KRITIS Experts in Berlin
matched in minutes with vetted, available specialistsHire experts who secure critical infrastructure, prepare BSI-compliant documentation and coordinate incident response across essential services. FRATCH connects you with precise, fast-matched freelance professionals who are vetted and available.
Meet FRATCH Experts in Berlin, who have recently used KRITIS
Joerg S.
Last position:
Various short-term CTO, Enterprise Architecture Advisory for companies at various
Support for Transformation Projects:
- Expert CTO advisory and enterprise architecture consulting for several short-term transformation projects, ensuring measurable improvements in project outcomes and technical business alignment.
- Supporting strategic IT initiatives for diverse clients, driving digital transformation and optimizing technology operations to increase business value and operational efficiency.
André B.
Last position:
External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH
- Conducting cybersecurity readiness checks based on an in-house assessment methodology
- Analyzing the external attack surface using the Graydaxe EASM platform
- Assessing maturity levels and deriving prioritized recommendations for action
Jonás C.
Last position:
Security Responder (SOC) at gematik GmbH
At gematik's Cyber Defense Center (CDC/CERT) (critical infrastructure): Security Monitoring, Incident Response, and Service Monitoring for the telematics infrastructure (TI)
- Vulnerability management with Nexpose for gematik and the telematics infrastructure
- Vulnerability Assessment: Assessing and tracking vulnerabilities through Jira
- Security Monitoring and triage of security events with Splunk
- First Responder and Incident Handling: Initial assessment, triage, and escalation
- Service Monitoring: Monitoring critical TI services
- Documenting runbooks, playbooks, and knowledge base articles in Confluence
André G.
Last position:
IT Consulting Project Management / Engineering Subproject Management at T-Systems (on assignment for government agencies)
- Projects for federal networks (NdB).
- CR management, EoL change requests, design and documentation according to ITSCM.
- Data center planning.
- Project management and engineering subproject management.
- Software development for virtual server environments according to BSI.
Matthias S.
Last position:
Senior Security Consultant (freelance) at DVZ M-V
- ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
- Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
- Preparation for OWASP penetration test, incident response plan, risk analysis
- DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
- Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM
Mohamed G.
Last position:
Lead / Principal Cloud, AI & Security Architect at Freelancer / CC Conceptualise GmbH
Projects:
Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:
- Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
- Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
- Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
- Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
- Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
- Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management
Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:
- Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
- Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
- Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
- Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
- DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
- Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
- Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git
Henryk O.
Last position:
Security Consultant at Daimler AG
- Development of a cloud security strategy
- Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
- Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
- Definition of security measures to safeguard cloud solutions
- Conducting requirements analyses and defining the scope for cloud security projects
- Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks
Markus W.
Last position:
KRITIS Consultant at Oil Company
- Preparing an oil company for KRITIS auditing
- KRITIS consulting
- Creating necessary policies, processes, and guidelines in line with KRITIS requirements
- Tools and methodologies used: ISO/IEC 27001, BSI IT Baseline Protection, KRITIS-V
JĂĽrgen K.
Last position:
Freelance Consultant Controlling & TDD at self-employed
- (part-time) self-employed (parallel)
- TDDs and consulting on special projects (data centers and military buildings)
Piet Q.
Last position:
IT Project Manager at keine Freigabe
Industry: Publishing, media Project management for the design of a RAG-based archive indexing solution: sovereign on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio/video holdings. Use-case assessment and make-or-buy together with editorial, archive and legal departments, taking copyright law, the Interstate Broadcasting Treaty and the AI Act into account. Differentiator: practical LLM infrastructure experience from two of my own productive platforms combined with C-level program management in regulated industries.
Discover over 15,000 top freelancers
Statistics of experts using KRITIS
Aggregated from the professional profiles of matched freelancers.
Experience
29 years (Germany: 24 years)
Position duration
1.6 years (Germany: 2.1 years)
Positions per freelancer
25 (Germany: 18)
Top business areas
Information Technology, Project Management, Quality Assurance
Top industries
Information Technology, Professional Services, Manufacturing
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
89% (Germany: 88%)
Master's degree or higher
44% (Germany: 49%)
Certifications per freelancer
10 (Germany: 8)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 94%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Berlin using KRITIS
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
KRITIS experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Professional Services (80%)
- Manufacturing (70%)
- Telecommunication (70%)
- Automotive (60%)
- Energy (60%)
- Banking and Finance (60%)
- Healthcare (50%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What KRITIS covers
KRITIS refers to critical infrastructures whose failure or disruption can seriously affect public services and society. The term covers sectors such as energy, water, healthcare, transport, finance, food and telecommunications. KRITIS work connects operational resilience with information security, governance and regulatory obligations.
Compliance foundations
Professionals assess whether an organisation, service or facility falls within the relevant KRITIS scope. They translate BSI guidance, the IT-Sicherheitsgesetz and sector-specific requirements into practical controls, evidence and accountable processes. Strong work distinguishes legal duties from voluntary security improvements.
Typical deliverables
- KRITIS applicability and gap assessments
- Information security management documentation
- Risk analyses and protection concepts
- Audit preparation and evidence packages
- Incident response and reporting procedures
Deliverables must fit the organisation’s actual services, systems and responsibilities. Generic templates rarely provide enough evidence for audits or operational decision-making.
Ecosystem and tooling
KRITIS projects often involve BSI requirements, ISO 27001 controls, sector-specific security standards, business continuity management and data protection. Specialists may work with SIEM platforms, vulnerability management, identity and access controls, network segmentation, backup systems and incident response tooling. They also need to communicate with operations, legal, procurement and executive teams.
When freelance expertise helps
Companies bring in external specialists during scope assessments, audits, security programme changes, incidents, mergers or major infrastructure projects. In Berlin, organisations across public services, healthcare, transport, utilities and technology may need local availability for workshops while keeping documentation and analysis remote. A freelance professional can add independent judgement without taking over permanent operational ownership.
What strong professionals bring
The best KRITIS specialists combine regulatory knowledge with practical security and continuity experience. They can explain technical risks in business terms, challenge incomplete evidence and create procedures that teams can follow under pressure. Look for clear references to comparable infrastructure, disciplined documentation, sensible risk prioritisation and the ability to work confidentially with distributed stakeholders.
Frequently asked questions
Curious about KRITIS? Here are the answers that come up again and again.
KRITIS is the German framework and practice area for protecting critical infrastructures whose disruption could affect essential services. It covers security governance, resilience, risk management, incident handling and evidence for applicable regulatory requirements.
KRITIS focuses on the resilience and security obligations of critical services, not only on protecting information assets. General information security can provide useful controls, while KRITIS work also considers service continuity, reporting duties, operational technology and sector-specific expectations.
A strong KRITIS specialist often combines ISO 27001, business continuity management, risk analysis, data protection and incident response knowledge. Experience with BSI guidance, cloud security, operational technology, identity management and audit evidence is also valuable.
The right level depends on the scope, sector and maturity of the organisation. A focused gap assessment may need a specialist with targeted compliance experience, while a transformation or incident programme calls for broader operational, security and stakeholder-management experience.
KRITIS work can often be handled remotely through secure document sharing, workshops and evidence reviews. On-site sessions may still be important for protected facilities, operational environments, interviews and exercises, so agree access, confidentiality and German-language expectations before starting.
Ask for anonymised examples of assessments, audit preparation, resilience programmes or incident procedures from comparable sectors. A credible KRITIS freelancer explains assumptions, maps requirements to evidence and separates urgent risks from lower-priority improvements.
KRITIS is commonly considered alongside ISO 27001, BSI IT-Grundschutz, business continuity standards and sector-specific security frameworks. These approaches can complement one another, but they do not automatically replace the obligations or scope assessment relevant to a critical service.
A KRITIS engagement may involve strict confidentiality, background checks, controlled system access and detailed evidence requirements. Freelancers should clarify the organisation’s sector, regulatory scope, on-site needs, language expectations and responsibility for approvals before accepting the work.
The average hourly rate of freelancers in Berlin, Germany who have used KRITIS in their recent projects is 127 €, which corresponds to a daily rate of about 1,012 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used KRITIS in their recent projects, 89% hold at least a Bachelor's degree and 44% hold at least a Master's degree.
On average, freelancers in Berlin, Germany who have used KRITIS in their recent projects have 29 years of professional experience, with a single engagement typically lasting around 1.6 years.
The most common languages among freelancers in Berlin, Germany who have used KRITIS in their recent projects are German (100%), English (100%), and French (40%).
The most common industries among freelancers in Berlin, Germany who have used KRITIS in their recent projects are Information Technology (100%), Professional Services (80%), and Manufacturing (70%).
The most common business areas among freelancers in Berlin, Germany who have used KRITIS in their recent projects are Information Technology (100%), Project Management (100%), and Quality Assurance (90%).
Main locations of FRATCH Experts, who have recently used KRITIS
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Hamburg 
Munich 
Cologne 
Frankfurt 
Dusseldorf 
Essen Countries:
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
