Virtualization Experts in Frankfurt

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Requirements analysis, design, and development of a product for freight logistics (dispatching, planning, timetable and network optimization)
• Documentation of technical focus areas and support with acceptance and integration testing
• DBMS-agnostic modeling and mathematical algorithms for optimization with solver integration (Gurobi, Cplex, Coin-OR)
• Implementation of service layer, automated testing, and integration with third-party systems

• Recognition of national notified bodies
• Preparation of cybersecurity competency reports
• EU Radio Equipment Directive

• Led assessment and preparation for finance and business management transformation including roll-out of SAP S/4 HANA Cloud, Public Edition.
• Enhanced financial and project reporting by streamlining tools and introducing a management dashboard.
• Introduced opportunity management reporting as part of business operations activities.
• Prepared annual financial statements (HGB).
• Directed annual budget development and aligned it with the ExCo.

• Microsoft Azure: design, sizing, and capacity analysis including PoC
• Microsoft Azure: final implementation for migration from on-prem RAC to single instance Data Guard
• Performance tuning and troubleshooting for crew management systems (pilots and briefings)
• Design and implementation of a disaster recovery-aware system based on RAC Extended Cluster and Data Guard
• OEM: Oracle Cloud Control maintenance, installation and upgrades (12.1.0.5 > 13.3 > 13.5)
• OEM: creating an agent golden image with new RU and security fixes for a full-scale environment
• OEM agent upgrade
• OEM: developing custom metric extensions and reports
• OEM: full monitoring setup with template collection and monitoring templates and incident rule configuration
• Upgrades: GI from 11.2.0.4 to 12.1.0.2, to 18.4, to 19.6+
• Upgrades: databases from 11.2.0.2 to 12.1.0.2, to 19.18+
• Redesign and license optimization based on Oracle SE on ODA and DBVisit
• Design of a virtualized platform based on OLVM and license optimization using hard partitioning
• Migration of databases from bare metal to OLVM

• IAUP (Interregional Academy of Personnel Management) commissioned the development of a distance learning system for its secondary school subdivision.
• Development of the website [link]
• Development of a billing system and integration with various payment systems
• Development of a distance learning system based on the open source Moodle solution
• Integration of the distance learning system into the user office on the [link] website
• Front-end: Vue.js v2, Nuxt.js, JavaScript, HTML, CSS, SCSS
• Back-end: LAMP (Linux, Apache, MySQL, PHP), PHP Framework Laravel, Redis, Swagger, MySQL 8.x, PayPal API
• DevOps: Docker, CI/CD, GIT

• Support and optimization of incident, change & problem processes based on ITIL for >10,000 users.
• Problem-solving for >1,000 complex cases/year across different service towers (File Services, Identity, Citrix, ANF).
• Work in the security cluster: vulnerability analysis and firewall change coordination.
• Governance & migration of file services to Azure NetApp Files (M365, Citrix, PowerShell), including data optimization.
• Creation and maintenance of business-critical process & operational services, enterprise documentation.
• Focus on stabilization, security (endpoint hardening), and optimization through AI solutions.

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

• Creation of test concepts
• Requirements management
• Release planning & support
• Leading DDS
• Reporting (test report, AFO test matrix)
• UAT/BAT coordination
• Onboarding new team members
• Team planning / capacity planning
• Documentation support
• Methods/tools/technologies: black box, white box, exploratory testing, end-to-end testing, regression testing, load & performance testing, acceptance and interface testing, integration and system testing, networking, JIRA with Zephyr Scale plugin, Confluence, RISE portal, Ethernet, IPv4, IPv6, Linux, VM, Postman, SQL, SQL Developer, Bruno, Wireshark, cloud, Burp Suite, Notepad++

• Further development of an application for managing personnel changes.
• Development of frontend and backend.
• Implementation of the frontend with React and Material UI.
• Implementation of the backend with Java and Spring Boot.
• Use of React, Java, Spring, TypeScript, next.js, Material UI, Github Enterprise, Figma, Docker, Playwright, swagger, swagger UI, OpenAPI, npm, yarn, git.

• Organizations lead up to 700+ people in Düsseldorf and various European countries
• Building and transforming organizations
• Managing strategic IT projects and operational budget
• Organizations control (120m)
• Change management is a key factor to success

• Set of concurrent projects (BSS/OSS related)

• Processing 1st, 2nd and 3rd level tickets
• Analyzing, resolving and documenting incidents and service requests within incident and SLA management via KIX (OTRS) ticket system
• Monitoring and managing networks and servers, configuring network interfaces (Wallix & Zabbix)
• Providing user support for technical issues and onboarding to new systems
• Creating and maintaining documentation for IT systems, network configurations and processes
• Software installation and maintenance: installing, configuring and updating operating systems, applications and license management (Empirum, MS365, Admin Center / Exchange)
• Data backup and tape rotation (backup and recovery)
• Configuring antivirus software and applying security updates and patches (Matrix42 patch management)
• User management: creating, modifying and deleting user accounts and their access rights (AD / Azure)