Profile
Diplom‑Informatiker with 25+ years of experience designing, securing and operating
Microsoft enterprise platforms. Currently a Cloud Solution Architect at
Microsoft EMEA (previously Senior Premier Field Engineer), advising large customers on
Azure adoption, Active Directory, Entra ID, PKI, identity federation and network‑edge
security. Equally comfortable in the engine room (PowerShell, Kerberos, IPv6/IPSec,
ADFS, IIS) and at the whiteboard with executive stakeholders. Maintainer of several
open‑source PowerShell security toolkits.
Professional Experience
Cloud Solution Architect (19+ yrs at Microsoft)
03/2007 — present
Microsoft Deutschland GmbH · Munich (Unterschleißheim)
- Cloud Solution Architect (07/2023 → present) — trusted architect for Microsoft enterprise customers across EMEA on Azure adoption, hybrid identity, Active Directory, Entra ID, ADFS, PKI and network‑edge security.
- Cloud Solution Architect — Engineering (08/2022 → 07/2023) — drove cloud architecture, modernisation and Zero‑Trust roadmaps end‑to‑end, from technical decision frameworks to executive briefings and hands‑on enablement.
- Senior Customer Engineer — EMEA Apps & Infrastructure (07/2020 → 08/2022) — EMEA‑wide proactive and reactive delivery for large enterprise customers.
- Senior Premier Field Engineer (03/2007 → 08/2022) — Master Trainer for DirectAccess (IPv6, IPSec); designed and delivered the internal “DirectAccess Assessment” service and the corresponding international training curriculum. Member of the Microsoft test team for the Web Application Proxy role in Windows Server 2012 R2.
- Delivered Security & Health‑Check Assessments at customers including DAK, TÜV Nord, Südzucker, Sanofi, Allianz (AMOS, ASIC) and multiple Middle‑East enterprises.
- Led implementations of Threat Management Gateway, Unified Access Gateway, ADFS federation and reverse‑proxy publishing of Exchange & SharePoint.
- Author of multiple TechNet articles around TMG, IIS and UAG; speaker on identity, cloud and edge‑security topics across EMEA.
Senior Active Directory Architect
01/2004 — 02/2007
Allianz · Unterföhring
- Member of the Active Directory Engineering Team.
- Technical project lead for the migration of 80,000 users and 120,000 groups from Windows NT 4.0 account domains into the new Allianz Active Directory.
- Designed and rolled out the Disaster‑Recovery solution for the Active Directory of the Allianz group.
- Drove the IBM Lotus Notes → Microsoft Exchange 2003 migration; introduced Microsoft Identity Integration Server (MIIS).
- Led the AD Health Check engagement with Microsoft; co‑authored the Windows XP enterprise workplace concept.
- Owned the migration of Microsoft Operations Manager (MOM) 2000 → 2005 and the Windows Server 2003 x64 domain‑controller refresh plan.
Windows System Engineer
11/2000 — 12/2003
Dresdner Bank AG · Frankfurt am Main
- Active Directory and Internet Information Services Engineer.
- Co‑designed and implemented the original Active Directory for the Dresdner Bank group.
- Migrated 600 NT 4.0 branch domains into the consolidated central AD forest.
- Authored the hierarchical AD administration role‑model — drastically reducing the number of Domain Admins across the bank.
- Member of the Dresdner Bank “Directory Services” Technical Control Board; built the AD test & development forest (ADT) and MOM 2000 monitoring.
NT System Engineer
03/1998 — 10/2000
Dresdner Bank AG · Frankfurt am Main
- Windows NT and Fibre Storage specialist.
- Evaluated and introduced SAN / Fibre Channel storage for central Windows NT servers (QLogic / Emulex HBAs, Comparex & EMC arrays, Arbitrated Loop / Fabric / P2P).
- Rolled out IBM Netfinity 1U servers with Fibre Channel connectivity into the production environment.
- Automated NT 4.0 deployment and operations; administered central NT domains and departmental IIS 4.0 web servers; product owner for SQL BackTrack with ADSM.
Core Skills
Identity & Access
Active Directory · Entra ID · Entra ID Connect (hybrid sync) · ADFS · Kerberos · MFA · Conditional Access · MIIS / FIM · Smartcard logon · RBAC
Security
Enterprise PKI · Server hardening · Threat & Risk assessments · NTLM/RC4 auditing · RDP forensics · Spectre/MDS mitigation
Networking & Edge
Azure VPN (S2S / P2S) · Azure Application Gateway & WAF · IPv6 · IPSec · DirectAccess · Web Application Proxy · UAG · TMG · IIS · Reverse‑proxy publishing of Exchange & SharePoint
Automation & Code
PowerShell (production modules, Pester, Sampler) · C# .NET · WSH/VBScript · Azure DevOps / GitHub Actions CI/CD · GitVersion
Platforms
Windows Server 2003 → 2025 · Microsoft Exchange · SharePoint · MOM / SCOM · Microsoft Operations Manager
Methods & Soft Skills
Workshop facilitation · Executive briefings · EMEA‑wide training · Pre‑sales consulting · Project leadership · Bilingual delivery (DE/EN)
Education
Dipl.‑Informatiker (FH) — Computer Science
09/1994 — 09/1998
Fachhochschule Frankfurt am Main
Specialisation: Digital Signal Processing. Diploma thesis at Commerzbank AG (Frankfurt) — "Web‑based database query system" on Oracle NT, PL/SQL and Perl.
Vocational training — Industrial Mechanic
1989 — 1992
Hoechst AG · Frankfurt am Main
Specialisation: plant & operations engineering. Foundation in disciplined problem‑solving and hands‑on engineering.
Languages
- German · native
- English · fluent (C1)
- Spanish · conversational
Background
Born and raised partly in La Paz, Bolivia (1974 – 1983). Comfortable working in international, multi‑cultural environments.