VMware NSX Experts in Germany

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

• Lead Architecture in an interdisciplinary architecture team covering enterprise, solution, NOOTS, cloud and security architecture as well as regulatory and European interoperability requirements.

• Public / Government

• Development and management of target architectures, principles, standards and technical guardrails; assessment of Security-by-Design, IAM, data protection and interface/integration architectures; architecture reviews, security assessments, risk analyses, and preparation of decision records, target visions, roadmaps and decision papers. Architectural knowledge and consideration of relevant AD-NOOTS requirements, particularly for IAM, authorization, secure integration and interoperability.

• Technologies / Methods: Enterprise Architecture, Solution Architecture, Security Architecture, Cloud Architecture, NOOTS / EU-OOTS, IAM, Authorization, Security-by-Design, API/Integration Architecture, Interoperability, Risk Analysis, Architecture Governance

• Security and integration requirements as well as technical decisions are structured in reliable architecture and decision artifacts.

• Construction of the data center in Oberkochen (Defence area)
• Planning of the fiber-optic ring, simulation of Wifi coverage
• Installation plan for WAN and LAN cables for office and production (infrastructure)
• Adaptation of the SAP system (R3) for the Oberkochen site (software)
• IT transformation of the SAP system to SAP HANA
• Planning of network infrastructure and server technologies in the SAP environment
• Pré-Sales support and establishment of change management
• Independent coordination of Utilities according to Time, Budget and Quality
• Mapping of the project in MS-Projekt and SERVICENow
• Development and design of hardware and software
• Demand management and portfolio management
• Establishment of a risk register and migration plan
• Preparation of documents supporting payment in coordination with the responsible financial and commercial functions
• Budget: 5 Mio. - 34 FTE

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Creating workflows for server orders with different conditions, requirements and specifications based on an external ordering portal (connecting Aria Automation via RestAPI to BMC ITSM Helix) for separate internal customers / teams / tenants
• Mapping workflows for Day-2 Operations through the upstream portal (Snapshots, Resize, Disk Operations, Backup)
• Creating test cases and automated tests to verify the code and stability of the complete ordering process
• Documenting workflows in Confluence / Wiki / Jira
• Creating and maintaining blueprints
• Integrating Ansible Tower for further VM customization

• Led a small team of Storage/Backup consultants responsible for EMEA region data center transformation across 200 DCs
• Developed and defended HLD and LLD designs for SAN (Brocade), block storage (HPE Primera/Alletra), NAS (EMC Unity), object storage (Iternity with iCAS FS), and backup (Commvault)
• Performed build and configuration of ~25 data centers, coordinating with network, compute, and security teams
• Developed new processes and standards for infrastructure builds and finalized hardware purchases and BOM preparation
• Created and executed testing approach including DR tests, and handed over builds to operation and migration teams
• Trained other storage consultants to ensure SLA compliance
• Technologies: Brocades, HPE/IBM/EMC/NetApp/CEPH, vSAN, NSX, TSM, Veeam, Commvault, tape libraries, drives & VTLs

• Operation of VMware, Veeam and further development of the system
• Implementation of BSI requirements in the design/construction
• Control and analysis of the VMware environment using PowerShell scripts
• Working according to ITIL processes
• Version control of scripts with TortoiseSVN

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Design and setup of infrastructure concepts for virtualized servers with VMware vSphere and VMware vCenter
• Migration from vCenter 7 environments to vCenter 8
• Automated deployment of virtual machines using Microsoft PowerShell and VMware PowerCLI as well as Ansible Tower
• Prototype setup and test migration of applications in various container environments
• Administration of firewalls and network components (routing and switching)
• Migration of VPN connection for all employees from Sophos UTM to Fortigate IPSec VPN with FortiToken
• Automation of OS installations on Linux with Ansible and GitLab
• VMware vSphere 8 with VMware vCenter 8
• VMware API
• VMware NSX-T
• VMware vSAN
• VMware Tanzu
• Red Hat OpenShift
• Docker
• SLES 15, Red Hat 9 and Microsoft Windows Server
• Microsoft Windows PowerShell
• GitLab
• Ansible Tower (AWX)
• SUSE Manager 4 and 5
• Fortigate Firewalls
• Fortinet Analyzer and Manager
• Juniper and Cisco switches and routers

• Processing changes to build new storage in a new data center environment
• Draft design of the storage solution with its backup area
• Discussions on the future storage architecture and cloud backup solution
• Timeline creation for each project with duration and maturity level
• Documenting each project in Confluence
• Updating all storage product items in Certlich
• Updating and fixing errors in Alfabet
• Adding new products and their details in Alfabet for the storage area

• Technical and strategic support for the task force to build a globally available service unit focused on Microsoft Azure Cloud under the Follow the Sun principle and SAFe