This site is still taking shape – more content is on its way.

In detail

Skills

What I bring – organised by the six areas that work together in IT.

Tools at a glance

Bold with a dot: in depth. Everything else: solid hands-on practice.

Operations and platforms

  • Linux (in depth)
  • Docker (in depth)
  • Windows Server
  • virsh (in depth)
  • RAID, LVM, filesystems (in depth)
  • Nginx (in depth)
  • Apache (in depth)

Automation and development

  • Ansible (in depth)
  • Python (in depth)
  • GitLab CI/CD
  • REST-APIs

Monitoring

  • Zabbix (in depth)
  • Grafana

Collaboration and cloud

  • Atlassian Cloud and Data Center (Jira, Confluence, Assets) (in depth)
  • Microsoft 365 (in depth)
  • Entra ID
  • S3 storage cluster

Security and identity

  • Keycloak
  • Firewalls, iptables
  • SSH (in depth)
  • LDAP
  • Vault
  • SPF, DKIM, DMARC
  • CVE and update management (in depth)

AI

  • vLLM
  • Own AI server

Networking

  • MikroTik
  • Meraki
  • DNS (in depth)
  • DHCP (in depth)
  • SSL/TLS (in depth)

Larger projects

  • Atlassian migration to the cloud

    Moving Jira and Confluence to the cloud – as one of the main people carrying it out.

  • Automated security reviews for service deployments

    Pipelines that automatically check service deployment projects for security – including reviews with AI.

  • Backup system with built-in tests

    A backup system whose backups are validated by built-in tests – the subject of my bachelor thesis.

    See the thesis below

Experience by area

People

    • Leading an IT team of around eight people
    • Vocational trainer in the IT team – trainer qualification (AEVO), IHK Aachen (February 2025)
    • Guided two apprentices through to their final qualification
    • Staff appraisals and performance reviews
    • Leading an IT department
    • Technical support for colleagues
    • Working in a Spanish-speaking environment

Organisation

    • Licence and supplier management
    • KPI and business reporting
    • Budget planning
    • Procurement of IT equipment
    • Coordination with providers
    • Support for ERP roll-outs

Environment

  • Systems and virtualisation

    • Linux servers and Windows systems: operation, service management, configuration management and standardisation (in depth)
    • Virtualisation and containers: Docker, libvirt (virsh) (in depth)

    Data and backup

    • RAID, LVM, filesystems (in depth)
    • S3 storage cluster
    • Backup systems: operation, development and thesis

    Services

    • Web servers (Nginx, Apache) with SSL/TLS and web hosting (in depth)
    • DNS, DHCP (in depth)
    • Samba, FTP
    • Email authentication and deliverability (SPF, DKIM, DMARC)

    Identity and access

    • Administering Microsoft 365, including Entra ID and policies (in depth)
    • Keycloak, LDAP, Vault, automated user accounts
    • SSH: access and certificates, server configuration including ciphers (in depth)

    Hardware and inventory

    • Clients, servers and laptops: design, evaluation, assembly and procurement
    • Developer workstations: set-up with Ansible, performance measurement
    • IT asset inventory with Snipe-IT

Network

    • Network and Wi-Fi projects
    • DNS, DHCP, SSL (in depth)
    • Firewall configuration, including iptables
    • Firewalls for several sites, versioned in Git and rolled out by script
    • MikroTik, Meraki
    • Satellite internet for remote mines

Support

    • IT support, from student assistant to IT Support Specialist
    • Restoring satellite internet for remote mines
    • Monitoring and alerting with Zabbix and Grafana (in depth)
    • IT security: security reviews, CVE tracking and update management (in depth)

Knowledge

  • Documentation and tools

    • Documenting IT services and network topologies
    • Administering Jira and Confluence (Data Center and Cloud), including Assets (in depth)
    • Introducing internal tools

    Automation and development

    • Ansible, Python, CI/CD pipelines with GitLab (in depth)
    • REST APIs: Python scripts to manage and maintain different interfaces
    • Complete service implementation: from storage and Ansible scripts through deployment and configuration, with backup and monitoring
    • Automated security checks in pipelines, including AI reviews
    • Scripting, HTML/PHP, CMS, SQL basics, plus basics of C# and C++

    AI

    • Hands-on use of AI tools: steering context, giving a head start
    • Setting up an own AI server with a model and vLLM

Languages

German
Native
Spanish
Near-native
English
Very good

Thesis

Bachelor thesis · B.Sc. Computer Science

Entwicklung eines durch inhärente Tests validierten Backup Systems für die ModuleWorks GmbH

Title translated, original in German: Development of a Backup System Validated by Inherent Tests for ModuleWorks GmbH

A backup system whose backups are validated by built-in tests – developed for ModuleWorks GmbH.

FH Aachen, Department of Electrical Engineering and Information Technology

In cooperation with
ModuleWorks GmbH
Submitted