Jan André Tiedemann

Cloud Solution Architect · Azure Network & Security · Microsoft Deutschland GmbH

Azure · Identity · Active Directory · Network Security · PKI · PowerShell

Profile

Diplom‑Informatiker with 25+ years of experience designing, securing and operating Microsoft enterprise platforms. Currently a Cloud Solution Architect at Microsoft EMEA (previously Senior Premier Field Engineer), advising large customers on Azure adoption, Active Directory, Entra ID, PKI, identity federation and network‑edge security. Equally comfortable in the engine room (PowerShell, Kerberos, IPv6/IPSec, ADFS, IIS) and at the whiteboard with executive stakeholders. Maintainer of several open‑source PowerShell security toolkits.

Professional Experience

Cloud Solution Architect (19+ yrs at Microsoft)

03/2007 — present

Microsoft Deutschland GmbH · Munich (Unterschleißheim)

  • Cloud Solution Architect (07/2023 → present) — trusted architect for Microsoft enterprise customers across EMEA on Azure adoption, hybrid identity, Active Directory, Entra ID, ADFS, PKI and network‑edge security.
  • Cloud Solution Architect — Engineering (08/2022 → 07/2023) — drove cloud architecture, modernisation and Zero‑Trust roadmaps end‑to‑end, from technical decision frameworks to executive briefings and hands‑on enablement.
  • Senior Customer Engineer — EMEA Apps & Infrastructure (07/2020 → 08/2022) — EMEA‑wide proactive and reactive delivery for large enterprise customers.
  • Senior Premier Field Engineer (03/2007 → 08/2022) — Master Trainer for DirectAccess (IPv6, IPSec); designed and delivered the internal “DirectAccess Assessment” service and the corresponding international training curriculum. Member of the Microsoft test team for the Web Application Proxy role in Windows Server 2012 R2.
  • Delivered Security & Health‑Check Assessments at customers including DAK, TÜV Nord, Südzucker, Sanofi, Allianz (AMOS, ASIC) and multiple Middle‑East enterprises.
  • Led implementations of Threat Management Gateway, Unified Access Gateway, ADFS federation and reverse‑proxy publishing of Exchange & SharePoint.
  • Author of multiple TechNet articles around TMG, IIS and UAG; speaker on identity, cloud and edge‑security topics across EMEA.

Senior Active Directory Architect

01/2004 — 02/2007

Allianz · Unterföhring

  • Member of the Active Directory Engineering Team.
  • Technical project lead for the migration of 80,000 users and 120,000 groups from Windows NT 4.0 account domains into the new Allianz Active Directory.
  • Designed and rolled out the Disaster‑Recovery solution for the Active Directory of the Allianz group.
  • Drove the IBM Lotus Notes → Microsoft Exchange 2003 migration; introduced Microsoft Identity Integration Server (MIIS).
  • Led the AD Health Check engagement with Microsoft; co‑authored the Windows XP enterprise workplace concept.
  • Owned the migration of Microsoft Operations Manager (MOM) 2000 → 2005 and the Windows Server 2003 x64 domain‑controller refresh plan.

Windows System Engineer

11/2000 — 12/2003

Dresdner Bank AG · Frankfurt am Main

  • Active Directory and Internet Information Services Engineer.
  • Co‑designed and implemented the original Active Directory for the Dresdner Bank group.
  • Migrated 600 NT 4.0 branch domains into the consolidated central AD forest.
  • Authored the hierarchical AD administration role‑model — drastically reducing the number of Domain Admins across the bank.
  • Member of the Dresdner Bank “Directory Services” Technical Control Board; built the AD test & development forest (ADT) and MOM 2000 monitoring.

NT System Engineer

03/1998 — 10/2000

Dresdner Bank AG · Frankfurt am Main

  • Windows NT and Fibre Storage specialist.
  • Evaluated and introduced SAN / Fibre Channel storage for central Windows NT servers (QLogic / Emulex HBAs, Comparex & EMC arrays, Arbitrated Loop / Fabric / P2P).
  • Rolled out IBM Netfinity 1U servers with Fibre Channel connectivity into the production environment.
  • Automated NT 4.0 deployment and operations; administered central NT domains and departmental IIS 4.0 web servers; product owner for SQL BackTrack with ADSM.

Core Skills

Identity & Access

Active Directory · Entra ID · Entra ID Connect (hybrid sync) · ADFS · Kerberos · MFA · Conditional Access · MIIS / FIM · Smartcard logon · RBAC

Security

Enterprise PKI · Server hardening · Threat & Risk assessments · NTLM/RC4 auditing · RDP forensics · Spectre/MDS mitigation

Networking & Edge

Azure VPN (S2S / P2S) · Azure Application Gateway & WAF · IPv6 · IPSec · DirectAccess · Web Application Proxy · UAG · TMG · IIS · Reverse‑proxy publishing of Exchange & SharePoint

Automation & Code

PowerShell (production modules, Pester, Sampler) · C# .NET · WSH/VBScript · Azure DevOps / GitHub Actions CI/CD · GitVersion

Platforms

Windows Server 2003 → 2025 · Microsoft Exchange · SharePoint · MOM / SCOM · Microsoft Operations Manager

Methods & Soft Skills

Workshop facilitation · Executive briefings · EMEA‑wide training · Pre‑sales consulting · Project leadership · Bilingual delivery (DE/EN)

Open‑Source Projects

Education

Dipl.‑Informatiker (FH) — Computer Science

09/1994 — 09/1998

Fachhochschule Frankfurt am Main

Specialisation: Digital Signal Processing. Diploma thesis at Commerzbank AG (Frankfurt) — "Web‑based database query system" on Oracle NT, PL/SQL and Perl.

Vocational training — Industrial Mechanic

1989 — 1992

Hoechst AG · Frankfurt am Main

Specialisation: plant & operations engineering. Foundation in disciplined problem‑solving and hands‑on engineering.

Languages

  • German · native
  • English · fluent (C1)
  • Spanish · conversational

Background

Born and raised partly in La Paz, Bolivia (1974 – 1983). Comfortable working in international, multi‑cultural environments.