VMware Experts in Vienna

Owned the end-to-end architecture and the transition for the fourth licence period of the UK National Lottery: a complete technology stack replacement delivered against a hard regulatory deadline. Produced the end-to-end high-level architecture that served as the delivery baseline for the replacement of all major IT service components including infrastructure

Target architecture across two geo-redundant UK data centres: multiple VMware ESX clusters, OpenShift, MS SQL Server clusters, Oracle Exadata, integrated with AWS-hosted components and a retailer WAN over VSAT, DSL and LTE

Business continuity concept and geo-redundant high availability design

Review and approval authority over all low-level designs, application and infrastructure: network security, Oracle RAC, VMware, OpenShift, SQL clustering, geo-redundancy

Designed and implemented full hardware and network separation between test environments and staging/production

SME for third-party security audits against CIS benchmarks and NIST standards: preparation, execution, findings analysis, remediation prioritisation

Delivered software deployment to 45,000 retail terminals with minimal downtime, plus data migration from the incumbent end-to-end landscape to the new architecture

Transitioned 45,000 POS terminals and 19 million online players on time with no critical incidents

Owned the integrated transition plan for the full replacement of the lottery technology stack: work packages, milestones, dependencies and critical path across parallel technical sub-projects

Central organisational interface between internal IT leads, technical workstream leads, multiple external vendors and client executive stakeholders

Planned and led migration and cutover of live, regulated national infrastructure, including 80+ bare metal servers running VMware ESX, Microsoft VMs across several Active Directory domains, Linux VMs, OpenShift on Linux, 2 SANs, 2 Oracle Exadata systems, AWS components and a retailer WAN

Ran 4 full cutover dress rehearsals ahead of the 2 major go-live releases

Governed all changes through the ITIL change process and CAB; ran risk, issue and escalation management with regular status reporting to the Program Director and client's CTO

Onboarded the internal cyber security team and acted as architecture SME in pre-deployment security audits for client and internal security teams, including prioritisation and remediation of findings

Joined the programme as Enterprise Architecture Lead from May to September 2022, gaining detailed knowledge of the target infrastructure before taking overall delivery responsibility; after go-live, supported the delivery teams through the warranty phase

• Design, authorship and finalization of the IT PROD SEC service catalog with eight standardized security services (S-ID001–S-ID008).

• Development of consistent service components & deliverables, RACI assignments and SLA and KPI definitions for each service.

• Integration of BaFin document requirements under DORA into the service descriptions.

• Coordination with IT, compliance, risk and operations teams to validate all service descriptions.

• Specifically for governance & monitoring: definition of governance cadence, evidence delivery processes, audit support and definition of measurable KPIs and measurement methods.

• Ensuring that all services are standardized, measurable and documented in an audit-proof manner.

• Result: Approved service catalog with eight services as a binding basis for delivery, governance and audits; transparent SLAs/KPIs for each service and DORA/BAIT/MaRisk-compliant documentation with clear responsibilities and evidence trails.

• Technologies and tools: Confluence, Jira, ServiceNow, Microsoft PowerPoint, Microsoft Visio, Office 365.

• Migrated infrastructure automation from Puppet to Ansible
• Ensured compatibility with CentOS and RHEL 8 and 9
• Managed users in Active Directory
• Managed applications, services, security policies, certificates, and more

• I am responsible for providing solution architecture and technical assistance for a migration initiative aimed at transitioning to a new core banking system.
• The project involves replacing in-house development with a commercially available off-the-shelf core banking system operated as SaaS on AWS.
• Duties encompass solution design, technical coordination, supporting development teams, and providing IT support and troubleshooting.
• Managing over 10 global vendors and partners is crucial to project success.
• Technologies: VMWare ESXi, AWS, EKS Kubernetes, Mastercard Payment Transaction Service, Avaloq, A1 Telekom Austria infrastructure, CheckPoint FW, F5, Site-to-Site VPNs, PingID, Futurae SDK, Airlock, UC4/Automic, Firebase, iOS/Android lifecycle management, AWS IAM, AWS AppStream, AWS S3, AWS Transfer Family, QlikView, OpenAPI.

• Pivoted the company into data-driven and AI-powered energy optimization solutions for microgrids, energy communities, and grid operators.

• Migrating from VMware to OpenShift Virtualization, 40+ workstreams / projects in parallel (Small- to Medium Sized VM Operators / Critical Factory Workload Owners / Large-Scale Data Center Operators)