WAN Expert

Designed a global SD-WAN / SASE solution (Paloalto Prisma Access or Cisco Secure Connect) and integrated it with the data center infrastructure (Cisco ACI, Cisco Catalyst/Nexus Switches, Cisco WLAN Controller, Cisco ISE)

Goal:

Protect customer domains from spoofing by establishing and securing DMARC compliance, and ensure secure and stable operation of the Exchange and Microsoft 365 environment while keeping legitimate mail flows running smoothly.

Responsibilities:

• Project management, including reporting, customer coordination and budget responsibility
• Set up and secure DMARC, including DKIM and SPF
• Ongoing analysis of DMARC reports to detect and resolve issues early
• Replace EWS connections before Microsoft's shutdown on 01.10.2026 by switching to Microsoft Graph
• Introduce sensitivity labels in Microsoft Purview to protect sensitive information
• Automate recurring administrative tasks with PowerShell
• 3rd Level Support and ongoing administration of Exchange Online and Exchange on-premises

Technologies: Exchange Online, Exchange Server (on-premises), Microsoft 365, Microsoft Graph API, EWS, Microsoft Purview / Sensitivity Labels, DMARC, DKIM, SPF, RUA-Reporting, PowerShell, HCL Notes

• Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
• Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
• Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
• Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
• Prepare security and compliance to support Microsoft 365 Copilot.
• Implement information protection and data loss prevention by using Microsoft Purview.
• Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
• Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
• Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
• Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.

"Reasoning Models: From LLM Foundations to NOC Automation."

• Whitepapers, case studies, landing pages, specialist articles and press releases for B2B clients from the IT and cybersecurity sectors, including TrendAI, SoftwareOne, All for One, SVA, Axians, NetApp, Indevis, Aconso

Key topics: Cybersecurity, AI, Cloud Computing, Digitalization, Big Data Analytics, Virtualization, Data Management, IoT, New Work, Data Center Modernization, SAP S/4HANA Migration

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

Project management and process consulting in the field of Building Information Modelling (BIM)

Description of duties “Atruvia / HCL International” Role: HCL Notes Banking Support, Domino Administration / Migration / Operations Operations, administration and technical support of the HCL Notes/Domino environment in the Atruvia banking environment on behalf of HCL. As part of an international support team, the focus was on second- and third-level support as well as the processing, management and monitoring of SLA tickets in categories 1, 2 and 3. Duties included the technical analysis and resolution of incidents in the Notes/Domino environment, system administration, and the development and modification of Lotus Notes /Domino applications and LotusScript agents when a programming solution was required. Another focus was ticket dispatching: analysing and assessing incoming tickets, assigning them to the responsible departments and specialist teams, and subsequently coordinating and tracking processing within the agreed SLA periods. There was also direct communication and coordination with subject-matter experts, departments and end customers of the connected banks. In particular, when language or technical communication problems arose within the international support team, German-language customer communication was handled and mediation between customers and technical specialists was provided. Objective Ensuring stable and reliable operation of the HCL Notes/Domino landscape in the Atruvia banking environment and the timely processing of business-critical support cases in line with the agreed Service Level Agreements. Incidents were to be analysed as early as possible and either resolved directly through administrative measures or suitable LotusScript/Notes solutions, or forwarded specifically to the responsible specialist teams. As of: 25.09.2026 (Version 2.10 LITE) including project times Page: 3 of 32 SPO-SOFT EDV Beratung, Dipl.-Ing. Klaus Kano, Tel.: +494532-2767682, Mail: [email], [link] At the same time, qualified preliminary analysis and targeted ticket dispatching were intended to ensure that every ticket reached the technically and professionally responsible department immediately and that unnecessary transfers, processing times and associated costs were reduced. Result Operational Notes/Domino support for the banks served was reliably ensured throughout the entire project period. SLA-relevant tickets were systematically analysed, prioritised, assigned to the responsible departments and tracked through to resolution. Some incidents were resolved directly through administration, technical error analysis and the development of suitable LotusScript agents and modifications to Notes/Domino applications. By directing tickets specifically to the relevant expert and specialist teams, incorrect assignments and unnecessary processing loops were reduced and compliance with the agreed SLA times was supported. Direct communication with the banks and mediation between German-speaking end customers and the international support team also contributed to efficient problem resolution and high customer satisfaction.

Participation in various projects related to the development and introduction of new telecommunications products in the mobile communications and fixed-line sectors, with a focus on 5G, wholesale and IPv6 technologies.

• Planning, coordination and execution of product development projects, particularly in the 5G and fixed-line environments
• Support for the rollout of new offerings, including test management and quality assurance
• Participation in the development of wholesale products and eSIM solutions
• Close coordination with internal departments (technology, marketing, operations) and external partners
• Use of agile tools and methods for project management and collaboration

Tools: JIRA, MS Office, MS Project

Technologies: 5G, 5G Campus Networks, Fixed Network (FixNet), IPv6, eSIM, Wholesale product development

CS-APN 5G NSA – IPv6 / Dual-Stack for B2B Customers

Ensuring the use of CS-APNs in dual-stack mode (IPv4/IPv6) in combination with MPLS VPN and IPSEC VPN.

• Project management including test planning, test coordination and go-live management
• Technical coordination for activating IPv6 functionality for B2B connections

eSIM Manager – Product Development for B2B Customers

Development of a tool for the fast and scalable provision of eSIM profiles for business customers.

• Product design and process definition for activating eSIMs on different device types (smartphones, IoT, laptops)
• Collaboration with partners to integrate the solution into existing infrastructures

eSIM Handling B2B – Blanco eSIM Process Integration

Optimization of the eSIM provisioning process through the introduction of dynamic Blanco eSIM processes.

• Definition of new processes for issuing non-activated eSIMs (Blanco) via the frontend and partner community
• Design of the integration into service and IT systems

All-IP 5G NSA – Mobile Access for B2B Internet/Voice Services

Expansion of the All-IP portfolio with mobile 5G access offering higher bandwidth for business customers. (5G Indoor Coverage).

• Project management including test management and go-live preparation
• Interface coordination for introducing Local-SIM-based solutions

5G PN – Campus Roaming / Private Networks

Development and introduction of 5G Private Network (PN) solutions with a focus on industrial applications (IIoT).

• Design and definition of business use cases
• Development of SIM/eSIM processes for 5GPN, including roaming between private and public networks

IPv6 for B2B – Introduction in Mobile and Fixed-Line Products

Introduction of IPv6 support for All-IP products and M2M services in the B2B environment.

• Product and process development for integrating IPv6 (in accordance with RIPE-554)
• Implementation for large customers such as retail chains with several thousand branches in Germany and abroad

• IT interim management
• Functional leadership, establishment and management of the local IT team
• Responsibility for all IT services (e.g. server, storage, backup, network, security and OT services), including planning, setup and operation of these services for the site
• Responsibility for all business services (ERP, sales / configuration, development), including planning, setup and operation of these services for the site
• Ensuring the overall strategic direction of the IT team and integrating this team into the overarching holding functions
• Budgeting and execution of controlling processes, including risk analyses
• Supporting the development of project management standards and methods
• Supporting IT project portfolio management, including the continuous improvement of portfolio standards and methods
• Developing and aligning standards and methods for process management
• Responsible for the availability, capacity and continuity of the relevant IT services
• Responsibility for IT resource management processes
• Project management for various infrastructure projects:
• Storage migration from NetApp to Huawei
• Windows 11 rollout
• Rebuilding a Citrix environment

Tools/Werkzeuge/Methoden: Confluence, Jira

Hardware: HP servers, Fortigate NGFW, storage: Huawei OceanStor, network: HP and Huawei switches, Fortinet WLAN

Software: VMware vSphere, network: Dell switches, Fortinet WLAN, Windows 11, Citrix

Applications: Office-Suite M365, Exchange Online, Azure AD / Entra ID

Project: Rollout of new infrastructure components

• Defined and managed the implementation of an overarching management framework with clear roles and responsibilities as part of the hardware rollout.
• Designed and established governance and control mechanisms, including the development of compliance requirements and processes for continuous quality assurance, supported by ServiceNow.
• Coordinated technical activities between service, infrastructure and specialist teams to ensure the smooth delivery and commissioning of printers and notebooks.
• Created a detailed rollout plan with specific timelines, milestones and responsibilities.
• Managed the procurement, delivery, testing, configuration, installation and on-site commissioning of hardware, including integration into existing IT systems.
• Established and continuously optimized processes for the procurement, distribution and use of printers and notebooks.
• Developed and implemented standardized provisioning processes, analyzed existing procedures, harmonized the processes involved and ensured compliance with security, compliance and quality requirements.
• Introduced agile methods to continuously improve the hardware provisioning process.
• Promoted collaboration through clear responsibilities and communication structures between internal IT teams and external service providers.
• Documented and monitored rollout progress, created rollout reports and tracked hardware implementation in real time.
• Supported change management and organized and delivered training sessions for end users.
• Created user manuals and online resources.
• Analyzed the existing hardware landscape, created hardware inventories, assessed current equipment and checked hardware compatibility.
• Developed detailed infrastructure mappings.
• Planned, organized and conducted structured interviews with key stakeholders and created requirements documents.

• Work within time-critical operating procedures; coordinate issues with customers, partners and central support.
• Maintain reliable handovers and concise incident communication when service, equipment or routing issues occur.

Europe-wide re-platforming & centralization

• Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
• Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
• Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
• Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
• Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
• Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
• Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
• Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff