RADIUS Experts in Germany

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Designed and specified the technical network integration of a new business-critical application system (MUREX) in the capital markets area in a complex interface and outsourcing environment.

• Created component specifications, a catalog of measures and an implementation plan.

• Ensured proper integration of the developed results in line with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between the bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous improvements to ensure efficient resource use and acceptable response times for users.

• Provided network support in a financial services organization and prepared operational changes on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed the role of network architect for medium to large projects involving team resources.

• Responsible project manager for complex international infrastructure projects
• Coordinator and decision-maker for IT architects in network infrastructure and software with over 100,000 users
• End-to-end project management
• Launch and implementation of initiatives
• Project management of international infrastructure projects with C-level reporting
• Leading and coordinating IT architects
• Technical project management for merger and cloud transformation
• Delivery of international software and hardware rollouts
• Implementation of IT security projects and compliance
• Work with key technologies (e.g. 5G/6G standard)
• Support of complex defense and aerospace projects (e.g. Ariane 6, Eurodrone)
• Building the healthcare and life sciences business unit
• Creating and leading internal employee trainings

• Provided coaching and support to Scrum teams to adopt and implement agile practices effectively
• Analyzed business requirements and identified IT solutions to support business goals
• Evaluated existing IT systems and processes to identify optimization opportunities
• Managed stakeholder relationships and coaching
• Facilitated Scrum ceremonies and ensured adherence to Scrum principles and practices
• Identified and implemented lean startup process optimizations to improve efficiency and effectiveness of development and business processes
• Developed and monitored daily business strategies to ensure development goals were met
• Developed and implemented OKR strategies to align team goals with company objectives
• Tools/Methodology: Jira, Confluence, Miro, PowerBI, team building & mentoring, conflict resolution, impediment resolution

• Plan & Prepare (Site Design & Readiness): Inventory & Design: Dell PowerEdge R-Series, Aruba switches (L2/L3), notebooks/peripherals; serials/asset tags, IPv4/IPv6 addressing, VLAN-/DHCP-/DNS plan

• Runbooks/MOPs: site rollout runbook, backout strategy (<15–30 min), risk register, communication matrix; approvals via CAB/change

• Images/Packages: Golden Image (Win10/11), driver packs, BIOS/UEFI baseline; O365/Teams/OneDrive KFM; BitLocker policies; MECM/SCCM, Intune/Autopilot, MDT/WinPE

• Logistics: shipping/customs clearance, RMA/DOA, on-site spares; tools (barcode scanner, label printer), "Go-Bag" (cables, SFPs, console cables)

• Deliver (on-site implementation): End devices: swap & migration (USMT/OneDrive KFM), peripherals (ATB/BT printers, scanners, boarding gate hardware); domain join, compliance checks, O365 activation, printers/queues, network drives

• Acceptance: functional tests for DCS/CUTE/CUPPS/CUSS stations, ticketing/check-in workflows, boarding gates

• Server (R-Series): rack & stack, cabling (PDU redundancy, fiber/copper), labeling/naming; firmware/RAID (PERC), Lifecycle Controller, iDRAC network; Windows Server 2022/2025 + CIS/BSI hardening; agents (backup/AV/EDR/monitoring), time service/NTP auth, Syslog/SNMPv3

• Network (Aruba): VLANs, LACP trunks, MSTP root; PortFast + BPDU Guard at the edge; QoS (EF/AF); dual stack (v4/v6), DHCP relay. NAC/802.1X with ClearPass/Radius/TACACS+, roles + MAB fallback; guest isolation, ACLs (Guest→Mgmt deny). Telemetry: sFlow, SNMPv3, Syslog→SIEM; LLDP→inventory/CMDB

• Airport specifics: CUTE/CUPPS/CUSS terminals; DCS/Amadeus/SITA connectivity; FIDS (read-only); bag tag/boarding pass printing; changes in off-peak/night windows

• Stabilize (hypercare): first-day support, KPI tracking (login times, ticket volume, error classes), QoS fine-tuning

• Troubleshooting: Wireshark/iperf, event logs, switch counters, sFlow flows; fast incident handling as SPOC

• Knowledge transfer: short training sessions for station teams, mini-runbooks (fault/recovery)

• Close (documentation & handover): docs & CMDB: final configs (switch/server), topology/patch plans, IP tables, serial/asset lists, before/after photos

• Acceptance & sign-off: UAT protocols, functional evidence (use cases), return/reuse of old hardware

• Lessons learned: risks, standard packages, driver freeze, "known issues"

• Interfaces/communication: station IT, airport IT, SOC/NOC, ground ops/ramp/check-in, provider (SITA/Amadeus). ITSM: ServiceNow (Inc/Req/Change/KB), handover to BAU

• Cisco SDA LAN network
• Transition and transformation

• Design, installation, configuration, administration, optimization, and further development of IT infrastructures in Citrix environments
• Upgrading older Citrix systems to the latest versions
• Installation, configuration, and delivery of applications in Citrix environments
• Support in 2nd- and 3rd-level support
• Performing performance analyses and optimizations in complex Citrix environments
• Analysis and fixing of issues in complex Citrix systems
• Creating, updating, and maintaining technical documentation
• Troubleshooting slow logons in Citrix XenApp / CVAD environments
• Analysis and fixing of printer problems in Citrix environments
• Creating, maintaining, and optimizing Citrix VDI policies
• Citrix Virtual Apps and Desktops (CVAD) 2402 LTSR, Citrix Virtual Desktop Infrastructure (VDI), Citrix Hypervisor / Citrix XenServer, Citrix Director / Citrix StoreFront, Citrix Machine Creation Services (MCS) / Citrix Provisioning Services (PVS), Citrix App Layering, Citrix Workspace Environment Management (WEM), Citrix Profile Management
• NetScaler SDX 14 / NetScaler Gateway 14 / NetScaler Console 14, NetScaler Load Balancing / Global Server Load Balancing (GSLB), NetScaler Applications Analytics (Web Insights, Security Insights, SSL Insights, TCP Insights, Gateway Insights, HDX Insights, ADC Infrastructure Analytics)
• Design, installation, configuration, management, optimization, and further development of IT infrastructures in Microsoft environments
• Upgrading older Microsoft systems to the latest versions
• Installation, configuration, and delivery of applications in Microsoft environments
• Creating, managing, and optimizing Microsoft Group Policy policies
• Design, implementation, and administration of Microsoft Azure environments
• Windows Server 2022 / Windows 11, Windows Group Policy / Active Directory, Remote Desktop Services (RDS), SQL Server 2022 / SCCM Server, RADIUS Server, FSLogix, PowerShell
• Implementation of standard changes according to ITIL guidelines
• VMWare / Splunk

• Projects for federal networks (NdB).
• CR management, EoL change requests, design and documentation according to ITSCM.
• Data center planning.
• Project management and engineering subproject management.
• Software development for virtual server environments according to BSI.

• Design and implementation of a Laravel backend API for provider-based geo search, feature details, boundary geometries and neighborhood detection.
• The API serves as a server-side proxy, cache and enrichment layer, protecting credentials for external geo services and persisting features, localizations, geometries, hierarchies and neighborhood relationships in MariaDB.
• Key areas included normalization of autocomplete and feature data, caching strategies for expensive boundary/polygon requests, spatial processing of GeoJSON and MultiPolygon geometries, as well as neighborhood detection using hierarchies, bounding box filters and topology checks.
• Additionally, separate production and diagnostic endpoints were created, along with status and error catalogs, discovery logging, a Docker development stack, API documentation, and unit and feature tests.
• Technologies: PHP 8.3, Laravel, REST API, geo data API, GeoJSON, MariaDB Spatial, Eloquent, Laravel Queues, PHPUnit, Mockery, Docker, Docker Compose, API design, geocoding, boundary data, spatial queries.

• Business analysis
• Requirements management
• Project management
• Stakeholder management
• Team leadership

• Spearheaded the development and deployment of a Generative AI solution tailored for the automotive industry focusing on improving customer experience through AI-driven innovations.

• Conducted in-depth market research to understand unique challenges and opportunities within the automotive sector by analyzing industry trends, customer pain points, and competitive offerings to inform the product strategy.

• Formulated a strategic vision for the Generative AI solution targeting personalized customer experiences, aligned product vision with the company’s long-term goals and automotive market demands.

• Enhanced customer satisfaction by introducing personalized AI-driven features, achieving a 15% increase in customer engagement and loyalty.

• Attended and represented Audi AG on a group-wide level in workshops for AI strategy for customer experience.

• Leveraged knowledge of recurrent neural networks and transformer architecture.

• Utilized GPT-3 generative AI frameworks.

• Employed TensorFlow and PyTorch for machine learning.

• Used Tableau from Salesforce for data analysis and visualization.

• Served as solution manager for the Business Architecture team.

• Collaborated with business stakeholders within Audi OEM to gather requirements for CRM strategy including marketing department, CRM heads across countries, VW group brands and CARIAD SE.

• Represented Audi AG in CRM strategy workshops held in different countries.

• Discussed CRM strategy with head of CRM and Data based on workshop outcomes.

• Conducted business analysis on gathered market data to improve customer experience.

• Planned and launched marketing campaigns such as welcome mailing, license renewal reminders, Audi Progress Circle and Black Friday campaigns.

• Managed project budget.

• Acted as solution manager for the ONE.CRM team at CARIAD SE on loan from Audi AG.

• Collaborated with business owners of VW group brands to develop a central solution.

• Represented CARIAD SE in CRM strategy workshops in Spain, France and Italy.

• Discussed CRM strategy with head of CRM at CARIAD SE based on workshop outcomes.

• Conducted business analysis on market and brand data to improve customer experience.

• Planned and delivered campaign capabilities from template to brands such as welcome mailing for Audi AG, SEAT and SKODA.

• Managed project budget together with head of CRM.

• Provided expert level consulting for lifecycle, upgrades and refresh activities
• Used Remedy for effort recording and billing to customers
• Used ServiceNow for service management and workflow
• Used Jira for project management with agile/Scrum methods
• Used Confluence for documentation
• Worked with customer-specific software tools
• Worked with customer-provided and secured hardware suitable for IT security operations infrastructure setup for customers
• Built firewall rule sets and handed over to service owner and delivery teams
• Environment: Cisco ASA, Cisco Firepower, CSM, Cisco AnyConnect, Cisco ISE, Check Point VSX and gateways

• Evaluating and assessing the current state
• Preparing and conducting security audits
• Vulnerability characterization and risk analysis
• Assessing, coordinating and transforming identified vulnerabilities into target states
• Coordinating stakeholder interests
• Developing and implementing IT security strategy for OT and IoT (continuous risk assessment and risk management, awareness, multi-layered security solutions, regular security audits, access restrictions)
• Organizational and technical documentation, presentations and workshops
• Skills: Qualys, Splunk, Nessus, QRadar, National Vulnerability Database (NVD / NIST), Open Worldwide Application Security Project (OWASP), OT, CERT/CC, BSI IT-Grundschutz catalogs, ISO 27001, MITRE ATT&CK, Center for Internet Security (CIS), GitHub, Active Directory, PowerShell, Symantec Endpoint Protection, Microsoft Azure and Office365 App Security, ITSM

• Created as-is network documentation for a Bechtle customer
• Analyzed existing configurations and adjusted them
• Advised on Fortinet and Check Point products
• Troubleshot complex routing, switching and application issues
• Tools: MS Azure, FortiManager, Cisco Nexus & Catalyst, Cisco WLAN Controller, Citrix Netscaler SD-WAN, MS Visio, Checkpoint VSX, Wireshark