Kristof Blümel
Strategic Consulting
Experience
Strategic Consulting
German Grid-Battery Storage Provider
- Consulted on IT security and process optimization, focusing on NIS2 and risk requirements
- Troubleshot and optimized plant core networks using STP, certified hardware, and open-source components such as OPNsense
- Redesigned network segmentation for VLAN rollout in a hybrid multisite multicloud setup using Tailscale VPN
- Facilitated cross-departmental discussions to align technical and social requirements
- Optimized monitoring with Grafana, Telegraf, and SNMP configurations
- Prototyped network setup for a new plant, including VLAN separation with Tailscale VPN
- Automated various scenarios using Python and Bash scripting
Rapid Prototyping for AI Cloud Platform Solution
Cloudelligence GmbH
- Evaluated and implemented AWS Bedrock components to enhance a Next.js application with knowledge-based agents and AWS Cognito for sign-in with multiple authentication providers
- Configured infrastructure as code using TypeScript and AWS CDK, integrated with GitLab CI/CD
- Set up Server 2022 DTC scenarios
- Configured hosted bare-metal servers through complex FortiGate gateway scenarios
Cloud-Only Transformation Consultant
Immowelt GmbH / AVIV Group
- Consulted and optimized transformation of hybrid Windows (2008–2022) and Linux server setups into a cloud-only AWS environment
- Re-architected two monolith platforms into microservices on AWS native tech stack
- Managed AWS infrastructure as code with Terraform and deployed via GitLab, Jenkins, and CircleCI pipelines
- Integrated Okta as an Auth0 provider into legacy and new applications
- Supported integration of Microsoft Azure Intune and Okta for seamless employee onboarding and workstation provisioning
- Expanded on-premises Active Directory (Server 2022) with AWS site trusts for improved performance and stability
- Implemented FortiGate management for multiple HA instances
Hybrid Cloud Solution Optimization Engineer
noris Network AG
- Optimized, tested, and restructured a dynamic hybrid cloud solution based on VMware Cloud Director
- Conducted usability tests focusing on automatic infrastructure deployment via IaC using Terraform
- Implemented Windows Server 2022 DTC deployments
Central Network Security Gateway API Development
Energie Baden-Württemberg
- Using Python, implemented an AWS CDK template with automated pipeline deployment to publish an API for fully automated attaching and detaching of Transit Gateway networks to customers' CheckPoint firewalls
- Connected on-premise networks to individually encapsulated cloud networks
- Developed a visualization tool for route records and drift analysis
- Developed the API using AWS Lambda with Python
- Documented the API in Swagger files
- Implemented cascaded pipelines in Azure DevOps
- Retrieved secrets from AWS Secrets Manager
Technical Exploration and Consulting
International Mechanical Engineering Company
- Explored cloud-based, hyperscale services with Power BI, Azure Active Directory, and Node.js to enhance a customer portal with business intelligence logic
Exploration and Research Consultant
Chemical Supplier
- Authorized Azure AD B2B users for Power BI report access via a principal portal
- Advised on Azure AD B2B vs. B2C implementations
- Conducted research and exploration tasks in backoffice development
- Pre-tested and evaluated APIs for various products
- Prototyped infrastructure elements
Integration Engineer
Online Retailer
- Enabled data scientists to log in to Google Cloud Platform using Active Directory accounts
- Configured Google Cloud Directory Sync
- Configured Google Identity and Access Management
- Configured AWS Single Sign-On as a proxy to an on-premises Active Directory
Chief Technical Officer
eves_ consulting GmbH
- Served as CTO for all group branches and led a department of 8 system engineers for 6 months
- Conducted technical presales and requirement analysis
- Managed various Microsoft 365 migrations including mail, SharePoint, Azure AD, Azure computing, and hybrid deployments
- Led migrations of Small Business Server 2008–2011 and VMware vCenter + vSphere environments (150 VMs)
- Designed and implemented Active Directory, Exchange, and SQL infrastructures
- Implemented email encryption with Totemo Mail for 2,000 public sector seats
- Executed complex infrastructure implementation projects, including RIM BlackBerry Enterprise Server, Excitor DME, and Giritech G/On remote access
- Developed automated onboarding/offboarding solutions using PHP8 and PowerShell
System Engineer (Worldwide Support for VW)
eves_ information technology AG
- Provided worldwide support for VW end-of-line software flashing
- Operated Oracle databases
- Managed JBoss operations
System Engineer
eves_ information technology AG
- Implemented infrastructure projects in medium and enterprise environments, including technical presales and project planning
- Deployed RIM BlackBerry Enterprise Server, Excitor DME, and Giritech G/On remote access solutions
- Migrated various Microsoft environments including Small Business Server 2008–2011
- Designed and implemented VMware vSphere environments (30 VMs) with Active Directory, Exchange, and SQL
Apprentice IT Specialist for System Integration
eves_ information technology AG
- Provided customer support
- Completed final thesis: BlackBerry Enterprise Server vs. Excitor DME – a TCO analysis
IT Support and Consultant
bluemels
- Provided IT support and consulting services for small-sized businesses
Summary
Almost 20 years of experience in IT in various industries. Kristof provides both infrastructure architecture and project management expertise combined with reliable social skills.
His focused view for the essential project-aims leads to successful IT projects. Combining his wide technical knowledge and practical experience of numerous projects, workshops and technical presales meetings, he outlines show-stopers as well as easy-to-go-paths.
He likes listening to the customer’s needs for finding solutions nearest to perfect. However, he is clear and honest with all parties.
His slogan: make it simple, then simply make it.
Skills
Programming Languages
- Python
- Javascript
- Typescript
- Powershell
- Bash
- Php / Html5
Devops Skills
- Microsoft Active Directory (Ad)
- Ms Ad Sites & Trusts
- Ms Ad: Gpos
- Ms Ad Federational Services
- Microsoft Azure Ad / Entra Id
- Aviatrix
- Hashicorp Terraform
- Git For Versioning
- Gitlab, Github, Circle Ci
- Datadog For Metrics, Monitoring, Log Shipping
Cloud Solutions
- Ms Azure Tool Stack
- Aws Tool Stack
Operating Systems
- Linux (Common Derivates)
- Mac
- Windows (Server 2008 – 2022 Enterprise)
Databases
- Sql (Mysql, Ms Sql)
- Postgres Sql
- Mysql
- Sqlite
Platforms
- Microsoft 365
- Microsoft Azure
- Microsoft Powerbi
- Amazon Web Services
- Google Cloud Platform
Virtualization
- Vmware Vcenter / Esxi
- Microsoft Hyperv
- Citrix Xen
- Docker
Firewall
- Fortinet / Fortigate
- Sophos Sg / Xg
- Securepoint
- Watchguard
- Opnsense
Switching
- Cisco
- Hpe
- Dell
Languages
Education
eves_
IT Specialist in System Integration · Braunschweig, Germany
Technical University Clausthal
Information Systems · Clausthal-Zellerfeld, Germany
Gymnasium Corvinianum
German High School Diploma · Northeim, Germany
Certifications & licenses
MS-500: Security Administrator
ITIL® Foundation in IT Service Management
Similar Freelancers
Discover other experts with similar qualifications and experience