VPN Experts in Hamburg

• Designed and implemented a Python-based ETL pipeline with the Dagster framework to transform raw energy data from heterogeneous sources using InfluxDB and visualizations in Grafana
• Defined time-based and dependency-based jobs
• Deployed to managed Kubernetes clusters using Helm
• Integrated InfluxDB Cloud
• Prepared data for use in Grafana, including cleaning, normalization, and time-based resampling in Python
• Developed dashboards and visualizations in Grafana
• Developed unit tests with mocking using pytest
• Set up a CI/CD pipeline in GitLab

Technologies: Python, Dagster, InfluxDB, Grafana, pandas, pytest, REST, CI/CD, GitLab, Container, Kubernetes, Helm, Docker, Cloud

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Data-analysis, Preparation, gathering and coordination of business requirements for retrieval of monthly- and long term (CLV – relevant) cost- and revenue-components per contract for a customer–base–grouping project (HUB–Project) for B2C-Postpaid-Controlling
• Concept and Implementation of cost- and revenue-KPIs calculation and corresponding CLV–reports (Oracle, Perl, SVN, MS SQL Server, MS Power BI, Serviceware Performance Analytics)
• Operational support of the HUB-Project – various ad-hoc reports, deployments, job-scheduling etc. (Oracle, SVN, BICSuite–Scheduler, DWSODA etc.)
• Analysis, implementation, retrieval and reporting of various physical and financial KPIs for B2P-Prepaid Business on an existing data-mart (Oracle, Perl)

• Poliks – State Police System for information, communication, and case management and other state variants (ViVa, Bravo, customs)
• Developed a test framework for test automation to replace an existing proprietary test client for new developments, focusing on easy maintenance and simple extensibility for new technologies
• Designed the architecture
• Implemented the architecture
• Created a proof of concept by migrating existing test cases into the new test framework
• Platform: C#, .NET, Jira, XRay, Confluence, Playwright, Selenium, UI Automation, Appium, HTML, Git, VMWare, Windows 11, Linux

• Project lead ‘Cloud Migration’ for moving the on-premise production environment to Scaleway.
• Transformed a Docker-Swarm legacy setup to a modern Kubernetes-based cloud environment.
• Architected a GDPR-compliant cloud landscape and deployment setup – 100% European sovereign cloud.
• Hands-on bootstrapped the cloud environment with Terraform, ArgoCD, and GitLab Pipelines CI/CD.
• Replaced the legacy VPN with modern mTLS PKI and deep AD integration.
• Managed an 11-headed agile team using Kanban, moderating team meetings and plannings.
• Successfully finished the migration, moving infrastructure, services, and data, from planning to execution.

• Monitoring the health and performance of internal IT systems (servers, networks, endpoints)
• Performing routine checks on Active Directory, SCCM, antivirus, and MDM platforms
• Diagnosing and resolving hardware/software issues on Windows, macOS, and mobile platforms
• Conducting quality checks when implementing new technologies
• Creating accurate documentation of incidents, changes, and service requests
• Tracking and managing IT equipment inventory

• Responsible for configuring, maintaining, monitoring, troubleshooting, and optimizing the IT infrastructure, including Extreme Networks, SD-WAN, and Fortinet security solutions, at all international company locations in Europe and North America
• Developed a comprehensive strategic roadmap to optimize network architecture, including VLANs, NAC, QoS, firewall configurations, VPNs, DPI, NGFW, threat intelligence, and SSL/TLS inspection
• Implemented the OneIT strategy by introducing new technologies such as Cisco DNA Center, ExtremeCloud IQ, FortiOS, FortiManager, and FortiAnalyzer, boosting staff expertise and IT system efficiency
• Integrated IT and OT systems to optimize network and security architecture and improve operational efficiency

• Embraced full-time caregiving while achieving B2 German fluency
• Advanced cybersecurity skills through hands-on training at Masterschool
• Worked with AI & LLM tools: ChatGPT, Claude, Gemini, prompt engineering basics, LLMs, AI-assisted writing tools

• Collaborated closely with key users, business analysts and product owners to understand requirements, define priorities and derive solutions
• Managed external service providers
• Oversaw and executed updates, patches and release management
• Handled incident, problem and change management according to ITIL
• Analyzed and evaluated incidents and changes for operational impact and business processes
• Monitored systems and interfaces, ensuring IT security and compliance requirements
• Supported IT planning, cost monitoring and contract management
• Created and executed tests for maintenance and projects
• Assisted in designing technical solutions and contributed to projects such as IT landscape harmonization and modernization
• Independently led operations-related projects and continuously optimized processes
• Achieved significant cost savings through supplier negotiations, rightsizing and decommissioning of legacy systems
• Technologies: Azure DevOps, ServiceNow, icinga, metalogic mPE/mPX, FIS, inubit, Oracle, LeanIX, One Identity, Confluence, Copilot, XML, JSON, SQL, RabbitMQ, Python, BPMN, OKR, ITIL, Kanban

• Analysis of calculations in the legacy system (Cobol), reconciliation with specification and checking differences in the new system
• Managing change requests with Jira
• Basis for compare reconciliation: XML formats for further processing in Dopix (business: VS certificate, customer info, contribution statements)
• Automated XML comparisons via TWS jobs in various test systems
• Reviewing and documenting related utility programs and interface calls
• Reviewing legacy programs in terms of content, technology, and business logic
• Creating and extending JCLs for regression tests host <> decentralized
• Analyzing error cases and comparing with specifications for correctness
• Creating Jira tickets as requests or bug fixes for the Java programs

Technical environment:

• COBOL
• TSO/ISPF
• DB2/SQL (Spufi, QE2)
• IMS-DB/DC application development
• JCL, TWS (Tivoli), EJM Beta48 (AIX)
• Changeman (Extended Release Option)
• Citrix environment
• MS Office
• Ticket management with Jira
• Agile development

• Configuration of Dell switches, routers, and access points.
• Error analysis and resolution.
• Environment: Extreme, Cisco and Dell switches and routers, Extreme A3 NAC, Extreme CloudIQ.

• Client support, 2nd, 3rd level, server administration
• Project and process coordination
• Support of MS365 services
• Linux administration
• Provider management

• Developed a complete solution for ethics committees and medical boards from submission to approval
• Integrated a DICOM viewer to display medical images (CT, MRI)
• Implemented a filesystem with folder and subfolder structure
• Found and fixed security vulnerabilities
• Improved code quality and application performance
• Maintained client servers

• Leading national and international ICT projects
• Project management of large fiber-optic projects
• Optimizing corporate networks (fiber expansion (FTTX) / LAN / WAN / VPN / VoIP / MPLS)
• Preparing and running WAN and LAN tenders
• Network rollouts
• Creating requirements specifications and requirements management
• Conducting contract and SLA negotiations (German / English)
• Vendor management
• Interim management in ICT
• Analyzing and developing network designs
• Setting up, managing and optimizing operations organizations
• Building and upgrading data centers
• Developing, introducing and optimizing business processes (ITIL)
• Strategy and ICT technology consulting
• Creating business plans and feasibility studies
• Team and personnel management
• Crisis management