Matrix42 Experts in Germany

• AI product development: Design of an AI-supported GRC platform to automate compliance processes.
• AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
• IT interim management and strategic consulting

• Project: ESU Windows and SQL Server consolidation / Configuration Management in ServiceNow
• Creation of an as-is analysis of all servers worldwide
• Creation of an as-is analysis of all SQL servers worldwide
• Creation of requirements analyses for SQL and server migrations
• Coordination of requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
• Moderation of jour fixe meetings
• Creation of roadmaps and solution models for server migrations
• Setup of test scenarios
• Moderation of workshops for the introduction of a Global Admin Team
• Creation of data models (CMDB) in ServiceNow
• Conducting workshops for the CMDB data model
• Creation of solution models for the CMDB
• Creation of seamless configuration and work documentation for the CMDB
• Creation of reports for license management
• Creation of KPIs for data quality in ServiceNow
• Creation of a service catalog
• Moderation of workshops for creating service requests
• Interface between needs analysis and ServiceNow development team
• Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

• Defined S/4HANA finance solution architecture and led full project lifecycle — Blueprint through Hypercare — for global rollout.
• Designed global finance templates and COPA characteristics, harmonizing financial reporting across business units.
• Implemented role-based authorizations, SOD controls, and master data governance; managed provisioning and training for 200+ users.
• Coordinated cross-module integrations (MM, SD, PP) and third-party systems (Salesforce, SAP DRC, E-Invoicing), reducing month-end close from 5 days to 2 days.
• Prepared functional specifications, supported ABAP development, and drove problem management practices that reduced recurring incidents.

• Capture and analyze stakeholder needs to define clear requirements and make sure the new website meets user expectations.
• Took on the role of Product Owner to lead the development team, set priorities, and monitor implementation progress.
• Coordinated the implementation of Optimizely as the new CMS, including adapting and integrating all required features to ensure a smooth user flow.
• Ensured the successful integration of features within the Condor lifecycle, such as flight booking, check-in, and other relevant services, to create a complete user experience.
• Actively communicated with stakeholders to gather feedback and make adjustments during the development process, continuously improving the user experience.
• Planned and carried out tests to ensure the quality of the implemented features and that all requirements were met.
• Methods used: Agile methods, SCRUM, SAFe
• Tools used: Optimizely, Jira, Confluence
• Result: Significant improvement in user experience, optimized booking and check-in processes, and a stronger digital presence for Condor in the market.

Windows Administrator, software deployment, user support, Azure / Entra administrator, hardware support, software packaging, defining and introducing processes

Tasks performed:

• Handling incidents, service requests & changes in the Matrix42 ticket system
• Handling / resolving incidents
• User creation / permissions
• Installation and patch management for Windows
• Permissions and license management in Entra
• Process improvement and documentation

Tools and methods used: Windows Server 2016 / 2019, Active Directory, Windows 11, Office 365, Azure / Entra, Ivanti, VMWare & ESX, Dell & Kyocera Minolta & Zeus hardware support

• Transition of Microsoft Azure operations to BTC AG
• Responsibility: budget of €60k
• Staff: leadership of 5 people
• Tools: Office 365, JIRA, Confluence

• Further development of the existing SCCM 2509 implementation
• Schema extension, CAS extension
• Creating task sequences, in-place upgrade
• Patch management (WSUS)
• Security updates, feature updates
• Emergency fixes, application updates
• Incident, change, and problem management (3rd level)
• Active Directory, DNS, DHCP, GPMC
• Managing users, groups, OUs, computers
• Setting up GPOs
• Senior consultant for software packaging in an SCCM 2509 environment
• Project management ITIL standards
• Defect management
• SIT (Software Integration Test)
• SAT (Software Acceptance Test)
• UAT (User Acceptance Test)
• Adjusting Windows 11 25H2 client deployment
• Secunet SINA management systems administrator
• Secunet SINA Workstation 3.5.4
• Maintenance and configuration work in SINA management
• Importing and adjusting IPsec policies
• Retrieving and documenting status, firmware versions, and configurations of individual SINA devices
• Consulting and implementation in fault and incident management
• Implementation of documentation and rollout of new software versions
• Creating software packages based on PowerShell App Deployment Toolkit, Flexera AdminStudio for the W11 64-bit platform and Server 2025 / 2022
• Number of PC systems: approx. 1,850.

Label: PowerShell, VBS, Batch scripting

Label: SCCM 2503, Windows 11 64 Bit, Windows 2025 Server, Windows 2022 Server, Windows 2019 Server

• Main point of contact for the provisioning of end devices and operating systems
• Pre-installation of software according to company guidelines and integration into the corporate network (Wi-Fi, VPN, domain)
• User support with setup, process improvements, and handling of returns (RMAs)

• Analysis of technical and economic feasibility
• Creation of a detailed project plan including time and resource management
• Requesting and evaluating offers, selecting components, and managing suppliers
• Coordination of all involved trades (e.g. electricians, installation companies)
• Monitoring the construction work and ensuring deadlines, budgets, and quality standards are met
• Acceptance and commissioning of the PV system including documentation
• After project completion: optimizing monitoring and supporting grid connection

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Mobile Device Management (MDM) for iOS devices (iPads, iPhones)
• Management, configuration and rollout of policies, apps and security measures
• eSIM setup & management as well as management of mobile plans and contracts
• User management (create, block, delete) in the SecurePIM security solution
• Device registration, preparation and setup of devices with Windows 10/11 and peripherals
• 1st & 2nd level support and handling of IT requests via the ticket system
• Troubleshooting, fault isolation and repair of devices
• Creating and maintaining guides, training new users and handling user questions

• Implementation of Rittal MDC’s hybrid data center (on-premises, Azure and local)

• Implementation of backup solution (Azure, Azure local, M365 and Entra ID) with Rubrik

• Application migration and optimization

• Client management (Intune) with Microsoft 365, Office 365 (Exchange Online, OneDrive, MS Teams, SharePoint Online)

• WAN migration and network optimization including Cisco Umbrella, network segmentation and microsegmentation in IT and OT areas

• Implementation of comprehensive WLAN

• Active Directory, Azure AD and Azure tiering model

• Security optimization (NIST, SoSafe, BitSight, SecureScoreCard)

• IT Service Management implementation (ITIL, workflows, ticket system, SIEM and SOC monitoring)

• Strategy consulting and reporting to CIO

• Tendering and selection of service providers for various managed services

• Maintaining operations for IT infrastructure security topics

• Creation, updating and monitoring of project plan/progress, business case and PMO

• Planning and managing work packages, costs, resources, risks, quality, communication and configuration management

• Stakeholder analysis, HR and procurement management

• Holistic view of data security and privacy (IT baseline protection, GDPR)

• Monitoring, reporting and compliance with project management processes and standards

• Review and adjustment of IT service contracts based on customer requirements

• Management of new and existing IT service providers

• Solution design / requirements management

• Project manager controlling the update to ISO 27001:2022 (certification from ISO 27002:2013 to ISO 27002:2022) including gap analysis, project planning, preparation of internal and external audits, and creation and maintenance of required documentation.
• Coordination of adjusting existing measures and implementing new measures according to the new standard’s requirements, as well as continuous monitoring and adjustment of these measures.
• Regular reporting to management on progress and risks.
• Senior consultant supporting audit reviews with a focus on critical infrastructures (KRITIS), including resolving findings, creating and updating evidence documents, and amending provider contracts.
• Senior consultant reviewing all deliverables and responsibilities of the IT provider according to the existing contract: identification of over 1500 deliverables & obligations (D&O), setup of a D&O tracker (claim register), and joint expert review with service owners for various service descriptions (e.g. IT service management, workplace and print services, application and desktop services, endpoint management, email including archiving, file services, software packaging, certification, distribution).
• Senior consultant adjusting service scopes in existing service descriptions to enable end-to-end service responsibility of the provider, including identification and analysis of use cases, process analysis and optimization (incident, problem, change), as well as recording and documenting all software products in LeanIX and documenting the contract change.
• Focused services: managed software service, application and desktop service, workplace and print services, web server service, container service, M365, SAP/Oscare, output management systems (OMS), telephony and omnichannel management service.
• Project manager steering a benchmark based on the existing IT contract, including coordination of the entire benchmark process between the benchmarker, IT provider and client, review of benchmark results, and preparation and conduct of price negotiations with the IT provider.