Mobile Device Management Expert in Germany

• Replacement of a RIS and PACS system in combination with three different software solutions, with a focus on redesigning and further developing existing processes.
• Ensuring the interaction of the individual solutions and their integration into one overall solution to provide optimal support for medical staff in their daily work.
• Overall project management including coordination of three service providers.
• Use of technologies and solutions such as RIS, PACS, Smart Reporting, and Artificial Intelligence.
• Leading the RIS & PACS replacement in a hospital.
• Support with the communication strategy.
• Coordination of external and internal resources.
• Stakeholder management.
• Steering of steering committees.

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

• Mobile Device Management (MDM) for iOS devices (iPads, iPhones)
• Management, configuration and rollout of policies, apps and security measures
• eSIM setup & management as well as management of mobile plans and contracts
• User management (create, block, delete) in the SecurePIM security solution
• Device registration, preparation and setup of devices with Windows 10/11 and peripherals
• 1st & 2nd level support and handling of IT requests via the ticket system
• Troubleshooting, fault isolation and repair of devices
• Creating and maintaining guides, training new users and handling user questions

• Redesigning cablewise infrastructure with CAT 8.1 keystones, measuring the speed and quality of the new installation with Pockethernet, documentation at a local saddlery
• CAT 8.1 installation and building a data center, site linking, VPN and VLAN configuration for a local car dealership, implementation of IT-Security standards like virus protection (G Data) and firewalling (OPNSense)
• Relocation of a tax office with redesign of the IT infrastructure, virus protection (G Data) and backup solutions (QNAP)
• Planning, conception and implementation of an inhouse data center, BSI-compliant for commercial laundry (including Proxmox-based virtualization of existing infrastructures, QNAP, G Data, OPNSense, APC)
• Implementation and conception of security solutions in the SME sector
• Collaboration on the IT-security concept for the Bremen network of authorities (in the dLAN network)
• Creation of IT-security concept VOIS (modules MESO, KFZ/iKFZ) including audit preparation for KBA
• Expansion of the IT-security concept for the online service for electronic residence registration (eWA) to include use as an eFA (one-for-all) service (nationwide)
• Expansion of the IT-security concept to include modules wos & wvp
• Concept development for the implementation of DIN SPEC 27076 at MSEs and SMEs
• Creation and evaluation of emergency concepts
• Creation and evaluation of response actions and BCM plans
• Assessment of existing business continuity management (ISO 22301)
• Development of BCM strategy options
• Conducting awareness training

• Directed a global marketplace implementation project, coordinating teams across three continents.
• Served as a proxy to the overall Project Manager, ensuring seamless alignment between local and central stakeholders.
• Acted as the German-speaking lead to maintain clear communication with the client.

• Carve-out of HR, SuccessFactors, PeopleHub, Concur, RLP and interface systems to an external international service provider

• Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
• Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
• Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
• Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.

• Support for the transition to the provider
• Quality assurance in developing operations manuals
• Operational performance management of the provider

• Mobile Device & Mobile Application Management (MDM & MAM)
• MDM project management to comply with corporate policies
• Integration of new internally and externally hosted software solutions
• MDM & MAM system: Ivanti MobileIron EPMM
• Collaborative documentation processes and coordination of external service providers
• Organization of virtual training sessions for employee development
• Responsible for device administration and software distribution
• Interface management with the infrastructure provider
• Ensuring smooth IT operations
• Incident and change management
• Automation and optimization of IT infrastructure
• Creation of user documentation
• Handling and advising on customer inquiries and incidents
• Windows system administration
• Ticket system: Matrix42
• Network administration

• Conceptual consulting for securing business processes
• Consulting on planning and implementation of IT and IT security projects
• Security and policy checks, process optimizations, emergency planning
• Project management and interim management in IT infrastructure and information security

Overview of relevant projects:

• 2025: Consulting on a DLP concept for Digid GmbH.
• 2025: Consulting a client after a cybersecurity attack that compromised the IT infrastructure and where the attacker obtained M365 tenant admin rights. Investigated the IT infrastructure and restored it. Developed recommendations to improve IT security.
• 2025: Continued the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
• 2024: Created a DNS concept including advice on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones, and automation. Created a DHCP concept including advice on DHCP design, a central DHCP management system and automation. Advised on operating the mentioned products, the operational processes, and updated IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
• 2024: As-is analysis and assessment of the network and security infrastructure established by providers in terms of overall architecture including design and components. Designed solution proposals to improve current operations for performance and security maximization as well as complexity reduction. Presented the results to C-level, their causes and possible solutions including required decision templates. Developed a SASE concept based on a zero-trust architecture for Norddeutsche Landesbank.
• 2024: Continued the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
• 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proofs of concept for DDoS protection and digital experience monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on zero trust, redesigning a Cisco ISE implementation, and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
• 2023: Continued the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
• 2022: Created and reviewed whitepapers for infrastructure and security architectures, and planned new network infrastructures for the German Aerospace Center.
• 2022: Developed a concept for the technical and procedural modernization of a disaster recovery plan for United Nations Volunteers.
• 2022: Developed a concept for migrating measurement data to a cloud environment, introduced network access control, and conducted an awareness training for Digid GmbH.
• 2022: Developed a network segmentation concept for DZ Hyp AG.
• 2022: Developed a network segmentation concept for the Federal Employment Agency.
• 2021: Developed a new load balancer architecture concept for Bundeswehr Fuhrparkservices GmbH.
• 2021: Conducted a vulnerability scan and penetration test of a web frontend including analysis and recommendations for remediation considering risk and likelihood for the client ifi GmbH.
• 2021: Consulting, design, and subproject management for implementing a network access control solution (certificate authentication and MAC address bypass) and macro segmentation (area and zone concept based on dynamic device assignment) in office and production IT for Vaillant Group GmbH.
• 2021: Upgraded and optimized LAN and WLAN infrastructure for United Nations Volunteers.
• 2021: Developed a target concept for modernizing the IT security infrastructure including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet connections, admin and management networks, and the wireless LAN, including overseeing implementation for the Federal Institute for Geosciences and Natural Resources.
• 2021: Created a micro-segmentation concept based on Cisco DNA, SGT, and zero trust for Union Investment IT-Services GmbH.
• 2021: Reviewed and updated ISMS level 3 policies and created procedure instructions for Software AG.
• 2021: Project lead for the global tech refresh project Meraki WLAN 2.0, coordinated the outsourcing of LAN/WLAN infrastructure to a managed service provider, and created a WLAN concept for automated guided vehicles for Heraeus Infosystems GmbH.
• 2021: Project management and technical support for the 'Transition of SIEM/SOC Services' project migrating a client to a shared environment, and took on the interim role of Head of Security Operations at Datagroup SE.
• 2021: Conducted a workshop for the future implementation of mobile device management for Allgeier Experts Go GmbH.
• 2021: Subproject management for implementing a firewall rule management tool and recertifying NAC endpoints based on 802.1x and MAB for Union Investment IT-Services GmbH.
• 2020: Developed a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
• Recorded and analyzed the current network architecture including project initiation.
• Designed a micro-segmentation concept in the data center and access network.
• 2020: Infrastructure and security architecture audit for Stuttgarter Versicherung AG.
• Analyzed the IT infrastructure and security architecture regarding network and security component configurations. Also reviewed contracts, process documents, and manuals for completeness. Developed recommendations to improve the stability and operation of the infrastructure. Created a network segmentation concept and led the project to implement the measures from the audit.
• 2020: Consulting on setting up an ISMS-light for Josera foodforplanet GmbH & Co. KG.
• 2020: Security architecture consulting for Datagroup SE.
• Developed a future IT infrastructure and IT security architecture.
• Documented the current IT architecture of all 23 entities.
• Made recommendations to optimize the IT infrastructure and drafted a comparison of a traditional perimeter security concept versus a zero trust model.
• Created a security zone concept.
• Designed an IT infrastructure architecture in coordination with all entities.
• 2018 - 2019: Stream lead in the cybersecurity program at Deutsche Lufthansa AG.
• Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
• Project area: Network segmentation and access control.
• Project area: Security architecture.
• Project area: Privileged, identity & access management.
• Project area: Simplify user authentication (MFA).
• Project area: Mobile & endpoint security.
• Project area: OT security.
• Project area: E-enabled aircraft.
• 2018: Security architecture consulting for Deutsche Lufthansa AG.
• Project management for the development, evaluation, and management of the company-wide information security architecture.
• Developed a security strategy and a roadmap to align the security architecture with the zero trust model.
• Evaluated market security solutions, services, and tools.
• Defined requirements for RFPs and assessed proposals.
• Developed, maintained, and monitored security architecture artifacts.
• Conducted security assessments of existing and new IT systems and security services.
• 2018: ISMS consulting for GLS IT Services GmbH.
• Advised on implementing and initially operating an ISMS based on ISO27001.
• Audited the IT environments of GLS country subsidiaries.
• Analyzed and assessed IT security risks and derived necessary measures.
• Developed solution proposals in coordination with relevant stakeholders.
• Managed the project and handed over the ISMS to operations.
• 2016 - 2018: Security pre-sales consultant for Cisco Systems GmbH.
• Provided nationwide strategic and conceptual consulting to major enterprise and financial and insurance clients on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch, and ISE.
• 2017 - 2018: Designed and implemented an ISMS for Verivox GmbH.
• Conducted various BIAs and gap analyses.
• Developed security policies based on ISO 2700x.
• Served as interim information security officer.
• 2017: Developed an emergency concept for VPV Lebensversicherungs-AG.
• Reviewed and updated the IT emergency manual.
• 2016: Consulting and project management for designing cloud & hosting services for Vodafone Group Services GmbH.
• Analyzed and optimized the sell-build-run process.
• Created detailed level designs for cloud products.

• Evaluating and assessing the current state
• Preparing and conducting security audits
• Vulnerability characterization and risk analysis
• Assessing, coordinating and transforming identified vulnerabilities into target states
• Coordinating stakeholder interests
• Developing and implementing IT security strategy for OT and IoT (continuous risk assessment and risk management, awareness, multi-layered security solutions, regular security audits, access restrictions)
• Organizational and technical documentation, presentations and workshops
• Skills: Qualys, Splunk, Nessus, QRadar, National Vulnerability Database (NVD / NIST), Open Worldwide Application Security Project (OWASP), OT, CERT/CC, BSI IT-Grundschutz catalogs, ISO 27001, MITRE ATT&CK, Center for Internet Security (CIS), GitHub, Active Directory, PowerShell, Symantec Endpoint Protection, Microsoft Azure and Office365 App Security, ITSM

• Coordination and monitoring of required tasks and resources
• Coordination and ensuring the flow of information between involved departments
• Windows 10/11
• Time management and project control
• Integration of S/4HANA solutions in collaboration with business units
• Microsoft Project
• Confluence
• Jira
• Microsoft Office
• Microsoft Planner
• Responsible expert for client management environment services and patch management
• Coordination of interfaces and integration with existing systems
• Enable and enforce multi-factor authentication (MFA)
• Ensuring data migration and quality during the S/4HANA implementation
• Creation of a project structure plan
• Optimization of the design and implementation of service and client management processes
• Azure AD
• Project management & risk management
• Regular updates and drafting of decision documents for decision-makers
• Set up of an additional Linux-based infrastructure for administrative purposes
• Advising program management on transformation and migration projects
• PowerShell scripting
• Enhancement, maintenance and troubleshooting of the existing ERP application
• Synchronization with on-premises directories (Azure AD Connect)
• Conducting concept development and planning
• Procurement, integration, and deployment of MacBooks
• Autopilot
• Integration of systems into a client management system (Intune), Microsoft Defender, and Azure AD
• Implementation of single sign-on for mobile devices & PCs
• Migration from Active Directory to MS Intune
• Implementation and integration of SAP S/4HANA solutions
• Software packaging (MSI)
• Mobile device management with MS Intune and Mobile Iron
• Management of servers and services using Ansible
• MIM (Microsoft Identity Manager)
• Identity and permission management
• Access management

• Led remote IT and cybersecurity operations, including secure device provisioning, app deployment, compliance monitoring, and endpoint security with Microsoft Intune and Defender for Endpoint.
• Managed Identity and Access Management (IAM) with Microsoft Entra ID, including implementing role-based access control, conditional access, VPN configuration, and multi-factor authentication (MFA).
• Maintained and secured Cloud PCs, provided technical remote support, and optimized performance within the Microsoft 365 Business environment.

• Operation and administration of Windows 2016 / 2019 servers and domains
• Infrastructure services (Active Directory, ADFS, AD Azure Connect, DHCP, DNS, Group Policies)
• Consulting, support and troubleshooting of customer systems
• Documentation and concept design in the area of MS Active Directory
• Updating operation, process and system documentation
• Ticket handling (remote analysis and resolution via incident, change and problem management)
• Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMware vSphere, CheckMK, Exchange 2019, PowerShell, Jira, Confluence, Office 365, Matrix42, NetApp, Ansible