KRITIS Experts in Berlin
for resilient critical infrastructure, matched in minutes with vetted freelancersHire experts who design, assess and improve critical infrastructure security, continuity and compliance across essential services. Work with vetted, available freelancers matched quickly and precisely to your KRITIS requirements.
Meet FRATCH Experts in Berlin, who have recently used KRITIS
Andreas R.
Last position:
Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting
Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations
Piet Q.
Last position:
IT Project Manager at no release
Industry: Publishing, media Project management for the concept of a RAG-based archive access solution: a secure on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio and video archives. Use case evaluation and make-or-buy together with editorial team, archive, and legal department, taking into account copyright, broadcasting law, and the AI Act. Differentiator: practical LLM infrastructure experience from two own productive platforms combined with C-level program management in regulated industries.
André B.
Last position:
External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH
- Conducting cybersecurity readiness checks based on an in-house assessment methodology
- Analyzing the external attack surface using the Graydaxe EASM platform
- Assessing maturity levels and deriving prioritized recommendations for action
André G.
Last position:
IT Consulting Project Management / Engineering Subproject Management at T-Systems (on assignment for government agencies)
- Projects for federal networks (NdB).
- CR management, EoL change requests, design and documentation according to ITSCM.
- Data center planning.
- Project management and engineering subproject management.
- Software development for virtual server environments according to BSI.
Matthias S.
Last position:
Senior Security Consultant (freelance) at DVZ M-V
- ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
- Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
- Preparation for OWASP penetration test, incident response plan, risk analysis
- DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
- Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM
Mohamed G.
Last position:
Lead / Principal Cloud, AI & Security Architect at Freelancer / CC Conceptualise GmbH
Projects:
Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:
- Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
- Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
- Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
- Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
- Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
- Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management
Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:
- Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
- Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
- Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
- Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
- DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
- Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
- Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git
Henryk O.
Last position:
Security Consultant at Daimler AG
- Development of a cloud security strategy
- Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
- Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
- Definition of security measures to safeguard cloud solutions
- Conducting requirements analyses and defining the scope for cloud security projects
- Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks
Markus W.
Last position:
KRITIS Consultant at Oil Company
- Preparing an oil company for KRITIS auditing
- KRITIS consulting
- Creating necessary policies, processes, and guidelines in line with KRITIS requirements
- Tools and methodologies used: ISO/IEC 27001, BSI IT Baseline Protection, KRITIS-V
Jürgen K.
Last position:
Freelance Consultant Controlling & TDD at self-employed
- (part-time) self-employed (parallel)
- TDDs and consulting on special projects (data centers and military buildings)
Discover over 15,000 top freelancers
Statistics of experts using KRITIS
Aggregated from the professional profiles of matched freelancers.
Experience
29 years (Germany: 23 years)
Position duration
1.6 years (Germany: 2.2 years)
Positions per freelancer
27 (Germany: 18)
Top business areas
Information Technology, Project Management, Quality Assurance
Top industries
Information Technology, Professional Services, Energy
Certification focus areas
Information Technology, Audit, Project Management
Bachelor's degree or higher
88% (Germany: 89%)
Master's degree or higher
38% (Germany: 47%)
Certifications per freelancer
11 (Germany: 8)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 94%)
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Berlin using KRITIS
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
KRITIS experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Professional Services (78%)
- Energy (67%)
- Manufacturing (67%)
- Automotive (56%)
- Education (56%)
- Banking and Finance (56%)
- Healthcare (56%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What KRITIS covers
KRITIS describes organisations, facilities and services whose disruption could significantly affect public life, security or economic activity. In Germany, the term is closely linked to BSI requirements, sector-specific regulation and the protection of information technology supporting essential services. KRITIS work connects operational resilience with cybersecurity, governance and business continuity.
Typical environments
KRITIS expertise is relevant wherever digital systems support essential supply and public services. Common environments include:
- Energy generation, transmission and distribution
- Water supply, wastewater and waste management
- Healthcare, transport and logistics
- Finance, insurance, telecommunications and public administration
The exact controls depend on the sector, the services involved and the systems that keep them running.
Ecosystem and controls
Strong KRITIS specialists understand the BSI, sector-specific security expectations and the relationship between IT, operational technology and physical processes. Their work can include information security management, risk analysis, incident response, supply-chain oversight, identity management, network segmentation and resilience testing. Familiarity with standards such as ISO 27001, BSI IT-Grundschutz and business continuity methods is often valuable.
When companies need support
Companies bring in freelance KRITIS expertise when they must prepare for an audit, strengthen controls or respond to a change in their services and risk profile. Typical signs include:
- Critical services lack a clear system and dependency inventory
- Security responsibilities are spread across teams or suppliers
- Incident and recovery procedures have not been tested
- New infrastructure must meet regulatory and resilience requirements
External specialists can provide an independent assessment and leave behind practical documentation.
Deliverables and collaboration
A KRITIS engagement may produce a protection-needs assessment, risk register, asset and dependency map, security concept, continuity plan or tested incident process. Specialists may also support audits, evidence collection, supplier reviews and remediation planning. In Berlin, projects often combine remote analysis with on-site workshops involving operations, security, compliance and executive stakeholders.
What strong specialists bring
The best KRITIS professionals connect regulatory language with workable technical and operational measures. They ask how a service really operates, identify dependencies that are easy to miss and explain risk in terms decision-makers can act on. Look for experience across governance and delivery, clear evidence from comparable environments, disciplined documentation and the ability to coordinate internal teams, providers and authorities.
Frequently asked questions
Curious about KRITIS? Here are the answers that come up again and again.
KRITIS is used to protect services and facilities that are essential to public life, security or the economy. A specialist helps identify critical processes, assess dependencies and establish controls for prevention, detection, response and recovery.
KRITIS places cybersecurity in the context of essential services and operational continuity. It considers technology, facilities, suppliers, staff, physical processes and recovery priorities together rather than treating an isolated IT system as the whole scope.
A strong KRITIS specialist often combines information security with BSI IT-Grundschutz, ISO 27001, risk management and business continuity. Experience with operational technology, incident response, cloud controls, supplier assurance or audit evidence can be important depending on the sector.
The right KRITIS background depends on the engagement, its regulatory scope and the maturity of the organisation. A focused assessment may need a specialist who can work independently, while a transformation involving operations, suppliers and audit preparation calls for broader programme experience.
KRITIS work can often begin remotely through document reviews, interviews and control assessments. On-site workshops may still be needed for facilities, operational technology, restricted environments or recovery exercises, so the collaboration model should be agreed before the engagement starts.
KRITIS expertise is common in energy, water, healthcare, transport, finance, telecommunications and public services. The relevant obligations and technical priorities vary by sector, so a specialist should understand the operating model rather than apply a generic checklist.
Look for a KRITIS professional who can show comparable assignments, explain findings in plain language and connect every recommendation to a real service or risk. Strong work includes traceable evidence, practical priorities, clear ownership and plans that can be tested rather than documents created only for an audit.
A KRITIS engagement may involve sensitive systems, strict access procedures and close coordination with security, operations and compliance teams. Freelancers should clarify confidentiality, site access, documentation rules, expected language, decision paths and whether the work concerns IT, operational technology or both.
The average hourly rate of freelancers in Berlin, Germany who have used KRITIS in their recent projects is 127 €, which corresponds to a daily rate of about 1,012 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used KRITIS in their recent projects, 88% hold at least a Bachelor's degree and 38% hold at least a Master's degree.
On average, freelancers in Berlin, Germany who have used KRITIS in their recent projects have 29 years of professional experience, with a single engagement typically lasting around 1.6 years.
The most common languages among freelancers in Berlin, Germany who have used KRITIS in their recent projects are German (100%), English (100%), and French (44%).
The most common industries among freelancers in Berlin, Germany who have used KRITIS in their recent projects are Information Technology (100%), Professional Services (78%), and Energy (67%).
The most common business areas among freelancers in Berlin, Germany who have used KRITIS in their recent projects are Information Technology (100%), Project Management (100%), and Quality Assurance (89%).
Main locations of FRATCH Experts, who have recently used KRITIS
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Munich 
Frankfurt 
Dusseldorf Countries:
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
