Microsoft Entra ID Experts in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Designed and implemented modular AI assistants for sales and business processes within the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, Hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP servers, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting, and mentoring within the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

• Fully on-premises LLM document-examination platform for a compliance-critical banking domain: agentic LangGraph pipeline with deterministic verification, every AI judgment structured and source-anchored; ~960 automated tests, zero data egress
• GPU throughput engineering (quantized serving, speculative decoding, prefix caching): 9.5x extraction speed-up, 500+ multi-document case files per day on a single A100
• AI-native EDI/EDIFACT integration platform (~116k LOC Java 25 / Spring Boot 4, 1,900+ tests): LLM-drafted partner mappings machine-verified before go-live (DFDL conformance, field-coverage checks, dry runs), ~99.5% byte match on real customer files — replacing weeks of manual mapping per partner

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Extracted relevant infotypes from SAP HCM for migration to SuccessFactors Employee Central and mapping to ECP fields.

• Configured P2P integration including BAPI setup and secured data exchange with HTTPS and OAuth protocols.

• Set up foundational settings in Recruiting (REC) including roles, permissions, and job requisition templates.

• Implemented Career Site Builder to create a branded candidate experience and integrated external job boards.

• Configured candidate application workflows, screening, interviewing, and hiring communication templates.

• Set up pre-screening questions and assessment tools including DHB sanction list checks.

• Implemented automated background check and KYC integration with external vendors in the REC module.

• Localized job requisition templates to reflect regional job titles and regulatory compliance.

• Customized onboarding document templates and localized document archiving protocols (DRTM).

• Adjusted onboarding forms to capture country-specific employee information including Form I-9.

• Enabled Form I-9 remote document verification and integrated eVerify with SuccessFactors.

• Set up automated reminders for employees and HR to complete I-9 sections within deadlines.

• Configured pre-Day 1 access for new hires to complete tasks and mandatory trainings prior to start date.

• Enabled e-signature integration for onboarding documents to support remote verification.

• Technologies: SAP SuccessFactors, BTP, CPI, HCM onPremise, EC, ECP, REC, ONB, Form I-9, eVerify, S4HANA.

• Porsche ID is a unified digital identity platform providing secure authentication and seamless access across Porsche’s online services, mobile apps, and connected vehicle features
• Designed and implemented new authentication and authorization functionalities for both users and systems
• Ensured high availability, security, and performance to deliver a flawless digital experience for Porsche customers
• Technologies: Auth0, Angular, Tailwind, AWS, Terraform, Github
• Methodologies: Scrum and SAFe

• Designed and implemented the agent-based AI architecture for a company-wide platform to securely deploy LLM-based agents
• Designed and implemented end-to-end RAG pipelines from multiple sources: document preprocessing, chunking strategies for different document types, embeddings, retrieval with re-ranking, and robust prompt orchestration
• Developed a modular context engineering framework with skill architecture, context isolation, and dynamic resource management; human-in-the-loop control for enterprise tool integrations
• Built the CI/CD pipeline, testing strategy, tracing on the software side as well as automated LLM and agent evaluations, red team testing and tracing, and handed over to a reproducible production environment (ISO27001 and SOC2 compliant)

• Led the migration of local SharePoint sites to SharePoint Online, including planning, coordination, and communication
• Advised on governance, security, and data protection
• Created project documents: project charter, project plan, communication strategy plan, risk and risk mitigation plan, scope of work documents
• Analyzed manual processes and developed automated solutions

• Data entry according to specifications
• Master data maintenance in SAP SD environment
• Maintenance of prices in the SAP system
• Continuous data matching and error analysis
• Creating surveys/questionnaires with MS Forms
• Analysis and evaluation of results and data
• Creating simple workflows to automate processes
• Documentation

• Support and optimization of incident, change & problem processes based on ITIL for >10,000 users.
• Problem-solving for >1,000 complex cases/year across different service towers (File Services, Identity, Citrix, ANF).
• Work in the security cluster: vulnerability analysis and firewall change coordination.
• Governance & migration of file services to Azure NetApp Files (M365, Citrix, PowerShell), including data optimization.
• Creation and maintenance of business-critical process & operational services, enterprise documentation.
• Focus on stabilization, security (endpoint hardening), and optimization through AI solutions.

• Support for end users by telephone and Skype
• Error diagnosis and problem solving by telephone and remote access
• Independently receiving incident reports
• Forwarding unresolved problems to the appropriate escalation level
• Reinstalling incorrectly installed software or incorrectly configured computers
• Receiving requests and incident reports by email or ticket system
• Identifying and classifying problems and requests
• Performing initial diagnostic steps and attempting solutions for frequently occurring problems
• Providing basic technical support to users in the use of hardware and software
• Forwarding complex problems and requests to 2nd or 3rd Level Support
• Documenting incidents and solutions in a ticket system
• Monitoring and escalating open tickets to ensure that problems are resolved on time
• Communicating with users to provide updates on the progress of problem resolution
• Installing, configuring and maintaining hardware and software components
• Repairing and replacing defective components
• Monitoring and optimizing system performance and network connections
• Supporting the troubleshooting and diagnosis of technical problems
• Installing and configuring operating systems and application software
• Ensuring compliance with security policies and data protection regulations
• Managing user accounts and access rights
• Performing regular backups and recovery processes
• Creating technical documentation and instructions
• Training users in the use of IT systems and applications
• Technologies/Methods: Skype, ticket system

• Supported implementation and operation of a portal used online and offline in customer-facing vehicles
• Automated processes by introducing CI/CD pipelines
• Provided enablement and methodological guidance for adopting software engineering best practices
• System environment: NestJS, Node.js, npm, AWS, Docker, Docker Swarm, GitLab CI, WhiteSource, PostgreSQL, Prometheus, Grafana, OpenSearch, REST API