Microsoft Windows Experts in Frankfurt

• Creating concepts and architecture for domain integration (SEAT into the VW structure)
• Domain trusts and administration
• Operation and administration of Windows 2022/ 2025 servers and domains
• Domain restructuring
• GPO and SG editing and migration
• DNS restructuring and migration

Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users

• Functional requirements management for DIVID, the Umweltbundesamt platform for administering the single-use plastics fund. Focus: entitled parties, sub-entitled parties, and benefit reports.
• Consolidation and analysis of specifications, Jira, Confluence, functional concepts, and UX designs. Independent structuring and delimitation of requirements, as well as identification of contradictions, gaps, and dependencies.
• Creation and quality assurance of implementable user stories with clear, testable acceptance criteria. Preparation of decision alternatives and coordination with business, development, UX, and QA through team refinement.
• Conducting manual and technically assisted accessibility tests. Coordinating findings with QA and the Product Owner for further planning and implementation.
• Result: more consistent requirements, clearly defined processes and stories, and transparent open decisions. Separation of assumptions from confirmed requirements; better basis for implementation, refinements, and QA test cases.

Tools used: Jira, Confluence

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Elevator emergency call reorganization project: Project to evaluate and define a new technical solution for connecting elevator emergency calls for all facilities of DB InfraGO passenger stations.

• Objectives: Secure, redundant connection of all locations across Germany. Definition of the technical solution, documentation, subject-matter support and management of specialist and line organizations.

• Identification and commissioning of technical solutions.

• Management of documentation and approval of the technical solution in DB regulations.

• Definition and tracking of the roadmap for describing the solution.

• Preparation of a rollout plan to avoid shutdowns.

• Coordination and implementation of decision proposals for steering committees.

• Communication of the solution to all committees and regional areas.

MOVE-ZPD – Strategic Infrastructure Project | Total Program Budget 48 Mio. € | Data Center Migration Hannover → Hamburg

Responsibility for a central subproject for migrating business-critical specialist applications to a highly available data center architecture.

• Management of a central subproject for migrating business-critical specialist applications to a highly available data center architecture.
• Independent management of around 30 of approximately 100 business-critical specialist applications, including Exchange (approx. 30'000 users), LDAP, DNS and cross-state applications.
• Management of project structure, milestones, dependencies, risks and escalations, as well as coordination of the required business and technical stakeholders.
• End-to-end coordination of the managed migrations, from planning and structuring through environment provision, testing and acceptance to production deployment and go-live.
• Stakeholder management between business units, Product Owners, data center operations, program organization and external service providers.
• Development and implementation of a standardized server request and change process to speed up VM provisioning and reduce manual coordination.
• Management reporting as well as preparation and moderation of steering and decision-making bodies and workshops.

Technologies & Tools: MS Project, MS Teams, SharePoint, Oracle APEX, CA Automation Manager, Visio, MindManager

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

• Introduction of 5 different process applications for different teams

• Release planning: scope and time management

• Resource/capacity planning

• Conducting Sprint Planning / retrospectives

• Increment planning (several sprints)

• Preparation of Steering Committee meetings / reporting to the Board

• Coordination / alignment with external suppliers / deliveries

• Resource planning for multiple projects

• Coordination with business department and development team

• Identification of best practices with IBM BAW

• Cost control and planning for the project team and external service providers

• Collection of KPIs using LogScale

• Analysis of application errors with LogScale / Queries

• User Story definitions / coordination of requirements with the business department and development team

• Testing and defect tracking

• UI/UX design of applications

• Preparation and moderation of Brown-Paper workshops

• Test concept, test data, test organization, test execution

• Collection of team velocity / metrics

• Test execution

• Script for automated testing

• Test organization with business department and IT

• Recording and prioritization of defects

• Establishment and operation of the application

• Establishment of application monitoring with LogScale Dashboards

• Checking health endpoints with PowerShell

• Post Mortem analysis

• Establishment of Incident Management

• Establishment of Problem Management

• Analysis of errors using LogScale Queries and Dashboard

• Pre-processing of data for AI

• Evaluation using AI language models (Meta Llama 3.3 LLM and deepset Haystack) and RAG

• Installation of runtime environments for LLMs (Large Language Model)

• Evaluation of various LLMs

• Installation of RAG (Retrieval Augmented Generation) and integration with LLM

• Extraction of unstructured data with LLM and RAG

• Project based on IBM BAW (Business Automation Workflow), Websphere Liberty, Domea, d.3, REST, LogScale (formerly Humio), Swagger, Powershell, JIRA, Confluence, Lucom Interaction Platform (LIP), Mattermost, Jabber

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Conducting and evaluating web analyses
• Creating and editing tags and scripts in the area of tag management as well as banners and other client-side web elements in the area of consent management
• Technologies used in development: Tealium, JavaScript, IntelliJ, Git, Android Studio, Selenium, Appium, Adobe Analytics, Power Automate, Power App

• Linux server migrations: Planning and implementation of the migration with SLES Linux Deployment of VMs in VMware 8.0
• Guiding colleagues in configuring Linux VMs in vSphere Auto Deploy
• Application operations: Ensuring the smooth operation of applications on the migrated servers
• Operations manuals: Revising existing operations manuals, adding to them and creating new ones when required
• Reviewing service offerings: Adjusting and optimizing the service offering of external service providers
• Logistics SW, RedHat Linux, Ansible, Confluence / Jira

• Design, development, operation, and end-customer support of customized and individual software solutions

• Main point of contact for the provisioning of end devices and operating systems
• Pre-installation of software according to company guidelines and integration into the corporate network (Wi-Fi, VPN, domain)
• User support with setup, process improvements, and handling of returns (RMAs)

• Risk analysis
• Performing control activities
• Transaction Monitoring