Ivanti Experts in Germany

• Creating concepts and architecture for domain integration (SEAT into the VW structure)
• Domain trusts and administration
• Operation and administration of Windows 2022/ 2025 servers and domains
• Domain restructuring
• GPO and SG editing and migration
• DNS restructuring and migration

Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users

• Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
• Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
• Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
• Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
• Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
• Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
• Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables

Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Windows Administrator, software distribution, user support, Azure / Entra Administrator, hardware support, software packaging, defining and introducing processes

Tasks performed:

• Handling incidents, service requests and changes in the Matrix42 ticketing system
• Processing and resolving issues
• User creation / permissions
• Windows installation and patch management
• Entra permissions and license management
• Process optimization and documentation

Tools and methods used: Windows Server 2016 / 2019, Active Directory, Windows 11, Office 365, Azure / Entra, Ivanti, VMWare & ESX, Dell & Kyocera Minolta & Zeus hardware support

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Capture and analyze stakeholder needs to define clear requirements and make sure the new website meets user expectations.
• Took on the role of Product Owner to lead the development team, set priorities, and monitor implementation progress.
• Coordinated the implementation of Optimizely as the new CMS, including adapting and integrating all required features to ensure a smooth user flow.
• Ensured the successful integration of features within the Condor lifecycle, such as flight booking, check-in, and other relevant services, to create a complete user experience.
• Actively communicated with stakeholders to gather feedback and make adjustments during the development process, continuously improving the user experience.
• Planned and carried out tests to ensure the quality of the implemented features and that all requirements were met.
• Methods used: Agile methods, SCRUM, SAFe
• Tools used: Optimizely, Jira, Confluence
• Result: Significant improvement in user experience, optimized booking and check-in processes, and a stronger digital presence for Condor in the market.

Evaluation and selection of a new endpoint management platform for an environment with around 50,000 clients. Support for a manufacturing company in evaluating a future endpoint management platform as a possible replacement for the existing client management solution. Conducting a structured software selection process including proof of concept as well as preparing the decision basis for the Enterprise Architecture Board (EAM). Defining the technical requirements and evaluation criteria and creating a short list of possible solutions (Tanium, Baramundi, Microsoft Intune / MECM). Planning and supporting the technical proof of concept as well as evaluating the architecture and operations aspects of the different platforms. In addition, evaluating tools for migrating existing software packages from the Ivanti DSM environment. Comparing and testing IDERI Move and PACE for the automated transfer of the existing package structure to the new platform, with the goal of significantly reducing migration effort. Support in selecting the required Tanium modules as well as preparing the decision documents for the Enterprise Architecture Board.

Tools: Tanium, Baramundi, Microsoft Intune, Microsoft MECM, Ivanti DSM, IDERI Move, Pace, Windows 10, Windows 11, Windows Server. VDI

• Processing and coordination of IT tickets (Helix, Omnitracker) incl. VIP support and remote support (Microsoft Teams, RDP, FastViewer)
• Onsite support at the main location as well as support for modern conference and meeting room technology (e.g. MeetingBoard 75 Pro)
• User and rights management in Active Directory (Active Roles), Azure AD, Exchange and MDM
• VDI support and monitoring with Citrix Director and Aruba Networking
• Endpoint management and policy administration via Ivanti
• Deployment, configuration and lifecycle management of clients (Dell notebooks, iPhones, iPads)
• Hardware rollouts for new employees incl. shipping across Germany
• Asset and license management as well as organization of site migrations

• Further development of the existing SCCM 2509 implementation
• Schema extension, CAS extension
• Creating task sequences, in-place upgrade
• Patch management (WSUS)
• Security updates, feature updates
• Emergency fixes, application updates
• Incident, change, and problem management (3rd level)
• Active Directory, DNS, DHCP, GPMC
• Managing users, groups, OUs, computers
• Setting up GPOs
• Senior consultant for software packaging in an SCCM 2509 environment
• Project management ITIL standards
• Defect management
• SIT (Software Integration Test)
• SAT (Software Acceptance Test)
• UAT (User Acceptance Test)
• Adjusting Windows 11 25H2 client deployment
• Secunet SINA management systems administrator
• Secunet SINA Workstation 3.5.4
• Maintenance and configuration work in SINA management
• Importing and adjusting IPsec policies
• Retrieving and documenting status, firmware versions, and configurations of individual SINA devices
• Consulting and implementation in fault and incident management
• Implementation of documentation and rollout of new software versions
• Creating software packages based on PowerShell App Deployment Toolkit, Flexera AdminStudio for the W11 64-bit platform and Server 2025 / 2022
• Number of PC systems: approx. 1,850.

Label: PowerShell, VBS, Batch scripting

Label: SCCM 2503, Windows 11 64 Bit, Windows 2025 Server, Windows 2022 Server, Windows 2019 Server

• Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
• Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
• Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
• Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.

• One of the market leaders in hygiene and health products (including ZEWA, Tempo, TENA and Tork) with around 34,000 employees worldwide and about 5,400 in the DACH region.
• Bridging the vacancy, as the previous role holder moved internally to another position in October 2024 and the new role holder will only return from the US in July 2025.
• Leading the team of 35 employees (HR Business Partner / Talent Acquisition and Compensation & Benefits).
• Continuing the trusted cooperation with the various employee representatives.
• Local implementation of company-wide HR projects (Pay Transparency, Employer Branding Plan, DEI Policy, etc.) in cooperation with headquarters in Stockholm.

• Implementation of Rittal MDC’s hybrid data center (on-premises, Azure and local)

• Implementation of backup solution (Azure, Azure local, M365 and Entra ID) with Rubrik

• Application migration and optimization

• Client management (Intune) with Microsoft 365, Office 365 (Exchange Online, OneDrive, MS Teams, SharePoint Online)

• WAN migration and network optimization including Cisco Umbrella, network segmentation and microsegmentation in IT and OT areas

• Implementation of comprehensive WLAN

• Active Directory, Azure AD and Azure tiering model

• Security optimization (NIST, SoSafe, BitSight, SecureScoreCard)

• IT Service Management implementation (ITIL, workflows, ticket system, SIEM and SOC monitoring)

• Strategy consulting and reporting to CIO

• Tendering and selection of service providers for various managed services

• Maintaining operations for IT infrastructure security topics

• Creation, updating and monitoring of project plan/progress, business case and PMO

• Planning and managing work packages, costs, resources, risks, quality, communication and configuration management

• Stakeholder analysis, HR and procurement management

• Holistic view of data security and privacy (IT baseline protection, GDPR)

• Monitoring, reporting and compliance with project management processes and standards

• Review and adjustment of IT service contracts based on customer requirements

• Management of new and existing IT service providers

• Solution design / requirements management