Microsoft Azure Cloud Solution Architect

6/2022 – 8/2024

• Implemented Azure Landing Zones based on Cloud Adoption Framework best practices:
• Terraform state files in Azure storage accounts / PostgreSQL (managed service setup for multiple customers)
• IaC version control & collaboration with Git in Azure DevOps
• Resource organisation with multiple subscriptions, management groups and tags
• Hub and spoke network setup with site-to-site VPN connections
• Identity and access management for service principals
• Credential rotation for service principals (Azure Key Vault, Azure DevOps pipelines)
• Naming convention, governance and security (Azure Policy)

• Managed infrastructure with Terraform, ARM templates & Azure DevOps
• Consulted on cloud security, networking, DevOps workflows & business processes
• Implemented PoCs, monitoring dashboards & permission management (Entra ID)
• Implemented and monitored Microsoft Defender for Cloud
• Implemented custom networking and firewall setup (Fortigate IaaS, VPN, VNet Peering)
• Provided technical support, documentation & training materials
• Created project plans with timelines, milestones and resource planning
• Conducted workshops for requirements gathering & architecture presentations
• Consulted on licensing & Entra ID setup during PowerPlatform CoE implementation

Agile Methodologie, Confluence, DevOps, Iaas, Infrastrukturarchitektur, Microsoft Azure, Microsoft Office 365, Systemmigration, Scrum, Technische Dokumentation

8/2018 – 5/2022

• Administered Azure infrastructure & Azure Active Directory / Entra ID configurations
• IaC deployments & template management with ARM templates & PowerShell
• Configured networking, update management, backup, file sync, monitoring & alerting
• Migrated servers from local datacenters to Azure
• Set up Privileged Identity Management (PIM) with access reviews
• Identity and access management for cloud resources & web services

Agile Methodologie, Cloud Computing, Confluence, DevOps, Iaas, Infrastrukturarchitektur, Microsoft Azure, Windows Powershell, Server-Monitoring

12/2012 – 7/2018

• Administered and updated databases, servers and sets of websites
• Provided identity and access management and user support
• Migrated webservers, file shares & databases to secure standards (https, SFTP)
• Updated websites, CMS and plugins (MySQL, JSON, PHP, Typo3, Drupal, WordPress)
• Supported website relaunches for responsive design and CMS updates
• Maintained databases for press images and address management

Identitätsmanagement, Server Administration, Systemmigration, Web Services