IEC 62443 Experts in Germany

• Architected and deployed a live B2B geocoding and demographic-data platform for Germany, combining address lookup with census-based population statistics through a web application and REST API.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Supported the implementation of §8a requirements of the BSI Act for critical infrastructures.
• Systematically prepared and supported internal and external audits, resolving previous deviations (HA, NA, VP)
• Implemented the specific requirements of the IT security catalog
• Developed training, created run books, and conducted assessments to ensure operational effectiveness.

• Developing and driving solutions for business challenges with clear value for the company
• Value-driven approach to avoid the pilot trap! Scaling instead of endless PoCs.
• SIRI (TÜV Süd)-based assessment of your Industry 4.0 maturity and scalable digitalization (MES, IIoT)
• Innovative, data-driven 4.0 architectures for effective business transformation
• Transforming existing ISA-95 & ISA-88 environments (MES, ERP, Cloud) into modern IT/OT architectures (UNS, MQTT) in line with IEC62443

• Improvement of the Information Security Management System (ISMS) based on ISO 27001, NIS2, DORA, B3S, TISAX and BSI IT Baseline Protection
• Conducting comprehensive gap analyses to identify gaps and derive action plans according to the above standards and regulations; management and KPIs
• Data Loss Prevention strategy and implementation using MS Purview
• Vulnerability and patch management, security monitoring
• Risk analysis and threat modeling using the STRIDE methodology
• Development of vendor risk assessments, implementation of risk classifications, conducting supplier assessments and implementing technical monitoring solutions (e.g. Security ScoreCard)
• Securing cloud environments (AWS and Azure); expertise in CSPM/CNAPP (Wiz), cloud migration, secure CI/CD pipelines, container security and best practices in AWS, Azure and Office 365
• Application security: penetration testing, DevSecOps, OWASP, pre-commit hooks, key and secret management, IDE plugins, static source code analysis, dependency checks, container scanning, vulnerability management, CIS benchmarks and compliance
• Security assessment and hardening according to CIS benchmarks and cloud conformity in AWS, Office 365 and Azure

• PRISMA project
• Ansible automation
• Windows third level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

• Specialized in development and implementation of IT and OT security strategies
• Conducting risk analyses, vulnerability management and security assessments
• Administration of Microsoft Cloud and server solutions
• Establishment and maintenance of ISMS according to ISO 27001, NIS2, BSI and IEC 62443
• Planning and management of security projects in industrial and production environments
• Ensuring regulatory compliance with incident response, emergency management and awareness
• Collaboration with business units, management and external service providers
• Preparation of IT infrastructure for audits

• Created and refined technical and compliance-oriented datasets for AI, ensuring high-quality structured documentation.
• Conducted supervised fine-tuning (SFT) and RLHF tasks, maintaining strict alignment with industry and security guidelines.
• Produced detailed technical reports and feedback for audits and QA teams.
• Collaborated with cross-functional teams on documentation strategies for large-scale AI deployments.

• Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures

• Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks

• Conducting red teaming processes, including penetration tests and security analyses for companies

• Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)

• Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX

• Advising companies in critical infrastructures on information security and compliance with the IT Security Act

• Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)

• Integrating data into monitoring tools (Prometheus, Grafana)

• Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management

• Security assessments and penetration testing of IT and network architectures

• Transforming complex AI use cases into practical solutions
• Analyzing IT/telecom end-to-end business processes from requirements to order (RACI), modeling with IBO Prometheus
• Risk management
• Assessing digitalization potential, AI, and strategic supplier analysis against the IT target picture
• Optimizing offer and cost calculation bases in strategic and operational IT procurement
• Optimizing supplier strategy (DSGV and financial institutions)
• Exploring various approaches to cost optimization and simplifying supplier management
• Optimizing contracts and licensing management (e.g., SAP, Microsoft, IBM, Cisco, BMC, etc.)
• Desk and field expediting with external partners
• Possible outsourcing and consolidation of services with fewer suppliers
• On-time handover of work packages within agreed time and budget

• Building the company with a focus on connectivity for IIoT and Industry 4.0, iRPA/process automation, advanced robotics and smart systems, sensors and services
• Project management and software architecture for IoT gateway development (since 2020) with protocol translation, IT/OT convergence and GRC
• Developing RPA bots for automating and monitoring industrial processes with an agent-based AI approach (since 2020)
• Implementing unsupervised clustering and anomaly detection for time series data in big data streaming pipelines (since 2021)
• Introducing a Docker-based release train for OTA updates with DevSecOps and CI/CD (since 2018)

• Own product vision and roadmap for Axivion’s AI-enabled software quality and architecture platform (€35M+ ARR) with 12 direct reports (PMs, Marketers, etc.)
• Expanded TAM by 40% by repositioning the product as a compliance backbone for AI-driven, safety-critical software, generating €5M ARR growth
• Influenced €15M R&D investment through C-suite portfolio reviews, aligning innovation priorities with market and regulatory demand
• Enabled entry into regulated industries by accelerating certification readiness by 30%, improving retention and audit outcomes

• Enhanced quality assurance of documents, processes and required evidence in preparation for the upcoming KRITIS audit 2025.
• Reviewing and commenting on all relevant documents.
• Advising authors and document owners on inquiries and during the creation process.
• Supporting departments with IT security inquiries.
• Used tools/Frameworks MS Office, SharePoint, Jira, Confluence, ISO27001+, NIS-2 (EU 2022/2555), B3S (Statutory Health & Private Health Insurance), BSIG / IT-SIG 2.0, BSI-KritisV, BSI-C5, BSI Baseline Protection (200-2, 200-4), ServiceNow, RCE (EU 2022/2557), SGB, GDPR