Quality of Service Experts in Germany

As part of this project, the existing active network infrastructure was modernized and aligned for the future. The goal was to introduce a high-performance, secure, and scalable network and WLAN infrastructure, including a Network Access Control (NAC) solution to improve network security and central access control.

At the start of the project, a comprehensive requirements analysis was carried out, taking into account the technical, operational, and security-related needs of the clinic sites. Based on this, a technical tender was prepared for new switches, WLAN access points, and the NAC solution.

By successfully delivering the project, a modern, standardized, and secure network infrastructure was established that meets the growing demands for availability, mobility, and IT security in clinical operations.

Tasks:

• Support of the tender process, including technical evaluation of the offers and bidder assessment
• Lead and coordinate the entire project delivery
• Align the project process with internal stakeholders, business units, and the hospital IT team
• Manage external service providers during implementation and installation of the systems
• Monitor implementation, including quality control, project acceptance, and issue management
• Coordinate communication between hospital IT and external service providers during the NAC implementation
• Carry out escalation management for technical and organizational challenges
• Ongoing budget tracking as well as monitoring of project effort and additional costs
• Prepare decision papers on project changes, additional services, and risks for management

Project: Rollout of new infrastructure components

• Defined and managed the implementation of an overarching management framework with clear roles and responsibilities as part of the hardware rollout.
• Designed and established governance and control mechanisms, including the development of compliance requirements and processes for continuous quality assurance, supported by ServiceNow.
• Coordinated technical activities between service, infrastructure and specialist teams to ensure the smooth delivery and commissioning of printers and notebooks.
• Created a detailed rollout plan with specific timelines, milestones and responsibilities.
• Managed the procurement, delivery, testing, configuration, installation and on-site commissioning of hardware, including integration into existing IT systems.
• Established and continuously optimized processes for the procurement, distribution and use of printers and notebooks.
• Developed and implemented standardized provisioning processes, analyzed existing procedures, harmonized the processes involved and ensured compliance with security, compliance and quality requirements.
• Introduced agile methods to continuously improve the hardware provisioning process.
• Promoted collaboration through clear responsibilities and communication structures between internal IT teams and external service providers.
• Documented and monitored rollout progress, created rollout reports and tracked hardware implementation in real time.
• Supported change management and organized and delivered training sessions for end users.
• Created user manuals and online resources.
• Analyzed the existing hardware landscape, created hardware inventories, assessed current equipment and checked hardware compatibility.
• Developed detailed infrastructure mappings.
• Planned, organized and conducted structured interviews with key stakeholders and created requirements documents.

• Requirements analysis and replacement of local SharePoint as CMDB with open source NetBox to prepare for deploying Cisco ACI (SD-WAN) with Microsoft Azure
• Coordination with systems like Checkmk and Grasp
• Introduction and coordination of cmdbsyncer as CMDB data hub; further development of the syncer with Kuhn & Ruess GmbH
• Implementation of SNMPv3 on AIX LPAR/VIO, Linux, Windows, SAN/storage, network components (Cisco switches, F5 load balancers, Palo Alto and CheckPoint firewalls, iLO boards)
• Deployment and further development of the network scanner JDisc in cooperation with the vendor (Utimaco HSMs, Linux detection)
• Integration of NetBox, JDisc, and cmdbsyncer into the infrastructure using Docker containers
• End-user training: preparation, creation of materials, and delivery
• Creation of data flow and network diagrams
• Population and planning of IPv4/IPv6 with NetBox including VLAN import
• Dual-stack setup of servers and clients with IPv4 and IPv6
• Connection of REST interfaces for Checkmk, JDisc, vSphere, HMC, i-doit, NetBox Software: Confluence, Jira, MS Office 365, Teams, i-doit, NetBox, JDisc, cmdbsyncer, DB Visualizer, vSphere, HMC

• Designed and specified the technical network integration of a new business-critical application system (MUREX) in the capital markets area in a complex interface and outsourcing environment.

• Created component specifications, a catalog of measures and an implementation plan.

• Ensured proper integration of the developed results in line with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between the bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous improvements to ensure efficient resource use and acceptable response times for users.

• Provided network support in a financial services organization and prepared operational changes on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed the role of network architect for medium to large projects involving team resources.

• Operation, maintenance and administration of the global network & security system landscape
• Troubleshooting and support in 2nd & 3rd levels and provide technical advice to other dept.
• Configuration of complex LAN/WAN/SD-WAN and WLAN network infrastructures (N5K, N9K, ASR 8000, Wireless Controller WLC9800, AP C91xx and VMware Velo Cloud)
• Control of external service providers as part of service and escalation management
• Implementation and monitoring of system updates (software upgrades, minor/major changes)

• Responsible for the configuration, maintenance, monitoring, troubleshooting, and optimization of the IT infrastructure, including Extreme Networks, SD-WAN, and Fortinet security solutions, at all international company locations in Europe and North America
• Development of a comprehensive strategic roadmap to optimize the network architecture, including VLANS, NAC, QoS, firewall configurations, VPNs, DPI, NGFW, threat intelligence, and SSL/TLS inspection
• Implementation of the OneIT strategy through the introduction of new technologies such as Cisco DNA Center, ExtremeCloud IQ, FortiOS, FortiManager, and FortiAnalyzer, which increased employee skills and the efficiency of the IT systems
• Integration of IT and OT systems to optimize the network and security architecture and improve operational efficiency

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

• Plan & Prepare (Site Design & Readiness): Inventory & Design: Dell PowerEdge R-Series, Aruba switches (L2/L3), notebooks/peripherals; serials/asset tags, IPv4/IPv6 addressing, VLAN-/DHCP-/DNS plan

• Runbooks/MOPs: site rollout runbook, backout strategy (<15–30 min), risk register, communication matrix; approvals via CAB/change

• Images/Packages: Golden Image (Win10/11), driver packs, BIOS/UEFI baseline; O365/Teams/OneDrive KFM; BitLocker policies; MECM/SCCM, Intune/Autopilot, MDT/WinPE

• Logistics: shipping/customs clearance, RMA/DOA, on-site spares; tools (barcode scanner, label printer), "Go-Bag" (cables, SFPs, console cables)

• Deliver (on-site implementation): End devices: swap & migration (USMT/OneDrive KFM), peripherals (ATB/BT printers, scanners, boarding gate hardware); domain join, compliance checks, O365 activation, printers/queues, network drives

• Acceptance: functional tests for DCS/CUTE/CUPPS/CUSS stations, ticketing/check-in workflows, boarding gates

• Server (R-Series): rack & stack, cabling (PDU redundancy, fiber/copper), labeling/naming; firmware/RAID (PERC), Lifecycle Controller, iDRAC network; Windows Server 2022/2025 + CIS/BSI hardening; agents (backup/AV/EDR/monitoring), time service/NTP auth, Syslog/SNMPv3

• Network (Aruba): VLANs, LACP trunks, MSTP root; PortFast + BPDU Guard at the edge; QoS (EF/AF); dual stack (v4/v6), DHCP relay. NAC/802.1X with ClearPass/Radius/TACACS+, roles + MAB fallback; guest isolation, ACLs (Guest→Mgmt deny). Telemetry: sFlow, SNMPv3, Syslog→SIEM; LLDP→inventory/CMDB

• Airport specifics: CUTE/CUPPS/CUSS terminals; DCS/Amadeus/SITA connectivity; FIDS (read-only); bag tag/boarding pass printing; changes in off-peak/night windows

• Stabilize (hypercare): first-day support, KPI tracking (login times, ticket volume, error classes), QoS fine-tuning

• Troubleshooting: Wireshark/iperf, event logs, switch counters, sFlow flows; fast incident handling as SPOC

• Knowledge transfer: short training sessions for station teams, mini-runbooks (fault/recovery)

• Close (documentation & handover): docs & CMDB: final configs (switch/server), topology/patch plans, IP tables, serial/asset lists, before/after photos

• Acceptance & sign-off: UAT protocols, functional evidence (use cases), return/reuse of old hardware

• Lessons learned: risks, standard packages, driver freeze, "known issues"

• Interfaces/communication: station IT, airport IT, SOC/NOC, ground ops/ramp/check-in, provider (SITA/Amadeus). ITSM: ServiceNow (Inc/Req/Change/KB), handover to BAU

• Optimizing dynamically generated databases for logging
• Tools: MariaDB, C#, Visual Studio, VMs, Docker, Windows, Linux

• Consultation on setting up a web server with Apache2 and PHP FPM and an email server with Postfix and Dovecot for Learn4good Ltd.
• Programmed website under-construction.bermudafunk.org in collaboration with a designer and client for bermuda.funk Freies Radio Rhein-Neckar e.V.
• Consultation and network setup on-site including switches, routers, Wi-Fi, network monitoring, firewalls, and installation of sFirm banking software for The Swiss Quality Consulting GmbH
• Consultation on website management and development, email migration from Outlook to cPanel, image optimization, and setting up Square payments for The JABA Group Ltd.
• MS365 consultation, email setup, and document synchronization for PK reno GmbH
• Development and integration of WooCommerce plugins, B2B shop setup, and custom shipping label export for Nurso GmbH
• Minor changes implementation for existing Kirby system for Julia Rautenhaus
• Analysis and fixing of WordPress website after broken updates for Alina Frey
• Linux server hardening, updates, and throughput optimization for 3proxy servers for Lietparkas UAB
• Malware removal from hacked WordPress website for Timo Horn
• Cold email outreach system setup with Postfix and Dovecot and script development for Aman Ketebo
• Customized Docker container creation based on AlmaLinux with ImageMagick 7 and consultation on Docker installation for Henry Hook
• Plesk hosting environment management, code fixes, external supplier integration, and content support for First Class Corporation
• Shopify theme customization, feature development, and payment integration consultation for Youro GmbH
• Intel camera support on Ubuntu after upgrade for Making stories with a lesson
• NginX configuration support on Windows Servers for a NodeJS application for ARMBRUSTER empiric it
• Competitor email verification mechanism analysis for Casey Monaghan
• Plugin development and API connector to Inswitch for freelance website payments for Mediaquotes
• Private XMPP server setup on Raspberry Pi for Antonio Codespoti
• WordPress website recovery after broken plugin update for A & R Tennis
• Microsoft account and Office/Outlook migration support for Prof. Dr. Hanns-Ferdinand Müller
• Customization and performance optimization of client websites for sk.design
• VPN configuration and hacked server cleanup for Xisio Informationssysteme GmbH
• PeerTube server setup and maintenance for Lupin Vondosky
• Lightweight WordPress booking solution programming tailored to client needs for AP Online Marketing
• Code refactoring, bug fixing, and business/technical consultation for RentAfrika
• SellYourSaas setup and deployment infrastructure configuration for I-Motion SARL
• Server, email, GitLab, project management, password management software, and VPNs setup and maintenance for Markus Sattler
• Custom development for over 10 WordPress projects for TOGEMAXX media & webdesign
• WooCommerce shop setup and FTP supplier product import development for SERVOMED GmbH
• Open-source contributions to Whonix components, iptables to nftables migration, shutdown inhibition investigation, and IPv6 support addition for ENCRYPTED SUPPORT LP
• Custom feature development, performance optimization, update management, email delivery support, plugin bug fixes, and translations for KU Europe GmbH
• Custom plugin/theme development, server infrastructure management, support for 100+ WordPress websites, API connector development, deployment script setup, VPN configuration, DNS, email, and web hosting support for giftGRÜN GmbH
• Server setup, web and email hosting migration, and website maintenance and development for Eisbaden.de
• Custom WordPress and Shopify development for EcomPlus GmbH
• Hacked website recovery and hosting migration for Be Brave gUG
• Finalization of development tasks left incomplete by another developer for Medicare Consulting GmbH
• Recovery of unbootable hacked server for SK-Software, Entwicklung & Beratung

Hobby projects:

• Development and running of a web chat application
• Development and running of an email service
• Development and running of a darknet link list
• Development and running of a darknet web hosting platform
• Code contributions to open source projects such as LMMS, Audacity, and Ubuntu

• The FortiGate 7.4 Administrator exam badge recognizes expertise in FortiGate administration. The badge earner has demonstrated knowledge of FortiGate configuration, operation, and day-to-day administration.