Identity and Access Management Experts in Frankfurt

Reza N.

Senior IT Security Engineer · Detection & Response · Microsoft Security

Dreieich

Last position:

Senior IT-Security Expert at Teambank AG

Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Firas J.

IT Governance & IT Compliance Expert

Friedberg

Last position:

Interim Management Group Head of IT Governance & IAM at French-German Private Bank

Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.

Alfons G.

Senior Infrastructure Consultant – Technical Project Lead

Last position:

Senior Migration Consultant / Technical Project Lead

Europe-wide re-platforming & centralization

Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.

Kevin F.

Senior Consultant and Platform Engineer

Last position:

DevOps and Platform Engineer at DB Systel GmbH

Error analysis and fixes including performance optimization of the in-house developed platform API
Change and incident management in day-to-day operations
Responsible for compliance with security and compliance requirements
Vendor management for software development and maintenance
Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

Saqib J.

Senior Solution & Software Architect · Interim IT Lead · AI/Agentic AI, Cloud, .NET

Erlensee

Last position:

AI Developer / AI Engineer (Lead) at KOM4TEC GmbH

Conceptual design and implementation of modular AI assistants for sales and business processes in the Microsoft ecosystem (Agentic AI, Copilot extensions)
Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, hooks, React Query, OpenAPI clients)
Enterprise-level agent development: reusable skill/agent library, MCP server, review and compliance gates
LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
Architecture and code review consulting as well as mentoring in the AI development team
Integration with Microsoft Graph, Power Platform, and Azure services
Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

Noel L.

Founder & Lead Engineer

Last position:

Founder & Lead Engineer at ausbildung-in-der-it.de

Platform established and running stably; deliberately reducing my involvement to refocus on an engineering mandate in the financial sector.
Built an own SaaS learning platform from the ground up and scaled it to over 20,000 users (over 6,000 courses sold, B2C and B2B); end-to-end ownership from development through infrastructure to operations.
Built a lab environment that provisions an isolated Linux container per user (Docker, Traefik, Go), including automatic provisioning and a dedicated subdomain per user.
Integrated LLM features into the product and accelerated development end-to-end with AI-assisted workflows (Claude Code, Codex); CI/CD with automated tests.

Andreas I.

Senior Cybersecurity Governance & ISMS Consultant

Last position:

Cybersecurity Specialist Assessor at Bundesnetzagentur

Recognition of national notified bodies
Preparation of cybersecurity competency reports
EU Radio Equipment Directive

Fabrizio D.

Managing Director

Last position:

Managing Director at ContrailRisks Germany

Founded and lead a cybersecurity advisory firm focused on virtual CISO services for financial, SaaS, and critical infrastructure clients.
Advise executive teams on cyber risk, regulatory compliance (DORA, NIS2, ISO 27001), and incident preparedness.
Built and executed security programs from scratch, driving measurable maturity improvements.
Delivered tailored risk assessments, policies, and cloud security guidance (AWS, Azure).
Scaled the business through client acquisition, partnerships (Vanta, AWS, etc), and a network of senior consultants.

Peter S.

IT Project Manager

Last position:

IT Project Manager at PAS Provider for Hospital

Overall responsibility for managing a clinical digitization project in a regulated hospital environment.

Design and implementation of a patient call and management system (PASO) for the orthopedics department of a large hospital.

Project management, planning, and control
Process analysis and optimization, and managing implementation and rollout
Coordination with clinical departments, IT, and external service providers
Ensuring integration into existing IT and process landscapes

Project scope: 310 person-days, team size: 21 members.

Reinhard G.

IT Infrastructure / User Management

Raunheim

Last position:

IT Infrastructure / User Management at UMF – University Medical Center Frankfurt

User account management and creation in Active Directory
Group management and modification in Active Directory
Permission management on file servers
Exchange/Outlook support
VPN setup
System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Peter W.

Program and Project Manager / Internal Auditor / CISO

Last position:

ISO 27001 Auditor for health insurance archive system at Health insurance company

The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.
The internal audit is meant to ensure the company's quality standards.
GDPR
ISO 27001 ff.
BSI
DORA
Patient data regulations
Host / Cloud / S3 / Container / highly scalable / Nuxeo
Budget: 50,000
Team: 1

Fayyaz I.

Senior / Global IT Project Manager, Cloud & Platform Engineering

Dietzenbach

Last position:

Senior / Global IT Project Manager, Cloud & Platform Engineering at BOSCH

Led multiple concurrent, enterprise-scale technical programs spanning backend services, APIs, identity platforms, cloud infrastructure, and security
Actively participated in system architecture and design reviews, validating service interactions, data flows, security models, and scalability requirements
Worked hands-on with engineering teams to decompose complex initiatives into technical epics, stories, and deliverables
Reviewed technical approaches, migration strategies, and rollout plans to minimize operational and security risk
Delivered SSO, MFA, directory services, SaaS integrations, and platform modernization impacting tens of thousands of users globally
Drove Agile delivery across globally distributed teams; facilitated ceremonies, resolved blockers, and improved engineering throughput
Established technical RAID logs, dependency maps, and milestone-based execution plans in regulated enterprise environments
Acted as a trusted technical partner to senior leadership, translating complex engineering topics into business-relevant outcomes

Martin G.

Product Management for Medical Portal

Bad Homburg

Last position:

Product Management for Medical Portal at MedTech Startup

Product strategy and roadmap development for digital health portal
Requirements engineering and feature prioritization
User story definition and backlog management
Prototype development
Implementation of continuous delivery
Search engine optimization
Technological environment: Claude Code, Claude Sonnet 4.5, Agentic Coding, TypeScript, React, AstroJS, PostgreSQL, JetBrains IntelliJ, Netlify, Supabase, GitHub Actions, Git, DevOps, continuous delivery

Tan P.

DevOps & Fullstack Engineer

Hanau

Last position:

DevOps Engineer in the DevOps Team at Rise-World

Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
Use of Scrum and Kanban methods.
Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
Development of new plugins and add-ons needed on current infrastructure.
Database support.
Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
Automated system provisioning and deployment using CloudFormation templates.
Configuration of IAM roles, policies and permissions to ensure secure access control.
Patch management, backup automation and disaster recovery setup on AWS infrastructure.
Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
Configuration of AWS CloudWatch to monitor application performance and system events.
Planning and execution of migration of on-premises applications to AWS cloud platforms.
Deployment of containerized applications using Docker and Kubernetes in AWS environments.
Deployment of internal software packages between availability zones using AWS CodeDeploy.
Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

David R.

Lead Developer/Technical Architect