Recommended expert
Christian Enderle
IT Consulting / IT Rebuild
Experience
Jun 2022 - Apr 2024
1 year 11 monthsIT Consulting / IT Rebuild
IT Rebuild (PF)
- Analyzing requirements and the current state
- Migrating an old domain structure and Tobit system to Exchange 2019 with connection to MS365
- Evaluating implementation options and planning the protection of sensitive data
- Planning according to BSI IT baseline protection, German Federal Data Protection Act (BDSG), and GDPR
- IT governance and IT security backtests
- Supporting ERP setup and securing mail transfer
- Hyper-V 2016/2022, Microsoft Terminal Services Cluster, Microsoft Exchange 2019
- Office 365, Microsoft 365, Azure AD, Teams, Salesforce
- Cisco, Zyxel, and HP switches, Sophos firewalls/UTMs, SecurePoint
- Microsoft IIS 2022, IPv4/IPv6, Veeam, Wortmann Online Backup, NextCloud
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, group policies (GPO), SIEM, remote work, home office, high availability, failover, VLAN, PRTG
May 2022 - Apr 2023
1 year2nd / 3rd Level Linux System Engineer / Consultant
IT/Linux Landscape Support (SIE)
- Migrating native installations into virtual environments
- Consulting and support for high-availability implementations and IT security (VPN/WLAN)
- Testing procedures for evaluation and authentication consulting
- Analytical identification of root causes (repair vs. rebuild)
- Evaluating future viability and coordinating involved teams
- Windows VDI, Proxmox Virtual Environment 7.x, pfSense firewall
- VPN: IPSec with smart card authentication, WireGuard, load balancing
- Office 365/Teams analysis on Linux, Citrix VDI, NetScaler
- Azure/MS365 integration with Linux, Debian OS, Ubuntu, VMware, SIEM, 2FA, GitLab, Ansible, Kubernetes
Apr 2021 - Jun 2022
1 year 3 months2nd / 3rd Level Microsoft System Engineer / Consultant
Multinational Environment (ZE)
- Analyzing and rebuilding terminal servers in a multi-hierarchical environment for 45,000 global users
- Troubleshooting local and global incidents and escalation management
- User training on responsive handling of systems and errors
- Building a proof of concept as a technical benchmark
- Windows Terminal Services / Remote Desktop Services (2008 to 2022), VMware ESXi, VMware vCenter
- NetApp storage, TrueNAS/FreeNAS, Microsoft clustering features, SQL Server
- Load balancing, Office 365, Teams, hybrid setup, email encryption
- Citrix VDI, NetScaler, Symantec AV, Azure/AWS, FSLogix, 2FA, SIEM
- System monitoring with Prometheus/Grafana and Zabbix
- Services: VDI, Active Directory, LDAP, Doors, Integrity, BCM, group policies, Remedy
Feb 2021 - Mar 2021
2 monthsIT Security Consultant
Hafnium Hack Incident Handling
- Crisis management due to global attacks on Exchange servers at new clients in SMEs, healthcare, and local authorities
- Investigating the hack, analyzing the attack methods, and isolating infected systems
- Assessing attack vectors and checking for web shells
- Correspondence with executive management for risk assessment from a system security and GDPR perspective
- System hardening and implementation of security measures
- Liaison with security departments of large corporations such as Siemens and Arvato Systems
- Exchange 2013-2019, Office 365, Active Directory, LDAP, Sophos UTM, Fortigate, LanCom, SecurePoint
Dec 2020 - Apr 2024
3 years 5 monthsIT Architecture Project Lead
ASP Structure Setup
- Analyzing requirements and the current state
- Evaluating implementation options and planning the approach
- Preparing the protection of sensitive data according to BSI IT baseline protection, BDSG, and GDPR
- Technical project management and building a system monitoring infrastructure
- IT governance planning and IT security backtests
- Implementing load balancing and high availability
- Hyper-V 2016/2022, Microsoft Terminal Services Cluster, VMware, Proxmox PVE, Proxmox Backup Server
- Citrix, Microsoft Exchange 2019, Windows, Office 365, Microsoft 365, Azure AD
- Cisco, Zyxel, and HP switches, Kubernetes, Sophos firewalls/UTMs
- Debian Linux, NextCloud, SeaFile, Microsoft IIS 2022, Nginx, MariaDB, MySQL, Varnish
- IPv4/IPv6 networking, Zammad, Elasticsearch, Veeam
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, Check_mk, PHP, SIEM, remote work, home office, failover, VLAN
Nov 2020 - Apr 2021
6 monthsManaging System Engineer
Kommune (GS)
- Analysis of requirements and the current situation for 150 employees
- Planning a seamless upgrade path from Exchange 2010 to Exchange 2019
- Support in securing sensitive data and troubleshooting previous configurations
- Consulting in regards to BSI IT baseline protection, German Federal Data Protection Act, and GDPR
- Cleanup of IT legacy issues and technical project management
- Hyper-V 2016/2019, VMware, Windows, Exchange 2010/2013/2019
- Cisco switches, Fortigate firewalls, mail archiving, proxy, email encryption, Veeam backup
Jan 2020 - Apr 2020
4 monthsNetwork Rebuild / IT Consultant
Medizinischer Verbund (MLOS)
- Analysis of requirements and creation of a high-level concept for network routing and segmentation
- Rollout of the network structure according to target definition at various sites
- Troubleshooting a failed 1.5-year telecom rollout project within 1.5 months
- Consulting on special medical requirements, BSI IT baseline protection, and GDPR
- Planning of a high-availability network infrastructure for the data center
- Network troubleshooting, VLAN, pfSense, FreeNAS, Proxmox virtualization
- Debian, Ubuntu Linux, SIEM, Cisco, Ruckus switches, 3cx telephony system
Nov 2019 - Dec 2020
1 year 2 monthsIT Restructurer / Renovator
Spezialelektronik (HS)
- Assessment of the current situation and troubleshooting an unstable IT structure for 150 employees
- Design and implementation of a new IT structure based on AD2019 and Exchange 2019
- Definition of groups and IT security, network separation, and introduction of patch management/VLANs
- Setup of Sage, Datev, and industry-specific software
- HPE / IBM servers, Sophos SG firewall, Microsoft AD 2016/2019, Microsoft Exchange 2016/2019
- VMware Hypervisor ESXi 5.5/6.x/7.x
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, IT security analysis, IT architecture
Oct 2019 - Jul 2020
10 monthsIT Restructurer after Ransomware Attack
Sicherheitsdienst (WS)
- Crisis management and isolation of IT traffic to prevent the spread of ransomware
- Redeployment of the IT structure and consulting the company management for 1,250 employees
- Implementation of a firewall with IDS/IPS and email scanning functionality
- Reinstallation of the server infrastructure and implementation of separated networks (hardening)
- Development of an access rights concept and setup of Sage, Datev, and industry software
- White-hat hacking for source analysis and damage assessment
- Dell / IBM servers, Sophos SG firewall, Windows Server 2019, Microsoft AD 2019
- Microsoft Exchange 2019, O365 migration, hybrid setup, Azure, AWS
- Hyper-V 2019, Microsoft Terminal Services, VMware Hypervisor 6.x/7.x
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, SIEM
Sep 2018 - Oct 2023
5 years 2 monthsIT Consulting / IT Development
Managemententwickler (RY)
- IT and IT security leadership role as a System Engineer
- Fixing process issues and potentially critical GDPR vulnerabilities
- Developing internal IT by combining on-premise and cloud solutions
- Integrating CRM resources and developing work-everywhere concepts
- Setting up a central data repository and securing the corporate network
- Training and consulting on IT topics
- Dell servers, Dell clients, Sophos SG, Cisco firewall and switches
- Windows, Microsoft AD 2019, Eset Antivirus, Microsoft Exchange 2019, O365, Microsoft 365, Teams
- Microsoft IIS 2019, Microsoft Hyper-V 2019, VMware, Veeam, load balancing
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, SIEM, remote work, Linux, Debian, Ubuntu, PHP, MySQL, MariaDB, NextCloud
Jul 2018 - May 2020
1 year 11 monthsSystem Rescue and Restoration
Retail (SD)
- Took over and revamped an outdated, insecure website and web shop setup based on Docker
- Analyzed system interdependencies and created documentation
- Extracted data and reimplemented on current OS and module versions
- Ongoing system maintenance
- Ubuntu, Debian Linux, Apache, Nginx, Git, PHP, MySQL, MariaDB, Docker
- WordPress, Odoo, e-commerce integrations, FOSS software
Jun 2018 - Apr 2024
5 years 11 monthsInternal IT Support / IT Consulting
Special Machinery Manufacturing (RM)
- Managing system engineer for network security issues, consulting and support
- Planned and implemented VLAN structures and routing
- Implemented a firewall solution and system hardening
- Appointed as sole external IT administrator and took on an IT security leadership role
- Built a new server infrastructure based on Windows Server 2016
- Set up security policies according to BSI IT Baseline Protection and GDPR consulting
- Migrated cloud services such as mail from O365/Azure to Exchange 2019
- Supported in securing special machinery
- Project management, external vendor coordination and sourcing
- Dell servers, Dell clients, Sophos SG, HPE, Ruckus Networking, Cisco firewalls and switches
- Microsoft AD 2008R2/2019, Microsoft Exchange 2010/2019, mail archiving, mail encryption
- NextCloud, Datev, Microsoft IIS 2019, Microsoft Terminal Services cluster
- VMware Hyper-Visor 6.x/7.x, Veeam, Microsoft SQL Server, DBA, Debian, Ubuntu
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, Linux, PHP, MariaDB, MySQL, jQuery, SIEM, VLAN, Wi-Fi segmentation, SDSL, fiber optics
Dec 2015 - Apr 2024
8 years 5 monthsExternal IT Management / IT Architect
Food Sector (P)
- Took over the internal IT management and worked as shared CIO/CISO
- Set up a complete IT infrastructure for 20 people within four working days
- Implemented terminal server functions and an IT security policy
- Implemented separate network segments and VLANs across two sites
- Integrated a public guest network separated from the internal network
- Planned based on BDSG, GDPR and BSI IT Baseline Protection
- Unified the security infrastructure and hardened systems
- Dell servers, Dell clients, Sophos SG firewall, HPE switches, Microsoft AD 2012R2
- Microsoft Exchange 2016, Microsoft 365, Teams, mail archiving, mail encryption
- Hyper-V, Microsoft IIS, SQL Server, Sage DMS, ERP, SuccessFactors
- Microsoft Terminal Services cluster, Debian Linux, Ubuntu, VoIP PBX, Zammad, Elasticsearch
- Backup: Veeam, system monitoring with Check_mk, SIEM, PHP, MariaDB, jQuery
May 2015 - Apr 2024
9 yearsCEO / CIO / CISO
Webhosting / Application Service Provider / Managed Services
- Full takeover of internal IT management
- Assessed the current state and defined the target requirements
- Implemented the central server infrastructure including procurement
- Employed multi-layered intrusion prevention methods achieving A/A++ ratings
- Interface functionality and sourcing
- Defined goals and planned based on BDSG, GDPR and BSI IT Baseline Protection
- Dell servers, Dell clients, Sophos SG, HPE, Cisco firewalls and switches
- Microsoft AD 2016-2022, Microsoft Hyper-V 2012R2-2022, Exchange Server 2013-2019
- Office 365, Microsoft 365, Teams, To Do, Lists, SharePoint, mail archiving
- Debian Linux, Ubuntu Linux, Lync Server, Skype Server, Zammad, Elasticsearch, FreeNAS
- Azure, AWS, Veeam, UrBackup, NextCloud, SeaFile, Microsoft Terminal Services
- System monitoring based on the Check_mk stack, Postfix, Apache2, Nginx, PHP
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, SIEM, VLAN, Wi-Fi segmentation
Sep 2013 - Aug 2017
4 yearsExternal IT Management / IT Architect
Media Industry / Event Agency (MAH)
- Assessed the current state and troubleshot an unstable IT structure
- Developed a new IT structure and handled technical project management
- Managed interface functionality and organized various technical projects
- Conducted staff training and managed budgets
- Applied multi-level intrusion prevention methods (digital and analog)
- Dell servers, Dell clients, Sophos SG firewall, HPE switches, FreeNAS, ESET AV
- Microsoft AD 2012R2, Microsoft Exchange 2013, Microsoft Hyper-V 2012R2, Debian, Ubuntu
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, IT security analysis
Sep 2013 - Nov 2013
3 monthsIT Restructurer / Renovator
Fine-Dining and Hospitality (B)
- Assessing the current situation and developing a target definition
- Troubleshooting and fixing an inefficient IT structure
- Developing a new IT structure including interface functionality
- Conducting staff training and managing the budget
- Implementing multi-layered intrusion prevention methods
- HPE / IBM / Dell servers, Dell clients, Sophos SG firewall
- Microsoft AD 2003/2008, Microsoft Terminal Services cluster, load balancing
- Microsoft Exchange 2013, mail archiving, email encryption, Veeam backup
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, IT security analysis
Oct 2012 - Apr 2024
11 years 7 monthsExternal IT Manager / IT Architect
Hotel Industry (KS)
- Complete takeover of internal IT management as CIO, CISO, and System Engineer (2nd/3rd level)
- Providing consulting and support via a ticketing system
- Assessing the current situation and defining the desired state
- Implementing the central server infrastructure including procurement
- Implementing remote access solutions and an IT security policy
- System hardening and implementing a new IT structure with separate network segments/VLANs
- Separating the guest network from internal networks
- Replacing the previous inter-site communication with high-performance WLAN radio link technology
- Interface functionality and sourcing
- Planning based on BDSG, GDPR, and BSI basic protection
- Dell servers, Dell clients, Sophos SG, HPE, Cisco firewalls and switches
- Microsoft AD 2008 R2/2019, Microsoft Exchange 2010/2019, Microsoft Hyper-V 2008-2019
- Microsoft IIS 2010-2019, Debian Linux, FOSS evaluation, system monitoring (Checkmk)
- Backup: UrBackup, Veeam, MariaDB, MySQL, InfluxDB, PHP, jQuery
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, SIEM, WLAN, network segmentation
Aug 2010 - Apr 2024
13 years 9 monthsExternal IT Manager / IT Architect
SME (MN)
- Complete takeover of internal IT management with interface functionality, consulting, and support
- Assessing the current situation and defining the target state
- Analyzing, developing, and implementing the IT security policy
- System hardening and implementing a new IT structure with separate network segments and VLANs
- Separating the machinery network from the management and staff network
- Using current multi-layered intrusion prevention methods
- Successfully defending against malware attacks via USB sticks without negative impact on the company network
- Project management and rescuing a failing software development project
- HPE/Dell servers, HPE/Dell clients, Sophos SG, HPE, Cisco firewalls and switches
- Microsoft AD 2003/2008 R2/2019, Microsoft Exchange 2010/2019, mail archiving
- Microsoft IIS 2010-2019, Microsoft SQL Server, DBA, database administration
- Microsoft Hyper-V 2008-2022, Debian Linux (v6 to current), UrBackup, Veeam
- Rolling out Kaspersky and replacing it with ESET antivirus (client/server), VoIP PBX
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, NextCloud, SIEM, VLAN, WLAN, network segmentation
Summary
First, I would like to thank you for taking the time to review my resume.
You are looking for a person:
- with well over ten years of hands-on experience in the depth and breadth of IT implementation, combined with entrepreneurship? (privately even twice as much)
- with planning, consulting, and implementation experience working across industries, without ignoring sector-specific elements
- with practical knowledge in data protection and security, licensing & legal issues, who can and wants to bring this to the assessment of your environment? (not legal advice!)
- consulting, planning, and implementing with Microsoft, SaaS, closed source, as well as open source familiarity
- who brings practical know-how in dealing with employees, shareholders, and stakeholders of IT and business? Leading and supporting. Internally executing, externally executing. Internally leading, externally leading, externally advising.
- with experience in SMEs, industry-neutral, with direct staff size: 5-1,000, indirectly (partial area) up to about 45,000
- who, with personal enthusiasm, wants to implement projects in a way that benefits all involved in the long term?
If this is the case, you don't have to look any further. - As you will see from my resume below, I am happy to bring these skills broadly to short- or, preferably, long-term projects.
I look forward to our discussion on how I can apply my skills to your company's advantage.
I will definitely be in touch and look forward to the upcoming project and fruitful collaboration.
Best regards,
Christian Enderle
Skills
- Deep And Broad Knowledge In Tcp/ip, Telecommunications/telephony, Networking, Firewalling, Various Open-source Software, Various Industry-specific Software, Sql, And A Wide Range Of Virtualization And Design Concept Knowledge.
- Wide Range Of Hardware, Security Equipment And Firewall/utm Vendors, Antivirus Software, Troubleshooting (2nd And 3rd Level…).
- Technical: E-commerce Systems, Learning Tools (E-learning), Crm, Cms, …
- Analytical Skills: Go-to-market Analysis, Marketing Approaches, Intercultural Communication.
- Social Skills: Presentations (De/en) Tailored To The Audience, Staff, Team And Project Leadership, Conflict Resolution (Technical/social), Mediation, Bringing Interest Groups Together.
Languages
German
NativeEnglish
AdvancedEducation
Oct 2020 - Present
unknown
Business Law
Oct 2012 - Jul 2018
University of Applied Sciences Ulm/Neu-Ulm
Bachelor of Science · Business Informatics · Neu-Ulm, Germany
Oct 2010 - Jun 2013
Evening High School
General high school diploma
...and 1 more
Certifications & licenses
Project and Team Management Professional
PMC-Sattler
IT Service Management ITIL3 Foundation
Need a freelancer? Find your match in seconds.
Try FRATCH GPT More actions
Similar Freelancers
Discover other experts with similar qualifications and experience