Markus Ickenroth
Senior System Engineer Microsoft
Experience
Senior System Engineer Microsoft
Technidata IT-Service GmbH
As part of the project, I was responsible for running a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.
I managed and optimized the entire application landscape for a major client, evaluated and implemented application updates, and ensured software compatibility and security.
I managed user accounts, implemented security policies, and monitored system performance.
I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.
I deployed and managed Microsoft Intune for centralized client device management, including configuring and managing BitLocker for disk encryption.
I managed file servers and NTFS permissions to ensure secure and efficient data access management.
I handled change requests and high-level support tickets efficiently to resolve complex system issues and improve user satisfaction.
I supported and advised the client team on various topics and projects, identified improvement opportunities, and implemented best practices.
Technologies used:
- Citrix XenApp and XenDesktop
- Microsoft Windows Server 2012R2 and 2022
- Exchange 2016 and Exchange Online
- Entra ID (Azure AD)
- Entra ID Connect
- BitLocker
- PowerShell scripting
- Microsoft Intune
- LDAP (Lightweight Directory Access Protocol)
- DNS services (Domain Name System)
- Active Directory Certificate Services (AD CS)
Active Directory Specialist
Atotech Deutschland GmbH & Co. KG
I was responsible for user management at the enterprise level, including provisioning, deprovisioning, and lifecycle management of users across multiple geographic locations and business units.
I developed and implemented complex Group Policy Objects (GPOs) to secure and manage extensive computer and user settings.
I planned and managed a robust Active Directory infrastructure with multiple forests and domains, built trust relationships, and optimized site topology.
I ensured the deployment and maintenance of Active Directory Federation Services (ADFS) to enable secure sharing of identity information between different organizations and cloud services.
I coordinated directory synchronization with cloud services like Entra ID to maintain consistent identity management across on-premises and cloud platforms.
I ensured high availability of AD services and deployments across multiple regions and executed comprehensive backup and disaster recovery plans.
I monitored system performance, identified bottlenecks, and made appropriate adjustments.
I conducted security audits and remediation measures by participating in security audits and compliance checks and resolving issues.
I provided expert-level troubleshooting for complex Active Directory issues, including cross-domain authentication and forest-wide replication errors.
I worked closely with IT management to plan the strategic direction of Active Directory services and integrate new technologies and cloud migration strategies.
Technologies used:
- Active Directory Domain Services (AD DS)
- Group Policy Objects (GPOs)
- Azure Entra ID (Entra ID)
- Active Directory Federation Services (ADFS)
- PowerShell
- LDAP (Lightweight Directory Access Protocol)
- Active Directory Certificate Services (AD CS)
- DNS services (Domain Name System)
- Active Directory Sites and Services
- Windows Server
Interims Technical Lead
SHE Informationstechnologie AG
I supported the team with complex problem solving and escalations and planned and executed projects in the Microsoft environment, including Intune and Entra ID.
I was responsible for designing, implementing, and managing Windows Servers and Windows 10/11 in VDI environments, as well as migrations in Windows Server, Active Directory, Exchange, and Azure.
I coordinated troubleshooting and assessed architecture for Microsoft technologies.
I provided technical consulting and mentoring for team members, led the Microsoft team, and ensured smooth communication with other departments and clients.
I supervised training and development of team members.
I created technical documentation and managed Office 365 environments as well as Entra ID and Exchange Online.
I conducted configuration reviews, managed file servers and NTFS permissions, and automated processes with PowerShell.
I planned and operated Microsoft Intune for device management and security and Azure Entra ID for identity and access management.
I coordinated the transition from Skype for Business to Microsoft Teams.
I administered and troubleshot SharePoint and Office Apps Server.
Technologies used:
- Microsoft Windows Server (2008R2 – 2022)
- Windows 10/11
- Microsoft 365
- Microsoft Azure
- Office 365
- Exchange Online and Exchange Server
- Microsoft Teams
- Intune
- BitLocker
- PowerShell
- Quest Kace
- WSUS (Windows Server Update Services)
- Entra ID
Active Directory Specialist
Bilfinger Global IT GmbH
I provided technical support in operating a globally distributed Active Directory and advised on mergers and carve-outs.
I developed automation scripts to optimize Active Directory and implemented security measures for domain controllers.
I handled 3rd-level incidents and troubleshooting.
I played a key role in building the Enhanced Security Administrative Environment (ESAE).
I monitored AD service performance and availability, implemented security policies, and executed disaster recovery plans for AD components.
I operated and managed Azure Entra ID for identity and access control.
I implemented and managed security policies and access controls and synchronized on-premises directories with Azure Entra ID.
I conducted regular reviews and audits of Entra ID configuration and security and supported MFA and Conditional Access implementation.
I managed user accounts, groups, and roles in Entra ID and ensured high availability through monitoring and troubleshooting.
I created and maintained documentation and operating instructions for Entra ID.
Technologies used:
- Active Directory
- LDAP (Lightweight Directory Access Protocol)
- PowerShell
- Kerberos and Group Policy
- DNS (Domain Name System)
- Entra ID (Azure AD)
- Windows Server (2008R2 – 2019)
Systems Engineer
Klöckner Pentaplast
- I provided 2nd-level support for all Microsoft services, including Active Directory (AD), Microsoft Exchange, and client operating systems.
- I assisted in rolling out Windows 10 and Office 365 across the company.
- I diagnosed and resolved system issues in a Microsoft environment and managed user accounts and permissions via AD.
- I managed file servers and NTFS permissions to ensure efficient data access management.
- I monitored system performance and implemented optimization measures.
- I supported backup planning and system recoveries.
- I worked with the IT security team to implement security policies and procedures.
- I documented system configurations and update processes.
Technologies used:
- Windows 10
- Office 365
- Active Directory
- Microsoft Exchange
- PowerShell
- Windows Server
Systems Engineer Specialist
SHE Informationstechnologie AG
- I was responsible for 2nd-level support for a variety of Microsoft products and custom applications.
- I planned, implemented, and monitored projects in the Microsoft environment, including migrations and server upgrades.
- I designed, maintained, operated, and troubleshot Exchange Server (2010–2016) and managed hybrid setups and DAGs for 200–4000 mailboxes.
- I ran and managed Microsoft servers (2008R2 – 2019), including patch management, monitoring, and performance tuning.
- I gained experience in administering and troubleshooting Skype for Business, SharePoint, and Office Apps Server.
- I managed and optimized Microsoft 365 services, including Exchange Online, SharePoint, and Teams.
- I implemented and managed security policies on Microsoft servers and in the cloud.
- I supported and trained end users on using Microsoft 365 services.
- I developed PowerShell scripts to automate recurring tasks.
- I managed file servers and configured NTFS permissions.
- I conducted configuration reviews to ensure compliance and system performance.
- I coordinated with other IT teams and external service providers.
- I administered BitLocker and managed Entra ID (Azure AD) for on-premises directory synchronization.
- I administered devices, policies, and users in Microsoft Intune.
Technologies used:
- Windows Server 2008R2 – Server 2019
- Windows 10/11
- Microsoft 365
- Azure
- PowerShell
- Microsoft Exchange (Online)
- SharePoint Online
- Microsoft Teams
- BitLocker
- Entra ID (Azure AD)
- Microsoft Intune
Systems Engineer Specialist
Sika Automotive Deutschland GmbH
- I analyzed and optimized the existing Active Directory infrastructure and implemented best practices.
- I advised the IT manager on security, network design, and IT process optimization.
- I handled 2nd-level incidents and change requests, including troubleshooting and production changes.
- I monitored and optimized the Kaspersky antivirus solution, including regular updates and configuration adjustments.
- I managed file servers and NTFS permissions.
- I conducted security audits and hardening measures in collaboration with the security team.
- I created technical documentation and work instructions for the IT team.
Technologies used:
- Active Directory
- Kaspersky Antivirus
- Windows Server
- PowerShell
IT Coordinator
Handwerkskammer Rheinhessen
- I coordinated between different departments as a technical IT lead and was responsible for strategic planning.
- I had overall operational responsibility for the IT infrastructure across up to five locations, including network, servers, and security.
- I designed and planned a private cloud infrastructure for the construction of a new education center.
- I designed, maintained, and operated Exchange 2016 with up to 500 mailboxes.
- I implemented work packages for the private cloud project, including server configuration, data migration, and security policies.
- I conducted risk analyses and developed disaster recovery plans for critical IT systems.
- I implemented ITIL-based processes for incident, problem, and change management.
- I was responsible for budgeting and cost control for IT projects and operational expenses.
- I selected and managed external service providers and vendors for IT services.
- I provided 2nd- and 3rd-level support and managed file servers with NTFS permissions.
- I supported around 80 specialized applications, including updates and user training.
- I conducted audits to ensure compliance with regulations.
Technologies used:
- VMware vSphere
- Windows Server 2012/2016
- XenDesktop/XenServer
- Failover-Cluster
- SQL Server
- Exchange Server
- System Center Suite
- Various specialized applications
Summary
Markus Ickenroth is a skilled Senior Systems Engineer focused on managing Microsoft-based IT infrastructures. With over twenty years of experience, he has deep knowledge in:
Windows Server Active Directory Microsoft Exchange Server
In addition to his in-depth technical expertise in the areas above, Markus Ickenroth has extensive cloud computing skills, especially in:
Microsoft Azure Microsoft 365
He combines technical know-how with strong methodological skills in ITIL and high analytical abilities. His problem-solving skills and reliability make him a valuable team member in complex IT projects. His soft skills include, among others:
Teamwork Customer focus Resilience Reliability
Skills
- Deep Expertise In Microsoft Technologies
- Skilled In Handling Cloud Solutions And It Infrastructure
- Strong In Analytical Skills And Problem Solving
Technologies
- Microsoft Azure
- Microsoft 365
- Windows Server
- Active Directory
- Microsoft Exchange Server
- Microsoft Sql Server
- Microsoft Hyper-v
Windows Server Skills
- User Account And Permission Management (Expert)
- Active Directory Service Configuration And Maintenance (Expert)
- Iis Configuration And Maintenance (Advanced)
- Windows Server Troubleshooting (Expert)
- File And Print Services Management (Expert)
- Dns And Dhcp Service Setup And Management (Expert)
- System Backups And Restorations (Advanced)
- Wsus Patch Management (Expert)
- File Server Role And Ntfs Permission Management (Expert)
- System Monitoring And Performance Tuning (Expert)
- Security Best Practices Implementation (Advanced)
- Installation And Upgrade Planning And Design (Expert)
- Hybrid Environment Management (Advanced)
- On-premises, Hybrid, And Cloud Environment Management (Advanced)
- High Availability And Disaster Recovery (Advanced)
- Azure Migration (Advanced)
Windows Client Os Skills
- Windows Client (10, 11) Management And Maintenance (Expert)
- Windows Client Installation And Configuration (Expert)
- Windows Client Troubleshooting (Expert)
- User Profile And Settings Management (Advanced)
- Group Policy (Gpo) Implementation And Management (Expert)
- Updates And Patch Management (Expert)
- Security Policy Implementation And Management (Advanced)
- Bitlocker Management And Configuration (Advanced)
- Backup And Recovery Operations (Advanced)
- Remote Desktop And Remote Access Solution Implementation (Expert)
- Windows Defender And Security Tool Management (Advanced)
- Enterprise Network And Domain Integration (Expert)
- Windows Autopilot Implementation And Management (Expert)
- Powershell For Automation And Management (Expert)
Active Directory Skills
- User Account And Group Membership Management (Expert)
- Active Directory Service Configuration And Maintenance (Expert)
- Gpo Design And Implementation (Expert)
- Active Directory Troubleshooting (Expert)
- Ad-integrated Dns And Dhcp Service Management (Expert)
- Security Measure Design And Implementation (Expert)
- Active Directory Federation Services (Ad Fs) For Sso (Advanced)
- Routine Backup And Recovery Operations (Expert)
- Ad Certificate Services (Ad Cs) Management (Advanced)
- Ad Upgrade And Migration Planning And Execution (Expert)
- Entra Id Connect Synchronization Management (Expert)
- Hybrid Ad Environment Management (Advanced)
- Ad Domain Controller Management And Monitoring (Expert)
- Powershell For Ad Administration And Automation (Expert)
- Ad Backup And Recovery Strategy Planning (Expert)
- Ad Replication And Site Management (Expert)
- Ad Certificate Services (Ad Cs) Implementation (Advanced)
Exchange Server Skills
- Mailbox And Distribution Group Management (Expert)
- Exchange Server Database And Mail Flow Configuration And Maintenance (Expert)
- Transport Rule And Policy Design And Implementation (Expert)
- Exchange Server Troubleshooting (Expert)
- Connector And External Mail Service Management (Expert)
- Security And Compliance Feature Design And Implementation (Advanced)
- High Availability And Disaster Recovery Solutions (Advanced)
- Routine Backup And Recovery Operations (Advanced)
- Mobile Device And Remote Access Policy Implementation (Expert)
- Installation, Upgrade, And Migration Planning And Execution (Expert)
Microsoft Sql Server Skills
- Sql Server Database Management, Including Creation And Maintenance (Advanced)
- Sql Server Performance Configuration And Optimization (Advanced)
- Database Schema, Table, And Relationship Design And Implementation (Beginner)
- Sql Server Database Troubleshooting (Advanced)
- Sql Server Security Management, Including User Access And Permissions (Expert)
- Sql Server Integration Services (Ssis) For Data Integration And Etl (Beginner)
- Sql Server Reporting Services (Ssrs) For Reporting (Beginner)
- Routine Backup And Recovery Operations (Expert)
- High Availability Solutions Like Clustering Or Alwayson Availability Groups (Advanced)
- Installation, Upgrade, And Migration Planning And Execution (Expert)
Microsoft Hyper-v Skills
- Virtual Machine (Vm) Management On Hyper-v, Including Creation, Configuration, And Maintenance (Expert)
- Vm Performance Configuration And Optimization In Hyper-v (Advanced)
- Virtual Network And Switch Design And Implementation In Hyper-v (Advanced)
- Vm Issue Troubleshooting On Hyper-v (Expert)
- Hyper-v Checkpoint And Snapshot Management For Vm Backups (Expert)
- Vm Security Measure Design And Implementation On Hyper-v (Advanced)
- Hyper-v Live Migration And Failover Clustering For High Availability (Advanced)
- Routine Vm Backup And Recovery Operations In Hyper-v (Expert)
- Hyper-v Replication And Disaster Recovery Solution Implementation (Advanced)
- Hyper-v Host And Vm Deployment And Upgrade Planning And Execution (Advanced)
Microsoft Azure Skills
- Azure Virtual Machine Management And Configuration (Advanced)
- Azure Virtual Network Management And Configuration (Advanced)
- Azure Monitor For Resource Monitoring And Analysis (Advanced)
- Azure Key Vault For Secrets And Certificate Management (Advanced)
- Azure Security Center Policy And Measure Implementation And Management (Advanced)
- Azure Sentinel For Security Monitoring And Threat Analysis (Advanced)
- Azure Arc For On-premises And Azure Resource Integration And Management (Advanced)
- Azure Storage (Blob, File, Queue, Table) Implementation And Management (Advanced)
- Azure Backup And Site Recovery Configuration And Management For Dr (Advanced)
- Azure Network Security Group And Firewall Rule Management (Advanced)
- Azure Resource Deployment And Migration Planning And Execution (Advanced)
- Azure Resource Manager (Arm) Template Usage For Deployment Automation (Advanced)
- Azure Load Balancer And Application Gateway Implementation For Load Balancing (Advanced)
- Azure Identity And Access Management (Iam) For Access Control And Permissions (Advanced)
Microsoft Azure Entra Id Skills
- Azure Entra Id Setup And Configuration (Advanced)
- User, Group, And Role Assignment Management (Advanced)
- Resource Monitoring And Analysis With Azure Monitor (Advanced)
- Security And Authentication Policy Design And Implementation (Advanced)
- Sso And Mfa Configuration (Advanced)
- Routine Identity Service Administration And Maintenance (Advanced)
- Identity Protection And Risk-based Access Implementation (Advanced)
- Entra Id Connect For Directory Synchronization (Advanced)
- Application And Enterprise Resource Integration (Advanced)
- Conditional Access Policy Usage (Advanced)
- Azure Entra Id B2b And B2c For External User Access (Advanced)
- Jit Access And Pim Implementation (Advanced)
- Identity Risk And Alert Monitoring And Management (Advanced)
- Sign-in And Activity Reporting And Monitoring Usage (Advanced)
Microsoft 365 Skills
- Microsoft 365 Tenant And Service Setup And Configuration (Advanced)
- User, License, And Permission Management (Expert)
- Security And Compliance Policy Design And Implementation (Advanced)
- Productivity Tool Configuration (Advanced)
- Microsoft 365 Exchange Online For Email And Collaboration (Expert)
- Microsoft 365 Data Protection, Backup, And Recovery (Expert)
- Microsoft Teams For Collaboration And Communication (Advanced)
- Microsoft 365 Sharepoint Online Administration (Advanced)
- Microsoft 365 Onedrive For Business Administration (Advanced)
- Microsoft 365 Power Platform Usage (Beginner)
- Microsoft 365 Intune Configuration And Management (Expert)
- Microsoft 365 Admin Center Usage (Advanced)
- Microsoft 365 Security Feature Implementation (Advanced)
- Microsoft 365 Compliance Center Management (Advanced)
- Microsoft 365 Audit Logs And Security Report Usage (Advanced)
- Microsoft 365 Mfa And Conditional Access Implementation (Expert)
Microsoft Intune Skills
- Microsoft Intune Setup And Configuration For Device Management (Expert)
- User And Device Group Management (Expert)
- Intune Policy And Compliance Rule Design And Implementation (Advanced)
- App Management And Configuration In Intune (Advanced)
- Windows Update Deployment And Management Via Intune (Expert)
- Security Measure And Privacy Implementation (Advanced)
- Mdm And Mam Management In Intune (Advanced)
- Win32 Content Prep Tool Usage For Packaging (Expert)
- Powershell Deployment Kit Usage For Packaging (Beginner)
- Third-party App And Service Integration (Advanced)
- Microsoft Endpoint Manager For Device Management And Monitoring (Expert)
- Device Compliance Policy And Conditional Access Management (Advanced)
- Autopilot Implementation For Device Provisioning (Advanced)
- Bitlocker Configuration And Management Via Intune (Advanced)
- Intune Reporting For Device Compliance And Performance (Advanced)
- Active Directory And/or Exchange Organization Integration For Quarantine And Hybrid Join Scenarios (Expert)
Microsoft Exchange Online Skills
- Exchange Online Mailbox Configuration And Management (Expert)
- Distribution Group, Shared Mailbox, And Resource Management (Expert)
- Email Routing And Transport Rule Design And Implementation (Expert)
- Security And Compliance Feature Configuration (Advanced)
- Exchange Online Migrations, Including On-premises To Cloud (Advanced)
- Archiving And Retention Policy Implementation (Advanced)
- Hybrid Deployment And Coexistence With On-premises Exchange (Advanced)
- Message Hygiene And Anti-spam Measures (Advanced)
- Advanced Threat Protection (Atp) Implementation And Management (Advanced)
- Powershell For Automation And Management (Expert)
- Integration With Other Microsoft 365 Services And Third-party Apps (Advanced)
- Dlp Policy Implementation And Management (Beginner)
Microsoft Teams Skills
- Microsoft Teams Setup And Configuration For Collaboration (Advanced)
- Teams Channels, Member, And Permission Management (Expert)
- Governance And Compliance Policy Design And Implementation (Beginner)
- Integration And App Configuration (Advanced)
- Meetings And Video Conferencing Features (Advanced)
- Security Measure And Privacy Implementation (Beginner)
- Voice And Telephony Features (Advanced)
- Teams Rooms And Device Management And Configuration (Advanced)
- Powershell For Automation And Management (Advanced)
- Guest Access And External User Policy Management (Advanced)
- Sharepoint And Onedrive Integration (Advanced)
- Meeting Recording And Transcription Management (Advanced)
- Microsoft Teams Admin Center Usage (Advanced)
Microsoft Sharepoint Online Skills
- Sharepoint Online Site And Library Setup And Configuration (Advanced)
- Permission, User Access, And Sharing Setting Management In Sharepoint Online (Advanced)
- Document Management Design And Implementation (Advanced)
- Information Architecture And Content Organization (Beginner)
- Security Measure And Privacy Implementation (Beginner)
- Sharepoint Online Migration Planning And Execution (Advanced)
- Document Version And Metadata Management (Beginner)
- Microsoft Teams And Onedrive Integration (Advanced)
- Sharepoint Online Admin Center Usage (Advanced)
- Compliance Policy And Record Management Implementation And Administration (Beginner)
- Sharepoint Online Hub Site Usage (Beginner)
Citrix Xendesktop/xenapp Skills
- Citrix Xendesktop And Xenapp Setup And Configuration (Advanced)
- Citrix Farm Management And Scaling (Advanced)
- Virtual Desktop And Application Design And Implementation (Advanced)
- Xendesktop And Xenapp Environment Troubleshooting (Advanced)
- User Experience Optimization And Performance Tuning (Advanced)
- Netscaler Gateway Configuration And Management (Beginner)
- Security Policy And Measure Implementation (Advanced)
- Updates And Upgrade Management (Advanced)
- Citrix Service Performance And Availability Monitoring (Advanced)
- End-user Support And Training (Expert)
Other Skills
- Network Device Configuration And Management (Routers, Switches, Firewalls) (Advanced)
- Vlan And Vpn Management (Advanced)
- Network Troubleshooting And Issue Resolution (Advanced)
- Dns And Dhcp Service Management (Expert)
- Vmware Vsphere And Vmware Horizon (Advanced)
- Skype For Business Server (Lync) 2015 Administration And Troubleshooting (Advanced)
- Sharepoint 2013 Server Administration And Troubleshooting (Advanced)
- Dell Emc Storage System Administration (Advanced)
- Netapp Storage System Administration (Advanced)
- Huawei Storage System Administration (Advanced)
- Veeam Backup And Recovery Solution Management (Advanced)
- Linux/unix Administration (Beginner)
- It Resource And Service Management (Expert)
- Technical Consulting, Planning, And Execution Of It Projects (Expert)
- Technical Documentation Creation (Advanced)
- Training And Development Of It Teams And End Users (Expert)
Languages
Certifications & licenses
Microsoft Certified: Azure Fundamentals AZ-900
Microsoft Certified: Windows Server Hybrid Administrator Associate
Deploying App and Desktop Solutions with XenApp and XenDesktop 7.6
IT Service Management with System Center Service Manager
Managing App and Desktop Solutions with XenApp and XenDesktop 7.6
Upgrading Microsoft Certified System Engineer to 2012R2
VMware Certified Professional on vSphere 4 Certification
IT Project Management – Methods and Techniques
Procurement Law Compact
CompTIA Security+
Microsoft Certified System Engineer on Windows 2000
Cobit Foundation
ITIL V3 Foundation
Similar Freelancers
Discover other experts with similar qualifications and experience
Senior System and Cloud Engineer
System and Endpoint Hardening
IT all-rounder
Managing Director; Senior IT Infrastructure & Cybersecurity Consultant
Senior ICT System Engineer
Architecture management
Senior Citrix Consultant & Architect, NetScaler Expert
Senior System Administrator
Server Migration Consultant
Exchange Architect
Ansible Automation, Windows Third Level Support
IT System Administrator MDM & MAM
System Engineer – VMware, Veeam
Strategic Consulting
IT Services - Support & Automation
Tender for Workplace Services and M365
Senior Consultant Database Administration and SQL
Client Management Support / Onsite Support
Third Level Support Infrastructure
Cloud & IT Service Management with Azure & ServiceNow (freelance)
IT Consulting / IT Rebuild
Senior Project Manager S4HANA in the Energy Sector
IT Consultant
Senior System Engineer (Server)
Interim IT Department Head IS NSS
Consultant / System Administrator / IT Analyst
MS365 Consultant/Solution Architect
Senior Application Owner
Consultant Intune, Dynamics, Ivanti Mobile Iron
