Nutanix Expert in Germany

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

• Analysis of technical and economic feasibility
• Creation of a detailed project plan including time and resource management
• Requesting and evaluating offers, selecting components, and managing suppliers
• Coordination of all involved trades (e.g. electricians, installation companies)
• Monitoring the construction work and ensuring deadlines, budgets, and quality standards are met
• Acceptance and commissioning of the PV system including documentation
• After project completion: optimizing monitoring and supporting grid connection

• Regulated environment within a German banking group (approx. 8,500 employees, hybrid cloud strategy).

• Responsible for operating, provisioning, and continuously securing business-critical platforms – including a GenAI chat application, a big data/AI platform, and data science workspaces based on Azure Virtual Desktops and VMs. Ownership of Azure DevOps projects for ShaiHulud and React2Shell, as well as BSI alerts – Security Operations improvements across the SDLC.

• Deployment responsibility for the GenAI chat application, big data/AI platform (BDAI), and data science workspaces (AVD/VM-based) in the respective landing zones.

• Deployment & release management: end-to-end responsibility for deploying portal and service applications across multiple Azure landing zones, including technical approvals, compliance with development team deployment guidelines, and ensuring ITIL-based change and release processes via ServiceNow.

• Azure landing zones & network architecture: design, provisioning, and operation of Azure landing zones for 3-tier web applications with enhanced network segmentation, VNet peering, hub-and-spoke architectures, private endpoints, and firewall integration across separate subscriptions and tenants.

• Azure DevOps governance & operations: ownership of the Azure DevOps organization, including projects, repositories, and CI/CD pipelines; implementation of governance requirements such as branch policies, approval gates, permission models, and audit-ready operating structures.

• Infrastructure as Code (Terraform): design, implementation, and operation of a modular Terraform architecture for standardized cloud infrastructure deployment, including state management, provider versioning, reusability, and policy-as-code approaches.

• CI/CD pipeline engineering: design, operation, and optimization of complex YAML-based CI/CD pipelines with multi-stage deployments, template standardization, self-hosted agents, integrated secret management, and automated quality and security checks.

• Git migration & platform consolidation: planning and execution of repository and pipeline migration from Azure DevOps to GitLab CI/CD, including automated scripts, full Git history transfer, pipeline porting, and platform consolidation.

• Container & platform operations (AKS): operation and security assessment of containerized workloads on Azure Kubernetes Service, centralization of on-premises container registries for ACR.

• OpenShift (OCP) security reviews: security assessment of code baselines, build pipelines, and deployment processes for on-premises OpenShift clusters with critical applications, and derivation of specific hardening recommendations.

• Shift-left security & DevSecOps transformation: introduction of a company-wide shift-left approach for early security integration in development and deployment processes, enabling developers to perform self-led security checks and sustainably reduce vulnerabilities before production (IDE integrations, pre-commit hooks, local scanners).

• Software supply chain security: analysis and mitigation of supply chain risks in NPM- and Yarn-based applications through dependency audits, CI/CD pipeline hardening, token rotation, and restriction of risky build and lifecycle mechanisms.

• Frontend & framework security (React / Next.js): security assessment and coordination of critical vulnerability remediation across platform applications and web frameworks, including coordination and complementary technical mitigations with all teams following BSI alerts.

• Software composition analysis (SCA): introduction and operation of automated vulnerability scans for container images, pipelines/artifacts, and third-party dependencies, including SBOM exports within CI/CD pipelines.

• SAST/DAST integration: design and piloting of static and dynamic application security tests in close collaboration with security architecture and development teams, for continuous improvement of code and runtime security, and establishing operational acceptance tests.

• Artifact & registry consolidation: analysis and consolidation of all package and container repositories for service applications and AKS workloads, aiming for a centralized, secured registry strategy with centralized vulnerability scanning and governance.

• Dependency-Track & SBOM strategy: advising the compliance board on introducing a central SBOM and vulnerability management platform to increase enterprise-wide dependency transparency and accelerate CVE response capability.

• CI/CD pipeline hardening: security analysis and cleanup of the existing pipeline landscape by removing unused pipelines, improving secrets hygiene, implementing least-privilege principles, and isolating build agent environments.

• Azure Web Application Firewall (WAF) optimization: analysis and tuning of existing Azure WAF rules (OWASP Top 10 Core Rule Set, DSR/SDC, custom rules) to defend against known vulnerabilities and exploit patterns, including reducing false positives and improving threat detection.

• Documentation & stakeholder communication: creating and maintaining technical documentation, runbooks, and architecture overviews in Jira and Confluence, as well as active knowledge transfer between operations, development, security, and compliance stakeholders.

• Integrating system architecture, business analysis, requirements engineering, and process consulting
• Managing business unit needs toward IT and implementation
• Capturing requirements in JIRA and breaking them down into epics
• Overseeing internal projects and programs, including stakeholder management and reporting
• Handling requirements from traditional IT developments to IoT integrations and SAP subsystem replacements
• Implementing current legal regulations (MAKO, EnWG, EEG, GWG, StromGVV, GasGVV, StromNEV, GasNEV)
• Applying agile methods (Agile, SAFe, ITIL, Scrum, Kanban, DDD, IaC, CI/CD, DevOps, automation, ETL, OOA, OOD, MDA, BPMN, BPM, UML, marketing automation, data science, ML, AI, GenAI, LLMs)
• Using tools like JIRA, SharePoint, MS Office, MS Project, MS Dyn CRM, VMware ESX/ESXi, BSI IT-Grundschutz, BSI C5, NIST, MS Azure, Typo3, mail automation, Docker, Kubernetes, OpenStack, OpenShift, Terraform, Ansible, SQL, REST, SOAP, Git, GitLab, LoRaWAN, SAP IS-U, S/4HANA, USU, KUGU, AbSys, sensors, MQTT

• Rebuilding an existing cloud solution with Kubernetes, Terraform, Ansible, Prometheus, Grafana, GitLab, Argo CD and PostgreSQL
• Coordinating and managing external partners and service providers
• Ensuring service delivery on time and on budget with budget responsibility
• Integrating the cloud solution with external public clouds (AWS)
• Setting up and defining processes and workflows in Jira and Confluence
• Product management of software development for automation and self-service in CI/CD DevOps mode
• Agile software development with Kanban and Scrum in various development teams
• Single point of contact for key customers in respective projects
• Creating and aligning the product backlog with stakeholders from sales, architecture, development teams, marketing, management and customers
• Migrating existing customers to the AWS cloud as product owner
• Creating and aligning a product roadmap with internal and external stakeholders

• Industry: metal processing industry
• Revenue: 740 million EUR
• Employees: 4,400
• Budget: 7 million EUR, 15 staff
• Designing and operating technical services
• Ensuring IT security
• Managing the central support organization (first, second, and third level)
• Digital transformation: strategic support / project management for OT platform and OT security
• Developing and introducing ITIL processes (incident management, problem management, service request fulfillment, change management, access management, service level management)
• Supporting and coordinating external service providers (provider management)
• Project management: planning and delivering IT services for a new main plant
• Promoting IT-OT convergence / OT asset management / OT security
• Organization: mediating and supporting reorganization

Achievements:

• Improving IT operations maturity (introducing and stabilizing processes, KPIs, ensuring transition)
• Replacing the ticket system with ServiceNow
• Stabilizing and developing IT security / ensuring resilience
• Successfully introducing OT segmentation (architecture, remote access control, micro-segmentation, OT asset management)
• Supporting introduction of manufacturing execution system (technical services / SaaS provider management)
• Integrating foreign sites (rollout of central IT services)
• Migrating on-premises server environment to MS Azure
• Rolling out Windows 11
• Supporting migration of on-premises SAP environment to SAP RISE
• Creating planning basis for IT network infrastructure of the new main plant
• Planning web shop
• Organizational development "From Operating to Designing" (target SIAM organization)
• Supporting BCM

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Migration of Oracle databases from on-premise to the AWS Cloud
• Support for technical Oracle solutions and cloud database infrastructures (IaaS and PaaS) RDS vs. EC2, sizing for performance
• Creation and maintenance of DR/HA (Disaster Recovery/High Availability) and backup and recovery policies and procedures (multi-region backup)
• Support for Oracle license selection, Enterprise → Standard migration
• Monitoring database instances
• Implementation and maintenance of database security (wallet, SSL)
• Patch management and version control
• Automated installation and configuration of Oracle databases using Terraform and Ansible

• Personal and professional leadership of a team of 14 employees at three locations
• Responsibility for the IT infrastructure (clients, servers, storage, network, and security) and the IT service desk for the entire group
• Designing an innovative IT infrastructure and ensuring compliance
• Budget responsibility
• Requirements management
• IT governance (strategy, ITIL, management, security, cost controlling)
• Planning and implementing measures to modernize, expand, and standardize IT systems
• Ensuring disruption-free IT operations and scalability of the IT infrastructure
• Risk management, including designing and implementing disaster recovery plans
• Trainer for all IT specialist apprentices
• Planning and implementing the entire IT infrastructure of a new production plant

• Hybrid Cloud Administration (Cloud Transformation)
• Azure Cloud Administration
• Azure Entra ID user administration
• Reporting
• License reviews
• User and group management
• RBAC integration
• Policy management
• VM administration: setup of VMs, configuration of scale sets, configuration of replications, creation of backups, manual installation
• Azure Bastion
• Privileged access identity management
• Documentation
• Azure Security Center: monitoring security posture and recommendations to improve security
• Microsoft 365 administration: MS Intune administration (Bitlocker policies, distribution, device management, group management)
• MS365 Defender (Defender for Endpoint, threat management, EDR solution implementation, threat detection through investigations)
• Defender for Office 365 (protection of Office 365 tools against phishing, malware, and other attacks)
• Defender for Identity (identification, activity monitoring)
• Defender for Cloud Apps (application monitoring and protection)
• Windows Active Directory, DHCP, DNS, policies, Baramundi, SCCM/MECM, VMware, WSUS, Sophos
• Exchange administration: rule creation, setup and deployment of mailboxes, mailbox migration, mail tracking, mailbox conversion, report generation
• Windows AD administration: user management across the structure, device management, attribute management, group management, organizational management, troubleshooting
• Group Policy management: modifying, deleting or creating policies, assigning and organizing policies, documentation and reporting
• Manual installation & imaging: new imaging, image creation, manual maintenance and updates, documentation of various enterprise applications
• Bitlocker configuration, BIOS and firmware configuration, troubleshooting and collaboration with level 3 support, MBSA reporting, WSUS monitoring, system and event management, troubleshooting across the IT infrastructure
• Network management (including SWIFT network): MAC address filtering, network switch configuration, port management, switch patching
• VMware ESXi/vSphere/vCenter administration: VM management, troubleshooting, virtualization solutions, updates and maintenance
• Virtualization & cloud: Azure, Citrix, VMware, VirtualBox, ESXi, Hyper-V, VMware AHV, vulnerability management, migrations
• Identifying, assessing and remediating security vulnerabilities on hybrid endpoints through regular vulnerability assessments and patch management
• Backup & recovery: Teams administration, data migration, SAN, SharePoint administration, NAS, Exchange administration, cloud backup: policy creation, mailbox migration
• IT security: firewall, antivirus, Azure, MS365 Security Defender: monitoring, mailbox setup and implementation, mail tracking, mailbox conversion, report generation
• IT service management: team meetings, report analysis, documentation, analysis
• Other: monitoring progress against goals, ServiceNow, HPSM, prioritizing activities, JIRA, MS365, integration of requested projects, MDM, TeamViewer, AnyDesk, Adobe, PowerShell, CLI, CMD
• IT service desk: Exchange, JIRA org administration, SCCM shell: user management, device management, project management, ticket reviews, user training, ticket handling, change management, permission management, VIP support
• Facility management: coordination with building management/technical teams, organizing technology for conferences, guest access, employee access
• Nutanix/VMware administration: provisioning and setup of Nutanix clusters, installation and configuration of Nutanix AHV, VMware ESXi & Hyper-V, infrastructure maintenance and operations, upgrades and patches for Nutanix clusters, planning and implementing backup solutions, installation and configuration of VMware ESXi hosts and vCenter servers, hybrid environments