Windows Server Experts in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Main point of contact for the provisioning of end devices and operating systems
• Pre-installation of software according to company guidelines and integration into the corporate network (Wi-Fi, VPN, domain)
• User support with setup, process improvements, and handling of returns (RMAs)

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Founding and overall responsibility: Built a B2B SaaS platform for craft and construction businesses from the first line of code to the live launch with the first paying customer; solo founding including full establishment of the company and all business processes.
• Product and technology responsibility: Designed and developed the entire product.
• Infrastructure & DevOps: Managed a Kubernetes/Helm environment including CI/CD, monitoring, and security architecture; GDPR-compliant platform decisions and evaluation of EU-hosted LLM providers.
• Agentic coding as a productivity multiplier: Set up a productive multi-agent environment with Claude Code: up to eight parallel agents in isolated Git worktrees, Telegram-based remote control and monitoring, MCP integrations (e.g., Context7, Playwright for E2E tests), and a builder-critic pattern with custom slash commands (/research, /plan) and compressed project contexts. Result: development throughput on par with a small team while working solo.
• Go-to-market: Independently developed positioning, SEO and direct mail playbook, as well as target group analysis.
• Regulation & finance: Implemented e-invoicing requirements (ZUGFeRD/XRechnung), set up accounting and payment infrastructure, and managed funding and financing options.

• Recognition of national notified bodies
• Preparation of cybersecurity competency reports
• EU Radio Equipment Directive

• GfK Data center IT Infrastructure project onsite coordinator (Equinix DC FR2/FR7) training FEs in Equinix DC Carla, FNT, Jira Confluence, ServiceNow (Change/Problem/Incident MGMT), DCIM, ITSM, ITIL
• Reporting significant incidents as the on-site technical coordinator and initial point of contact for vendor escort and smart hands
• Utilizing CMDB-GUI, NIQ-Browser, CMDB-Filtering-GUI, OSS-Radar, BigBrother, CheckMK, and TTWOS for 2nd and 3rd level troubleshooting support
• Maintaining MDF, IDF, computer rooms, and closets; coordinating with service desk, reception, and security for visitor access
• Managing asset lifecycle including operation, retirement, stocking, and destruction with proper SanDisk procedures
• Leading footprint data centre optimization and reduction in FR2/FR7; handling network, server, storage, desktop, hosting, IT security, video conferencing, and telephone operations
• Coordinating server relocations, fibre optics/copper cable preparations, CMDB updates, and stakeholder cooperation
• Implementing IT infrastructure design, maintenance, configuration, and construction following Dell/HP/Apple ESD safety precautions
• Single POC for change management network, Star Track, backup & storage, cloud, Linux, Windows, EUS teams & Software Centre installs
• Successfully completed DC Footprint Reduction Project 2021/2022 and GfK New Hardware DC Refresh Initiative
• Planning, configuring, and installing Dematic server rooms and switch configurations in Heusenstamm, Wurzburg, Kahl am Main, and Graz Austria
• Providing on-site media equipment setup for HP, hospitals, manufacturers, and laboratories
• Ensuring professional rack and cable management following best practices
• Maintaining up-to-date plant maps accessible to all teams showing technology space and spare locations
• Offering technical assistance for live events, town halls, forums, streaming, and hybrid events on and off campus
• Providing second level support for Poly video conferencing systems across multiple time zones
• Conducting frequent computer room walkthroughs, recording power, cooling, alarm, security threats, and mapping wireless environment and access points

• IAUP (Interregional Academy of Personnel Management) commissioned the development of a distance learning system for its secondary school subdivision.
• Development of the website [link]
• Development of a billing system and integration with various payment systems
• Development of a distance learning system based on the open source Moodle solution
• Integration of the distance learning system into the user office on the [link] website
• Front-end: Vue.js v2, Nuxt.js, JavaScript, HTML, CSS, SCSS
• Back-end: LAMP (Linux, Apache, MySQL, PHP), PHP Framework Laravel, Redis, Swagger, MySQL 8.x, PayPal API
• DevOps: Docker, CI/CD, GIT

• Support and optimization of incident, change & problem processes based on ITIL for >10,000 users.
• Problem-solving for >1,000 complex cases/year across different service towers (File Services, Identity, Citrix, ANF).
• Work in the security cluster: vulnerability analysis and firewall change coordination.
• Governance & migration of file services to Azure NetApp Files (M365, Citrix, PowerShell), including data optimization.
• Creation and maintenance of business-critical process & operational services, enterprise documentation.
• Focus on stabilization, security (endpoint hardening), and optimization through AI solutions.

• Responsible for central system administration of the digital electronic file (DMS/ECM)
• Planning and monitoring API integrations
• Conducting training and workshops on using the digital electronic file
• Advising and supporting the implementation of digitization projects for the organizational unit
• Administration of server systems and specialized applications for the organizational unit
• Implementation and operation of municipal software solutions
• Development and implementation of strategic concepts with focus on PLM
• Process analysis and automation of workflows using AI/RPA

• Support for end users by telephone and Skype
• Error diagnosis and problem solving by telephone and remote access
• Independently receiving incident reports
• Forwarding unresolved problems to the appropriate escalation level
• Reinstalling incorrectly installed software or incorrectly configured computers
• Receiving requests and incident reports by email or ticket system
• Identifying and classifying problems and requests
• Performing initial diagnostic steps and attempting solutions for frequently occurring problems
• Providing basic technical support to users in the use of hardware and software
• Forwarding complex problems and requests to 2nd or 3rd Level Support
• Documenting incidents and solutions in a ticket system
• Monitoring and escalating open tickets to ensure that problems are resolved on time
• Communicating with users to provide updates on the progress of problem resolution
• Installing, configuring and maintaining hardware and software components
• Repairing and replacing defective components
• Monitoring and optimizing system performance and network connections
• Supporting the troubleshooting and diagnosis of technical problems
• Installing and configuring operating systems and application software
• Ensuring compliance with security policies and data protection regulations
• Managing user accounts and access rights
• Performing regular backups and recovery processes
• Creating technical documentation and instructions
• Training users in the use of IT systems and applications
• Technologies/Methods: Skype, ticket system

• Evaluation of further training options in the field of artificial intelligence
• Development of a business plan for self-employment in the AI sector
• Development of an offline chatbot for Excelsior GmbH
• Preparation for the "AWS Certified Solutions Architect – Associate" certification to expand cloud skills