Microsoft Configuration Manager Experts in Germany

A nationwide service provider for occupational medicine, occupational safety and health management, focusing on prevention, health and digital transformation.

• Role: Responsible for establishing and further developing professional project portfolio management in the Digital Transformation & Data area. Managing and supporting strategic IT and transformation projects, as well as supporting the introduction and establishment of project management standards, methods and governance structures.

Key areas:

• Establishment and further development of IT project portfolio management
• Analysis and structuring of business and technical requirements
• Management and coordination of cross-functional IT initiatives
• Stakeholder management at department, management and service provider level
• Introduction and further development of project management methods and tools (including Jira, Confluence, MS Planner)
• Preparation of decision-making documents, target visions and implementation concepts in the context of digital transformation
• Management and coordination of transformation, digitalization and organizational projects
• Preparation of decision templates and management documents for executive committees
• Conducting workshops and stakeholder management with departments and IT teams
• Definition of requirements for dashboards, reporting and KPI management
• Participation in the Wissenskompass project (requirements analysis and MVP concept)
• Analysis and evaluation of AI support opportunities in Knowledge Management
• Investigation of AI use cases to improve knowledge provision and use
• Consideration of AI requirements as part of the Wissenskompass concept
• Coordination with strategic departments to further develop project management standards
• Introduction, configuration and training for Microsoft Planner to support project and task management
• Conducting user training and supporting employees in the introduction of new ways of working and tools

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

Analysis and optimization of end-to-end processes in various business areas such as sales, procurement, order processing, and logistics. Redesign of the ERP system. Identification of optimization potential, especially in areas with media discontinuities and manual activities, as well as creation of a prioritized transformation roadmap with clear business cases and implementation recommendations. Management of automation initiatives. RPA at the production site in China. Evaluation and introduction of relevant AI use cases, as well as building basic AI capabilities within the organization. Training internal project team members and supporting them throughout the transformation process to develop a culture of continuous improvement. Close collaboration with IT and external implementation partners, with reporting to senior management.

Main responsibilities and achievements:

• Analysis of business processes and design of automated processes
• Training and support for employees in China and Germany
• 20% cost savings in logistics
• Regular status reports to senior management

• Technical leadership and further development of a team of 28 IT staff (internal & external) in the areas HelpDesk/HelpLine, RHEL (Red Hat), MUREX (trading system & applications), SAP basis operations
• Managing external service providers (including FI-TS for SAP basis operations)
• Personnel, resource and budget planning for the IT department and projects
• Introducing and establishing regular communication formats (weekly status meetings, team and cross-department meetings)
• Ensuring application operations in a hybrid environment (Windows/Linux with database and web/application servers)
• Supporting transformation projects to modernize the application landscape (e.g. DevOps approaches)
• Setting up and implementing a digital IT procurement for hardware & software (e.g. with DELL)
• Developing and managing the "IT Operations DOS" department based on corporate strategy
• Preparing management reports & decision papers on IT projects, optimization potential and automation opportunities
• Representing the department in the advisory boards of the Rentenbank and ensuring regulatory compliance (BaFin §44, GDPR, BSI, MaRisk)

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

• Focus on winning new enterprise IT projects and further developing the IT Service and Application Management profile
• Available for new projects in Application Management, IT Service Management and Application Operations

Testing adjustments to customer requests for warehouse / logistics software

Windows 10 / 11 Atlassian Tool Chain Agile testing / Kanban

Rollout of printers and PCs

• Effective management of external service providers to ensure smooth operations.
• Planning and implementation of a global rollout for 150,000 clients.
• Carrying out a comprehensive risk analysis, including overall risk, site-specific risks, and security risks.
• Successful consolidation of two existing ServiceNow systems to optimize service management.
• Close coordination with program management to achieve the project goals.

• Administration and further development of the M365 environment including Teams, Exchange Online, Intune and SharePoint Online
• Development of dashboards for performance monitoring using Microsoft Power BI
• Implementation of user requirements and processes with low-code/no-code technologies (Power Apps, Power Automate)
• Use of Jira and Azure DevOps to plan and implement user stories in an agile project context
• Participation in daily stand-ups, sprint planning, sprint reviews and retrospectives as technical point of contact
• Planning and implementation of security policies using Azure Conditional Access and multi-factor authentication
• Configuration and deployment of clients and applications via MECM (SCCM) and Baramundi

Evaluation and selection of a new endpoint management platform for an environment with around 50,000 clients. Support for a manufacturing company in evaluating a future endpoint management platform as a possible replacement for the existing client management solution. Conducting a structured software selection process including proof of concept as well as preparing the decision basis for the Enterprise Architecture Board (EAM). Defining the technical requirements and evaluation criteria and creating a short list of possible solutions (Tanium, Baramundi, Microsoft Intune / MECM). Planning and supporting the technical proof of concept as well as evaluating the architecture and operations aspects of the different platforms. In addition, evaluating tools for migrating existing software packages from the Ivanti DSM environment. Comparing and testing IDERI Move and PACE for the automated transfer of the existing package structure to the new platform, with the goal of significantly reducing migration effort. Support in selecting the required Tanium modules as well as preparing the decision documents for the Enterprise Architecture Board.

Tools: Tanium, Baramundi, Microsoft Intune, Microsoft MECM, Ivanti DSM, IDERI Move, Pace, Windows 10, Windows 11, Windows Server. VDI

Windows Administrator, software deployment, user support, Azure / Entra administrator, hardware support, software packaging, defining and introducing processes

Tasks performed:

• Handling incidents, service requests & changes in the Matrix42 ticket system
• Handling / resolving incidents
• User creation / permissions
• Installation and patch management for Windows
• Permissions and license management in Entra
• Process improvement and documentation

Tools and methods used: Windows Server 2016 / 2019, Active Directory, Windows 11, Office 365, Azure / Entra, Ivanti, VMWare & ESX, Dell & Kyocera Minolta & Zeus hardware support

• Installation, maintenance and regular upgrade of the DB systems with 19x
• Use of OPatch and RU 19.27 on RHEL 8x, SLES 15.x and Windows
• DBA for DACH and European customers in production and last test environments (e.g. Konrad Adenauer) as well as others in CDB
• Processes via Confluence
• Support in operations for customers SR via Metalink

• Management and optimization of a portfolio of about 100 projects (launches, in-field solutions, data & analytics, digital solutions, digital products)
• Optimization of the existing project standard (playbook) and alignment with the European and global organization (USA)
• Coaching project managers on setup, planning, cooperation with business, GDPR, GxP, data security and launches
• Preparing projects for works council information and project closeout communication
• Optimization of resource management (tracking, allocation, prioritization)
• Taking over individual project leads (off-/transboarding, event management, checking whether WhatsApp is allowed on a business smartphone)
• Supporting the hiring of external project managers
• Optimization of meeting structure, project controlling (KPIs), change and demand management
• Optimization of risk, issue, dependency and quality management and support during internal audits (GxP)
• Optimization of the portfolio steering tool (Smartsheet) on national, European and global level
• Design and implementation of a Business Value Complexity Scoring
• Building a strategic PMO with a sister department and optimizing cross-functional teams
• Reporting, communication and escalation at management level
• Leadership coaching for several future leaders (short-time assignment)
• Development of the concepts "PPM as a Service" and "Internal Customer Approach"
• Development and review of a concept "AI Data Governance" including roles and processes
• Selection and onboarding of the successor

• Further development of the existing SCCM 2509 implementation
• Schema extension, CAS extension
• Creating task sequences, in-place upgrade
• Patch management (WSUS)
• Security updates, feature updates
• Emergency fixes, application updates
• Incident, change, and problem management (3rd level)
• Active Directory, DNS, DHCP, GPMC
• Managing users, groups, OUs, computers
• Setting up GPOs
• Senior consultant for software packaging in an SCCM 2509 environment
• Project management ITIL standards
• Defect management
• SIT (Software Integration Test)
• SAT (Software Acceptance Test)
• UAT (User Acceptance Test)
• Adjusting Windows 11 25H2 client deployment
• Secunet SINA management systems administrator
• Secunet SINA Workstation 3.5.4
• Maintenance and configuration work in SINA management
• Importing and adjusting IPsec policies
• Retrieving and documenting status, firmware versions, and configurations of individual SINA devices
• Consulting and implementation in fault and incident management
• Implementation of documentation and rollout of new software versions
• Creating software packages based on PowerShell App Deployment Toolkit, Flexera AdminStudio for the W11 64-bit platform and Server 2025 / 2022
• Number of PC systems: approx. 1,850.

Label: PowerShell, VBS, Batch scripting

Label: SCCM 2503, Windows 11 64 Bit, Windows 2025 Server, Windows 2022 Server, Windows 2019 Server