VMware vCenter Specialist in Germany

• Analysis of requirements and the current situation
• Migration of an old domain structure and Tobit to Exchange 2019 with integration to MS365
• Evaluation of implementation paths and planning for securing sensitive data
• Planning regarding BSI basic protection, the German Federal Data Protection Act (BDSG), and GDPR
• IT governance and IT security backtests
• Support with ERP setup and securing mail transfer
• Hyper-V 2016/2022, Microsoft Terminal Services Cluster, Microsoft Exchange 2019
• Office 365, Microsoft 365, Azure AD, Teams, Salesforce
• Cisco, Zyxel, and HP switches, Sophos firewalls/UTMs, SecurePoint
• Microsoft IIS 2022, IPv4/IPv6, Veeam, Wortmann online backup, NextCloud
• Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, Group Policy (GPO), SIEM, remote work, home office, high availability, failover, VLAN, PRTG

• Planning the migration approach from the old to the new ZEWIS system
• Configuring the modules (basic module, project recording, assembly billing, etc.)
• Setting up interfaces and data imports
• Coordinating the rollout and aligning with departments
• Supporting the team during the go-live and troubleshooting
• Quality assurance and preparation for acceptance
• Documenting all steps for smooth operations

• Development of ETL pipelines with Talend (7/ Enterprise)
• Development/adaptation of database schema/database functions (PostgreSQL)
• Development of GIT CI pipelines

Technologies: Talend Enterprise, Git, PostgreSQL, Dbeaver, SQL, PL-SQL, Liquibase

• Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
• Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
• Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
• Use of Scrum and Kanban methods.
• Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
• Development of new plugins and add-ons needed on current infrastructure.
• Database support.
• Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
• Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
• Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
• Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
• Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
• Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
• Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
• Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
• Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
• Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
• Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
• Automated system provisioning and deployment using CloudFormation templates.
• Configuration of IAM roles, policies and permissions to ensure secure access control.
• Patch management, backup automation and disaster recovery setup on AWS infrastructure.
• Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
• Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
• Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
• Configuration of AWS CloudWatch to monitor application performance and system events.
• Planning and execution of migration of on-premises applications to AWS cloud platforms.
• Deployment of containerized applications using Docker and Kubernetes in AWS environments.
• Deployment of internal software packages between availability zones using AWS CodeDeploy.
• Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

• Analysis of technical and economic feasibility
• Creation of a detailed project plan including time and resource management
• Requesting and evaluating offers, selecting components, and managing suppliers
• Coordination of all involved trades (e.g. electricians, installation companies)
• Monitoring the construction work and ensuring deadlines, budgets, and quality standards are met
• Acceptance and commissioning of the PV system including documentation
• After project completion: optimizing monitoring and supporting grid connection

• Recognition of national notified bodies
• Preparation of cybersecurity competency reports
• EU Radio Equipment Directive

• Redesigning cablewise infrastructure with CAT 8.1 keystones, measuring the speed and quality of the new installation with Pockethernet, documentation at a local saddlery
• CAT 8.1 installation and building a data center, site linking, VPN and VLAN configuration for a local car dealership, implementation of IT-Security standards like virus protection (G Data) and firewalling (OPNSense)
• Relocation of a tax office with redesign of the IT infrastructure, virus protection (G Data) and backup solutions (QNAP)
• Planning, conception and implementation of an inhouse data center, BSI-compliant for commercial laundry (including Proxmox-based virtualization of existing infrastructures, QNAP, G Data, OPNSense, APC)
• Implementation and conception of security solutions in the SME sector
• Collaboration on the IT-security concept for the Bremen network of authorities (in the dLAN network)
• Creation of IT-security concept VOIS (modules MESO, KFZ/iKFZ) including audit preparation for KBA
• Expansion of the IT-security concept for the online service for electronic residence registration (eWA) to include use as an eFA (one-for-all) service (nationwide)
• Expansion of the IT-security concept to include modules wos & wvp
• Concept development for the implementation of DIN SPEC 27076 at MSEs and SMEs
• Creation and evaluation of emergency concepts
• Creation and evaluation of response actions and BCM plans
• Assessment of existing business continuity management (ISO 22301)
• Development of BCM strategy options
• Conducting awareness training

• Developing a multi-class classification model to predict plant composition and its spatial and temporal changes using predictors, including satellite images, climate time series, and other environmental data such as land cover, human footprint, bioclimatic, and soil variables.
• Developing recommender systems using contextual bandits for an e-commerce platform.
• Building deep neural network models that predict flood-affected areas.

• Developed a shop website
• Integrated an AI language model
• Developed tools for AI-powered webhooks
• Technical tools: REACT.js; Elevenlabs; MCP; n8n; HTTP

• Project manager for transition and migration of IPC Trader Telephony to 3CX-based dispatcher and Cloud9-based trader telephony
• Planned and managed company-wide replacement of IPC Trader Telephony with 3CX and Cloud9 solutions
• Continuous improvement of implementation processes and development and execution of optimization measures
• Planned, coordinated and tracked delivery of IT equipment and service provision at all sites
• Led a team of IT site managers to ensure IT services were delivered on time, within budget and with required quality
• Defined project scope in coordination with all business resources
• Planned and executed software and hardware rollouts, including user support during implementation
• Communicated with key customers and service organizations and collaborated with traders, telephony architects, app owners, testers and technical IPC teams
• Conducted stakeholder analysis for creation and maintenance of change management processes
• Managed full change process: prepared change requests, defended them in change board, communicated at company and user level, and supported change implementation

• Analyzed the required scope of processes, infrastructure, and SAP for integrating the MacDermid subsidiaries
• Validated proposals from the new service providers
• Managed the collaboration and tracked the tasks of business and IT experts
• Coordinated communication and the PMO
• Created cutover plans in three waves for SAP conversion, Salesforce, and Ariba

• Analysis and optimization of the VMware environment for operation in a critical infrastructure environment
• Planning and execution of updates for the VMware and hardware environment in a critical infrastructure environment
• Deployment of Skyline Health Diagnostics
• Review of existing documentation
• Training and onboarding of new internal staff
• Support for migration and upgrade projects
• Preparation for moving scripts in the virtualization environment to GitLab
• Ticket handling with ServiceNow

• PRISMA project
• Ansible automation
• Windows third level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

• Consulted on IT security and process optimization, focusing on NIS2 and risk requirements
• Troubleshot and optimized plant core networks using STP, certified hardware, and open-source components such as OPNsense
• Redesigned network segmentation for VLAN rollout in a hybrid multisite multicloud setup using Tailscale VPN
• Facilitated cross-departmental discussions to align technical and social requirements
• Optimized monitoring with Grafana, Telegraf, and SNMP configurations
• Prototyped network setup for a new plant, including VLAN separation with Tailscale VPN
• Automated various scenarios using Python and Bash scripting