modernized an unstable legacy MES blocking ERP integration and traceability. Defined target architecture, aligned vendors and plants, and enabled more than 20% OT operating cost reduction.

Stephan K.

Migration Coordination

München

Last position:

Migration Coordination at ITZBund

Analysis and assessment of government business processes with regard to migration capability
Definition and preparation of the technical framework conditions in the new master data center
Development and optimization of migration procedures and processes
Transformation of existing solutions to new technical standards (technology refresh)
Coordination of architecture and technical cross-cutting topics

Daniel A.

Business Analyst – Freelance

Last position:

Business Analyst – Freelance at A1 Telekom Austria

Business analysis and process optimization, including specifying business requirements and technical design
Interface analysis (REST API, SOAP) and process optimization
Process optimization with RPA, Power Automate, Microsoft Fabric, Power Automate Cloud, and Power BI
Development of Power Apps for a point-of-sale platform using Power Automate and MS Fabric/Power BI to replace various tools
Automation and replacement of manual maintenance of Excel spreadsheets and manual processes

Philipp S.

MS365 Consultant/Solution Architect

München

Last position:

MS365 Consultant/Solution Architect at Self-employed

Setup and configuration of an M365 tenant on a hybrid basis
SSO integration of the existing app infrastructure like Metamost, Huhu, etc.
License consulting, Entra ID initial configuration, MFA, Conditional Access, Privileged Identity Management
Intune: initial configuration, Windows 11 Autopilot, iPhone AES
Takeover of the tenant and preparation of a security audit
Rollout of iPhones with AES (formerly DEP) as COPE (Corporate Owned, Business Enabled)
Connecting external customers with enhanced security through Conditional Access
Consulting on cloud-first strategy and migration to a cloud-only business
Connecting various apps via SSO/SCIM (e.g. Atlassian, Personio, Adobe)
On-premises AD: security audit and project management for replacing the local AD (migration of file servers, Navision2016, user clients joined to Entra ID)
Copilot rollout with connection to external data sources and configuration via Intune
Support for TISAX and ISO27001 preparation
Setup and hardening of Entra ID, switching MFA to phishing resistant via Conditional Access
Intune management for Windows and Apple clients, web enrollment switch to AES, introduction of Autopilot, app management, integration of Microsoft Defender
Building a device baseline for Windows (COBO) and iOS/Android (BYOD)
Teams/SharePoint Online: access concepts and integration into Teams
Maintenance and backup of Entra ID and Intune tenants (drift management)
M365 backup with Veeam
Extending Conditional Access policies, introduction of Privileged Identity Management with hardware tokens and an on-premises admin tier concept
Revision of existing GPOs regarding structure, security, and compliance
Security audit and hardening of on-premises Active Directory and cloud tenant, SAML VPN, PIM introduction
Support for the HR department in introducing a booking portal and general system engineering administration & security
Introduction of Conditional Access and passwordless MFA, platform SSO, Defender for macOS/iOS, macOS compliance with Intune, Code2 signature configuration

Konstantinos M.