Senior Architect for Cloud & Data

4/2023 – offen

- Assessed the newly built “beta version” of the global enterprise Azure environment to extend / improve it to become truly enterprise ready and scalable to fit all new cloud native application needs and to migrate off all workloads from on-premise data centers.
- Based on Microsoft Cloud Adoption Framework (CAF): revisited / redesigned / reengineered:
◦ Management Groups and Landing Zone design
◦ Infrastructure as code / cloud automation stack & reusability across the organization
◦ Central logging solution incl. SIEM (Sentinel)
◦ Role Based Access Control (RBAC) model incl. Privileged Identity Management (PIM)
◦ Cloud governance enforcement using Azure Policies
◦ Cloud Security Posture Management using Azure Defender
◦ Hub & spoke networking & on-prem connectivity
◦ High availability / Disaster Recovery capabilities
- Established cloud cost transparency via reporting and advised conc. cloud cost management tactics (right-scaling, reserved instances, auto-scaling, auto-shutdown, ephermal computing, etc.)
- Consulted, advised and accompanied application teams to design cloud native application architectures and to migrate into the new Azure cloud environment
- Designed / engineered dozens of reusable Terraform code modules to deploy the complete cloud platform and to deploy various Azure IaaS and PaaS in application projects
- Designed / defined guidelines and guardrails to use Azure PaaS / IaaS offerings to meet GxP infrastructure qualification requirements
- Analysed existing on-prem IT infrastructure and applications to establish & drive cloud migration roadmaps
- Technology focus: Azure, Terraform / Terragrunt, Azure Policies, Azure networking, Log Analytics, Sentinel, Azure Defender, Azure Privileged Identity Management, various Azure IaaS and PaaS, GitHub Enterprise

Solution Architektur, Cloud Computing, IaaS (Infrastructure as a Service), Infrastrukturarchitektur, IT-Governance, Microsoft Azure, PaaS (Platform as a Service)

1/2023 – 2/2023

- Designed / defined the binding guidelines and guardrails to integrate Azure PaaS / IaaS offerings into the corporate cloud environment. Focus hereby on Azure Storage, Azure Key Vault, Azure SQL, Azure App Service, Azure Virtual Machine and the topics Backup & Restore, High Availability, Disaster Recovery, Scalability, Networking, Governance via Azure Policies.
- Designed global Cloud Automation Platform and collaboration processes based on Terraform and vRealize to allow decentral DevSecOps Teams and central Managed Service Teams to jointly develop and reuse code and patterns

Cloud Computing, IaaS (Infrastructure as a Service), IT-Governance, Microsoft Azure, PaaS (Platform as a Service), Solution Architektur

10/2020 – 12/2022

- Redesigned and engineered the global enterprise Azure environment for IaaS and PaaS/cloud native workloads based on Microsoft Enterprise Scale Framework
- Designed and engineered infrastructure as code / cloud automation
- Designed and engineered central logging aggregation solution for SIEM integration
- Designed and engineered cloud governance using Azure Policies
- Designed and engineered corporate firewall and network automation for zero-trust hub & spoke networking
- Designed and engineered cloud infrastructure monitoring and alerting
- Consulted, advised and accompanied global application teams in their migration efforts into the new Azure cloud environment
- Worked in the global Architecture Review Board to ensure that applications are built in a cloud first / cloud native manner
- Helped to setup the new global Cloud Centre of Excellence (CCoE) and led the Cloud Architecture Team within the CCoE
- Technology focus: Azure, Powershell, ARM, Terraform, Azure Blueprints, Azure Policies, Azure App Service, Azure SQL, Azure Storage, AKS, Cosmos DB, Azure Service Bus, Azure Event Hub, Azure Monitor, Azure networking, Azure DevOps

Cloud Computing, IaaS (Infrastructure as a Service), Infrastrukturarchitektur, IT-Governance, Microsoft Azure, PaaS (Platform as a Service), Solution Architektur