Microsoft Entra ID Experts in Hamburg

• Administration and further development of the M365 environment, including Teams, Exchange Online, Intune, and SharePoint Online
• Development of dashboards for performance monitoring with Microsoft Power BI
• Implementation of user requirements and processes with low-code/no-code technologies (Power Apps, Power Automate)
• Use of Jira and Azure DevOps to plan and implement user stories in an agile project context
• Participation in daily stand-ups, sprint planning, sprint reviews, and retrospectives as the technical point of contact
• Planning and implementation of security policies using Azure Conditional Access and multi-factor authentication
• Configuration and deployment of clients and applications via MECM (SCCM) and Baramundi

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

Enterprise Content Management (ELO ECM) & Process Automation:

• Multi-Tenant System Architecture & Tenants: Designed, deployed, and maintained the ELO infrastructure for over 7080 legal entities (shipping and land-based companies with a total of 150+ active users in onshore/offshore operations).
• User & Group Administration: Full administration of ELO users, creation and maintenance of ELO groups, and implementation of granular, role-based access controls (RBAC).
• Dynamic Workflow Architecture: Designed, programmed, and implemented complex, dynamic approval workflows with hierarchical and cross-departmental approval levels (Multi-Tier Line Approvals, e.g. for invoice approvals and contract management).
• Operational Support & Troubleshooting: Daily troubleshooting of incoming workflow issues, continuous process adjustments, and error resolution during ongoing operations.
• Compliance, Archiving & Optimization: Managed archive structures, replaced paper-based processes with automated ELO pipelines, and ensured compliance with GDPR and audit standards.

Microsoft Dynamics NAV (Navision) – Administration & ERP Support:

• Tenant & User Management: Administration and permission management for complex multi-tenant environments with over 30 tenants (companies and shipping entities) in NAV.
• Master Data & Financial Processes: Created and maintained customers, vendors, posting groups, and supported intercompany transactions.
• Operational Support & Troubleshooting: Daily mid-level error handling for interfaces, document processing, and accounting processes across the various companies.

Hybrid Identity & Modern Workplace Management (M365 / Intune):

• Hybrid Directory Management: Administration of Active Directory (AD) and Entra ID (Azure AD) in a hybrid environment, including identity synchronization, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Endpoint & Security Management: Managed mobile devices and laptops through Microsoft Intune (MDM/MAM), implemented security baselines, compliance rules, and automated software rollouts.
• Security & Network Administration: Administration of Microsoft Defender for Endpoint and management of Sophos VPN authentication profiles to secure remote access.
• Collaboration Infrastructure: Administration of Exchange Online and Microsoft Teams Admin Center, including email hygiene, shared mailboxes, guest access, and SharePoint security policies.

• Prequalified 200 demands within five weeks on the multi-cloud-commerce platform bechtle-clouds.com with three external consultants
• Served a dual role as project manager and requirements engineer for various enhancements
• Domain topics: reimplementation of Entra ID Sync, improvement of support processes, optimizations in the product catalog
• Demand and project management in ServiceNow
• Refinement of epics and stories with internal teams and external service providers
• Management of the external international service provider

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

• Consulting on a wide range of open science hardware projects in the fields of electronics, mechatronics, and optoelectronics
• Comprehensive system analysis and DFM optimization of a novel open hardware miniaturized two-photon microscope
• Exchange with scientists from renowned academic institutions to align the customer’s work in the best possible way
• Production coordination with local and international partners for PCB assembly, CNC machining, and optics
• Process analysis for product design, production planning/execution, product lifecycle, and product data management
• Coaching employees from all departments on the requirements that complex technical products place on business processes
• Development of a comprehensive PLM & PDM concept tailored to the needs of development and manufacturing
• Initiating intensive and direct cross-departmental exchange to identify improvement potential
• Planning shopfloor layout improvements with the production team and supporting the implementation process
• Quick onboarding of two new English-speaking colleagues in technical product management and development
• Ad-hoc and in-depth training of employees in the use of software tools such as KiCad or Autodesk Inventor
• Consulting on long-term development into a scalable, even stronger partner for the open science hardware community

• Set up a Microsoft Azure Synapse data warehouse solution and developed ETL structures for an international insurance brokerage company
• Created tables, views, and pipelines in Azure Synapse
• Developed Power BI reports for controlling and tax reporting (BAB, IER)
• Technology stack: Microsoft Azure Synapse (Synapse SQL, Synapse Pipelines), Microsoft Power BI (Semantic model, reports), Azure DevOps (Boards, Repos)
• Development languages: DAX, M, SQL

• Support and maintenance of IT workstations
• Operating, administering, and installing physical and virtual servers
• Administering proxy, firewall, and antivirus solutions
• Administering network and infrastructure including data backup
• Assisting in planning replacements and renewals of IT systems
• Assisting in planning, coordinating, and implementing IT security measures
• Microsoft server operating systems Windows Server 2016/2019
• Central services: AD, GPO, DNS, DHCP, WSUS, SCCM

• Steering the rebranding of more than 40 applications, over 300 user accounts, and over 150 group mailboxes
• Coordinated with business units, key users, and technical providers for scheduling and implementation
• Analyzed 12 audit findings, developed a transition roadmap, and executed all measures on time
• Defined the new scope according to BSI guidelines
• Supported auditor selection process and prepared status reports for BSI
• Designed a new role model in SAP, aligned with management, and implemented it
• Created and delivered target-group-oriented training for responsible specialists
• Coordinated requirements with network architects, evaluated vendors, and supported contract conclusion
• Managed pre-staging of 300 laptops including configuration management
• Ensured accessibility of critical TotalEnergies applications via VNext / Workspace Access with authentication strategy using Yubikey and Microsoft Authenticator
• Supported go-live while meeting compatibility, security, and availability requirements
• Shifted from a big-bang to an iterative rollout model to reduce risk
• Defined an IT-side on/offboarding process for dual identities (TotalEnergies & Circle K)
• Ensured technical data integrity between Workday, Entra ID, and O365
• Implemented SAP-JDE cost center logic for ServiceNow orders
• Managed the change of company data in over 40 applications, including web portals, templates, and communication
• Led the SEPA mandate changeover for more than 2000 customers
• Oversaw SAP billing logic implementation through an external development team, including testing and go-live validation by 2025-01-01
• Collected IT-related auditor queries, coordinated with internal stakeholders, and prepared response documentation
• Planned and managed migration of 1200 TB of data between two M365 tenants
• Ensured data integrity, access continuity, and minimal downtime across OneDrive, Teams, SharePoint, and mailboxes
• Migrated data lake solutions (AWS & Databricks) in coordination with cloud architects and business units
• Coordinated testing, bug fixes, and go-live in close collaboration with internal teams and external partners

• Implemented AJO (Adobe Journey Optimizer)-AEP (Adobe Experience Platform) integration with AEM for an Australian Govt. project which has a significant business impact in terms of how AEP manages the customer data and engages the customer with AJO driven push notifications, Email etc.
• Developed a POC to integrate AEM-FTP and set up monitoring alert by Sling Job.
• Implemented Groovy scripts which help to modify the JCR nodes without touching the core code.
• Developed and optimized pipeline code for DEV deployment using Bitbucket. Enhanced security by modifying the pipeline to utilize repository variables from Bitbucket, effectively replacing all sensitive hardcoded values within the code repository.
• Implemented complex components such as Listicle component which dynamically fetch and display content from the experience fragments and leveraged sling model, services to streamline the integration process and created custom dialog validation for components which help me brush up my front-end knowledge as well.
• Created MCP tool for deleting old packages in higher environments e.g. UAT, stage as part of maintenance task.
• Implemented custom rollout configuration for a component which gets populated by experience fragments for all locales.
• Developed a custom solution where sitemap reads custom GWS URLs from the ACS commons list.
• Consistently created JUnit test classes as part of my day-to-day activity to increase code coverage for the entire code base.
• Explored on useful tools like Bulk Template/component updater tool, Content Sync tool (which can sync content from higher environment to local without creating any package) etc. and brought them to the team’s attention by documenting and providing demos on them.
• Gained limited experience on OneTrust, Lionbridge interface for AEM related cookie and translation tasks.
• Actively supported the team members in a cross-functional team and regularly participated to meet the code quality standards.