Security Architecture & Engineering | Cloud | DevSecOps | App Security | Monitoring | SIEM | IAM

12/2025 – 1/2026

• Security audit of a cloud-first Azure Databricks environment against Microsoft Cloud Security Benchmark & Azure
Policy.
• IAM security assessment including EntraID attack-path analysis
• Network security assessment including Azure Firewall, NSG rules

Corporate Identity, Cyber Security Engineer

8/2024 – 3/2026

• IAM security hardening and EntraID SSO integration for Snowflake and custom applications (OAuth2.0, SCIM)
• Assessment of mission-critical applications to identify security-relevant logs, with configuration of forwarding
pipelines into the enterprise SIEM.
• Security assessment and threat modeling for mission-critical applications (.Net, Python, Node.js) hosted in AWS.
• Vulnerability management and remediation coordination with development teams (Orca Security, Qualys)
• Backup and recovery architecture design and implementation with Azure DevOps and Terraform.
• CI/CD security audit focusing on pipeline permissions and injection attack vectors.
• Automated security scanning across .Net, Python, Node & Terraform using GitHub Advanced Security and Trivy.
• Design and implementation of a Secure Software Development Lifecycle in an Agile environment, including knowledge transfer to development teams and establishment of ongoing security processes

Amazon Web Services (AWS), Cloud Spezialist, Cyber Security Engineer, DevOps, Kubernetes, Software Architecture

3/2024 – 2/2025

• IAM architecture for a multi-tenant hybrid infrastructure, based on EntraID, Active Directory (AD), and Entra Cloudsync.
• Enabled strict separation between IT and OT according to the Purdue Model.
• Designed IAM tiering concept covering On-Premise Active Directory and the EntraID Cloud environment.
• Onboarding of MS Sentinel as a SIEM solution.
• Rollout of MS Defender for Endpoint, MS Defender for Identity, MS Defender for Cloud.
• Rollout of security policies for USB-whitelisting, Attack Surface Reduction and Anti-Virus via Intune and GPOs.

Cyber Security, IT Architekt Informationssicherheit, Microsoft Azure

3/2024 – offen

* Consulting as Cloud Security Architect.
* Understanding and assessment of complex IT security infraestructures.
* Help towards Threat modelling and design of security controls for such infraetructures.

DevOps, Microsoft Azure, Architekturinformatik, Cyber Security

10/2021 – 3/2024

• Cloud architecture design and implementation for R&D teams, including Azure resource provisioning with Terraform.
• Design and implementation of IAM concept based on EntraID.
• Implementation of privileged identity management via EntraID.
• Enforcement of least privilege access and need-to-know model via structured role-based access control (RBAC) and
access.
• Requirements engineering and project planning for R&D projects.
• Coordination of internal R&D and external clinical partners across multiple projects.
• SecDevOps pipeline with SonarCloud for automated code quality and security; Azure App Registration with
OAuth2.0 for internal tools.
• Security posture improvement through RBAC and privileged access management.
• Lead architect of a double-blinded medical image evaluation platform (C#, React.js, Azure SQL, EntraID with MFA)
• Core C++ development for FDA-compliant DICOM image generation.
• React.js OHIF DICOM viewer extension with authenticated access to Azure Storage.
• Data analysis tooling in Python and C++, including signal processing routines and Power Automate workflows for
automated reporting.

Amazon Web Services (AWS), Cloud Computing, Cyber Security, Cyber Security Engineer, DevOps, Google Cloud, Microsoft Azure, Microsoft Office 365, Requirement Analyse

7/2020 – 7/2021

* Consulting on the development of novel methodologies for eye scanning
* Review of existing methodologies and algorithm implementation
* Work together with Dr. Fabian Müller, Clinical Research & Application

C++, Forschung & Entwicklung, Python

9/2018 – 10/2021

* Development of a Python-based solver for dynamic imaging of microbubbles in the bloodstream with ultrafast ultrasound imaging.
* Application containerization with Docker.
* Container Orchestration with Azure Kubernetes Services (AKS) for scalability.
* Securing the application (CVE scanning for container images, Kubernetes secrets for injecting sensitive data into pods, secure configurations, authentication, and authorization).
* Parallelization of algorithms with CUDA.
* Speaker in multiple international applied mathematics conferences and organization within them.
* Teaching of master and bachelor level courses on numerical computation and optimization.
* Bleeding-edge research on optimization methods.

C++, Docker, Forschung & Entwicklung, Kubernetes, Python