Cybersecurity & Zero Trust
Design, build & operations
Zero Trust ArchitectureSecurity by DesignZscaler ZIAZscaler ZPASecurity Service EdgeVulnerability ManagementTARA (Threat Analysis & Risk Assessment)Zscaler ZDXSIEMSplunkIAM
Areas of expertise
What I cover
Compliance & Frameworks
NIST SP 800-171Cyber Resilience ActISMS based on ISO/IEC 27001BSI IT-Grundschutz (BSI Standards 200-1 to 200-3, Compendium)VS-NfD
Microsoft Cloud
Design, build & operations
Conditional Access & PIMEntra IDMicrosoft 365IntuneHybrid ConnectivityAzureDefenderGraph / PowerShell
Microsoft On-Premises
Design, build & operations
Active DirectoryAD HardeningGroup PoliciesWindows ServerPowerShell
Workplace & Endpoints
Design, build & operations
macOSiOSWindowsLinuxAndroidMobile DevicesDesktop PCsMini PCsNotebooksMDM with Microsoft IntuneMAM with Microsoft Intune
Linux & Platform Services
Design, build & operations
HardeningWeb Server & Reverse ProxyDebian / UbuntunginxHAProxyEnterprise LinuxRHELSELinuxDocker
Network & Firewall
Design, build & operations
Network DesignSegmentation & Zone ModelsDNSUniFiWireGuardVPNOPNsense
Design & concept
Firewall Architecturevendor-agnostic (Cisco, Palo Alto, Sophos)
Automation & IaC
Design, build & operations
GitOpsCI/CDAnsibleSemaphoreGitPythonGitea RunnerInfrastructure as CodeAnsible Automation Platform
Architecture & Governance
Design, build & operations
Target & Reference ArchitecturesKanbanJira / ConfluenceProject & Team ManagementDigital TransformationSoftware & System DocumentationArchitecture Decision RecordsPRINCE2Scrum
Design & concept
Software ArchitectureDesign Authority
Further
CTOInterim CTO
Supplier Security & Software Supply Chain
Design, build & operations
Dependency-TrackCycloneDXSPDX
Design & concept
Supplier AuditsOpen Source StrategyVendor Security OrganisationVendor Secure DevelopmentCybersecurity Assessments for Connected DevicesDependency Analysis in Code (package.json, requirements.txt, etc.)Cyber Resilience ActSBOM
Software Development
Design, build & operations
Test Driven DevelopmentPythonDjangoC#C / C++Node.jsEmbedded / Microcontrollers (ST, Atmel)JavaScriptExpress.jsjQueryPrologI2C / SPI / UARTGitLabGitHub
IoT & Wireless
Design, build & operations
IoT ArchitectureDevice-to-Cloud ConnectivityIoT PlatformsAsset TrackingWireless Technology SelectionSmart Home & Smart BuildingSecure Wireless Building AutomationCoAPBACnetWi-FiBluetoothZigBeeZ-WaveGSM / LTE / LTE-MNB-IoT5GLoRa / LoRaWANIEEE 802.15.4Node-REDConnected CarLwM2MmiotySigfoxWireless M-Bus
AI Strategy & AI-Driven IT
Design, build & operations
AI StrategyAI ArchitectureAI-Assisted Development & OperationsAI-Assisted IT OperationsAI-Driven AutomationAI Agents & WorkflowsClaude Coden8nSovereign Use of AIMicrosoft Copilot StudioPower Automate
Data Center & Virtualization
Design, build & operations
Multi-Site Operations & Geo-RedundancyVirtualizationHigh AvailabilityProxmox VE
Design & concept
Data Center & Operations Conceptsvendor-agnostic (VMware vSphere)
Operations & Monitoring
Design, build & operations
Monitoring & AlertingLoggingZabbixNextcloudMattermostrsyslog
Backup & Recovery
Design, build & operations
Bareos / BaculaRestore Tests
Design & concept
Backup ConceptsIT Contingency Managementvendor-agnostic (Veeam)