Markus Halbedel
Senior IT-Infrastructure, Cloud & Security Consultant
Experience
Senior M365 Consultant
BITMARCK GmbH
Developed concepts for the M365 implementation, particularly for tenants, Entra ID, Entra Connect, and Exchange Online, considering BAS standards (mandatory baseline security requirements) in the "M365 Concept" project, aiming to apply the concepts to Bitmarck's M365 environments and hand them over to the customer.
- Conducted an as-is analysis of existing M365 environments as well as on-premises environments and BAS standards.
- Created concepts for tenants, Entra ID, Entra Connect, and Exchange Online, following BAS standards.
- Designed and implemented an automated solution to create standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration).
- Applied the concepts to the M365 environments.
- Prepared detailed technical documentation.
Senior Cloud & Security Consultant
Dachser SE
Evaluation and implementation of cloud solutions based on Microsoft Azure.
- Evaluated and implemented cloud security solutions in the area of identity.
- Zero Trust architecture with Conditional Access, MFA, Identity Protection.
- Privileged Identity Management (PIM) and role-based access control (RBAC).
- Evaluated and implemented on-premises security solutions for Microsoft Active Directory (identity).
- AD tiering model according to Microsoft best practices, including Kerberos hardening.
- PAW concept (Privileged Access Workstations).
- Active Directory security analyses. Methods, tools, and technologies: Microso
Senior Messaging Consultant
Landesbank Hessen-Thüringen Girozentrale (HELABA)
Supported the implementation and adjustment of configuration changes in the on-premises Exchange infrastructure (mail servers) as well as in the hybrid environment.
- Planned and executed pilot and bulk migrations of mailboxes to Exchange Online.
- Provided technical support for migrating user mailboxes, room and equipment mailboxes, and public folders.
- Assisted the project manager in technical discussions and decision-making processes.
Exchange-Architekt
T-Systems Multimedia Solutions GmbH
- Designed a concept for enhanced email security by labeling externally received emails.
- Developed a concept for accessing Exchange resources for users, administrators, and applications via a standardized Microsoft Graph API.
- Analyzed and assessed the existing Exchange antivirus/antispam solution.
- Planned, designed, and rolled out new Exchange features company-wide, such as dynamic distribution groups.
- Methods, tools, and technologies: Microsoft Active Directory, Microsoft Azure Active Directory, Microsoft 365, Microsoft Exchange Online, Exchange 2019, PowerShell, Microsoft Graph, email security.
- Environment: International hybrid Exchange infrastructure with about 165,000 mailboxes (15,000 on-premises / 150,000 online).
Senior Consultant
Balluff GmbH
- Analyzed and created a concept for migrating on-premises email systems to a private cloud and to Microsoft 365 (Exchange Online).
- Replaced the existing on-premises SMTP gateway with a cloud solution.
- Migrated the existing email archiving system to a cloud solution.
- Planned, designed, and rolled out new email features, such as signature software, company-wide.
- Methods, tools, and technologies: Microsoft Active Directory, Microsoft Azure Active Directory, Microsoft 365, Exchange Online, Exchange 2016, PowerShell, email security, Defender for Office.
- Environment: International hybrid Exchange infrastructure with about 3,000 mailboxes.
Senior Consultant
Simon Hegele GmbH
- Planning and piloting an email migration from Exchange 2016 to Exchange Online / M365
- Planning and rollout of security and compliance settings in M365
- Active Directory 2016 consolidation and Azure Active Directory management
- Methods, tools and technologies: Microsoft Active Directory, Microsoft Azure Active Directory, MS Office 365, Exchange Online, AAD Connect, PowerShell scripts, M365 Information Protection, Data Loss Prevention, Conditional Access, MFA, Compliance
- Environment: international IT environment with approx. 3,000 users
Cloud Consultant
Rathgeber GmbH & Co. KG
- Planning and setup of a hybrid Active Directory for MS Intune
- Planning and setup of an MDM environment based on Microsoft Azure Intune (Microsoft Endpoint Manager)
- Intune configuration profiles, Conditional Access and multifactor authentication
- Intune Autopilot and modern app management through Intune
- Windows Virtual Desktop integration for business access
- Methods, tools and technologies: Microsoft Endpoint Manager (Intune), Microsoft Windows Virtual Desktop, MS Office 365, Exchange Online, Azure AD Connect, MS Azure (PaaS, IaaS, Azure Active Directory), PowerShell scripts
- Environment: international IT environment with approx. 300 users
Senior Consultant
Dachser SE
- Planning and piloting an email migration from Lotus Notes to Exchange Online / M365
- Planning and piloting a Microsoft Teams rollout / Microsoft 365
- Planning and implementation of security and compliance settings in M365
- Active Directory 2016, Azure Active Directory management, identity management: role concepts
- Methods, tools and technologies: Microsoft Active Directory, Microsoft Azure Active Directory, MS Office 365, Exchange Online, AAD Connect, ADFS, PowerShell scripts, M365 Information Protection, Data Loss Prevention, Conditional Access, MFA, Compliance
- Environment: international IT environment with approx. 30,000 users
Senior Cloud Consultant / Architect
Hoval AG
- Support for Exchange Online transformation
- Design and management of Advanced Threat Protection (ATP) and spam management with SPF, DKIM, DMARC
- Email compliance implementation with Exchange Online
- Planning the migration of Microsoft Exchange / Exchange Online
- Configuration and migration of email-dependent services for Exchange Online
- Methods, tools and technologies: MS Office 365, Exchange Online, Azure AD Connect, Microsoft Azure Active Directory, PowerShell scripts
- Environment: international IT environment with approx. 2,000 users
Senior Consultant / Architect
Uni Mozarteum Salzburg
- Analysis of the existing IT infrastructure
- Concept for transforming the current Micro Focus environment into a Microsoft world
- Planning the migration of Micro Focus eDirectory to Microsoft Active Directory & Azure AD
- Planning the migration from Micro Focus GroupWise to Exchange / Exchange Online
- Introduction of O365 and Azure including Azure services
- Planning an MDM environment based on Microsoft Azure Intune
- Methods, tools and technologies: MS Office 365, Exchange Online, Azure AD Connect, Microsoft Azure Intune, MS Azure (PaaS, IaaS, Azure Active Directory), migration tools for Micro Focus GroupWise, PowerShell scripts
- Environment: IT environment with approx. 3,000 users
Senior Consultant
Siteco Beleuchtungstechnik GmbH
- Support for the carve-out from the Osram parent company into a standalone IT infrastructure
- Design and prototyping for an Office 365 tenant-to-tenant migration
- Planning and deployment of a new internal PKI infrastructure
- Planning and deployment of an MDM environment based on Microsoft Azure Intune
- Setup of an Exchange hybrid environment
- Implementation of a patch management solution based on WSUS and SCCM
- Windows Virtual Desktop integration for business access
- Methods, tools, and technologies: Microsoft Windows Virtual Desktop, Exchange 2016, MS Office 365, Exchange Online, Azure AD Connect, Microsoft Azure Intune, MS Azure (PaaS, IaaS, Azure Active Directory), PowerShell scripts
- Environment: international IT environment with approx. 2,000 users
Senior Consultant
MediaMarktSaturn
- Analysis of the existing IT infrastructure to plan an international carve-out
- Planning and high-level design of a future Active Directory infrastructure
- Planning and high-level design of a migration strategy for the carve-out
- Methods, tools, and technologies: agile project management, Microsoft Active Directory, Exchange 2016, MS Office 365, Exchange Online, AAD Connect, Azure AD, ADFS, Quest Migration Manager, various internal applications
- Environment: international IT infrastructure with approx. 60,000 users/clients, 5,000 servers, 1,200 applications, 1,200 sites
Senior Consultant
First Attribute AG
- Office 365 (Exchange Online) design and migrations
- Exchange 2016 design and migrations
- Active Directory, Azure AD identity management
- Methods, tools, and technologies: Microsoft Exchange 2010–2016, MS Office 365, Exchange Online, AAD Connect, ADFS, PowerShell scripts
- Environment: various international SMEs and enterprises
Exchange 2016 Architect
Bilfinger Global IT GmbH
- Office 365 (Exchange Online) design and migrations
- Exchange 2016 design and migrations
- Automation with Desired State Configuration (DSC)
- Active Directory, ADFS & AAD Connect
- Methods, tools, and technologies: Microsoft Exchange 2010–2016, MS Office 365, Exchange Online, AAD Connect/DirSync, ADFS, PowerShell scripts, Desired State Configuration
- Environment: resource forest with 60 account forests, 55,000 mailboxes
Senior Consultant
Microsoft Schweiz GmbH
- Office 365 (Exchange Online) design and migrations
- ADFS & AAD Connect
- Microsoft cloud computing with Azure
- Exchange design and migrations
- Active Directory
- Methods, tools, and technologies: Microsoft Exchange 2010–2016, MS Office 365, Exchange Online, AAD Connect/DirSync, AD FS, Azure (PaaS, IaaS, Azure Active Directory), PowerShell scripts
Senior System Engineer / Consultant
Baggenstos AG
- Office 365 (Exchange Online) concepts and migrations
- ADFS & DirSync
- Microsoft cloud computing with Azure
- Exchange 2016 TAP program, Exchange 2013 concepts and migrations
- Active Directory & system management
- setup, configuration and operation of VMware infrastructures
- setup, configuration and operation of Hyper-V infrastructures
- methods, tools and technologies: Microsoft Exchange 2010–2016, Azure (PaaS, IaaS, Azure Active Directory), VMware ESXi 5.0–6.0, Hyper-V 2012 R2, PowerShell scripts
Senior Consultant / Senior Systems Engineer
Axept Webcall AG (Swisscom AG)
- Groupwise migrations to Exchange 2013 with Dell coexistence & migration manager
- inter- & intra-forest email migrations to Exchange 2013
- integration of subsystems with Exchange 2013 (TMG, Blackberry, email archive, Lync)
- Exchange 2013 enterprise infrastructure concepts
- remote access solutions for Exchange 2013
- Office 365 concepts and migrations
- Swisscom managed communications & collaboration
- methods, tools and technologies: Exchange 2010/2013, Dell Coexistence Manager for Groupwise, Dell Migrator for Groupwise, Dell Migrator for Exchange, Sophos UMT, PowerShell scripts, Excel
Infrastructure Specialist / Senior Systems Engineer
SCOR SE
- cross-forest integration/migration of Exchange 2003/2007 environments into an Exchange 2010 organization
- Active Directory and Exchange coexistence with Quest Collaboration Manager
- Exchange administration, infrastructure concepts
- integration of subsystems with Exchange 2010 (GOOD for Enterprise, Blackberry, email archive, GOOD Dynamics)
- methods, tools and technologies: Microsoft Exchange 2007/2010, Quest Collaboration Manager, GOOD for Enterprise, GOOD Dynamics, PowerShell scripts, Excel
Senior Consultant / Senior Systems Engineer
Axept AG
- various email migrations to Exchange 2010
- integration of subsystems with Exchange 2010 (TMG, Blackberry, email archive, Lync/OCS)
- Windows 2008 R2 concepts and installations
- Exchange 2010 enterprise infrastructure concepts
- TMG concepts and installations
- methods, tools and technologies: Exchange 2010, Quest Migration Manager for Exchange, Windows Server 2008/2008 R2, Microsoft TMG 2010, PowerShell scripts
VMware ESX Engineer
SCOR SE
- setup of VMware ESX 3.x and vSphere 4.0 environments
- configuration and operation of the VMware infrastructure
- virtualization of server systems with VMware ESX 3.5
- infrastructure upgrade to vSphere 4.0
- methods, tools and technologies: VMware ESX 3.5, vSphere 4.0, NetApp Storage, Windows Server 2003/2008, PowerShell scripts
Exchange 2007 Specialist / Engineer
SCOR Switzerland Ltd
- Cross-forest integration / migration of Exchange 2003/2007 environments into a unified Exchange organization
- Domain and Exchange migrations using Quest Migration Manager
- Exchange virtualization on VMware ESX 3.5
- NetApp storage connections for Exchange
- Exchange infrastructure concepts and designs
- Email archive migration from Zantaz Exchange Archive to Legato Email Xtender
- Methods, tools and technologies: VMware ESX 3.5, Exchange 2003/2007, NetApp Storage, Zantaz & Legato Email Archive, PowerShell scripts
IT Infrastructure System Engineer / Consultant
Axept AG
- Various email migrations to Exchange 2007
- Exchange virtualization on VMware ESX 3.x
- NetApp storage connections for Exchange 2007
- Exchange infrastructure concepts and designs
- ISA 2006 concepts and installations
- Methods, tools and technologies: VMware ESX 3.x, Exchange 2007, NetApp Storage, ISA 2006
Exchange 2007 Specialist / Consultant
Converium AG
- Lotus Domino to Exchange 2007 migration
- Integration and operation of the Exchange 2007 environment in the existing IT landscape
- Connecting the Exchange 2007 environment to the Zantaz Exchange Archive server
- Methods, tools and technologies: Lotus Notes Domino, Microsoft Exchange 2007, Zantaz Email Archive
Technical Consultant - Microsoft Exchange 2007 Migration
Münchener Rückversicherung
- Building a feature lab based on the Exchange 2007 RTM version
- Creating a rough concept for Exchange 2007 (feature list, migration strategies, dependencies, requirements, prerequisites)
- Developing a detailed concept (deployment guide) with a rough cost estimate
- Methods, tools and technologies: Microsoft Exchange 2003, Exchange 2007
Technical Consultant - Microsoft Vista Pre-Study
Münchener Rückversicherung
- Setting up a test environment to evaluate the Microsoft Vista client
- Compatibility testing of the client software used
- Evaluating new features and functions
- Methods, tools and technologies: Microsoft Vista
Technical Consultant / Microsoft Infrastructure
Magazinpresse Verlag GmbH
- Microsoft Windows Active Directory
- Microsoft Exchange 2003 update and patch management
- Rollout of Microsoft SMS 2003
- Packaging software products
- Software distribution based on RIS and SMS 2003
- Methods, tools and technologies: Active Directory 2003, Exchange 2003, Microsoft SMS 2003
IT Consultant / Focus on Exchange
INA - Schaeffler KG
- Migration of MS Exchange 5.5 sites to Exchange 2003
- Operation, monitoring and third-level support of the global Exchange 2003 infrastructure
- Designing and implementing Exchange 2003 extensions
- Methods, tools and technologies: Active Directory 2003, Exchange 2003
Senior Systems Engineer / Project Manager
Munich Reinsurance Company of Australasia
- Designing and implementing storage systems (SAN / NAS)
- Designing and implementing disaster recovery solutions including server virtualization
- Technical project manager for infrastructure projects and rollouts in Australia and Asia
- Implementation and operation of Windows 2000/2003, AD, Exchange 2000/2003 for all locations (16)
- Migration of all NT4 domains into a single Windows 2000 domain
- Migration from Exchange 5.5 to Exchange 2000/2003 for all regional sites
- Remote access strategy, SMS 2.0 implementation, Citrix Metaframe 1.8 migration
- Methods, tools and technologies: Active Directory sites with 22 DCs, 500 clients
Technical Consultant - Windows/Exchange 2000
Munich Reinsurance
- Rollout of a Windows 2000 / Exchange 2000 environment including Active Directory in a single-forest/multi-domain
- Installation, configuration and testing of a global Windows 2000 / AD environment
- Migration from Exchange 5.5 to Exchange 2000
- Remote access strategy, backup/restore and disaster recovery concepts
- Methods, tools and technologies: Active Directory 2000, Exchange 2000
Technical Consultant - Exchange 5.5
Munich Reinsurance
- 2nd and 3rd level support for Exchange 5.5
- Introduction and testing of Exchange 5.5 tools
- Performance tuning and monitoring
- Administrative tasks
- Methods, tools and technologies: Exchange 5.5
Technical Consultant - Software Distribution
Hypo Vereinsbank
- Support and preparatory measures for software distribution in all German bank branches
- Methods, tools and technologies: Windows NT 4.0
Technical Consultant / Project Coordination
Verlag Moderne Industrie AG
- Designing and implementing a Windows NT 4 infrastructure (4 sites, approx. 450 clients)
- Implementing Exchange 5.5 at all locations
- Implementing a Microsoft SMS 2.0 infrastructure
- IT security concepts
- Methods, tools and technologies: NT 4.0, Novell Netware 3.12, SQL 7.0, SMS 2.0, Exchange 5.5
Technical Consultant - Microsoft Products
Müller Milch GmbH
- Support of the existing Windows NT 4.0 infrastructure
- Rollout concepts for Windows NT 4.0
- Europe-wide migration from MS Mail 3.5 to Exchange 5.5
- Implementing Microsoft SMS 2.0
- Methods, tools and technologies: NT 4.0, Novell Netware 3.12, SQL 7.0, SMS 2.0, Exchange 5.5
Technical Consultant - DMS / Archiving
Sercon GmbH
- Advising clients in document management and archiving
- Methods, tools and technologies: NT 4.0, Lotus Notes, SAP/R3 Archive Link, AIX, HP-UX
IT Specialist
Sana Kliniken GmbH
- Design, implementation and operation of the entire IT infrastructure
- Helpdesk tasks
- Hardware/software support
- Participation in IT projects
- Methods, tools and technologies: NT 4.0, Novell Netware 3.12, ERP software, ISDN, RAS, SQL, SMS 1.2, Exchange 4.0/5.0
IT Manager
Photo retail chain with 40 stores
- Operation and support of all IT and POS systems in the stores
- Implementation and administration of an inventory management system
- Methods, tools and technologies: WfW 3.11, Novell Netware 3.12, Office 4.3, Navision
Industries Experience
See where this freelancer has spent most of their professional time. Longer bars indicate deeper hands-on experience, while shorter ones reflect targeted or project-based work.
Experienced in Insurance (10.5 years), Information Technology (9.5 years), Transportation (4.5 years), Retail (3.5 years), Healthcare (2.5 years), and Manufacturing (2.5 years).
Business Areas Experience
The graph below provides a cumulative view of the freelancer's experience across multiple business areas, calculated from completed and active engagements. It highlights the areas where the freelancer has most frequently contributed to planning, execution, and delivery of business outcomes.
Experienced in Information Technology (31 years), Project Management (4.5 years), Customer Service (2 years), Quality Assurance (0.5 years), and Operations (0.5 years).
Summary
For over 30 years, I have been helping international companies untangle complex IT infrastructures, transform them, and securely migrate them to modern cloud environments. I specialize in Microsoft-based infrastructures, identity & access management, cloud security, and infrastructure architecture – focusing on environments where there is "no easy solution."
My focus areas:
- Microsoft 365 & Azure: Identity, Security, Compliance
- Exchange OnPrem ↔ Cloud migrations (20 to 150,000 mailboxes)
- Active Directory, Entra ID, hybrid environments
- Cloud security & conditional access, MFA, Defender
- MDM & Microsoft Intune
- Integration of AI technologies (e.g., Copilot, MS Graph + AI, GPT-driven automation)
- Project roles from consultant to architect to crisis resolver
I work hands-on, strategically, and across technologies. If you are looking for a senior consultant who not only knows the tools but also understands scenarios – and now extends them with the possibilities of modern AI technologies – I look forward to challenges.
Skills
Cloud Services
- Microsoft Azure (Iaas, Paas)
- Microsoft Office 365 (Exchange, Teams, Sharepoint/onedrive)
- Microsoft Azure Active Directory
- Microsoft Endpoint Management (Intune)
- Azure Virtual Desktop
- Azure Ad Connect
- Veeam Cloud Connect
- Bittitan Cloud Migration Suite
Operating Systems
- Ms Windows 2000 – Windows 10
- Ms Windows Server Nt 3.51 – 2019
- Linux (Redhat, Suse, Ubuntu)
- Vmware Vsphere, Esx(i) Server 2.x – 6.x
- Hyper-v 2008 – 2016
- Novell Netware 3.x – 4.x
- Unix (Sco, Solaris – Basics)
Directory Services
- Microsoft Azure Active Directory
- Microsoft 365 Identity Management
- Microsoft Active Directory, Windows 2000 – 2019
- Novell Netware 3.11 – 4.x
Programming Languages / Tools
- Microsoft Visual Code
- Microsoft Powershell
- Python 3.x
- Scripting
Authentication / Security
- Authentication And Encryption Technologies
- Microsoft 365 Security Management
- Microsoft 365 Compliance Management
- Email Authentication (Spf, Dkim, Dmarc)
- Microsoft Advanced Threat Protection / Defender
- Ms Software Update Server / Wsus
- Vpn/ip Sec Technologies
- Adfs
- Antivirus Products: Mcafee, Trendmicro, Sophos
Communication & Collaboration
- Ms Exchange 4.0 – 2019
- Skype For Business, Teams
- Microsoft Office 365
- Blackberry Enterprise Server
- Good For Enterprise
Management Tools
- Microsoft Intune (Device Management)
- Quest Migrator For Exchange
- Quest Migrator For Active Directory
- Quest Coexistence Manager For Groupwise
- Quest Migrator For Groupwise
- Quest Notes Migrator
- Quest Consolidator
- Quest Active Roles
- Quest Collaboration
- Ms System Center Configuration Manager
- Email Archiving Systems
- Symantec Netbackup
- Legato Backup
- Tivoli Backup
Databases
- Ms Sql Server 6.x – 2016
- Oracle 7.3, 8.1
- Ms Access
Hardware
- Dell Poweredge
- Various Load Balancers
- Hp Proliant Series
- Hp 3par
- Netapp Filer
Virtualization
- Vmware
- Microsoft Hyper-v
Languages
Education
Chamber of Industry and Commerce Munich
Certified Trade Specialist · Merchandise Management · Munich, Germany
University of Applied Sciences Munich
Vehicle Technology · Munich, Germany
Certifications & licenses
AI Engineer Core Track: LLM Engineering, RAG, QLoRA, Agents
Udemy (Ed Donner)
AI Leadership Track: Gen AI, Agentic AI for Business Leaders
Udemy (Ed Donner)
Microsoft Azure Security Engineer MCSE: Communication
Microsoft
MCSA: Microsoft Office 365
Microsoft
MCSE: Messaging
VMware 5.5 Certified Professional
MCITP: Enterprise Messaging Administrator 2010
MCTS: Microsoft Lync Server 2010
MCTS: Windows Server® 2008 R2, Server Virtualization
VMware 4.0 Certified Professional
VMware 3.5 Certified Professional
MCITP: Enterprise Messaging Administrator 2007
MCSE 2003
ITIL - Foundation Certification in IT Service Management
RHCE (Linux Red Hat Certified Engineer)
MCT (Microsoft Certified Trainer)
MCSE NT4 (Microsoft Certified Systems Engineer)
IT Network Specialist
Profile
Frequently asked questions
Do you have questions? Here you can find further information.
Where is Markus based?
What languages does Markus speak?
How many years of experience does Markus have?
What roles would Markus be best suited for?
What is Markus's latest experience?
What companies has Markus worked for in recent years?
Which industries is Markus most experienced in?
Which business areas is Markus most experienced in?
Which industries has Markus worked in recently?
Which business areas has Markus worked in recently?
What is Markus's education?
Does Markus have any certificates?
What is the availability of Markus?
What is the rate of Markus?
How to hire Markus?
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
Similar Freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Senior M365 Consultant
Nearby freelancers
Professionals working in or nearby Kaufbeuren, Germany