Microsoft Intune Experts in Hamburg

Rollout of printers and PCs

• Effective management of external service providers to ensure smooth operations.
• Planning and implementation of a global rollout for 150,000 clients.
• Carrying out a comprehensive risk analysis, including overall risk, site-specific risks, and security risks.
• Successful consolidation of two existing ServiceNow systems to optimize service management.
• Close coordination with program management to achieve the project goals.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Software packaging and distribution with SCCM/MECM
• Application responsibility and support (50–100 applications)
• Documentation via ticket system
• User management via AD console
• Software updates and distribution
• Maintenance and updating of software packages
• Customizing scripts with PowerShell
• Rolling out and implementing new software
• Supporting IT security and compliance

Tools and software: Confluence, M365, Active Directory, Intune, Endpoint Management, SCCM/MECM, PowerShell, VMware Hardware: Lenovo, Cherry, Plantronics, Jabra + peripherals

• Enterprise and IT strategy
• Digital transformation
• Process and portfolio management
• Interim IT management

Enterprise Content Management (ELO ECM) & Process Automation:

• Multi-Tenant System Architecture & Tenants: Designed, deployed, and maintained the ELO infrastructure for over 7080 legal entities (shipping and land-based companies with a total of 150+ active users in onshore/offshore operations).
• User & Group Administration: Full administration of ELO users, creation and maintenance of ELO groups, and implementation of granular, role-based access controls (RBAC).
• Dynamic Workflow Architecture: Designed, programmed, and implemented complex, dynamic approval workflows with hierarchical and cross-departmental approval levels (Multi-Tier Line Approvals, e.g. for invoice approvals and contract management).
• Operational Support & Troubleshooting: Daily troubleshooting of incoming workflow issues, continuous process adjustments, and error resolution during ongoing operations.
• Compliance, Archiving & Optimization: Managed archive structures, replaced paper-based processes with automated ELO pipelines, and ensured compliance with GDPR and audit standards.

Microsoft Dynamics NAV (Navision) – Administration & ERP Support:

• Tenant & User Management: Administration and permission management for complex multi-tenant environments with over 30 tenants (companies and shipping entities) in NAV.
• Master Data & Financial Processes: Created and maintained customers, vendors, posting groups, and supported intercompany transactions.
• Operational Support & Troubleshooting: Daily mid-level error handling for interfaces, document processing, and accounting processes across the various companies.

Hybrid Identity & Modern Workplace Management (M365 / Intune):

• Hybrid Directory Management: Administration of Active Directory (AD) and Entra ID (Azure AD) in a hybrid environment, including identity synchronization, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Endpoint & Security Management: Managed mobile devices and laptops through Microsoft Intune (MDM/MAM), implemented security baselines, compliance rules, and automated software rollouts.
• Security & Network Administration: Administration of Microsoft Defender for Endpoint and management of Sophos VPN authentication profiles to secure remote access.
• Collaboration Infrastructure: Administration of Exchange Online and Microsoft Teams Admin Center, including email hygiene, shared mailboxes, guest access, and SharePoint security policies.

• Monitoring the health and performance of internal IT systems (servers, networks, endpoints)
• Performing routine checks on Active Directory, SCCM, antivirus, and MDM platforms
• Diagnosing and resolving hardware/software issues on Windows, macOS, and mobile platforms
• Conducting quality checks when implementing new technologies
• Creating accurate documentation of incidents, changes, and service requests
• Tracking and managing IT equipment inventory

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

• Client support, 2nd, 3rd level, server administration
• Project and process coordination
• Support of MS365 services
• Linux administration
• Provider management