Hyper-V Experts in Munich

Mohammed N.

Senior Cloud Solution Architect | Azure & Microsoft 365 Architect | Barracuda ESG Architect

Last position:

IT System Manager at Corporate Network Solution Provider

Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
Prepare security and compliance to support Microsoft 365 Copilot.
Implement information protection and data loss prevention by using Microsoft Purview.
Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.

Vicenco K.

Interim IT Team Lead / IT Service Management / IT Project Management / Solution Architect

Brunnthal

Last position:

ITSM Project Manager (self-employed)

Unified ITSM framework

Definition of a company-wide ITSM target picture
Introduction of a uniform service structure across all business units

SLA and OLA management

Building a standardized SLA framework
Definition of service classes (Business Critical, Standard, Low Priority)
Introduction of OLAs between internal teams
Building meaningful SLA reporting
Definition of KPI and service dashboards for business units

Service portfolio management

Definition of service descriptions
If needed, preparing possible cost and service billing

Ticketing & processes

Incident management
Uniform ticket categories
Standardized prioritization
Escalation matrix
Automations
Self-service optimization

Request fulfillment

Service catalog across all business units
Approval workflows

Problem management

Introduction of root cause analysis
Known error database
Problem review process

Complete asset management concept

Hardware lifecycle management
Software lifecycle management
Leasing lifecycle
Mobile device lifecycle
Monitor lifecycle
Phone lifecycle

Processes

Procurement
Goods receipt
Inventory
Assignment
Return
Disposal
Leasing return Goal: single source of truth for all assets

CMDB design

Definition of all configuration items:
Workplace
Notebooks
Monitors
Mobile phones
Printers

Infrastructure

Servers
Firewalls
Switches
WLAN
Storage
Backup systems

Cloud

Azure resources
Microsoft 365
SaaS services

Relationships

User ↔ Asset
Asset ↔ Service
Service ↔ Infrastructure
Location ↔ Asset
Goal: make all service dependencies visible

Software asset & license management

License management concept
License balancing
Compliance reporting
Microsoft license management
Adobe license management
SaaS management
Contract management
Renewal management

Interfaces & automation Existing systems

Workday
Joiner
Mover
Leaver

TESMA

Leasing data
Contract data

Matrix42

Asset synchronization
User synchronization

Active Directory / Entra ID

User management

Microsoft 365

License assignment
Group management

Dormakaba

Access processes
Lifecycle services

Monitoring platforms

PRTG
Palo Alto
Cisco

Reporting & KPI framework

Definition of a management dashboard
KPIs
Ticket volume
SLA fulfillment
MTTR
First resolution rate
Asset accuracy
License compliance
Change success rate
Service availability
Degree of automation

Network redesign support

Governance
Support of the network redesign from an ITSM point of view
Definition of affected services
Change management structure
Communication concept

CMDB integration

Recording of all network components
Service mapping
Dependency analysis

Validation of documentation and knowledge base articles

Network documentation
Operations documentation
Standard changes

Monitoring & event management

Target picture
Central monitoring concept
Event management process
Alerting strategy
Escalation model

Systems

Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions

Audit, compliance & information security

ISO 27001 consulting
TISAX consulting
NIS2 preparation - consulting
Audit-ready processes
Documentation structure
Evidence tracking in Matrix42

Roadmap

12-month roadmap
Prioritization of all measures
Quick wins
Medium-term projects
Long-term target picture
Documentation

Markus B.

Software Development / Programming; Consulting; Project Management / Management / Organization / Coordination;

Last position:

Developer / DevOps, Consulting at A state authority in Baden-Württemberg / FSAS Technologies GmbH

Oracle Project Management and Automation

As part of the project, the operation of an Oracle infrastructure was automated by developing and enhancing Puppet modules and migrating existing Bash scripts to a standardized configuration management solution.

The aim of the project was to standardize and automate administrative processes, improve the maintainability of the Oracle platform, and increase the efficiency and traceability of infrastructure management through the use of Infrastructure as Code.

Analysis and migration of existing Bash shell scripts to a Puppet-based automation solution
Development and enhancement of Puppet modules for Oracle environments
Automation of installation, configuration and operational processes using Infrastructure as Code
Standardization and optimization of configuration management for Oracle systems
Creation and maintenance of technical and operational documentation
Planning, coordination and professional support during project implementation
Operation and automation of Oracle systems on x86-based Linux server platforms
Testing and quality assurance of the developed Puppet modules
Analysis and resolution of technical errors as part of the automation and migration
Close coordination with specialist departments and infrastructure teams to implement automation requirements

Technologies used: Puppet 7/8, SLES 15, Oracle 19, Oracle Grid, SVN, Windows Server, Confluence, VS Code, Ruby, Bash, Pass

Volker R.

IT Consultant, IT Architect, Senior System Administrator and Lecturer

Sauerlach

Last position:

Architect and Senior System Administrator at International trading company

Analysis and optimization of the VMware environment for operation in a KRITIS environment
Planning and implementation of updates to the VMware and hardware environment in a KRITIS environment
Set up Skyline Health Diagnostics
Review of the existing documentation
Training and onboarding of new internal employees
Support with migration and upgrade projects
Preparations for moving scripts in the virtualization environment to GitLab
Ticket processing with Service.Now

Alexandru G.

Head of Cloud Infrastructure

Last position:

Principal Cloud DevOps Architect at BP

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

Infrastructure as Code: Terraform, AWS CDK, Ansible.
Containers: Kubernetes on EKS, AKS, Docker.
Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
Backend: Python with FastAPI, also Node.js with NestJS.
Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
Monitoring and Observability: Prometheus and Grafana.
Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

Michael M.

Freelance Senior Consultant & Cloud Architect

Gauting

Last position:

Freelance Senior Consultant & Cloud Architect at Rheinmetall AG

Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.

Tobias W.

External Contractor

Last position:

External Contractor at Government Agency

Project support for VMware/Active Directory
Operational support for administration, process execution
Creation and review of documentation
Active Directory, Powershell, VMware VSphere 7, Confluence, Jira
Windows Server 2016/2019/2022/2025 GUI/Core
Concept and rollout of Windows Update Services (approx. 500 client/server systems) and takeover of a central WSUS gateway company-wide
Takeover and redesign KMS/RDS systems company-wide

Stephan K.

Migration Coordination

Last position:

Migration Coordination at ITZBund

Analysis and assessment of government business processes with regard to migration capability
Definition and preparation of the technical framework conditions in the new master data center
Development and optimization of migration procedures and processes
Transformation of existing solutions to new technical standards (technology refresh)
Coordination of architecture and technical cross-cutting topics

Marco F.

System Engineer–Vmware, Veeam

Last position:

System Engineer–Vmware, Veeam at DCSO

About 800 different server VMs, operation and lifecycle/asset management of about 40 ESXi hosts (Lenovo)
Upgrade of all clusters to ESXi/VCSA 7.0U3 and 8. Planning patch management for all hosts
Cleaning up the AD – many different domains that all needed to be migrated into the main environment. Planning/execution
Veeam – check the configuration and migrate to a newer, partly virtual infrastructure to make the setup leaner and faster
VMware – upgrades/updates, general maintenance
Proxmox POC – evaluate if an alternative to VMware
Documentation for Veeam/VMware/storage
Implementation of the uniflow cloud solution
NetApp migration to new storage, CIFS maintenance and administration of SVMs

Mike L.

Agile Coach / Scrum Master

Last position:

Agile Coach / Scrum Master at Landesamt für Digitalisierung, Breitband und Vermessung

Agile Coach and Scrum Master in the Baykom project
Coaching the PO and the team
Reorganization of previous processes with noticeable performance improvement (no statistics yet due to the few sprints, only feedback from the team and from the PO with their supervisor)

Alexander S.

Full-Stack Developer (Java/Kotlin/Angular)

Last position:

Full-Stack Developer (Java/Kotlin/Angular) at Hypoport (Vergleich.de)

Further development of the vergleich.de website
Development of new and improvement of existing backend services as microservices
Deployment via TeamCity and GitHub Actions
Development of monitoring tools
Development of REST APIs
Database migration from Oracle to PostgreSQL
Java and Kotlin (including Spring, Spring Boot, JPA, Hibernate)
Angular (TypeScript) and JavaScript
IntelliJ IDEA and WebStorm
Apache Maven
Oracle DB (and SQL Developer), MongoDB, PostgreSQL DB
Git (GitLab, GitHub, BitBucket)
TeamCity
Jira
Docker
JUnit, Mockito, jasmin

Philipp S.

MS365 Consultant/Solution Architect

Last position:

MS365 Consultant/Solution Architect at Self-employed

Setup and configuration of an M365 tenant on a hybrid basis
SSO integration of the existing app infrastructure like Metamost, Huhu, etc.
License consulting, Entra ID initial configuration, MFA, Conditional Access, Privileged Identity Management
Intune: initial configuration, Windows 11 Autopilot, iPhone AES
Takeover of the tenant and preparation of a security audit
Rollout of iPhones with AES (formerly DEP) as COPE (Corporate Owned, Business Enabled)
Connecting external customers with enhanced security through Conditional Access
Consulting on cloud-first strategy and migration to a cloud-only business
Connecting various apps via SSO/SCIM (e.g. Atlassian, Personio, Adobe)
On-premises AD: security audit and project management for replacing the local AD (migration of file servers, Navision2016, user clients joined to Entra ID)
Copilot rollout with connection to external data sources and configuration via Intune
Support for TISAX and ISO27001 preparation
Setup and hardening of Entra ID, switching MFA to phishing resistant via Conditional Access
Intune management for Windows and Apple clients, web enrollment switch to AES, introduction of Autopilot, app management, integration of Microsoft Defender
Building a device baseline for Windows (COBO) and iOS/Android (BYOD)
Teams/SharePoint Online: access concepts and integration into Teams
Maintenance and backup of Entra ID and Intune tenants (drift management)
M365 backup with Veeam
Extending Conditional Access policies, introduction of Privileged Identity Management with hardware tokens and an on-premises admin tier concept
Revision of existing GPOs regarding structure, security, and compliance
Security audit and hardening of on-premises Active Directory and cloud tenant, SAML VPN, PIM introduction
Support for the HR department in introducing a booking portal and general system engineering administration & security
Introduction of Conditional Access and passwordless MFA, platform SSO, Defender for macOS/iOS, macOS compliance with Intune, Code2 signature configuration

Konstantinos M.