PowerShell Experts in Berlin

• Codebase Evaluation & Problem Design: Designed and stress-tested complex software engineering problems against large open-source Python codebases (including pandas), requiring deep context acquisition and architectural understanding to produce well-scoped, realistic problem statements aligned to strict correctness guidelines.
• Agent Failure Analysis: Assessed LLM coding agent solutions for correctness and completeness, identifying meaningful failures across edge case handling, dtype behaviour, and multi-column NaN propagation logic; documented findings with precision for downstream evaluation use.
• Programmatic Test Suite Development: Authored comprehensive pytest suites to programmatically verify agent-generated solutions against defined requirements, with deliberate coverage of boundary conditions and failure modes not caught by naive implementations.
• Containerised Environment Engineering: Built and debugged Docker environments for reproducible agent execution, including git-based repository provisioning, dependency pinning with npm ci, and multi-stage Dockerfile authoring across Linux-based containers.

• Conducting cybersecurity readiness checks based on an in-house assessment methodology
• Analyzing the external attack surface using the Graydaxe EASM platform
• Assessing maturity levels and deriving prioritized recommendations for action

• Projects for federal networks (NdB).
• CR management, EoL change requests, design and documentation according to ITSCM.
• Data center planning.
• Project management and engineering subproject management.
• Software development for virtual server environments according to BSI.

• Maintenance of the product backlog in collaboration with the PO
• Analysis and alignment of requirements
• Creation of process documentation and status reports
• Definition of workflows
• Preparation and moderation of agile meetings

• Windows 10, Windows 11, Windows Server 2019/2022, Active Directory, Entra ID Group Policy, Orca, PowerShell, PSAppDeployToolKit, Intune, Office 365, Azure, Winget, SandBox
• Onsite/offsite packaging and repackaging in Intune
• Silent install / uninstall
• Use of scripting (PSADT, PowerShell)
• Distribution, planning, and monitoring of packages using Intune Admin Center
• Troubleshooting
• System monitoring
• 2nd and 3rd Level Support
• Packaging process (creation and review of installation and configuration guides, test plans, User Acceptance Testing)
• Automatic client provisioning
• Quality assurance, testing of software packages
• Workplace Engineering
• Windows Client Engineering
• Management of profiles and group policies
• Working with agile methods (Scrum)
• Use of ITSM, including as a ticket system
• Sprint planning

• Configuration and management of routers and switches (e.g., Cisco, HP)
• Design and expansion of networks in corporate environments
• WLAN site surveys and optimization (e.g., with Ekahau, NetSpot)
• Implementation of security policies and access controls

• Developed Red Team infrastructure for real-world attack simulations using Sliver C2 and custom tools
• Executed advanced Red Team operations, integrating AI/LLM security research for prompt injection attacks
• Conducted comprehensive breach assessment attacks and vulnerability assessments across enterprise infrastructure
• Performed root cause analysis and purple team exercises, generating executive-level reports
• Lead LLM red teaming initiatives to improve AI model security for GPT-4, Mistral, and internal GenAI models

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Development, operation and support of BI platforms and microservice architectures
• Development of an open-source BI scheduling tool

• Took on the role of Service Manager for Microsoft 365 and Azure services
• Coordinated service providers in collaboration and security (Exchange Online, Teams, Azure AD)
• Monitored and optimized SLA-compliant operational processes (Incident, Change, Problem)
• Worked closely with internal IT management and integrated ITIL processes into Azure DevOps
• Microsoft Azure, Exchange Online, Teams, Azure AD, ITIL v4, Azure DevOps, Power BI, ServiceNow

• Updating/upgrading Linux servers to new versions
• Installing Trend Micro on Linux servers
• Creating, presenting and maintaining technical documents
• Refactoring tools
• Platforms: SUSE Linux Enterprise Server (SLES) 10, 11, CentOS, RedHat, Windows 10, PowerShell, Bash, Perl, Trend Micro AV, PuTTY, SSH, VMware
• Project language: English