PowerShell Expert in Munich

• Development of an AI-powered project organization tool for a civil engineering company that intelligently links project, task, tender, schedule, and document data through a knowledge graph.
• Implementation of AI features for document analysis, information extraction, context-based assistance, and voice-based data capture based on Microsoft Azure AI, reducing administrative effort, making information available faster, and supporting project teams in decision-making.
• Tech stack: Python, React, TypeScript, FastAPI, Claude Code, Codex, Graphify, PostgreSQL, Microsoft Azure AI Foundry, Azure OpenAI, Azure AI Speech, Azure AI Document Intelligence, Microsoft Graph, Microsoft Entra ID, Docker, Git, CI/CD.

• AI Integration (LLM & RAG): Designed and built an internal intelligent RAG system (Retrieval-Augmented Generation) based on LLMs, n8n, and vector data to automatically analyze technical documents and error logs.
• Design & Implementation: Designed a robust RS-232/UART communication interface for an SBC-based embedded device used to control medical shaker systems.
• Architecture & Protocol Design: Built a highly maintainable software structure (OOP, SOLID) and defined resilient, hardware-level communication protocols, including multithreading and advanced error handling.
• Quality Assurance & DevOps: Automated testing with xUnit, ran integration tests directly on the hardware target, and maintained technical documentation to strict medical technology standards via Azure DevOps.

Label: C#, .NET, LLMs, RAG, n8n, RS-232, UART, Multithreading, async/await, xUnit, gRPC/protobuf, Blazor, MudBlazor, EF Core, Visual Studio 2026, Azure DevOps

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

Oracle Project Management and Automation

As part of the project, the operation of an Oracle infrastructure was automated by developing and enhancing Puppet modules and migrating existing Bash scripts to a standardized configuration management solution.

The aim of the project was to standardize and automate administrative processes, improve the maintainability of the Oracle platform, and increase the efficiency and traceability of infrastructure management through the use of Infrastructure as Code.

• Analysis and migration of existing Bash shell scripts to a Puppet-based automation solution
• Development and enhancement of Puppet modules for Oracle environments
• Automation of installation, configuration and operational processes using Infrastructure as Code
• Standardization and optimization of configuration management for Oracle systems
• Creation and maintenance of technical and operational documentation
• Planning, coordination and professional support during project implementation
• Operation and automation of Oracle systems on x86-based Linux server platforms
• Testing and quality assurance of the developed Puppet modules
• Analysis and resolution of technical errors as part of the automation and migration
• Close coordination with specialist departments and infrastructure teams to implement automation requirements

Technologies used: Puppet 7/8, SLES 15, Oracle 19, Oracle Grid, SVN, Windows Server, Confluence, VS Code, Ruby, Bash, Pass

• Configured Topics, Microsites into rich content portal widgets, Content Library, landing pages and automated client portal data sync, reducing manual effort by 80% and elevating self-service engagement.
• Architected optimal display across devices and varying resolutions to enhance user accessibility and experience.
• Set up and customized Azure VM integration by utilizing Catalog Items, PowerShell scripting and workflow orchestration.
• Analyzed and translated business requirements into scalable solutions, leveraging ServiceNow scripting to enhance platform functionality and elevate user experience.

Key ServiceNow Skills: Service Portal, Widget Development, Catalog Items, PowerShell Scripting, Workflow Orchestration, Content Management.

• Analysis and optimization of the VMware environment for operation in a KRITIS environment
• Planning and implementation of updates to the VMware and hardware environment in a KRITIS environment
• Set up Skyline Health Diagnostics
• Review of the existing documentation
• Training and onboarding of new internal employees
• Support with migration and upgrade projects
• Preparations for moving scripts in the virtualization environment to GitLab
• Ticket processing with Service.Now

• Development and maintenance of IT architectures with embedded Linux systems.
• Designing, implementing, and optimizing backend applications and script-based solutions.
• Analyzing and resolving issues, including troubleshooting and user support.
• Developing and implementing security concepts for cloud solutions.
• Administering networks (DHCP, DNS, NTP, VPN).
• Technologies: Linux, PowerShell, Bash, Python, Ansible, Kubernetes, GitLab CI.
• Methods: Kanban.

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

• Support and further development of a complex process for creating XML documents for electronic invoices / E-Invoicing (XRechnung, ZUGFeRD)
• Automation of operational processes, process development and optimization
• Development of frontend applications with MS Power Apps
• Porting SQL Server 2016 to SQL Server 2022
• SQL Server database administration

• Executed standard/complex test cases using ECU-test and Python, improving test throughput by 30%.
• Performed validation and execution of ECU test cases on HiL benches for ADAS to ensure functional quality before release.
• Worked closely with customers to align test activities with project requirements and provide regular validation updates.
• Coordinated with subcontractors to track defects, ensure timely issue resolution, and maintain test quality.
• Ensured testbench stability and maintenance before executing test plans, identifying and resolving issues proactively.
• Developed Python-based automation scripts for reporting and workflow automation.
• Managed test issues and documentation via Jira in coordination with QA and development teams.
• Used CANPE for measuring signals of CAN, FlexRay, Ethernet, and IP using Vector CAN tools.

• Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
• Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
• Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
• Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.

• Planned and carried out black-box adversarial testing of traffic-sign computer-vision pipelines; created a threat model and attack-surface analysis for safety-critical scenarios
• Built a programmable hardware proof of concept using a holographic POV fan and a repeatable test harness to run real-time experiments and gather evidence for vulnerability assessment
• Measured misclassification across lighting, distance, and angle, achieving up to 90% untargeted misclassification; delivered reproduction steps, PoCs, and prioritized mitigations, and documented limitations and residual risk

• Replacement of a Java application and the Oracle DB for loading the internal WerWasWo system using SSIS.
• Development of SSIS packages to load text files into the database (SQL Server)
• Development of a database project for deployment on various servers
• Creation of queries to monitor the loading runs
• Development of a PowerShell script to automate the deployment of the SSDT projects.
• Oracle, SQL Developer, Microsoft SQL Server 2022 on-premises, SQL Server Management Studio v21, Visual Studio 2022, SSIS, SSDT, PowerShell.