Juniper Networks Experts in Germany

• As-is assessment of the current network infrastructure and its documentation, including on-site inspections
• Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
• Planning of new copper and fiber optic cabling, including patch panels
• Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
• Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
• Additional support after the components go live (hypercare phase)
• Regular communication with project management and client stakeholders

• Optimization of the transmission media of the data links in the Ruhr area
• Configuration/expansion of switches and routers for an autonomous system AS
• Improve the network protocols used Layer 2/3 (OSI model), RSTP, broadcast, etc.
• Laying cables, crimping, antennas, routers, switches
• Maintenance, expansion, selection and prioritization of troubleshooting measures for network monitoring (PRTG, The Dude)
• Organization and new connection of another BGP peering, data center, NGN fiber optic
• VPN IPSec site connections for 6 sites with PFSense, Fritzbox
• Configuration of WLAN devices (Mikrotik, UBNT

Label: TCP/IP, VLAN, BGP, OSPF, MPLS, VPLS, routing protocols, WLAN, EoIP, PPPoE, routing, SNMP, DHCP, DNS, NAT, native IP, VLAN, Ethernet, VoIP., switches and routers from: Nortel, Cisco, MikroTik, UBNT., network management systems: The Dude, PRTG, UISP

• It is like a startup within REWE, where we have to build a new forecasting system on Google Cloud Platform from the scratch. Although, officially my role is called MLOps, my actual tasks also include development of data processing pipelines (data engineering) and data scientists tasks such as feature engineering and model trainings.
• GCP: Terraform (tofu), Vertex AI (Kubeflow), Cloud Run, IAM, Google Cloud Storage, BigQuery, Artifact Registry
• Data engineering: Snowflake as the main data warehouse, Terraform, DBT for data model implementations
• CI/CD: GitLab. We have built a CI/CD pipeline that automates deployments of new releases up to production environment

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Designed and specified the technical network integration of a new business-critical application system (MUREX) in the capital markets area in a complex interface and outsourcing environment.

• Created component specifications, a catalog of measures and an implementation plan.

• Ensured proper integration of the developed results in line with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between the bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous improvements to ensure efficient resource use and acceptable response times for users.

• Provided network support in a financial services organization and prepared operational changes on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed the role of network architect for medium to large projects involving team resources.

• Manage the development release and update process for a digitized nationwide trade register project "AuRegis".

• Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.

• Oversee system release of microservice architecture.

• Craft the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.

• Automate deployment onto OpenShift using Kustomize.

• Establish infrastructure components for development, code review, and code quality analysis including SonarQube.

• Integrate GitOps tools such as Kustomize and ArgoCD, leveraging both Azure and private cloud for sensitive data handling.

• Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.

• Automate delivery to customers and deployment on test systems.

• Craft Kustomize manifests for microservices and develop accompanying automation, treating documentation as code for clarity and reproducibility.

• Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.

• The client is undergoing a comprehensive transformation. All SAP ECC landscapes worldwide are being migrated to SAP S/4HANA, with the goal of introducing a global standard template.

• The program also includes the migration and modernization initiative "RISE with SAP", which may involve migrating selected country installations to the SAP Private Cloud.

• On the stakeholder side, the program's reporting line extends up to the company's board and the implementation partner's board.

• Fiserv Germany's ERP landscape currently includes several non-standard SAP tools and applications that extend the ECC environment's functionality and often integrate with downstream systems. As part of the move to SAP S/4HANA, it is essential to assess the core functionality, integration points, and future viability of these applications to determine their alignment with the target architecture.

• The focus of the role is to provide expert advice and assessment to define the scope, strategy, and roadmap for migrating Fiserv Germany's SAP ECC system to SAP S/4HANA.

• SAP's recommended best practices are followed, and a structured approach is used to ensure a smooth transition with minimal disruption while maximizing business value.

• This assessment forms the basis for a successful SAP S/4HANA transformation, ensuring alignment with industry best practices, regulatory compliance, and future scalability.

• Migration strategy definition – evaluating available transition approaches based on business objectives, technical feasibility, and SAP best practices.

• Technical readiness assessment – conducting a system analysis to assess compatibility, custom code impact, data volume management, integration points, and infrastructure readiness for SAP S/4HANA.

• Business process impact analysis – reviewing the latest business process documentation to define the scope and effort needed to implement required functions in SAP S/4HANA and identify process optimization opportunities.

• Roadmap for non-SAP systems and applications – evaluating third-party and legacy applications for SAP S/4HANA integration and recommending consolidation, migration, or replacement strategies.

• Deployment & implementation planning – defining a phased rollout approach, including project timelines, risk mitigation strategies, and key milestones aligned with business priorities.

• The transformation is carried out in phases: the discovery phase leads to the explore phase, which then leads to the design phase and finally to the implementation phase.

• Program management

• Change management

• Requirements management

• Transition management

• Stakeholder management

• Risk management

• Comprehensive coordination

• User account management and creation in Active Directory
• Group management and modification in Active Directory
• Permission management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Professional focus: Fortinet rollout / site standardization / cloud / ISP migration

• Network analysis, design and optimization, change
• ISP changes
• Commissioning of service providers and decentralized IT support teams
• Setting up a central management platform
• Routing optimization for dynamic routing
• Optimizing and creating firewall rules
• AWS connection / design
• MS Azure connection / design

Technologies / tools: Fortigate, Palo Alto, WAN, SDN WAN, VPN, BGP, OSFP, Fortimanager, Panorama, Meraki, Alcatel, AWS, MS Azure, Network Architecture

• Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
• Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
• Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
• Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.

• providing technical assistance to the sales force during sales calls
• providing pre-sales technical support
• providing technical support during first time installation of new AudioCodes products together with partner/ end-customer
• pre-sales technical interface to the channel/partner and managing of technical knowledge transfer to the partners
• giving customer presentations and hands-on product demonstrations (e.g., AudioCodes Live Cloud, Express, OVOC)
• providing product training to customers, prospects and sales during the pre-sales phase mainly AudioCodes endpoints like e.g., IP Phones, MTRs
• leading RFPs/RFI technical responses
• providing technical assistance to marketing for regional events (e.g., seminars, roadshows)
• mainly focused on AudioCodes IP Phones (Generic SIP/Native Teams), AudioCodes MTRs, AudioCodes Collaboration Bars, Jabra endpoints, Sennheiser/Epos endpoints
• management of endpoints like above via AudioCodes One Voice Operation Center and maintaining of this environment for customer workshops/ calls
• management of AudioCodes IP Phones via Microsoft Endpoint Manager/ Intune and maintaining of this environment for customer workshops/ calls
• building of automated cloud workflows (Power Automate) for internal AudioCodes DACH processes
• trusted advisor for Microsoft products which interfere with AudioCodes products for DACH region

• Integration of a FortiManager into the existing FortiGate firewall infrastructure to centralize and optimize firewall management.

• Assessing the current status (planning stage / rollout status) of the so-called inter-polygon routes
• Creating an end-to-end project plan for the individual routes, considering active and passive components and tasks
• Monitoring and controlling the implementation of the plan
• Optimizing the chosen network architecture
• Creating network and splice diagrams

• Conceptual consulting for securing business processes
• Consulting on planning and implementation of IT and IT security projects
• Security and policy checks, process optimizations, emergency planning
• Project management and interim management in IT infrastructure and information security

Overview of relevant projects:

• 2025: Consulting on a DLP concept for Digid GmbH.
• 2025: Consulting a client after a cybersecurity attack that compromised the IT infrastructure and where the attacker obtained M365 tenant admin rights. Investigated the IT infrastructure and restored it. Developed recommendations to improve IT security.
• 2025: Continued the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
• 2024: Created a DNS concept including advice on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones, and automation. Created a DHCP concept including advice on DHCP design, a central DHCP management system and automation. Advised on operating the mentioned products, the operational processes, and updated IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
• 2024: As-is analysis and assessment of the network and security infrastructure established by providers in terms of overall architecture including design and components. Designed solution proposals to improve current operations for performance and security maximization as well as complexity reduction. Presented the results to C-level, their causes and possible solutions including required decision templates. Developed a SASE concept based on a zero-trust architecture for Norddeutsche Landesbank.
• 2024: Continued the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
• 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proofs of concept for DDoS protection and digital experience monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on zero trust, redesigning a Cisco ISE implementation, and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
• 2023: Continued the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
• 2022: Created and reviewed whitepapers for infrastructure and security architectures, and planned new network infrastructures for the German Aerospace Center.
• 2022: Developed a concept for the technical and procedural modernization of a disaster recovery plan for United Nations Volunteers.
• 2022: Developed a concept for migrating measurement data to a cloud environment, introduced network access control, and conducted an awareness training for Digid GmbH.
• 2022: Developed a network segmentation concept for DZ Hyp AG.
• 2022: Developed a network segmentation concept for the Federal Employment Agency.
• 2021: Developed a new load balancer architecture concept for Bundeswehr Fuhrparkservices GmbH.
• 2021: Conducted a vulnerability scan and penetration test of a web frontend including analysis and recommendations for remediation considering risk and likelihood for the client ifi GmbH.
• 2021: Consulting, design, and subproject management for implementing a network access control solution (certificate authentication and MAC address bypass) and macro segmentation (area and zone concept based on dynamic device assignment) in office and production IT for Vaillant Group GmbH.
• 2021: Upgraded and optimized LAN and WLAN infrastructure for United Nations Volunteers.
• 2021: Developed a target concept for modernizing the IT security infrastructure including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet connections, admin and management networks, and the wireless LAN, including overseeing implementation for the Federal Institute for Geosciences and Natural Resources.
• 2021: Created a micro-segmentation concept based on Cisco DNA, SGT, and zero trust for Union Investment IT-Services GmbH.
• 2021: Reviewed and updated ISMS level 3 policies and created procedure instructions for Software AG.
• 2021: Project lead for the global tech refresh project Meraki WLAN 2.0, coordinated the outsourcing of LAN/WLAN infrastructure to a managed service provider, and created a WLAN concept for automated guided vehicles for Heraeus Infosystems GmbH.
• 2021: Project management and technical support for the 'Transition of SIEM/SOC Services' project migrating a client to a shared environment, and took on the interim role of Head of Security Operations at Datagroup SE.
• 2021: Conducted a workshop for the future implementation of mobile device management for Allgeier Experts Go GmbH.
• 2021: Subproject management for implementing a firewall rule management tool and recertifying NAC endpoints based on 802.1x and MAB for Union Investment IT-Services GmbH.
• 2020: Developed a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
• Recorded and analyzed the current network architecture including project initiation.
• Designed a micro-segmentation concept in the data center and access network.
• 2020: Infrastructure and security architecture audit for Stuttgarter Versicherung AG.
• Analyzed the IT infrastructure and security architecture regarding network and security component configurations. Also reviewed contracts, process documents, and manuals for completeness. Developed recommendations to improve the stability and operation of the infrastructure. Created a network segmentation concept and led the project to implement the measures from the audit.
• 2020: Consulting on setting up an ISMS-light for Josera foodforplanet GmbH & Co. KG.
• 2020: Security architecture consulting for Datagroup SE.
• Developed a future IT infrastructure and IT security architecture.
• Documented the current IT architecture of all 23 entities.
• Made recommendations to optimize the IT infrastructure and drafted a comparison of a traditional perimeter security concept versus a zero trust model.
• Created a security zone concept.
• Designed an IT infrastructure architecture in coordination with all entities.
• 2018 - 2019: Stream lead in the cybersecurity program at Deutsche Lufthansa AG.
• Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
• Project area: Network segmentation and access control.
• Project area: Security architecture.
• Project area: Privileged, identity & access management.
• Project area: Simplify user authentication (MFA).
• Project area: Mobile & endpoint security.
• Project area: OT security.
• Project area: E-enabled aircraft.
• 2018: Security architecture consulting for Deutsche Lufthansa AG.
• Project management for the development, evaluation, and management of the company-wide information security architecture.
• Developed a security strategy and a roadmap to align the security architecture with the zero trust model.
• Evaluated market security solutions, services, and tools.
• Defined requirements for RFPs and assessed proposals.
• Developed, maintained, and monitored security architecture artifacts.
• Conducted security assessments of existing and new IT systems and security services.
• 2018: ISMS consulting for GLS IT Services GmbH.
• Advised on implementing and initially operating an ISMS based on ISO27001.
• Audited the IT environments of GLS country subsidiaries.
• Analyzed and assessed IT security risks and derived necessary measures.
• Developed solution proposals in coordination with relevant stakeholders.
• Managed the project and handed over the ISMS to operations.
• 2016 - 2018: Security pre-sales consultant for Cisco Systems GmbH.
• Provided nationwide strategic and conceptual consulting to major enterprise and financial and insurance clients on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch, and ISE.
• 2017 - 2018: Designed and implemented an ISMS for Verivox GmbH.
• Conducted various BIAs and gap analyses.
• Developed security policies based on ISO 2700x.
• Served as interim information security officer.
• 2017: Developed an emergency concept for VPV Lebensversicherungs-AG.
• Reviewed and updated the IT emergency manual.
• 2016: Consulting and project management for designing cloud & hosting services for Vodafone Group Services GmbH.
• Analyzed and optimized the sell-build-run process.
• Created detailed level designs for cloud products.