IT Security Architect & IAM Consultant | MIM/FIM, PKI | Product & Software Architecture

1/2024 – offen

Founder-led development of an options analytics and trading-workflow platform, currently in pre-launch development. Work began independently in January 2024 and subsequently continued through GammaNova Inc.

• Lead product design, system architecture and hands-on application development.
• Implement authentication, role-based access controls, user-data isolation and encrypted storage of broker credentials.
• Integrate market-data and broker APIs for analytics, strategy testing and portfolio workflows.
• Build AI-assisted explanations and decision support grounded in deterministic financial calculations.
• Establish container-based deployment, background processing, automated tests and application monitoring.

Technology: TypeScript, React/Next.js, Node.js, PostgreSQL, Redis/Valkey, Docker, REST APIs, OAuth 2.0 and AI/LLM APIs.

Docker, Node.Js, React (JavaScript library), System Architektur

11/2015 – 12/2023

Delivered identity management consulting for DÜRR through Fox Department, supporting a global Microsoft identity platform.

• Developed and deployed Microsoft Identity Manager (MIM) processes for automated identity lifecycle management; designed and managed the supporting infrastructure and operations.
• Migrated the identity platform from Forefront Identity Manager (FIM) to MIM.
• Built and enhanced Management Agents integrating Active Directory, Azure AD and Azure AD Connect, Microsoft 365, Exchange, SQL, AD LDS and SAP/SIAM.
• Developed custom C# and PowerShell workflows for account provisioning and identity processes.
• Automated Microsoft 365 mailbox provisioning in a hybrid Exchange environment using a custom PowerShell Management Agent.
• Adapted identity integrations and lifecycle processes for carve-outs, mergers and acquisitions.

Access Management, Active Directory, C#, Microsoft Azure, Microsoft Exchange, Microsoft Office 365, SQL, Windows Powershell

5/2004 – 9/2015

Led information security architecture and technical delivery across EMEA, coordinating internal teams, external specialists and managed security services.

• Designed and delivered global Microsoft FIM identity lifecycle automation across a multi-domain Active Directory environment. Integrated SAP HR/GRC, Azure/Microsoft 365, AD LDS, Flexera and IET (SMT), including provisioning, notifications and approval workflows.
• Led global Microsoft PKI and FIM Certificate Management deployment.
• Evaluated and implemented Avecto PrivilegeGuard/Defend and policy-based privilege elevation to reduce local administrator access while maintaining business application functionality. Defined privileged-access request procedures.
• Established vulnerability assessment and remediation programmes, including regular global assessments and annual third-party reviews of e-commerce data centres, infrastructure, telecoms, ERP/SAP and EDI.
• Supported PCI DSS and SOX compliance, reporting and security activities during mergers and acquisitions. Implemented Symantec Enterprise Manager (SEM) for compliance reporting.
• Deployed IBM/ISS Proventia intrusion detection and prevention systems with SiteProtector across EMEA, including security policies, operational processes and SOC coordination.
• Delivered Symantec endpoint protection, McAfee mail security and secure instant messaging; built central logging and vulnerability-scanning infrastructure.
• Reviewed Cisco firewalls and designed Check Point rules protecting ERP, EDI and e-commerce production systems.
• Designed Active Directory and e-commerce data-centre infrastructure and supported consolidation into central systems.
• Coordinated operational handover and support-team training.

Access Management, Active Directory, Check Point (allg.), Cisco Firewalls, Firewalls, IDS (Intrusion Detection System), Informationssicherheit, IT Sicherheit (allg.), McAfee (allg.), Projektleitung / Teamleitung (IT), SAP GRC, SAP HR / SAP HCM, SAP Sicherheit (allg.), Symantec Endpoint Protection