VMware Experts in Hamburg

• Administration and further development of the M365 environment including Teams, Exchange Online, Intune and SharePoint Online
• Development of dashboards for performance monitoring using Microsoft Power BI
• Implementation of user requirements and processes with low-code/no-code technologies (Power Apps, Power Automate)
• Use of Jira and Azure DevOps to plan and implement user stories in an agile project context
• Participation in daily stand-ups, sprint planning, sprint reviews and retrospectives as technical point of contact
• Planning and implementation of security policies using Azure Conditional Access and multi-factor authentication
• Configuration and deployment of clients and applications via MECM (SCCM) and Baramundi

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Software packaging and distribution with SCCM/MECM
• Application responsibility and support (50–100 applications)
• Documentation via ticket system
• User management via AD console
• Software updates and distribution
• Maintenance and updating of software packages
• Customizing scripts with PowerShell
• Rolling out and implementing new software
• Supporting IT security and compliance

Tools and software: Confluence, M365, Active Directory, Intune, Endpoint Management, SCCM/MECM, PowerShell, VMware Hardware: Lenovo, Cherry, Plantronics, Jabra + peripherals

• Poliks – State Police System for information, communication, and case management and other state variants (ViVa, Bravo, customs)
• Developed a test framework for test automation to replace an existing proprietary test client for new developments, focusing on easy maintenance and simple extensibility for new technologies
• Designed the architecture
• Implemented the architecture
• Created a proof of concept by migrating existing test cases into the new test framework
• Platform: C#, .NET, Jira, XRay, Confluence, Playwright, Selenium, UI Automation, Appium, HTML, Git, VMWare, Windows 11, Linux

• Analyzed the required scope of processes, infrastructure, and SAP for integrating the MacDermid subsidiaries
• Validated proposals from the new service providers
• Managed the collaboration and tracked the tasks of business and IT experts
• Coordinated communication and the PMO
• Created cutover plans in three waves for SAP conversion, Salesforce, and Ariba

• Project to develop the complete software for a film roll warehouse at American Packaging Corporation, Story City, Iowa (warehouse vehicles SINATIC S7, warehouse management C#, Microsoft SQL Server, AGV interface C++, ERP system interface REST API)
• Development of a warehouse simulator for real machine processes aimed at optimized storage of film rolls (C#)
• Project to develop the complete software for a printing cylinder warehouse at Huhtamaki, Ronsberg (warehouse vehicles TIA Portal, warehouse management C#, Oracle, ERP system interface DB table)
• Further development of the warehouse simulator for improved programming of the movement planner
• Project to read and analyze QR codes on letters in the letter sorter at XPROMA GmbH, Salzhausen (program as a service for fast reading of QR codes via two Keyence barcode readers in C#, Microsoft SQL Server, TCP/IP; program for monitoring and parameterizing the barcode readers and triggering the data export in C#, Microsoft SQL Server, SFTP transfer)
• Project for the development and programming of a low-cost management system for automated guided vehicles with Egemin Automation Inc. and American Packaging Corporation (C++, C#, Microsoft SQL Server, TCP/IP)
• Project for the test stand development and automation of SYS.5 tests for the climate actuator at ETO GRUPPE TECHNOLOGIES GmbH, Stockach (test stand software LabVIEW, C#; test evaluation DIAdem, C#; databases Microsoft SQL Server)

• Extended the document management system with a standard CMIS (Content Management Interoperability Services) interface
• Implemented CMIS core services like navigation, access rights, search, CRUD operations, and versioning in Java
• Implemented based on RESTful / OpenAPI services
• Delivered as a fat-jar and native container image
• Deployed on-premises and serverlessly as an Azure Container Application using Terraform
• Improved team autonomy through infrastructure engineering and short feedback loops
• Established observability with OpenTelemetry, Azure Monitor, and Azure Logic Apps
• Introduced Terraform and trunk-based development processes
• Ensured quality with BDD tests in C# using SpecFlow and Testcontainers
• Created Azure DevOps pipeline integration tests
• Introduced cloud deployment processes
• Trained staff in cloud and Terraform

• Consulting on a wide range of open science hardware projects in the fields of electronics, mechatronics, and optoelectronics
• Comprehensive system analysis and DFM optimization of a novel open hardware miniaturized two-photon microscope
• Exchange with scientists from renowned academic institutions to align the customer’s work in the best possible way
• Production coordination with local and international partners for PCB assembly, CNC machining, and optics
• Process analysis for product design, production planning/execution, product lifecycle, and product data management
• Coaching employees from all departments on the requirements that complex technical products place on business processes
• Development of a comprehensive PLM & PDM concept tailored to the needs of development and manufacturing
• Initiating intensive and direct cross-departmental exchange to identify improvement potential
• Planning shopfloor layout improvements with the production team and supporting the implementation process
• Quick onboarding of two new English-speaking colleagues in technical product management and development
• Ad-hoc and in-depth training of employees in the use of software tools such as KiCad or Autodesk Inventor
• Consulting on long-term development into a scalable, even stronger partner for the open science hardware community

• Planning, coordination and tracking of tasks for database administration (DBA)
• Coordination with application developers and test managers (QA) involved in the project
• Migration of existing databases in several stages
• Coordination and communication with stakeholders
• Technologies: MariaDB
• Tools: MS Office, Confluence, Jira
• Methods: project management according to the client's process
• Project language: English / German

• Migration of Oracle databases from on-premise to the AWS Cloud
• Support for technical Oracle solutions and cloud database infrastructures (IaaS and PaaS) RDS vs. EC2, sizing for performance
• Creation and maintenance of DR/HA (Disaster Recovery/High Availability) and backup and recovery policies and procedures (multi-region backup)
• Support for Oracle license selection, Enterprise → Standard migration
• Monitoring database instances
• Implementation and maintenance of database security (wallet, SSL)
• Patch management and version control
• Automated installation and configuration of Oracle databases using Terraform and Ansible

• Client support, 2nd, 3rd level, server administration
• Project and process coordination
• Support of MS365 services
• Linux administration
• Provider management

• Support and maintenance of IT workstations
• Operating, administering, and installing physical and virtual servers
• Administering proxy, firewall, and antivirus solutions
• Administering network and infrastructure including data backup
• Assisting in planning replacements and renewals of IT systems
• Assisting in planning, coordinating, and implementing IT security measures
• Microsoft server operating systems Windows Server 2016/2019
• Central services: AD, GPO, DNS, DHCP, WSUS, SCCM

• Environment: AWS, Ruby on Rails, GraphQL, React Native
• Penetration test for Backend, Android-App and iOS-App