Public Key Infrastructure Experts in Munich
matched in minutes by AIHire experts who design certificate authorities, automate X.509 certificate lifecycles and secure identity-based access across cloud and enterprise systems. FRATCH connects you with vetted, available freelancers through fast, precise matching.
Meet FRATCH Experts in Munich, who have recently used Public Key Infrastructure
Mohammed N.
Last position:
IT System Manager at Corporate Network Solution Provider
- Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
- Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
- Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
- Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
- Prepare security and compliance to support Microsoft 365 Copilot.
- Implement information protection and data loss prevention by using Microsoft Purview.
- Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
- Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
- Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
- Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.
Ales L.
Last position:
Senior DevOps Consultant (Freelance) at European Union Agency (via IBM)
- Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
- Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
- Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
- Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
- Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
- Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
- Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
- Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
- Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
- Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.
Mohamad D.
Last position:
DevOps Engineer & IT-Security-Architect at BMW Group
- Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
- Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
- Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
- Integrated SAP BTP/Kyma and ServiceNow GRC
André H.
Last position:
Linux IT Admin at ReiserST
- Development and maintenance of IT architectures with embedded Linux systems.
- Designing, implementing, and optimizing backend applications and script-based solutions.
- Analyzing and resolving issues, including troubleshooting and user support.
- Developing and implementing security concepts for cloud solutions.
- Administering networks (DHCP, DNS, NTP, VPN).
- Technologies: Linux, PowerShell, Bash, Python, Ansible, Kubernetes, GitLab CI.
- Methods: Kanban.
Tadeusz A.
Last position:
Lead Architect Enterprise Architecture & Security at CGI
Lead Architecture in an interdisciplinary architecture team covering enterprise, solution, NOOTS, cloud and security architecture as well as regulatory and European interoperability requirements.
Public / Government
Development and management of target architectures, principles, standards and technical guardrails; assessment of Security-by-Design, IAM, data protection and interface/integration architectures; architecture reviews, security assessments, risk analyses, and preparation of decision records, target visions, roadmaps and decision papers. Architectural knowledge and consideration of relevant AD-NOOTS requirements, particularly for IAM, authorization, secure integration and interoperability.
Technologies / Methods: Enterprise Architecture, Solution Architecture, Security Architecture, Cloud Architecture, NOOTS / EU-OOTS, IAM, Authorization, Security-by-Design, API/Integration Architecture, Interoperability, Risk Analysis, Architecture Governance
Security and integration requirements as well as technical decisions are structured in reliable architecture and decision artifacts.
Weronika S.
Last position:
Business & Integration Architecture Specialist at Accenture Technology Solution GmbH
Understanding of bank’s fundamentals throughout analysis and writing specifications
Deep analysis of security measurements to be transferred into new environment
Process design and optimization
Collecting requirements from different areas and processing them into agreement documentation, concepts and process description for internal and external partners
Analysis of data delivery sources and transformation of relevant functions into new environment
Analysis and prioritisation of value and benefits resulting from introducing smart data tools
Mapping and migrating data within Power BI upgrade
Change management support and evaluation
Marketing automation and technology enablement
Executing test and release support
Creating training documentation for the client’s employees to understand value and benefits by using new technologies when acquiring new or creating benefits to their existing customers
Creating a complete database of existing firewalls supporting the security of the client’s infrastructure
Migration and re-architecture of reporting systems from multiple data sources into the cloud environment
Tobias W.
Last position:
External Contractor at Government Agency
- Project support for VMware/Active Directory
- Operational support for administration, process execution
- Creation and review of documentation
- Active Directory, Powershell, VMware VSphere 7, Confluence, Jira
- Windows Server 2016/2019/2022/2025 GUI/Core
- Concept and rollout of Windows Update Services (approx. 500 client/server systems) and takeover of a central WSUS gateway company-wide
- Takeover and redesign KMS/RDS systems company-wide
Gilbert L.
Last position:
Cyber Security Expert at TüV Süd AG (via Sthree GmbH)
- Security analysis of alerts
- Further development of the security operations center
- Development of processes and workflows in the security environment
- Implementation of SOC solutions
- Forensic expertise
- Conducting hunts
- Vulnerability scans and proof of concepts
- Risk assessments and risk analyses
- Maintenance and further development of the Tenable.sc ScanCenter environment
Volker J.
Last position:
Interim CISO (Germany, Austria, US, APAC), Auditor at Vetter Pharma-Fertigung GmbH & Co. KG
- Planned and initiated BIA/BCM assessment to identify risk mitigation measures and process optimization, and provide risk transparency to the general management
- Evaluated KRITIS/NIS-2 status and implemented requirements
- Created comprehensive digital roadmap and ISO 27001/NIS-2/Data Privacy KRITIS roadmap
- Enhanced crisis management process and documentation
- Integrated information security clauses into customer and supplier contracts to ensure compliance with internal and regulatory requirements
- Ensured organizational readiness for audits by the Landesbehörde für Aufsicht (LBA) and supported audit processes
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Performed compliance checks against EU CER requirements and reporting
- Created management status and risk reports to ensure transparent communication of risks and security posture
- Managed registration with the German Federal Office for Information Security (BSI) and provided ongoing status updates
- Conducted risk assessment of supply chain, enhanced evaluation and reporting processes
- Improved IT/OT network segmentation to enhance security and reduce potential audit risks
- Strengthened cyber resilience by proactive measures and enhanced security frameworks and KPI reporting
- Onboarded SIEM/SOC/EDR to improve cybersecurity monitoring and response
- Planned and conducted awareness trainings for employees, administrators, and management
- Enhanced incident reporting processes to ensure timely and accurate reporting of cybersecurity events
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Scoped and implemented ISO 27001:2022 requirements as part of the Information Security Management System
- Served as interim InfoSec team lead
- Introduced information security to global KAM and Sales organization
- Improved admission and access management including privileged access
- Conducted internal audits in collaboration with internal audit department
Konstantinos M.
Last position:
IT System Engineer at Client belongs to critical infrastructure
- IT infrastructure services
- IT services, networks, Exchange, Office 365 & 2016
- IT documentation
- Collaboration with external partner & managed provider
- Stakeholder management
Sebastian B.
Last position:
AZ-104 Microsoft Azure Administrator at Continuing Education
Dmytro G.
Last position:
Retraining (IT specialist for system integration) at Comcave
Discover over 15,000 top freelancers
Statistics of experts using Public Key Infrastructure
Aggregated from the professional profiles of matched freelancers.
Experience
20 years (Germany: 24 years)
Position duration
1.4 years (Germany: 1.8 years)
Positions per freelancer
14 (Germany: 18)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Government and Administration, Automotive
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
88% (Germany: 76%)
Master's degree or higher
38% (Germany: 51%)
Certifications per freelancer
5 (Germany: 6)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 99%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Munich using Public Key Infrastructure
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Public Key Infrastructure experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Government and Administration (67%)
- Automotive (50%)
- Healthcare (50%)
- Manufacturing (50%)
- Professional Services (50%)
- Media and Entertainment (42%)
- Banking and Finance (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Trust foundations
Public Key Infrastructure, commonly called PKI, is the framework for proving identity and protecting communication with cryptographic keys and digital certificates. It connects certificate authorities, registration processes, certificate repositories and validation services. Companies use PKI to establish trust between people, devices, applications and services without relying on shared passwords.
Where PKI runs
PKI supports secure systems across sectors that handle sensitive identities, transactions or connected equipment. Typical deliverables include:
- Certificate authorities for internal users, services and devices
- X.509 certificates for TLS, mutual TLS, email signing and encryption
- Smart-card, hardware token and device identity programs
- Certificate revocation, renewal and discovery workflows
- Trust models for hybrid cloud and multi-site environments
Ecosystem and tooling
A PKI specialist may work with Microsoft Active Directory Certificate Services, OpenSSL, HashiCorp Vault, cloud certificate managers and hardware security modules. The surrounding stack includes LDAP, Active Directory, DNS, TLS, mutual TLS, SCEP, EST, ACME and certificate transparency practices. Strong knowledge of cryptographic algorithms, key protection and identity governance is essential.
When companies need help
Freelance expertise is valuable when a company replaces a legacy certificate authority, expands device fleets or moves workloads into a hybrid environment. It is also useful after an expired certificate causes an outage, when certificate ownership is unclear, or when teams need automated renewal instead of manual tracking. In Munich, professionals often support automotive, manufacturing, finance, healthcare and software organizations while coordinating with local teams or remote security groups.
Delivery and integration
A specialist maps trust boundaries, defines certificate profiles and chooses secure issuance paths before implementing the design. Deliverables can include a certificate policy, operational procedures, automated enrollment, monitoring, migration plans and incident playbooks. Integrations may span Kubernetes, service meshes, CI/CD pipelines, enterprise directories, VPNs, APIs and connected production systems.
Signs of quality
Strong professionals treat PKI as an operational security service, not just a certificate installation. They document key custody, approval paths, backup boundaries, revocation behavior and recovery procedures. They test renewal and outage scenarios, explain trade-offs between internal and public certificate authorities, and leave teams with clear ownership, monitoring and auditable processes. They can also collaborate in English or German when projects in Munich require close on-site coordination.
Frequently asked questions
Key details about Public Key Infrastructure, drawn from the questions we get asked most.
Public Key Infrastructure establishes trust for identities, devices and services through certificates and cryptographic keys. Companies use PKI for TLS, mutual TLS, secure email, smart cards, VPN access, device onboarding and signed software or documents.
PKI provides identity-bound certificates and managed key pairs instead of one secret shared across many users or systems. It can support stronger authentication, automated trust decisions and revocation, but it also requires careful certificate lifecycle operations and protected key storage.
A strong PKI professional usually understands TLS, X.509, DNS, LDAP, Active Directory, cloud identity and network security. Experience with OpenSSL, Microsoft AD CS, HashiCorp Vault, hardware security modules, automation and Kubernetes is valuable when certificates span diverse environments.
Companies often bring in a PKI expert during a certificate authority migration, cloud transition, device identity rollout or security program. External expertise is also useful when certificate renewal is manual, ownership is unclear or an outage has exposed gaps in revocation and recovery processes.
The required depth depends on the trust model, number of integrations and sensitivity of the keys. A focused certificate automation task may need a narrower specialist, while a new enterprise Public Key Infrastructure requires proven skills in policy, architecture, operations, incident response and stakeholder coordination.
Much of a PKI engagement can be delivered remotely through documented designs, controlled access and scheduled workshops. On-site work in Munich can still help with hardware security modules, restricted environments, datacenter procedures or close collaboration with security and infrastructure teams.
A PKI engagement should leave more than a working certificate authority. Look for certificate policies, trust diagrams, enrollment and renewal automation, key protection decisions, monitoring, revocation procedures, recovery tests and clear operational ownership.
Ask how the professional handles expired certificates, compromised keys, unavailable certificate authorities and failed renewals. High-quality PKI work includes tested recovery paths, least-privilege administration, auditable changes, reliable inventory and explanations that business and technical stakeholders can both use.
The average hourly rate of freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects is 104 €, which corresponds to a daily rate of about 835 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects, 88% hold at least a Bachelor's degree and 38% hold at least a Master's degree.
On average, freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 1.4 years.
The most common languages among freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects are German (100%), English (100%), and French (17%).
The most common industries among freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects are Information Technology (100%), Government and Administration (67%), and Automotive (50%).
The most common business areas among freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects are Information Technology (100%), Project Management (92%), and Operations (67%).
Main locations of FRATCH Experts, who have recently used Public Key Infrastructure
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Cologne 
Frankfurt 
Stuttgart Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
