Network Infrastructure Experts in Germany

As part of this project, the existing active network infrastructure was modernized and made fit for the future. The goal was to introduce a powerful, secure and scalable network and WLAN infrastructure, including a Network Access Control (NAC) solution to improve network security and centralized access control.

At the beginning of the project, a comprehensive requirements analysis was carried out, taking into account the technical, operational and security-related requirements of the hospital sites. On this basis, a technical tender was prepared for new switches, WLAN access points and the NAC solution.

The successful implementation of the project established a modern, standardized and secure network infrastructure that meets the growing requirements for availability, mobility and IT security in hospital operations.

Activities:

• Supporting the tender process, including technical evaluation of offers and bidder evaluation
• Leading and managing the entire project implementation
• Coordinating the project process with internal stakeholders, business units and hospital IT
• Managing external service providers during the implementation and installation of the systems
• Monitoring the implementation, including quality control, project acceptance and defect management
• Coordinating and managing communication between hospital IT and external service providers as part of the NAC implementation
• Managing escalations in the event of technical and organizational challenges
• Ongoing budget monitoring and control of project expenses and additional costs
• Preparing decision papers for management on project changes, additional services and risks

• Redesign of legal operations: standardised workflows reducing routine effort by up to 80%, with source citation, hallucination check as quality gate, role model, logging and audit trail.
• Compliance-by-design operating model (EU AI Act readiness, GDPR, eIDAS) with documented, releasable process steps.
• Roadmap, sprint planning and release management for an agentic RAG platform with counsel-in-the-loop approval, audit trail and German hosting.
• EU AI Act readiness, GDPR and eIDAS requirements managed as first-class project deliverables; go-to-market for two customer verticals.

• Gathering information
• Creating rollout wave concepts
• Coordinating employees
• Monitoring and managing activities
• Project management including analysis and reporting to the board
• Creating instructions and specifications
• Training floorwalkers
• Supporting the rollout on site
• VIP support
• Introducing SharePoint

• Documenting the current Incident Management, IT Service Request Management, Problem Management, Change Management and Service Configuration Management processes (including CMDB)
• Conducting maturity assessments for these processes based on the ITIL® 4 Maturity Model
• Analyzing the various service value streams based on the ITIL® 4 value stream model
• Agreeing on maturity levels for the assessed processes
• Developing and approving a roadmap to achieve and measure the respective maturity levels
• Presenting the approach, including milestones, to management for approval
• Managing external service providers in 1st Level Support

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

• Led IT with 12 employees during a period of group integration, filling 3 new positions
• Analyzed IT maturity and created transparency around risks, resources and project status
• Structured and prioritized the project portfolio (group integration, ERP, NIS2, IT security)
• Engaged external service providers to close capacity gaps and initiated additional projects
• Supported the implementation of Business Central and represented IT on steering committees

• Processing and coordination of IT tickets (Helix, Omnitracker) incl. VIP support and remote support (Microsoft Teams, RDP, FastViewer)
• Onsite support at the main location as well as support for modern conference and meeting room technology (e.g. MeetingBoard 75 Pro)
• User and rights management in Active Directory (Active Roles), Azure AD, Exchange and MDM
• VDI support and monitoring with Citrix Director and Aruba Networking
• Endpoint management and policy administration via Ivanti
• Deployment, configuration and lifecycle management of clients (Dell notebooks, iPhones, iPads)
• Hardware rollouts for new employees incl. shipping across Germany
• Asset and license management as well as organization of site migrations

• Responsible for the concept, planning, and implementation of the product development of GetMyInvoices 2.0 and the subcomponent InvoiceRails
• Independent work on all aspects of the project, including concept, specification in tickets, and coordination of developers
• Creation, management, and prioritization of tickets to ensure all tasks are completed on time and with high quality
• Carrying out and/or coordinating tests and ensuring the proper implementation of the developed features and functionalities
• Close collaboration with developers to clarify technical requirements and ensure the implementations match the specifications
• Regular reporting on project progress and documentation of key decisions, changes, and risks
• Taking on the subject matter lead for all topics around e-invoicing and Peppol, especially in relation to the InvoiceRails component
• Internal consulting and knowledge sharing on e-invoicing and Peppol for other teams and departments
• Tracking market trends and new developments in e-invoicing and Peppol to continuously adapt the product strategy
• Ensuring the long-term scalability and flexibility of the products for future technical and regulatory changes in the e-invoicing area

• As-is assessment of the current network infrastructure and its documentation, including on-site inspections
• Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
• Planning of new copper and fiber optic cabling, including patch panels
• Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
• Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
• Additional support after the components go live (hypercare phase)
• Regular communication with project management and client stakeholders

Project: Rollout of new infrastructure components

• Defined and managed the implementation of an overarching management framework with clear roles and responsibilities as part of the hardware rollout.
• Designed and established governance and control mechanisms, including the development of compliance requirements and processes for continuous quality assurance, supported by ServiceNow.
• Coordinated technical activities between service, infrastructure and specialist teams to ensure the smooth delivery and commissioning of printers and notebooks.
• Created a detailed rollout plan with specific timelines, milestones and responsibilities.
• Managed the procurement, delivery, testing, configuration, installation and on-site commissioning of hardware, including integration into existing IT systems.
• Established and continuously optimized processes for the procurement, distribution and use of printers and notebooks.
• Developed and implemented standardized provisioning processes, analyzed existing procedures, harmonized the processes involved and ensured compliance with security, compliance and quality requirements.
• Introduced agile methods to continuously improve the hardware provisioning process.
• Promoted collaboration through clear responsibilities and communication structures between internal IT teams and external service providers.
• Documented and monitored rollout progress, created rollout reports and tracked hardware implementation in real time.
• Supported change management and organized and delivered training sessions for end users.
• Created user manuals and online resources.
• Analyzed the existing hardware landscape, created hardware inventories, assessed current equipment and checked hardware compatibility.
• Developed detailed infrastructure mappings.
• Planned, organized and conducted structured interviews with key stakeholders and created requirements documents.

• Development and maintenance of IT architectures with embedded Linux systems.
• Designing, implementing, and optimizing backend applications and script-based solutions.
• Analyzing and resolving issues, including troubleshooting and user support.
• Developing and implementing security concepts for cloud solutions.
• Administering networks (DHCP, DNS, NTP, VPN).
• Technologies: Linux, PowerShell, Bash, Python, Ansible, Kubernetes, GitLab CI.
• Methods: Kanban.

• Codebase Evaluation & Problem Design: Designed and stress-tested complex software engineering problems against large open-source Python codebases (including pandas), requiring deep context acquisition and architectural understanding to produce well-scoped, realistic problem statements aligned to strict correctness guidelines.
• Agent Failure Analysis: Assessed LLM coding agent solutions for correctness and completeness, identifying meaningful failures across edge case handling, dtype behaviour, and multi-column NaN propagation logic; documented findings with precision for downstream evaluation use.
• Programmatic Test Suite Development: Authored comprehensive pytest suites to programmatically verify agent-generated solutions against defined requirements, with deliberate coverage of boundary conditions and failure modes not caught by naive implementations.
• Containerised Environment Engineering: Built and debugged Docker environments for reproducible agent execution, including git-based repository provisioning, dependency pinning with npm ci, and multi-stage Dockerfile authoring across Linux-based containers.

• As part of the program (RAITT Transformation/Inlife Tribe), efficient handling of all processes for existing customers during ongoing operations and in customer service, including payments and billing, with the goal of ensuring customer satisfaction through excellent service and efficient problem solving

• Leading the Usage-to-Payments value stream and cross-functional teams as the responsible Epic Owner in the strategic RAITT transformation program

• Managing, prioritizing, providing functional direction and driving decision-making processes between business, architecture, development and outsourcing partners

• Backlog prioritization, strategic roadmap development and release readiness decisions

• Establishing governance, quality assurance and delivery standards in the payment ecosystem

• Communicating program-critical decisions to sponsors, Product Owners and technical control centers

• Ensuring smooth payment processes, accurate billing and integration with financial systems

• Optimizing payment methods, managing payment service providers and efficiently handling credit checks, dunning and debt collection

• Focus on postpaid business models with bank transfers, direct debits, returned direct debits and payouts

• Responsibility for alternative payment methods such as credit cards and PayPal, integration of payment service providers and risk management

Participation in various projects related to the development and introduction of new telecommunications products in the mobile communications and fixed-line sectors, with a focus on 5G, wholesale and IPv6 technologies.

• Planning, coordination and execution of product development projects, particularly in the 5G and fixed-line environments
• Support for the rollout of new offerings, including test management and quality assurance
• Participation in the development of wholesale products and eSIM solutions
• Close coordination with internal departments (technology, marketing, operations) and external partners
• Use of agile tools and methods for project management and collaboration

Tools: JIRA, MS Office, MS Project

Technologies: 5G, 5G Campus Networks, Fixed Network (FixNet), IPv6, eSIM, Wholesale product development

CS-APN 5G NSA – IPv6 / Dual-Stack for B2B Customers

Ensuring the use of CS-APNs in dual-stack mode (IPv4/IPv6) in combination with MPLS VPN and IPSEC VPN.

• Project management including test planning, test coordination and go-live management
• Technical coordination for activating IPv6 functionality for B2B connections

eSIM Manager – Product Development for B2B Customers

Development of a tool for the fast and scalable provision of eSIM profiles for business customers.

• Product design and process definition for activating eSIMs on different device types (smartphones, IoT, laptops)
• Collaboration with partners to integrate the solution into existing infrastructures

eSIM Handling B2B – Blanco eSIM Process Integration

Optimization of the eSIM provisioning process through the introduction of dynamic Blanco eSIM processes.

• Definition of new processes for issuing non-activated eSIMs (Blanco) via the frontend and partner community
• Design of the integration into service and IT systems

All-IP 5G NSA – Mobile Access for B2B Internet/Voice Services

Expansion of the All-IP portfolio with mobile 5G access offering higher bandwidth for business customers. (5G Indoor Coverage).

• Project management including test management and go-live preparation
• Interface coordination for introducing Local-SIM-based solutions

5G PN – Campus Roaming / Private Networks

Development and introduction of 5G Private Network (PN) solutions with a focus on industrial applications (IIoT).

• Design and definition of business use cases
• Development of SIM/eSIM processes for 5GPN, including roaming between private and public networks

IPv6 for B2B – Introduction in Mobile and Fixed-Line Products

Introduction of IPv6 support for All-IP products and M2M services in the B2B environment.

• Product and process development for integrating IPv6 (in accordance with RIPE-554)
• Implementation for large customers such as retail chains with several thousand branches in Germany and abroad