Virtualization Experts in Germany

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

• Worked for several M&A projects (Eire, Sunshine C, Coral) in the role of IT project manager and cross-functional technical manager / integration manager.
• Preparation and maintenance of project charters, project change requests and project plans.
• Weekly project status report.
• Preparation of decision papers and steering committee slidedecks.
• Risk & issue management.
• Tracking and managing activities, dependencies and deliverables across all functional IT domains.
• Data migration (planning and execution).

• Develop custom AI agents delivering 90%+ reduction in manual workload and significant efficiency gains
• Provide end-to-end AI strategy consulting: from digital assessment to implementation and change management
• Design and deliver tailored training programs and workshops on AI adoption, prompt engineering, and automation
• Support clients in implementing scalable AI solutions integrated with existing technology stacks
• Focus areas: AI strategy, automation, workflow optimization, and capability building

• Gathering information
• Creating rollout wave concepts
• Coordinating employees
• Monitoring and managing activities
• Project management including analysis and reporting to the board
• Creating instructions and specifications
• Training floorwalkers
• Supporting the rollout on site
• VIP support
• Introducing SharePoint

• Leading enterprise BI transformation across Power BI & Microsoft Fabric, delivering scalable data models, automated reporting, and high-performance analytics solutions for commercial and operational leadership.
• Building and optimizing Power BI Dataflows, Fabric Lakehouse datasets, semantic models, and automated reporting pipelines to improve data scalability, governance, and reporting performance.
• Driving dashboard modernization and KPI governance by translating complex business requirements into executive-level insights, interactive visualizations, and decision-ready analytics.
• Designing end-to-end Microsoft Fabric architectures integrating data ingestion, transformation, virtualization, and enterprise reporting across cross-functional business domains with SAP BW to Qlik to Power BI migration.
• Delivering AI-enabled reporting capabilities, threshold-based alerting, and automation frameworks within the Power BI ecosystem to accelerate business decision-making.
• Partnering with commercial leadership, analytics teams, and IT stakeholders to standardize KPIs, optimize BI strategy, and deliver scalable, business-critical reporting solutions.
• Recognized for combining strong stakeholder leadership, technical architecture expertise, and business-driven analytics to deliver impactful enterprise BI transformation initiatives.

To achieve savings and optimize compliance, apps were restructured in line with the mappings in identity management, restrictions were defined and, above all, costs resulting from overuse were reduced. Communication with stakeholders, validation of authorizations with users and technical implementation in the SAP FI/CO and Sourcing & Procurement modules created significant added value for the group. This also included the corresponding documentation for the auditors.

• Identified operational improvement opportunities together with production, engineering and management teams.
• Prioritized use cases according to measurable operational value rather than technology availability.
• Developed solutions around production performance, OEE, quality, traceability, reporting and process transparency.
• Translated operational requirements into required machine data, interfaces, information models and application requirements.
• Defined target architectures and integration approaches for heterogeneous brownfield production environments.
• Moved prioritized use cases from workshop and concept stages into concrete implementation projects.
• Coordinated manufacturing, OT, IT and technology stakeholders during implementation.
• Established reusable approaches to scale successful solutions beyond individual machines or pilot areas.

• Interim & Business Management: Strategic consulting and operational leadership of business units and large projects with a focus on profitability (P&L), growth, and portfolio development.
• Business Case & Strategy: Development of complex business models (e.g. 5G campus networks, platform business) and execution of strategic market studies for international clients.
• People & Leadership: Many years of experience in disciplinary leadership and development of large teams (>100 employees), building competence centers, and coaching managers in agile environments.
• Partner & Vendor Ecosystems: Management and negotiation of high-value framework agreements (T&M, fixed price) as well as steering multinational supplier and partner relationships.
• End-to-End Project Governance: Responsibility for the full lifecycle management of large technical projects (mobile core network, integration, rollout) while meeting the highest quality and security standards.

• Definition and implementation of the global strategy for IT site infrastructure products and services, ensuring scalability, security and compliance
• Leadership and development of a high-performing team of IT site management specialists, promoting collaboration and professional development
• Monitoring the quality of IT services for sites and ensuring timely delivery and compliance with company standards
• Central point of contact between Corporate IT, regional IT teams and business stakeholders for site infrastructure topics
• Driving innovation and process optimization in the delivery and operation of IT site infrastructure
• Responsibility for the product lifecycle of IT site infrastructure solutions, from design through retirement
• Management of global demand for IT site infrastructure services and ensuring alignment with IT demand management processes
• Establishment and monitoring of KPIs for service delivery and product performance
• Ensuring compliance with IT security, data protection and regulatory requirements
• Management of supplier relationships and negotiation of contracts for IT site infrastructure services
• Budget planning and cost optimization for IT site infrastructure
• Review, improvement and implementation of ServiceNow processes

• Project: ESU Windows and SQL Server consolidation / Configuration Management in ServiceNow
• Creation of an as-is analysis of all servers worldwide
• Creation of an as-is analysis of all SQL servers worldwide
• Creation of requirements analyses for SQL and server migrations
• Coordination of requirements with partners for migrations to Hyper-V (on-premises) or Azure Cloud
• Moderation of jour fixe meetings
• Creation of roadmaps and solution models for server migrations
• Setup of test scenarios
• Moderation of workshops for the introduction of a Global Admin Team
• Creation of data models (CMDB) in ServiceNow
• Conducting workshops for the CMDB data model
• Creation of solution models for the CMDB
• Creation of seamless configuration and work documentation for the CMDB
• Creation of reports for license management
• Creation of KPIs for data quality in ServiceNow
• Creation of a service catalog
• Moderation of workshops for creating service requests
• Interface between needs analysis and ServiceNow development team
• Systems used: Windows 7, Windows 10, Microsoft Office 365/2010, Windows Server 20xx, SQL Server 20xx, SharePoint, Azure Cloud, Hyper-V, ServiceNow, various tools

• Technical leadership and further development of a team of 28 IT staff (internal & external) in the areas HelpDesk/HelpLine, RHEL (Red Hat), MUREX (trading system & applications), SAP basis operations
• Managing external service providers (including FI-TS for SAP basis operations)
• Personnel, resource and budget planning for the IT department and projects
• Introducing and establishing regular communication formats (weekly status meetings, team and cross-department meetings)
• Ensuring application operations in a hybrid environment (Windows/Linux with database and web/application servers)
• Supporting transformation projects to modernize the application landscape (e.g. DevOps approaches)
• Setting up and implementing a digital IT procurement for hardware & software (e.g. with DELL)
• Developing and managing the "IT Operations DOS" department based on corporate strategy
• Preparing management reports & decision papers on IT projects, optimization potential and automation opportunities
• Representing the department in the advisory boards of the Rentenbank and ensuring regulatory compliance (BaFin §44, GDPR, BSI, MaRisk)

• Short description: Lead a group-wide project to establish standardized cloud governance for Microsoft Azure, including policies, security and compliance controls, automation, and cost and operations control while preserving the autonomy of decentralized business units within regulatory boundaries.

• Tasks and activities:

• Overall responsibility for the design, setup, and implementation of an enterprise-wide cloud governance structure (Azure), incl. target picture, roadmap, and operating model.

• Management of internal and external stakeholders (C-level, IT, Security, Compliance, Cloud Architecture, DevOps) incl. decision-making and escalation management.

• Planning and facilitation of workshops on cloud strategy, governance principles, and the design of areas such as Identity, Connectivity, and Platform Management.

• Definition, implementation, and rollout of cloud policies (Azure Policy / custom policies), security standards, and compliance requirements (including GDPR, ISO 27001, BSI C5).

• Building a cloud governance framework aligned with the Azure Cloud Adoption Framework (CAF), incl. landing zone and guardrail concepts.

• Introduction of automation solutions for governance, security, and cost control (policy/control automation, IaC, CI/CD-based control mechanisms).

• Implementation of cloud security and compliance monitoring mechanisms as well as continuous improvement processes.

• Establishment and operationalization of FinOps in an enterprise environment (central and decentralized FinOps teams), incl. cost management strategies, reporting, and guardrails.

• Integration of governance policies into DevOps processes (e.g. CI/CD principles for security and compliance checks, GitLab Runner concept in spokes, GitLab CI/CD for CAF landing zones).

• Implementation of access concepts incl. RBAC design and "break glass" mechanisms (emergency access) as well as certificate automation (ACME / step-ca).

• Achievements:

• Created a unified, auditable governance and control set for Azure (policies, standards, compliance mapping) and thus laid the foundation for scalable cloud usage in a regulated environment.

• Established repeatable automation for governance, security, and cost control (IaC + CI/CD), reducing manual effort and implementation risks.

• Improved operational and decision-making capabilities across central and decentralized units (clearer roles, responsibilities, escalation paths, balance between autonomy and group requirements).

• Significantly increased workload compliance for lift-and-shift migrations.

• Technologies used:

• Microsoft Azure Policy, custom policies.

• Terraform, OpenTofu, Terragrunt.

• step-ca (ACME).

• Entra ID.

• Azure Firewall.

• Azure networking, hub-and-spoke architecture.

• Azure vWAN (evaluation).

• Azure Front Door, Azure Application Gateway.

• Azure ExpressRoute.

• Azure Key Vault.

• NetBox.

• GitLab (on-premises).

• Infrastructure, concepts used:

• Cloud shared responsibility model.

• Hub-and-spoke connectivity / central shared services (from a hub-spoke context).

• Central governance with decentralized delivery (business unit autonomy with guardrails).

• Methods used:

• Scrum.

• Stakeholder management (C-level to engineering).

• Cloud governance, Azure Cloud Adoption Framework (CAF).

• DevOps, CI/CD.

• Cost and FinOps approaches: tagging/chargeback models, budget/alert concepts, reserved instances/savings plans vs. on-demand scenarios, sensitivity analyses.

• RBAC, "break glass" concepts.

• ACME / certificate automation.

• GitLab Runner concept in spokes, GitLab CI/CD pipelines for CAF landing zones.

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation