PRTG Experts in Germany

Windows Administrator, software deployment, user support, Azure / Entra administrator, hardware support, software packaging, defining and introducing processes

Tasks performed:

• Handling incidents, service requests & changes in the Matrix42 ticket system
• Handling / resolving incidents
• User creation / permissions
• Installation and patch management for Windows
• Permissions and license management in Entra
• Process improvement and documentation

Tools and methods used: Windows Server 2016 / 2019, Active Directory, Windows 11, Office 365, Azure / Entra, Ivanti, VMWare & ESX, Dell & Kyocera Minolta & Zeus hardware support

• Analysis of requirements and the current situation
• Migration of an old domain structure and Tobit to Exchange 2019 with integration to MS365
• Evaluation of implementation paths and planning for securing sensitive data
• Planning regarding BSI basic protection, the German Federal Data Protection Act (BDSG), and GDPR
• IT governance and IT security backtests
• Support with ERP setup and securing mail transfer
• Hyper-V 2016/2022, Microsoft Terminal Services Cluster, Microsoft Exchange 2019
• Office 365, Microsoft 365, Azure AD, Teams, Salesforce
• Cisco, Zyxel, and HP switches, Sophos firewalls/UTMs, SecurePoint
• Microsoft IIS 2022, IPv4/IPv6, Veeam, Wortmann online backup, NextCloud
• Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, Group Policy (GPO), SIEM, remote work, home office, high availability, failover, VLAN, PRTG

• Freelance product owner, scrum master and agile coach in various projects spanning from local agencies to multinational corporations in diverse industries.

• Last projects:

• Adevinta: Technical Project Manager responsible for coordination of several sub-workstreams building the world’s largest classifieds multi-tenant platform.

• Aroundhome (a ProSiebenSat.1 company): Product Manager implementing and verifying on the business side a concept for digital qualification of user requests for matching service providers.

• Peek & Cloppenburg Düsseldorf: Product Manager Mobile advising on and guiding the rebuild of Android and iOS apps.

• Visual Meta GmbH (an Axel Springer company), Berlin: Director Product co-leading the Product & Engineering department together with the Director Engineering.

• Responsibilities at Visual Meta GmbH:

• Define and deliver a 3–5 year horizon product strategy including a product vision & mission connecting to existing company strategy and strategies from adjacent departments.

• Refine an existing OKR process together with OKR master and directors of other departments to increase focus and outcome.

• Support the Director Engineering in creating a platform transformation strategy to transform a monolithic on-premise tech stack into a service-oriented, cloud-based architecture and establish a domain-based organizational setup.

• Accountability for a motivated and talented team of 5 head-level colleagues and 17 operational team members from product management, data and UX/UI design.

• Key achievements at Visual Meta GmbH:

• Defined and delivered a 3–5 year horizon product strategy including a product vision & mission.

• Increased focus within OKR process by moving from 10 company-level objectives to 2 and from several hundred team-level key results to a few dozen.

• Created a career path framework for the product team defining roles and responsibilities from junior to head level positions.

• Optimization of the transmission media of the data links in the Ruhr area
• Configuration/expansion of switches and routers for an autonomous system AS
• Improve the network protocols used Layer 2/3 (OSI model), RSTP, broadcast, etc.
• Laying cables, crimping, antennas, routers, switches
• Maintenance, expansion, selection and prioritization of troubleshooting measures for network monitoring (PRTG, The Dude)
• Organization and new connection of another BGP peering, data center, NGN fiber optic
• VPN IPSec site connections for 6 sites with PFSense, Fritzbox
• Configuration of WLAN devices (Mikrotik, UBNT

Label: TCP/IP, VLAN, BGP, OSPF, MPLS, VPLS, routing protocols, WLAN, EoIP, PPPoE, routing, SNMP, DHCP, DNS, NAT, native IP, VLAN, Ethernet, VoIP., switches and routers from: Nortel, Cisco, MikroTik, UBNT., network management systems: The Dude, PRTG, UISP

• Designed and implemented Azure Kubernetes Clusters, and managed DNS and Firewall solutions, enhancing network security and reliability.
• Led projects using Agile Scrum methodologies to streamline development cycles and improve project efficiency.
• Fostered and maintained relationships with suppliers to ensure timely project deliverables and resource availability.
• Managed continuous integration and delivery (CI/CD) pipelines using Jenkins, Sonar, GitHub, Bitbucket, and Terraform within the BMW Azure Cloud environment.
• Utilized Fortify SSC and Contrast AST for robust application security testing.
• Directed DevOps engineering initiatives on the SAP Business Technology Platform (BTP), focusing on streamlining development and deployment processes.
• Service Now governance, risk und compliance (GRC&IRM).

• Support of firewalls (Securepoint)
• Operation and maintenance of the client-server infrastructure (Windows)
• Operation and patching of IoT devices in the hazard management system (cameras, Web IOS, IP serial converters)
• Support with the integration of security technology into existing IT infrastructures
• Planning and execution of network segmentation and separation
• Transfer and implementation of solutions to other plants
• Tools used: Wireshark, Network Service Manager, PRTG, Cisco Catalyst, Nexus, HP Service Manager, FNT/Command Manager Console, ServiceNow, Confluence, Active Directory, Wingard, Securepoint FW

• Configuration and expansion of monitoring
• Setup of a monitoring test instance and inclusion of Windows and Linux servers
• Creation of documentation for the checkmk environment
• Handover to operations
• Administration, installation, documentation
• IT environment: Windows Server 2019, Ubuntu Server, Checkmk

• Linux server migrations: planning and execution of the migration with SLES Linux deployment of VMs in VMware 8.0
• Guiding colleagues on configuring Linux VMs with vSphere Auto Deploy
• Application operations: ensuring smooth operation of applications on migrated servers
• Operations manuals: revising existing manuals, updating and creating new ones as needed
• Reviewing service offers: adjusting and optimizing service offerings of external providers
• Logistics software, Red Hat Linux, Ansible, Confluence / Jira

• Provided expert level consulting for lifecycle, upgrades and refresh activities
• Used Remedy for effort recording and billing to customers
• Used ServiceNow for service management and workflow
• Used Jira for project management with agile/Scrum methods
• Used Confluence for documentation
• Worked with customer-specific software tools
• Worked with customer-provided and secured hardware suitable for IT security operations infrastructure setup for customers
• Built firewall rule sets and handed over to service owner and delivery teams
• Environment: Cisco ASA, Cisco Firepower, CSM, Cisco AnyConnect, Cisco ISE, Check Point VSX and gateways

• Lead PR strategy for EMEA, enhancing brand presence and media engagement
• Develop and execute comprehensive PR campaigns, increasing visibility across key markets
• Coordinate with cross-functional teams to align PR activities with business objectives
• Increased media coverage in EMEA by 35% through targeted PR campaigns
• Achieved a 50% increase in brand mentions across key markets
• Coordinated cross-functional teams to deliver a 40% improvement in PR activity in alignment with business objectives.

Further development of a software solution for managing test requests and test notifications according to §106d SGB V for the Hamburg Association of Statutory Health Insurance Physicians.

• Developed numerous features, performance optimizations, refactoring, error analysis
• Refactored the dev container setup
• Optimized the GitLab CI build pipeline
• Contributed optimizations to the team workflow

• Integration of a FortiManager into the existing FortiGate firewall infrastructure to centralize and optimize firewall management.

• Analysis and optimization of the VMware environment for operation in a critical infrastructure environment
• Planning and execution of updates for the VMware and hardware environment in a critical infrastructure environment
• Deployment of Skyline Health Diagnostics
• Review of existing documentation
• Training and onboarding of new internal staff
• Support for migration and upgrade projects
• Preparation for moving scripts in the virtualization environment to GitLab
• Ticket handling with ServiceNow

• Conceptual consulting for securing business processes
• Consulting on planning and implementation of IT and IT security projects
• Security and policy checks, process optimizations, emergency planning
• Project management and interim management in IT infrastructure and information security

Overview of relevant projects:

• 2025: Consulting on a DLP concept for Digid GmbH.
• 2025: Consulting a client after a cybersecurity attack that compromised the IT infrastructure and where the attacker obtained M365 tenant admin rights. Investigated the IT infrastructure and restored it. Developed recommendations to improve IT security.
• 2025: Continued the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
• 2024: Created a DNS concept including advice on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones, and automation. Created a DHCP concept including advice on DHCP design, a central DHCP management system and automation. Advised on operating the mentioned products, the operational processes, and updated IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
• 2024: As-is analysis and assessment of the network and security infrastructure established by providers in terms of overall architecture including design and components. Designed solution proposals to improve current operations for performance and security maximization as well as complexity reduction. Presented the results to C-level, their causes and possible solutions including required decision templates. Developed a SASE concept based on a zero-trust architecture for Norddeutsche Landesbank.
• 2024: Continued the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
• 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proofs of concept for DDoS protection and digital experience monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on zero trust, redesigning a Cisco ISE implementation, and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
• 2023: Continued the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
• 2022: Created and reviewed whitepapers for infrastructure and security architectures, and planned new network infrastructures for the German Aerospace Center.
• 2022: Developed a concept for the technical and procedural modernization of a disaster recovery plan for United Nations Volunteers.
• 2022: Developed a concept for migrating measurement data to a cloud environment, introduced network access control, and conducted an awareness training for Digid GmbH.
• 2022: Developed a network segmentation concept for DZ Hyp AG.
• 2022: Developed a network segmentation concept for the Federal Employment Agency.
• 2021: Developed a new load balancer architecture concept for Bundeswehr Fuhrparkservices GmbH.
• 2021: Conducted a vulnerability scan and penetration test of a web frontend including analysis and recommendations for remediation considering risk and likelihood for the client ifi GmbH.
• 2021: Consulting, design, and subproject management for implementing a network access control solution (certificate authentication and MAC address bypass) and macro segmentation (area and zone concept based on dynamic device assignment) in office and production IT for Vaillant Group GmbH.
• 2021: Upgraded and optimized LAN and WLAN infrastructure for United Nations Volunteers.
• 2021: Developed a target concept for modernizing the IT security infrastructure including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet connections, admin and management networks, and the wireless LAN, including overseeing implementation for the Federal Institute for Geosciences and Natural Resources.
• 2021: Created a micro-segmentation concept based on Cisco DNA, SGT, and zero trust for Union Investment IT-Services GmbH.
• 2021: Reviewed and updated ISMS level 3 policies and created procedure instructions for Software AG.
• 2021: Project lead for the global tech refresh project Meraki WLAN 2.0, coordinated the outsourcing of LAN/WLAN infrastructure to a managed service provider, and created a WLAN concept for automated guided vehicles for Heraeus Infosystems GmbH.
• 2021: Project management and technical support for the 'Transition of SIEM/SOC Services' project migrating a client to a shared environment, and took on the interim role of Head of Security Operations at Datagroup SE.
• 2021: Conducted a workshop for the future implementation of mobile device management for Allgeier Experts Go GmbH.
• 2021: Subproject management for implementing a firewall rule management tool and recertifying NAC endpoints based on 802.1x and MAB for Union Investment IT-Services GmbH.
• 2020: Developed a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
• Recorded and analyzed the current network architecture including project initiation.
• Designed a micro-segmentation concept in the data center and access network.
• 2020: Infrastructure and security architecture audit for Stuttgarter Versicherung AG.
• Analyzed the IT infrastructure and security architecture regarding network and security component configurations. Also reviewed contracts, process documents, and manuals for completeness. Developed recommendations to improve the stability and operation of the infrastructure. Created a network segmentation concept and led the project to implement the measures from the audit.
• 2020: Consulting on setting up an ISMS-light for Josera foodforplanet GmbH & Co. KG.
• 2020: Security architecture consulting for Datagroup SE.
• Developed a future IT infrastructure and IT security architecture.
• Documented the current IT architecture of all 23 entities.
• Made recommendations to optimize the IT infrastructure and drafted a comparison of a traditional perimeter security concept versus a zero trust model.
• Created a security zone concept.
• Designed an IT infrastructure architecture in coordination with all entities.
• 2018 - 2019: Stream lead in the cybersecurity program at Deutsche Lufthansa AG.
• Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
• Project area: Network segmentation and access control.
• Project area: Security architecture.
• Project area: Privileged, identity & access management.
• Project area: Simplify user authentication (MFA).
• Project area: Mobile & endpoint security.
• Project area: OT security.
• Project area: E-enabled aircraft.
• 2018: Security architecture consulting for Deutsche Lufthansa AG.
• Project management for the development, evaluation, and management of the company-wide information security architecture.
• Developed a security strategy and a roadmap to align the security architecture with the zero trust model.
• Evaluated market security solutions, services, and tools.
• Defined requirements for RFPs and assessed proposals.
• Developed, maintained, and monitored security architecture artifacts.
• Conducted security assessments of existing and new IT systems and security services.
• 2018: ISMS consulting for GLS IT Services GmbH.
• Advised on implementing and initially operating an ISMS based on ISO27001.
• Audited the IT environments of GLS country subsidiaries.
• Analyzed and assessed IT security risks and derived necessary measures.
• Developed solution proposals in coordination with relevant stakeholders.
• Managed the project and handed over the ISMS to operations.
• 2016 - 2018: Security pre-sales consultant for Cisco Systems GmbH.
• Provided nationwide strategic and conceptual consulting to major enterprise and financial and insurance clients on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch, and ISE.
• 2017 - 2018: Designed and implemented an ISMS for Verivox GmbH.
• Conducted various BIAs and gap analyses.
• Developed security policies based on ISO 2700x.
• Served as interim information security officer.
• 2017: Developed an emergency concept for VPV Lebensversicherungs-AG.
• Reviewed and updated the IT emergency manual.
• 2016: Consulting and project management for designing cloud & hosting services for Vodafone Group Services GmbH.
• Analyzed and optimized the sell-build-run process.
• Created detailed level designs for cloud products.