Network Infrastructure Experts in Germany

• Redesign of legal operations: standardised workflows reducing routine effort by up to 80%, with source citation, hallucination check as quality gate, role model, logging and audit trail.
• Compliance-by-design operating model (EU AI Act readiness, GDPR, eIDAS) with documented, releasable process steps.
• Roadmap, sprint planning and release management for an agentic RAG platform with counsel-in-the-loop approval, audit trail and German hosting.
• EU AI Act readiness, GDPR and eIDAS requirements managed as first-class project deliverables; go-to-market for two customer verticals.

• Gathering information
• Creating rollout wave concepts
• Coordinating employees
• Monitoring and managing activities
• Project management including analysis and reporting to the board
• Creating instructions and specifications
• Training floorwalkers
• Supporting the rollout on site
• VIP support
• Introducing SharePoint

• Documenting the current Incident Management, IT Service Request Management, Problem Management, Change Management and Service Configuration Management processes (including CMDB)
• Conducting maturity assessments for these processes based on the ITIL® 4 Maturity Model
• Analyzing the various service value streams based on the ITIL® 4 value stream model
• Agreeing on maturity levels for the assessed processes
• Developing and approving a roadmap to achieve and measure the respective maturity levels
• Presenting the approach, including milestones, to management for approval
• Managing external service providers in 1st Level Support

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

• Processing and coordination of IT tickets (Helix, Omnitracker) incl. VIP support and remote support (Microsoft Teams, RDP, FastViewer)
• Onsite support at the main location as well as support for modern conference and meeting room technology (e.g. MeetingBoard 75 Pro)
• User and rights management in Active Directory (Active Roles), Azure AD, Exchange and MDM
• VDI support and monitoring with Citrix Director and Aruba Networking
• Endpoint management and policy administration via Ivanti
• Deployment, configuration and lifecycle management of clients (Dell notebooks, iPhones, iPads)
• Hardware rollouts for new employees incl. shipping across Germany
• Asset and license management as well as organization of site migrations

• Responsible for the concept, planning, and implementation of the product development of GetMyInvoices 2.0 and the subcomponent InvoiceRails
• Independent work on all aspects of the project, including concept, specification in tickets, and coordination of developers
• Creation, management, and prioritization of tickets to ensure all tasks are completed on time and with high quality
• Carrying out and/or coordinating tests and ensuring the proper implementation of the developed features and functionalities
• Close collaboration with developers to clarify technical requirements and ensure the implementations match the specifications
• Regular reporting on project progress and documentation of key decisions, changes, and risks
• Taking on the subject matter lead for all topics around e-invoicing and Peppol, especially in relation to the InvoiceRails component
• Internal consulting and knowledge sharing on e-invoicing and Peppol for other teams and departments
• Tracking market trends and new developments in e-invoicing and Peppol to continuously adapt the product strategy
• Ensuring the long-term scalability and flexibility of the products for future technical and regulatory changes in the e-invoicing area

• As-is assessment of the current network infrastructure and its documentation, including on-site inspections
• Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
• Planning of new copper and fiber optic cabling, including patch panels
• Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
• Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
• Additional support after the components go live (hypercare phase)
• Regular communication with project management and client stakeholders

As part of this project, the existing active network infrastructure was modernized and aligned for the future. The goal was to introduce a high-performance, secure, and scalable network and WLAN infrastructure, including a Network Access Control (NAC) solution to improve network security and central access control.

At the start of the project, a comprehensive requirements analysis was carried out, taking into account the technical, operational, and security-related needs of the clinic sites. Based on this, a technical tender was prepared for new switches, WLAN access points, and the NAC solution.

By successfully delivering the project, a modern, standardized, and secure network infrastructure was established that meets the growing demands for availability, mobility, and IT security in clinical operations.

Tasks:

• Support of the tender process, including technical evaluation of the offers and bidder assessment
• Lead and coordinate the entire project delivery
• Align the project process with internal stakeholders, business units, and the hospital IT team
• Manage external service providers during implementation and installation of the systems
• Monitor implementation, including quality control, project acceptance, and issue management
• Coordinate communication between hospital IT and external service providers during the NAC implementation
• Carry out escalation management for technical and organizational challenges
• Ongoing budget tracking as well as monitoring of project effort and additional costs
• Prepare decision papers on project changes, additional services, and risks for management

Project: Rollout of new infrastructure components

• Defined and managed the implementation of an overarching management framework with clear roles and responsibilities as part of the hardware rollout.
• Designed and established governance and control mechanisms, including the development of compliance requirements and processes for continuous quality assurance, supported by ServiceNow.
• Coordinated technical activities between service, infrastructure and specialist teams to ensure the smooth delivery and commissioning of printers and notebooks.
• Created a detailed rollout plan with specific timelines, milestones and responsibilities.
• Managed the procurement, delivery, testing, configuration, installation and on-site commissioning of hardware, including integration into existing IT systems.
• Established and continuously optimized processes for the procurement, distribution and use of printers and notebooks.
• Developed and implemented standardized provisioning processes, analyzed existing procedures, harmonized the processes involved and ensured compliance with security, compliance and quality requirements.
• Introduced agile methods to continuously improve the hardware provisioning process.
• Promoted collaboration through clear responsibilities and communication structures between internal IT teams and external service providers.
• Documented and monitored rollout progress, created rollout reports and tracked hardware implementation in real time.
• Supported change management and organized and delivered training sessions for end users.
• Created user manuals and online resources.
• Analyzed the existing hardware landscape, created hardware inventories, assessed current equipment and checked hardware compatibility.
• Developed detailed infrastructure mappings.
• Planned, organized and conducted structured interviews with key stakeholders and created requirements documents.

• Spearheaded the integration of a custom Transformer-based encoder into the AFFGANwriting pipeline, replacing the legacy VGG19 architecture to capture richer, high-fidelity writer-style representations.
• Boosted user-study pick-rates by 40%, demonstrating a significant leap in the perceptual quality and realism of the generated handwriting compared to the baseline model.
• Enhanced OCR performance by 20% by implementing a teacher-student framework that leveraged a TrOCR benchmark model for auxiliary training alignment

• Development and maintenance of IT architectures with embedded Linux systems.
• Designing, implementing, and optimizing backend applications and script-based solutions.
• Analyzing and resolving issues, including troubleshooting and user support.
• Developing and implementing security concepts for cloud solutions.
• Administering networks (DHCP, DNS, NTP, VPN).
• Technologies: Linux, PowerShell, Bash, Python, Ansible, Kubernetes, GitLab CI.
• Methods: Kanban.

• Codebase Evaluation & Problem Design: Designed and stress-tested complex software engineering problems against large open-source Python codebases (including pandas), requiring deep context acquisition and architectural understanding to produce well-scoped, realistic problem statements aligned to strict correctness guidelines.
• Agent Failure Analysis: Assessed LLM coding agent solutions for correctness and completeness, identifying meaningful failures across edge case handling, dtype behaviour, and multi-column NaN propagation logic; documented findings with precision for downstream evaluation use.
• Programmatic Test Suite Development: Authored comprehensive pytest suites to programmatically verify agent-generated solutions against defined requirements, with deliberate coverage of boundary conditions and failure modes not caught by naive implementations.
• Containerised Environment Engineering: Built and debugged Docker environments for reproducible agent execution, including git-based repository provisioning, dependency pinning with npm ci, and multi-stage Dockerfile authoring across Linux-based containers.

• As part of the program (RAITT Transformation/Inlife Tribe), efficient handling of all processes for existing customers during ongoing operations and in customer service, including payments and billing, with the goal of ensuring customer satisfaction through excellent service and efficient problem solving

• Leading the Usage-to-Payments value stream and cross-functional teams as the responsible Epic Owner in the strategic RAITT transformation program

• Managing, prioritizing, providing functional direction and driving decision-making processes between business, architecture, development and outsourcing partners

• Backlog prioritization, strategic roadmap development and release readiness decisions

• Establishing governance, quality assurance and delivery standards in the payment ecosystem

• Communicating program-critical decisions to sponsors, Product Owners and technical control centers

• Ensuring smooth payment processes, accurate billing and integration with financial systems

• Optimizing payment methods, managing payment service providers and efficiently handling credit checks, dunning and debt collection

• Focus on postpaid business models with bank transfers, direct debits, returned direct debits and payouts

• Responsibility for alternative payment methods such as credit cards and PayPal, integration of payment service providers and risk management

• Requirements analysis and replacement of local SharePoint as CMDB with open source NetBox to prepare for deploying Cisco ACI (SD-WAN) with Microsoft Azure
• Coordination with systems like Checkmk and Grasp
• Introduction and coordination of cmdbsyncer as CMDB data hub; further development of the syncer with Kuhn & Ruess GmbH
• Implementation of SNMPv3 on AIX LPAR/VIO, Linux, Windows, SAN/storage, network components (Cisco switches, F5 load balancers, Palo Alto and CheckPoint firewalls, iLO boards)
• Deployment and further development of the network scanner JDisc in cooperation with the vendor (Utimaco HSMs, Linux detection)
• Integration of NetBox, JDisc, and cmdbsyncer into the infrastructure using Docker containers
• End-user training: preparation, creation of materials, and delivery
• Creation of data flow and network diagrams
• Population and planning of IPv4/IPv6 with NetBox including VLAN import
• Dual-stack setup of servers and clients with IPv4 and IPv6
• Connection of REST interfaces for Checkmk, JDisc, vSphere, HMC, i-doit, NetBox Software: Confluence, Jira, MS Office 365, Teams, i-doit, NetBox, JDisc, cmdbsyncer, DB Visualizer, vSphere, HMC