VMware vSphere Expert in Germany

Description of duties “Atruvia / HCL International” Role: HCL Notes Banking Support, Domino Administration / Migration / Operations Operations, administration and technical support of the HCL Notes/Domino environment in the Atruvia banking environment on behalf of HCL. As part of an international support team, the focus was on second- and third-level support as well as the processing, management and monitoring of SLA tickets in categories 1, 2 and 3. Duties included the technical analysis and resolution of incidents in the Notes/Domino environment, system administration, and the development and modification of Lotus Notes /Domino applications and LotusScript agents when a programming solution was required. Another focus was ticket dispatching: analysing and assessing incoming tickets, assigning them to the responsible departments and specialist teams, and subsequently coordinating and tracking processing within the agreed SLA periods. There was also direct communication and coordination with subject-matter experts, departments and end customers of the connected banks. In particular, when language or technical communication problems arose within the international support team, German-language customer communication was handled and mediation between customers and technical specialists was provided. Objective Ensuring stable and reliable operation of the HCL Notes/Domino landscape in the Atruvia banking environment and the timely processing of business-critical support cases in line with the agreed Service Level Agreements. Incidents were to be analysed as early as possible and either resolved directly through administrative measures or suitable LotusScript/Notes solutions, or forwarded specifically to the responsible specialist teams. As of: 25.09.2026 (Version 2.10 LITE) including project times Page: 3 of 32 SPO-SOFT EDV Beratung, Dipl.-Ing. Klaus Kano, Tel.: +494532-2767682, Mail: [email], [link] At the same time, qualified preliminary analysis and targeted ticket dispatching were intended to ensure that every ticket reached the technically and professionally responsible department immediately and that unnecessary transfers, processing times and associated costs were reduced. Result Operational Notes/Domino support for the banks served was reliably ensured throughout the entire project period. SLA-relevant tickets were systematically analysed, prioritised, assigned to the responsible departments and tracked through to resolution. Some incidents were resolved directly through administration, technical error analysis and the development of suitable LotusScript agents and modifications to Notes/Domino applications. By directing tickets specifically to the relevant expert and specialist teams, incorrect assignments and unnecessary processing loops were reduced and compliance with the agreed SLA times was supported. Direct communication with the banks and mediation between German-speaking end customers and the international support team also contributed to efficient problem resolution and high customer satisfaction.

• Architected and deployed private cloud data platform on VMware vSphere, integrating Greenplum MPP, Apache Kafka, Kubernetes, and Apache Solr, and developed real-time ingestion pipelines with Kafka Connect and Schema Registry.
• Led Oracle Exadata to Greenplum migration, rearchitected data models, optimized storage, implemented RabbitMQ with Debezium for CDC, and deployed VectorDB for Generative AI.
• Designed and executed multi-cloud migration PoC across AWS, Azure, and GCP, defined KPIs for throughput, latency, and cost efficiency, executed bulk data transfers, validated analytics and streaming workloads, and delivered full-scale architecture recommendations.
• Assessed legacy on-premises infrastructure and designed modern cloud-native data platforms using Greenplum and containerized microservices, advising on scalability, disaster recovery, and high-availability.

Red Hat OpenShift Container Platform

Scope:

• Operation and configuration of the Red Hat OpenShift Container Platform, including network, storage, and security design.
• Implementation of centralized observability solutions (Prometheus, Grafana, alerting).
• Development of CI/CD pipelines, GitOps workflows, and automation frameworks.
• Training and enablement of operations and development teams.

Result: Accelerated service delivery, transparent operational metrics, and sustainable knowledge transfer.

Development and further development of an internal platform for managing and providing technical resources, virtual machines, and infrastructure services. The platform supports self-service processes and covers functions that are conceptually comparable to cloud management solutions like Azure or AWS.

• Responsible involvement in the design, development, and implementation of new backend and frontend features
• Hands-on development with Java, Spring Boot, Python, and Angular
• Implementation of REST interfaces, business logic, validations, and integrations into existing system landscapes
• Further development of modern web interfaces with Angular, including connection to backend services
• Participation in architecture and design decisions within the team, especially with regard to scalability, maintainability, and clean interfaces
• Containerization and deployment of applications with Docker, Kubernetes, and Helm
• Support with CI/CD processes and deployment to Kubernetes-based environments
• Work in the environment of vSphere, Broadcom, GitLab CI/CD, ArgoCD, Maven, npm, and NuGet
• Close collaboration with developers, business teams, DevOps, and other technical stakeholders
• Analysis of technical requirements, deriving suitable solutions, and independent implementation in an agile team
• Use of GitHub Copilot to support code generation, refactoring, test case creation, and technical documentation

Methods/ tools/ technologies: Languages & frameworks: Java (21), Spring Boot (4.x), Python, Angular, Robot Framework, Kubernetes, Helm Persistence: PostgreSQL, MongoDB, Hibernate, Liquibase Architecture & communication: REST, gRPC, GraphQL, Apache Kafka, OpenAPI, Microservices, Event Driven, Domain Driven Design Cloud & infrastructure: Terraform, Docker, Rancher, Helm, Ansible Security: OAuth2, MS (Entra ID), web security, Keycloak (extensions for detailed group rights) DevOps: GitLab CI/CD, Ansible, Maven, Gradle, Grafana, Prometheus, Git, GitHub Copilot Testing & QM: JUnit, Robot Framework, automated component and integration tests, E2E tests with Playwright, Testcontainers, EasyMock Methodology & approach: Kanban, JIRA, Confluence, Clean Code

Windows Administrator, software distribution, user support, Azure / Entra Administrator, hardware support, software packaging, defining and introducing processes

Tasks performed:

• Handling incidents, service requests and changes in the Matrix42 ticketing system
• Processing and resolving issues
• User creation / permissions
• Windows installation and patch management
• Entra permissions and license management
• Process optimization and documentation

Tools and methods used: Windows Server 2016 / 2019, Active Directory, Windows 11, Office 365, Azure / Entra, Ivanti, VMWare & ESX, Dell & Kyocera Minolta & Zeus hardware support

• Documenting the current Incident Management, IT Service Request Management, Problem Management, Change Management and Service Configuration Management processes (including CMDB)
• Conducting maturity assessments for these processes based on the ITIL® 4 Maturity Model
• Analyzing the various service value streams based on the ITIL® 4 value stream model
• Agreeing on maturity levels for the assessed processes
• Developing and approving a roadmap to achieve and measure the respective maturity levels
• Presenting the approach, including milestones, to management for approval
• Managing external service providers in 1st Level Support

Unified ITSM framework

• Definition of a company-wide ITSM target picture
• Introduction of a uniform service structure across all business units

SLA and OLA management

• Building a standardized SLA framework
• Definition of service classes (Business Critical, Standard, Low Priority)
• Introduction of OLAs between internal teams
• Building meaningful SLA reporting
• Definition of KPI and service dashboards for business units

Service portfolio management

• Definition of service descriptions
• If needed, preparing possible cost and service billing

Ticketing & processes

• Incident management
• Uniform ticket categories
• Standardized prioritization
• Escalation matrix
• Automations
• Self-service optimization

Request fulfillment

• Service catalog across all business units
• Approval workflows

Problem management

• Introduction of root cause analysis
• Known error database
• Problem review process

Complete asset management concept

• Hardware lifecycle management
• Software lifecycle management
• Leasing lifecycle
• Mobile device lifecycle
• Monitor lifecycle
• Phone lifecycle

Processes

• Procurement
• Goods receipt
• Inventory
• Assignment
• Return
• Disposal
• Leasing return Goal: single source of truth for all assets

CMDB design

• Definition of all configuration items:
• Workplace
• Notebooks
• Monitors
• Mobile phones
• Printers

Infrastructure

• Servers
• Firewalls
• Switches
• WLAN
• Storage
• Backup systems

Cloud

• Azure resources
• Microsoft 365
• SaaS services

Relationships

• User ↔ Asset
• Asset ↔ Service
• Service ↔ Infrastructure
• Location ↔ Asset
• Goal: make all service dependencies visible

Software asset & license management

• License management concept
• License balancing
• Compliance reporting
• Microsoft license management
• Adobe license management
• SaaS management
• Contract management
• Renewal management

Interfaces & automation Existing systems

• Workday
• Joiner
• Mover
• Leaver

TESMA

• Leasing data
• Contract data

Matrix42

• Asset synchronization
• User synchronization

Active Directory / Entra ID

• User management

Microsoft 365

• License assignment
• Group management

Dormakaba

• Access processes

• Lifecycle services

Monitoring platforms

• PRTG
• Palo Alto
• Cisco

Reporting & KPI framework

• Definition of a management dashboard
• KPIs
• Ticket volume
• SLA fulfillment
• MTTR
• First resolution rate
• Asset accuracy
• License compliance
• Change success rate
• Service availability
• Degree of automation

Network redesign support

• Governance
• Support of the network redesign from an ITSM point of view
• Definition of affected services
• Change management structure
• Communication concept

CMDB integration

• Recording of all network components
• Service mapping
• Dependency analysis

Validation of documentation and knowledge base articles

• Network documentation
• Operations documentation
• Standard changes

Monitoring & event management

• Target picture
• Central monitoring concept
• Event management process
• Alerting strategy
• Escalation model

Systems

• Cisco

• Palo Alto

• Fortinet

• Rubrik

• Veeam

• Matrix42

• Azure

• Microsoft 365 Automation

• Ticket creation from monitoring

• Escalations

• Standard actions

Audit, compliance & information security

• ISO 27001 consulting
• TISAX consulting
• NIS2 preparation - consulting
• Audit-ready processes
• Documentation structure
• Evidence tracking in Matrix42

Roadmap

• 12-month roadmap
• Prioritization of all measures
• Quick wins
• Medium-term projects
• Long-term target picture
• Documentation

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Analysis and optimization of the VMware environment for operation in a KRITIS environment
• Planning and implementation of updates to the VMware and hardware environment in a KRITIS environment
• Set up Skyline Health Diagnostics
• Review of the existing documentation
• Training and onboarding of new internal employees
• Support with migration and upgrade projects
• Preparations for moving scripts in the virtualization environment to GitLab
• Ticket processing with Service.Now

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Manage multiple Kubernetes clusters in Production with Ceph as storage layer.
• Implemented CICD pipelines for automating deployments with Gitlab CI
• Terraform for Infrastructure provisioning.
• Claude code
• Helm charts for deploying via ArgoCD
• Implemented automated incident notification pipelines in Kubernetes to align with NIS2 mandatory 24-hour early warning disclosure rules
• Configured Azure Policy and Logging guardrails aligned with BSI IT-Grundschutz (SYS.1.3 / OPS.1.1), ensuring continuous baseline compliance across 50+ cloud workloads

Environment: Gitlab CI, IONOS Cloud, Ceph, ArgoCD, terraform, Elastic cluster, Grafana, Alert Manager & Prometheus

• Technical lead for CI/CD modernization in the "Group Archive 4.0" system
• Architecture and steering responsibility according to the statement of work
• Setting up modern build and deployment processes
• CI/CD coaching and enablement of the internal development team
• Integration of modern DevOps, security, and compliance standards
• Ensuring technical governance, including collaboration with internal audit and BaFin
• Independently executing the modernization measures
• Supporting the team in adopting new technologies and methods

• Linux server migrations: Planning and implementation of the migration with SLES Linux Deployment of VMs in VMware 8.0
• Guiding colleagues in configuring Linux VMs in vSphere Auto Deploy
• Application operations: Ensuring the smooth operation of applications on the migrated servers
• Operations manuals: Revising existing operations manuals, adding to them and creating new ones when required
• Reviewing service offerings: Adjusting and optimizing the service offering of external service providers
• Logistics SW, RedHat Linux, Ansible, Confluence / Jira

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019