Go to Website
  • en
  • de

Miguel S.

Senior System and Cloud Engineer

Basel, Switzerland

Experience

Apr 2025 - Sep 2025
6 months
Switzerland

Senior System and Cloud Engineer

Food Service Provider

  • Supporting 3000 Intune devices
  • Executing Intune AutoPilot deployments for kiosk devices and implementing hardening
  • Creating, adjusting and troubleshooting Intune configuration profiles
Apr 2025 - Jun 2025
3 months
Switzerland
Hybrid

Senior System Engineer

Service Provider

  • Executing several Intune AutoPilot deployments in hybrid and native scenarios
  • Troubleshooting Intune application deployments
Jul 2024 - Jun 2025
1 year
Germany

Windows Application Control Engineer and Win11 Rollout Engineer

Energy Company

  • Rolling out Windows Defender Application Control (WDAC), AppLocker and Application Control for Business to 2500 notebooks, desktops, workstations, VDIs and servers
  • Engineering application control policies and deployment mechanisms
  • Managing project planning for WDAC rollout in conjunction with Windows 11 rollout
  • Engineering, deploying and troubleshooting Windows 10 to Windows 11 in-place upgrades using MECM
Jan 2024 - Sep 2024
9 months
Germany

Security Engineer and Consultant

Bank

  • Designing and implementing Active Directory hardening and ESAE red forest architectures
  • Collaborating with internal and external bank stakeholders on security topics
  • Designing AD security monitoring with ATA/MDI and MDI, including MITRE attack vector identification, anomaly management and UEBA-based lateral reconnaissance detection
  • Performing market research for GPO management tools and designing Quest GPOAdmin usage
  • Conducting evaluations of GPO management providers
  • Validating MFA options for on-premises and cloud applications
  • Providing consultancy, implementation and troubleshooting for ADFS, SAML, OpenID Connect and OAuth2
  • Creating project-related records and workflows in ServiceNow and contributing to ServiceNow introduction and implementation in the bank transformation
Jul 2023 - Dec 2023
6 months
Germany

System and Cloud Engineer

Insurance Company

  • Managing patching of Windows applications, infrastructure and Citrix servers (2012, 2016, 2019, 2022) using SCCM, including troubleshooting and validation of hardened systems
  • Scripting PowerShell-based WinRM migration to HTTPS, leveraging local AD PKI certificates
  • Packaging and deploying printer drivers
  • Handling 3rd-level ITSM support tickets for changes, incidents and problems, considering change windows and SLAs
  • Resolving and mitigating Nessus/BSI security vulnerabilities
  • Implementing automatic staging with SCCM and Intune/Autopilot
  • Supporting migration to Azure Arc and Microsoft Defender
Jul 2023 - Sep 2023
3 months
Germany

System Engineer and Architect

Risk Management Service Provider

  • Supporting a leading risk management solution provider in web application and Microsoft SQL Server installation
  • Conducting proof of concept to encrypt databases and secure data transfer
  • Establishing a management domain for approximately 100 servers in a private cloud, including security principals, ENET, ServerEye, WSUS and SCCM
  • Migrating from Acronis Cloud Backup to a Veeam on-premises solution, configuring backup jobs and testing restores
Jan 2023 - Sep 2023
9 months
Switzerland

Workplace Cloud and System Engineer

Econis

  • Providing workplace management for multiple customers with SCCM, including backend design, application deployment, OS task sequences, Windows 10 upgrades to 22H2 and application packaging with PSADT
  • Handling Intune policy and Azure AD hybrid join issues and troubleshooting Autopilot staging
  • Managing SCCM patching and Windows Defender WDAC operations and troubleshooting in hybrid Intune/SCCM/GPO environments
  • Performing advanced application packaging on Windows devices, servers and Citrix virtual apps
  • Troubleshooting SCCM SQL access
  • Deploying servers on VMware and maintaining certificates
  • Meeting SLA-based response and resolution times
  • Supporting Ubuntu server administration
  • Implementing and troubleshooting Exchange hybrid environments, SMTP relays, CodeTwo signatures and mail flow
  • Implementing DLP and Microsoft Information Protection (MIP, AIP, Purview Information Protection)
  • Integrating ServiceNow with AD and SCCM/MECM and importing configuration data
  • Designing Azure landing zones and deploying them via Terraform automation
Oct 2022 - Dec 2022
3 months
Liechtenstein

Interim Azure Cloud Engineer

Bank LGT

  • Developing an automated Azure application inventory using PowerShell, Kusto KQL and Microsoft Graph
  • Managing Azure Key Vaults for secrets and certificates
Oct 2022 - Dec 2022
3 months
Switzerland

IT Architect and Consultant

Telco Startup

  • Designing a Microsoft-free secure environment based on a private cloud with Ubuntu, firewall and VPN
  • Implementing DUO, NextCloud, Zimbra, Keycloak and network management solutions for secure collaboration and identity management
Jul 2022 - Sep 2022
3 months
Switzerland

Workplace Cloud Engineer, Client Management

Helsana

  • Providing SCCM/MECM/Intune support for approximately 4500 users
  • Deploying software with AppDeploymentToolkit
  • Managing migration to Zscaler
  • Packaging applications using MSI, Orca and ADT
  • Configuring Windows Defender WDAC settings via Intune/SCCM
  • Tracking migrations for incident, problem and change management in ServiceNow and handling export/import of CMDB data for ServiceNow
Jan 2022 - Sep 2022
9 months
Germany

Migration Engineer

AAF Europe / Daikin

  • Performing tenant-to-tenant consolidation migration for Exchange Online, SharePoint and Teams using BitTitan MigrationWiz
  • Planning and executing mailbox and collaboration migrations across regions
Jan 2022 - Sep 2022
9 months
Germany

Security Engineer and Consultant

EnBW

  • Acting as operational security engineer for Active Directory and Azure AD, including security monitoring
  • Developing a forest recovery concept using Quest Recovery Manager for Active Directory (RMAD)
Jan 2022 - Jun 2022
6 months
Seattle, United States

FastTrack Targeting Manager

Microsoft

  • Leading FastTrack targeting for cloud-enabling initiatives in large accounts
  • Planning and executing M365 cloud-enablement waves for enterprise customers
  • Coordinating M365 onboardings and service implementations with Microsoft stakeholders, engineers and partner providers
Jul 2021 - Sep 2021
3 months
Switzerland

Cloud Engineer and Project Manager

Kaba

  • Acting as project manager and architect for migration of legacy application servers to Azure
  • Creating runbooks and architecture layouts and sizing/pricing AVD and virtual machines
  • Managing external providers to execute runbooks
  • Using Azure Migrate services for migration and automating AVD landing zones
Apr 2021 - Dec 2021
9 months
Switzerland

Enterprise Security Architect

Military Organization

  • Designing Active Directory using Sparx EaMod and TOGAF modelling with Hermes methodology
  • Implementing security hardening and ESAE/red forest concepts
  • Performing security requirements engineering and modelling baseline and advanced security requirements
  • Orchestrating infrastructure and deployments with Terraform
Apr 2021 - Jun 2021
3 months
Switzerland

Workplace and Azure Cloud Engineer and Consultant

itnetx

  • Delivering multiple Azure/M365 migration projects including Azure AD, Exchange Online, cross-forest and cross-tenant migrations, Teams and SharePoint Online
  • Enabling various cloud solutions and Azure data services and managing Citrix applications
  • Troubleshooting incidents and problems within SLA resolution targets
  • Automating Windows Update processes with AzureRM templates
Jan 2021 - Dec 2021
1 year
The Hague, Netherlands

Security System Engineer

Law Enforcement Agency

  • Configuring ADFS for several core applications using OAuth2, OpenID Connect and SAML
  • Integrating ADFS with SQL farms and identity providers based on Active Directory and LDAP
Jul 2020 - Mar 2021
9 months
Bern, Switzerland

Cloud Lead Architect / Client Management

Visana

  • Serving as Microsoft cloud architect and engineer
  • Enabling Azure core services including AD UPNs, ADFS, conditional access for M365/O365 identities, Azure AD, MFA and hybrid Exchange Online
  • Implementing Microsoft Teams organization-wide
  • Leading internal team and third-party providers for O365 enablement
  • Providing Windows engineering for 1500 users and 200 servers, including SCCM application packaging and deployment
  • Deploying Teams to mobile devices via Intune/MDM/Endpoint Manager
  • Implementing DLP policies for Teams and Exchange
Jul 2020 - Dec 2020
6 months
Basel, Switzerland

Migration Engineer

Helvetia

  • Acting as SCCM architect and engineer with focus on bandwidth management and dynamic application variables
  • Designing and managing task sequences for Windows 10 1909
  • Operating SCCM deployments and app variables for fat clients and VDI, verifying VDI and XenApp environments
  • Migrating Windows file home shares (NTFS/SMB) to OneDrive for Business
  • Supporting Lotus Notes to Exchange Online migration and user batch preparation
Apr 2020 - Sep 2020
6 months
Düsseldorf, Germany

Workplace and System Engineer

Vossloh

  • Acting as SCCM architect and engineer
  • Developing task sequences for Windows 10, driver management and application deployment
  • Troubleshooting VPN bandwidth and update management on SCCM CB 1910, upgrading to CB 2006 and rolling out Windows 10 2004 with Windows Defender for Endpoint
  • Deploying LAPS, BitLocker management and Junos Pulse
  • Packaging and deploying various applications using MSI, PowerShell, CMD, DISM, APPX and Microsoft Edge management, plus Office 2016 SAC and fonts, managing updates via ADRs
  • Migrating SCCM to a new platform and Active Directory, including client agent push, Windows firewall settings and GPO cleanup
  • Coordinating SCCM migration and troubleshooting with a new provider
  • Upgrading WSUS on Windows Server 2019 with IIS 10
  • Enabling Azure AD join device registration with Intune/Endpoint Manager
  • Troubleshooting VPN, DNS and DHCP issues under SLA constraints
  • Integrating Linux devices into the environment
Oct 2019 - Mar 2020
6 months
Frankfurt, Germany

Senior Cloud Architect and Project Manager

Condor

  • Serving as senior cloud architect and project manager for a de-merger tenant-to-tenant migration
  • Designing a new Active Directory (time, DNS, OUs, Sites and Services, naming standards, DC specifications, Kerberos/LDAP authentication, schema, DHCP, GPOs, BitLocker, LAPS, disaster recovery, monitoring, SLAs, ITSM processes)
  • Designing a new Office 365/Azure tenant for carve-out, including migration approach, tool selection (BinaryTree) and Azure AD Connect
  • Preparing high-level design presentations and detailed technical low-level designs for AD and O365 tenant
  • Supporting engineering of migration waves and RACI matrix with identity and cloud security considerations
  • Designing tenant-to-tenant mail migration using hybrid Exchange 2016/Exchange Online
  • Coordinating and managing HPE resources
  • Implementing new AD on Windows Server 2016 and AD Connect on Windows Server 2019 with CIS-based security hardening
  • Setting up a reporting website on IIS 10
Jul 2019 - Sep 2020
1 year 3 months
Seattle, United States

FastTrack Targeting Manager

Microsoft

  • Managing Windows 10 and Office Pro Plus deployment motions for Microsoft’s top 1500 customers
  • Driving security and compliance initiatives to increase Azure and O365 security adoption in top accounts
  • Leading Skype-to-Teams transition waves for major customers
  • Supporting new Microsoft Edge deployments
  • Promoting Windows Virtual Desktop (WVD) VDI adoption
  • Driving Microsoft 365 Apps deployment via Azure AD and SSO and MFA adoption waves
  • Coordinating with partner providers on customer delivery
  • Utilizing Azure Migrate tooling for data and VM migration to Azure
Apr 2019 - Sep 2019
6 months
Herzogenaurach, Germany

SCCM Engineer

Adidas

  • Delivering Windows as a Service through Windows 10 ring-based deployments
  • Creating and troubleshooting SCCM task sequences
  • Developing OSD deployment reporting dashboards using SQL Reporting Services and IIS 10
  • Scripting with PowerShell and managing BitLocker deployments
  • Rolling out Windows 10 LTSC images to Korean retail stores
Apr 2018 - Jun 2019
1 year 3 months
Luxembourg

Senior Security Cloud Architect and Engineer

Delphi Technologies

  • Acting as senior security cloud architect and engineer for Active Directory, Azure and O365 (Exchange Online, SharePoint Online, security/eDiscovery, DLP, Skype for Business) for a carve-out of 20,000 users from 100,000
  • Performing AD and Azure AD migrations and implementing Azure AD SSO applications with SAML
  • Establishing Azure connectivity via ExpressRoute and migrating Lync 2010 to Skype for Business
  • Migrating AWS container applications to Azure and designing tenant-to-tenant migrations in a carve-out context
  • Implementing threat protection, Azure Information Protection, MFA and mail security
  • Implementing AD auditing with Quest Change Auditor and IBM QRadar SIEM
  • Designing user provisioning processes and AD/AAD delegation models
  • Securing AD authentications using Kerberos, LDAPS and PKI infrastructure
  • Conducting Microsoft RAP assessments for Active Directory security and vulnerability improvements
  • Deploying Palo Alto GlobalProtect VPN clients and configuring SPN-based encryption towards Palo Alto proxy
  • Integrating Linux Ubuntu servers into AD with Kerberos
  • Managing DNS/DHCP carve-out migrations using centralized regional setup
  • Migrating web applications and databases to the cloud
  • Coordinating network provider and new service provider activities
  • Troubleshooting Azure MPLS ExpressRoute (Verizon) connectivity for a new landing zone
  • Establishing and integrating ServiceNow
Jan 2018 - Jun 2018
6 months
Bern, Switzerland

Senior Cloud Engineer

SBB

  • Managing Azure and O365 tenants for approximately 30,000 users
  • Designing role-based access control (RBAC) concepts for Azure
  • Managing application ownership on OneDrive and supporting Skype for Business
  • Using PowerShell for Office 365 management and troubleshooting, including Office 365 on Citrix
  • Managing SharePoint Online, Exchange Online, Teams and OneNote
  • Handling incidents, problems and changes according to ITSM/SLAs
Oct 2017 - Dec 2017
3 months
Frankfurt, Germany

Rollout Manager / Network Services Engineer

HeLaBa

  • Managing rollout and transition of new Cisco LAN and WAN devices for 6000 seats (ASR, 4500-X, 3850, 1000V)
  • Implementing NAC/Cisco ISE 802.1x and high-availability, fully meshed designs for access, distribution and core switches
  • Integrating network with encrypted EPN WAN including DNS and DHCP services
Jul 2017 - Sep 2017
3 months
Essen, Germany

Project Manager Enable Microsoft Online Services

Thyssenkrupp

  • Managing project to enable Microsoft online services (Office 365, Azure, CRM)
  • Setting up project organization, communication and planning, leading workshops
  • Coordinating Microsoft assessment and remediation workshops and preparing for O365 rollouts
  • Handling task management with Jira and managing statement-of-work RFP processes with Microsoft
  • Designing complex Azure enterprise architectures for applications, including automated zoning with ARM templates
  • Implementing IAM solutions using PingFederate, ADFS and Azure AD Connect
Jan 2017 - Jun 2017
6 months
Germany

Transition Manager

BBraun

  • Managing global Office 365 transition using Exchange Online, OneDrive and Skype for Business with Office 2013 for around 30,000 users in 60 countries
  • Migrating Office 2007 to Office 2013, Lotus Notes to Exchange Online and Cisco/Intercall Webex to Skype for Business
  • Implementing IAM with PingFederate, Zscaler, Azure AD Connect, MIM and a new PKI infrastructure
  • Driving business application migrations (Java), Windows and LDAP apps and mitigation via Citrix XenApp
  • Leading O365 service catalogue implementation and O365 operational concept/handbook creation
  • Establishing O365 global end-user support (ServiceNow) and transitioning from local to global fulfilment processes
  • Transitioning to new service providers and agreeing SLAs across 60 countries
Jan 2017 - Mar 2017
3 months
Basel, Switzerland

System Engineer

DSN

  • Installing Zimbra Mailserver 8.7.5 on Ubuntu 14.04 LTS in an IaaS environment
  • Rolling out Outlook, Zimbra Desktop and webmail clients
  • Installing pfSense firewall and OpenVPN, performing security hardening and connecting diverse devices and OS to VPN
  • Establishing mail routing with MTA in DMZ and PKI-based mail encryption/signing using S/MIME and OpenPGP
Oct 2016 - Dec 2016
3 months
Zürich, Switzerland

SCCM Engineer

SCOR

  • Designing and installing SCCM 2012 R2 on Windows Server 2012 R2
  • Planning and deploying a Windows 10 rollout for 40 sites and 4500 seats, including DP placement
  • Designing PXE boot menus and DHCP PXE options and handling IP helper vs DHCP option strategies
  • Migrating from LANDesk to SCCM
  • Operating SCCM CB (1511/1606/1610) with WDS, Windows 10 ADK and DaRT tools
  • Engineering boot images and task sequences using PowerShell and VBScript
  • Migrating Windows 7 to Windows 10 via SCCM USMT
  • Rolling out Office 365/Office 2016 with configuration, GPO settings and App-V app testing for Windows 10
Jan 2016 - Sep 2016
9 months
Zürich, Switzerland
Hybrid

Cloud Consultant

Swiss Life Asset Managers

  • Conducting a feasibility study to migrate 1500 users to Office 365 in a complex hybrid, multi-domain, multi-country environment with legal constraints
  • Designing architectures and migration scenarios to move the insurance company to the cloud
  • Preparing management presentation slides for decision-making
  • Conducting RFI/RFP for workplace management and application server outsourcing with various vendors
  • Evaluating network bandwidth requirements and design
  • Designing data center connectivity to Microsoft Azure via MPLS VPN ExpressRoute
  • Leveraging hosting, IaaS, PaaS and SaaS offerings from private cloud providers
  • Designing and validating concepts for AD Azure Connect and O365 identity management with ADFS in hybrid, multi-domain, multi-tenant setups
  • Comparing Azure Pack, Azure Stack and Azure services in terms of XaaS and identity management impact
Jan 2016 - Mar 2016
3 months
Berlin, Germany

Messaging Migration Architect

Government Agency

  • Designing a migration and outsourcing plan from GroupWise 14 to Exchange 2016
  • Designing identity and access management and Dell migration tool usage
  • Estimating effort and creating migration plans
Oct 2015 - Jun 2016
9 months
Essen, Germany

Technical Project Manager / Architect Global Exchange Migration

Thyssenkrupp

  • Acting as technical project manager and architect for a global Exchange migration
  • Harmonizing and migrating multiple Exchange systems (2003/2007/2010) and Lotus Notes to Exchange 2013 on-premises for more than 100,000 users
  • Reviewing high-level and detailed design documents and leading detailed design workshops
  • Presenting migration methods and designs
  • Building and operating POC environments
  • Rolling out databases with role-based IAM integration
  • Using Dell Migration Manager for DirSync, CalSync and MailSync backend migrations and Dell CPUU for client upgrades and native moves for mobile users
  • Handling Autodiscover design via XML, SCP and DNS
  • Managing firewall and network router changes in large environments
  • Aligning with Lync rollout dependencies
  • Troubleshooting EWS and load balancer traffic using Wireshark and Fiddler
  • Designing and testing mail migration including DNS, Autodiscover and AD identity integration
  • Coordinating with SharePoint migrations and designing public folder to SharePoint migration concepts
Jan 2015 - Sep 2015
9 months
Zürich, Switzerland

Business Analyst Global Banking Archiving

UBS

  • Supporting onboarding of global banking archiving solutions for a new bank with 10,000 employees and 2.7 million customers
  • Raising RFCs and creating business and application request specs within Agile development
  • Coordinating between business and mainframe engineering
  • Defining metadata field mappings for file transfers
  • Coordinating, requesting and tracking application-to-application file transfers
  • Working with business application teams to enable archiving of core banking applications
  • Defining data feeds for global asset management (funds, contract notes, stamp tax) with managed file transfer to IBM OnDemand
  • Onboarding new data feeds into IAM cross-border systems and resolving onboarding issues with simple SQL scripts
  • Supporting Java application development and deployment with sprints and Scrum
  • Reporting and tracking software development via Redmine and testing with QualityCenter
  • Creating ARS/BRS in Jira and linking them to release management RTM
Oct 2014 - Dec 2014
3 months
Berlin, Germany

Rollout Readiness Manager

Bombardier

  • Managing readiness for a client mass rollout of roughly 30,000 seats across 330 sites and 830 buildings worldwide
  • Defining site readiness criteria covering application readiness, backend services (file/print/network/mail/AD/DNS/DHCP) and supply chain and service readiness
  • Consolidating site lists and supported golden image hardware types using Excel formulas and cross-queries
  • Computing reusable computer volumes using pivot charts and advanced Excel programming
  • Building full project plans by country, site, building and keyboard layout
  • Preparing asset management with portal solutions for mass workstation and software deployment
Apr 2013 - Sep 2014
1 year 6 months
Zürich, Switzerland

Interim Global CIO

Agta Record

  • Acting as interim global CIO for an automatic door manufacturer
  • Building global IT in 10 countries for 1200 users
  • Updating, consolidating and documenting infrastructure (AD, Exchange, Canon printing, Dell PCs, VMware, EMC/Brocade storage, Microsoft license audit, Windows Server 2003/2008/2012, LDAP applications)
  • Changing Exchange mail flow using Sophos/Astaro anti-virus/spam/threat controls for all global domains
  • Leading a local team of four engineers/consultants
  • Conducting disaster recovery analysis, remediation and high-availability initiatives
  • Managing vendors, RFPs and invoice approvals
  • Building a fully remote-managed infrastructure (VPN, iLO, DRAC, RSA, virtual servers, virtual desktops, managed UPS, management network)
  • Maintaining Active Directory health and synchronization across WAN, implementing user self-provisioning and installing new 2012 domain controllers in China, US and Switzerland
  • Consolidating AD-integrated DNS/DHCP zones and establishing trusts to country organizations and identity access management
  • Maintaining around 100 virtual and 40 physical Windows (mostly 2012 R2 and some 2008) and Linux servers
  • Managing workplace clients and antivirus with SCCM 2012
  • Managing a new SharePoint 2013 farm and existing SharePoint 2010 sites (app, DB, front end design)
  • Consolidating ESX servers with vMotion, deploying new ESX servers into the SAN/ESX setup
  • Designing business processes (e.g. device procurement)
  • Driving ERP rollout (Lawson/Infor Movex M3) in France, focusing on invoicing performance vs price index updates
  • Building a new intranet and user self-help portal using Agile/Scrum web development
  • Designing and building a new SAN/LAN in the US (Dell, Cisco, 10Gb infrastructure) for VMware and high-availability
  • Maintaining Cisco telephony (CallManager, voice gateway, Calisto, Cisco VoIP) and updating Cisco switches and routers
Jul 2012 - Mar 2013
9 months
Biel/Bienne, Switzerland

Project Manager and Lead Engineer

Feintool

  • Managing and leading rollout of Windows 7 and Office 2010 for 1050 workstations and notebooks across 5 locations (Switzerland, Germany, China, Japan, US)
  • Defining migration paths for replacement and existing devices to new AD and Exchange environments
  • Performing detailed planning for simultaneous migration of AD, Exchange, network separation, VLANs, applications and data for both onsite and remote deployments
  • Conducting cost calculations using Excel pivot tables
  • Performing inventory with VBScript and Excel analyses
  • Staging using SCCM 2012 on Windows Server 2008/2012
  • Managing BIOS configuration for Dell and HP (Wake-on-LAN, boot order) and reconfiguring Cisco switches for WoL magic packets
  • Using Microsoft Project for planning (2011–2012)
Jan 2011 - Mar 2011
3 months
Oberglatt, Switzerland

Messaging Migration Engineer

MAAG Pump Systems

  • Migrating and merging two Exchange organizations (2003 and 2007) into a single Exchange 2007 system
Oct 2010 - Dec 2010
3 months
Zürich, Switzerland

Security Engineer

Allianz Versicherung

  • Implementing Bluelance auditing solution
Oct 2010 - Dec 2010
3 months
Munich, Germany

Management Support Engineer

Deutsche Telekom

  • Providing management support for Deutsche Telekom’s top 30/60 applications, from BI/data warehousing and reporting to web services on WebSphere
  • Building a business support and improvement organization and implementing health-check risk reporting scorecards
Oct 2010 - Dec 2010
3 months
Switzerland

Network and Directory Engineer

Endress & Hauser

  • Troubleshooting network and Novell eDirectory issues
Oct 2010 - Dec 2010
3 months
Switzerland

System Engineer

HighSkirl GmbH

  • Building an SCCM 2007 test environment for Windows 7 deployments
Jul 2010 - Sep 2010
3 months
Switzerland

Customer Engineering and Support Lead

Comparex

  • Building a new IT organization of 60 employees
  • Developing skill management and matrices aligned with customer needs and service portfolio
  • Heading 15 senior system engineers in customer engineering and support
  • Supporting and troubleshooting SCCM 2007 for about 300 workstations and deploying Windows 7 in live environments
  • Integrating new IBM hardware into existing Windows 7 images
  • Supporting and troubleshooting complex AD, Citrix and SharePoint environments
  • Managing data center operations and upgrades with NetApp storage
  • Reporting IT services via SQL queries for management decisions
Apr 2010 - Jun 2010
3 months

Migration Engineer

Holcim

  • Engineering migration from NetWare eDirectory/OES and NSS file services to Windows Active Directory
  • Developing logon scripts, migration procedures and rights management
  • Configuring NetApp NAS with ABE and DFS in a mixed Citrix environment
Jan 2010 - Jun 2010
6 months
Zürich, Switzerland

Business Service Modelling Consultant

Junisphere / SIX Group

  • Leading C-level workshops for SIX Group business service modelling across divisions (SIC, stock exchange etc.)
  • Mapping business services to IT services and configuration items (applications, servers, storage, network)
  • Modelling Swiss fund data entities (SFD participant and public publication business services)
  • Modelling CashMarkets business services (listing and being public, on-book/off-book trading, Swissblock, transaction reporting, COSI)
  • Modelling REPO-related business services (EuroMarket, CHF REPO, SecLend Market, OTC spot, SDPP TS, RepoIndex Ticks, REPO statistics, shared services, system TS)
  • Modelling reference and market data services
  • Modelling SIC business services (EuroSIC, LSV+/BDD, SDD, payRoute, SIC web presence)
  • Modelling settlement business services (in-house, cross-border, transfer, securities position management, problem management, fund transfers)
Jul 2009 - Dec 2009
6 months
Zürich, Switzerland

IT Business Process Services Management Consultant

Junisphere

  • Building dependency maps and end-to-end IT process analyses for Börse Stuttgart and defining critical KPIs for business processes in a 500-server core application environment
  • Delivering business service engineering presentations to BIS, MIG Bank and Börse Stuttgart
  • Performing IT business process services management and dependency mapping for a Basel-based government body to support advanced troubleshooting of Oracle IDM and mail solutions
Apr 2009 - Sep 2009
6 months
Denmark

Wendia Premium Consultant

Wendia

  • Delivering presentations on POB Point of Business ITIL v3 solutions with service portfolio management
  • Aligning solutions with ITIL v3 requirements for global customers
Jan 2009 - Dec 2009
1 year
Holderbank, Switzerland

NetWare and Migration Engineer

Holcim

  • Supporting NetWare 6.5 and eDirectory 8.73/8.8, including clustering
  • Implementing OES2 and migrating file services to Windows (NTFS/SMB)
Jan 2009 - Jun 2009
6 months
Zürich, Switzerland

Project Manager and Chief Architect/Engineer

MAAG Pump Systems

  • Managing and designing global migration across CH, DE, FR, IT, US, SG and HK for Active Directory, DNS/DHCP, Exchange 2003, SMS 2003, Citrix Secure Gateway, McAfee to Kaspersky, MSSQL, Windows file/print and WAN/LAN due to divestiture
  • Migrating SQL Server 2005 instances between domains while preserving database access
  • Managing SQL Server access for Kaspersky, SCCM and various applications
  • Handling about 250 diverse clients (XP, Vista, thin clients) from a 70,000 device base with a full software portfolio
  • Implementing SCCM 2007-based desktop management (software deployment, inventory, remote control, patch management)
  • Maintaining SAP connectivity
  • Acting as senior system engineer using ADMT and other migration tools (e.g. Ontrack PowerTools for Exchange)
  • Carefully planning workstation migrations, including user profile and CAD application migrations (e.g. AutoCAD Inventor)
Jul 2008 - Dec 2008
6 months
Leipzig, Germany

Wendia Premium Consultant

PC-Ware

  • Implementing POB and designing service delivery and support processes with requirements management
  • Acting as project manager and chief architect for AX Axapta to POB interface using BizTalk 2006 for data mapping, transfer and orchestration
  • Documenting the project in SharePoint
  • Developing SQL Server 2005 stored procedures and temp table data load/maintenance scripts
Apr 2008 - Jun 2008
3 months
Denmark

Wendia Premium Consultant

Wendia

  • Running workshops and project management for ITIL v3 flagship POB product
  • Providing ITIL v3 process consultancy
  • Leveraging SQL Server 2005 features for the solution
Jan 2008 - Mar 2008
3 months
Munich, Germany

ILM/MIIS Identity Management Engineer

EADS / Airbus

  • Integrating MIIS-based identity management with LDAP directories (Sun ONE, ADAM, AD) and SAP NetWeaver Portal into Active Directory
  • Managing MIIS SQL Server 2005 database and data mapping
  • Writing MIIS provisioning code and rule extensions in VB/Visual Studio 2005
  • Providing IAM foundation for SAP NetWeaver Portal
Jan 2007 - Dec 2007
1 year
Helsinki, Finland

Project Manager Client BackOffice

Nokia Siemens Networks

  • Managing client backoffice for merger/carve-out
  • Preparing migration blueprints and plans for 800 locations and 60 server hubs with 70,000 workstation rollout
  • Supporting creation of Exchange 2003 and AD migration cookbooks
  • Performing cost and resource calculations (FTEs, expenses, travel)
  • Building MS Project plans for early mover, fast-track and pilot sites in Munich and Espoo/Helsinki
  • Leading file service transformation team and evaluating WAFS
  • Conducting global surveys and data gathering with travel to various sites
Oct 2006 - Dec 2007
1 year 3 months
Basel, Switzerland

Service Management Consultant

HighSkirl GmbH

  • Focusing on service management and completing ITIL Service Manager and ISO 20000 exams
  • Applying ITIL and ISO 20000 concepts in consulting engagements
Jul 2006 - Sep 2007
1 year 3 months
Bern, Switzerland

Lead Solution Architect and Project Manager

Swisscom IT Services / Swisscom Solutions

  • Leading solution architecture and project management for OneWorkplace platform for SMB customers (target 800,000 workstations)
  • Designing platform with seamless VPN-based connectivity to customer networks and identity management using MIIS
  • Delivering hosted services such as Hosted Exchange, SharePoint and LCS
  • Developing and integrating BSS/OSS landscape (SharePoint, BizTalk, JBoss EJB, JEE5, JSP, AJAX, Oracle cluster) into a global portal farm
  • Evaluating BEA WebLogic SOA data service layer
  • Designing billing processes integrating SAP
  • Creating AD, DNS and DHCP concepts using IP overlay networks and QIP management
  • Implementing software virtualization with Altiris SVS integrated into SMS 2003
  • Designing and implementing VMware ESX 3.x with ~30 virtual Windows/Linux servers
  • Defining tests and use cases for requirements compliance
  • Creating service procedures and processes according to ITIL and transitioning to operations
  • Inventing an Active Directory access method across non-trusted domains (European patent 07405115.2-2413)
Jan 2006 - Sep 2006
9 months
Basel, Switzerland

Consultant

Ciba Specialty Chemicals

  • Conducting voice outsourcing RFP initiative for Greater Switzerland
  • Creating and refining RFP documents
  • Evaluating contenders and managing bid communication matrix
  • Defining critical success factors and KPIs and supporting outsourcing decision
Oct 2005 - Dec 2005
3 months
Holderbank, Switzerland

Implementation and Troubleshooting Engineer

Holcim

  • Performing performance tuning for BackupExec for Windows (versions 9.0, 9.1, 10.0)
Apr 2005 - Sep 2005
6 months
Basel, Switzerland

Central Migration Team Lead

Syngenta

  • Leading central migration team for infrastructure consolidation across 200 sites worldwide
  • Conducting process engineering and developing communication plans
  • Programming migration reporting solutions in Excel with SharePoint SPS
  • Executing file and print migrations with complex ACL and domain/AD structures
  • Migrating applications, IIS, WebSphere and SQL to the global data center in Basel (~1000 applications, 1 TB data)
  • Integrating SAP FI/CO
  • Globalizing DHCP/WINS services
  • Coordinating with Exchange 2003 rollout and managing outsourced/offshore migration work
  • Building complex IT procedures aligned with regional PMOs and business constraints
  • Leading a team of around 30 engineers
Apr 2005 - Jun 2005
3 months
Stein, Switzerland

Troubleshooting Senior System Engineer

Novartis

  • Troubleshooting complex Windows 2000 AD DFS/NTFRS replication issues in validated, highly available multi-site environments (labs and production)
  • Working with Cisco content switching and DNS failover
  • Documenting within GxP, under strict change control
Jan 2005 - Mar 2005
3 months
Basel, Switzerland

Implementation System Engineer

HighSkirl GmbH

  • Upgrading an existing Exchange 2000 environment to Exchange 2003
  • Migrating Active Directory to support the new messaging setup
Jan 2005 - Mar 2005
3 months
Zürich, Switzerland

Lead Architect

Private Russian Bank

  • Designing a new high-availability redundant data center using replication and Citrix
  • Upgrading from Windows 2000 to Windows 2003 within AD constraints
  • Securing certificate services and Citrix licensing servers
Jul 2004 - Sep 2004
3 months
Zürich, Switzerland

Security Engineer

UBS Card Center

  • Implementing Bluelance audit solution
Oct 2003 - Dec 2004
1 year 3 months
Basel, Switzerland

Windows Stream Leader Data Center Consolidation

F. Hoffmann-La Roche

  • Leading Windows stream in global data center consolidation across 14 countries
  • Moving operations to Center of Excellence in Madrid and producing validated GxP documentation
  • Leading a global Windows project team of 20 senior engineers
  • Standardizing server OS installation scripts, DHCP, remote control, antivirus, hardware standards, application installation, firmware, SAN agents, imaging, NetIQ installations and management
  • Defining global server procurement and maintenance contracts
  • Outsourcing file and print services and creating TCO study including full cost breakdown per user
  • Leading NT4 phase-out globally, hardening non-migratable NT4 systems
  • Developing Excel/VBA communication forms and global NT4 status reports
  • Assisting in testing EMC SAN management tools
  • Defining standards for AD (Windows 2003) and Exchange 2003 servers
  • Operating within a Windows 2000 AD environment, based in Basel and Madrid with travel to Nutley, USA and other sites
Mar 2003 - Aug 2003
6 months
Holderbank, Switzerland

Designer, Project Manager and Implementer

Holcim

  • Upgrading to NetWare 6 in an IBM/Brocade SAN and DataCore SANSymphony storage virtualization environment
  • Consolidating printer infrastructure using iPrint
  • Troubleshooting SAN solution and implementing NetWare clustering
  • Implementing iFolder and NetStorage
Jan 2003 - Apr 2003
4 months
Zürich, Switzerland

Designer, Project Manager and Implementer

Büro Fürrer

  • Implementing Microsoft Windows 2000 clustering for file (NTFS/SMB), print, DHCP, WINS and QuotaServer, plus Active Directory on a Brocade/IBM SAN with Veritas Volume Manager
  • Conducting intensive failover testing
  • Maintaining the cluster remotely via VPN
  • Designing a Citrix/Columbus solution for mixed software distribution environments
Jan 2003 - Mar 2003
3 months
Bülach, Switzerland

Designer, Project Manager and Implementer

Lavazza / Cechetto

  • Designing a Windows 2000 environment including file/print, DHCP, DNS and Active Directory, FileMaker and Exchange 2000
  • Implementing a simple but effective AD design (single forest/domain, native mode)
Sep 2002 - Oct 2002
2 months
Zürich, Switzerland

Design Expert

ALSO

  • Advising ABN AMRO on migration to Windows 2000 and Active Directory
  • Defining migration practicability, operations and project framework in workshops
  • Creating AD design, server/client migration documents, process definitions and project plans
  • Considering DNS, WINS and DHCP integration
  • Designing data center consolidation with SAN/NAS (HP EVA and NAS head e7000) and SANSymphony-based storage virtualization
Aug 2002 - Aug 2002
1 month
Zürich, Switzerland

Implementation and Troubleshoot Engineer

Bank Julius Bär

  • Migrating from HDS enterprise SAN to mid-range IBM FastT700 environment
  • Connecting Windows and NetWare systems and performing intensive failover tests with Veritas Volume Manager
  • Working with McData SAN director switches
Jul 2002 - Jul 2002
1 month
Basel, Switzerland

Directory Services Engineer

PAX Insurance

  • Troubleshooting NDS eDirectory environment
Jan 2002 - Jun 2002
6 months
Basel, Switzerland

Designer, Implementation Engineer and Project Manager

Kantonsspital Basel

  • Managing migration from single-server GroupWise 5.5 (2000 workstations) to SAN-based EMC cluster and GroupWise 6
  • Conducting analysis, design, implementation and planning with the customer
  • Implementing a 7-node GroupWise cluster and 2-node Novell file server cluster on NetWare 6 with EMC Clariion 4700 storage
  • Working in NDS 8.5 environment with 20 NetWare servers and 2000 NT4 workstations
Jul 2000 - Mar 2002
1 year 9 months
Bern, Switzerland

Designer, Implementation Engineer and Sub-Project Manager

Inselspital Bern

  • Standardizing client/server infrastructure at Switzerland’s largest hospital as subcontractor to ATAG debis/T-Systems
  • Designing new NDS and ZENWorks 4 environment
  • Migrating from Exchange 5.5 and Netscape Messenger to GroupWise 5.5 on IBM FastT500 cluster
  • Designing NDS, migration concepts, naming standards, NDPS printing and consolidating NT design, backup, AV, client concepts, GroupWise, server harmonization and systems management
  • Presenting technology stack to hospital management
  • Setting up network environment with QIP, DNS and DHCP per proposed architecture
  • Acting as sub-project manager for client rollout and complex medical software deployment, including to board/management
  • Troubleshooting Exchange 5.5 and performing advanced Excel/VBA reporting
  • Designing and installing Citrix solution to connect to SAP
Jun 2000 - Sep 2000
4 months
Geroldswil, Switzerland

Account and Technical Manager

Galileo

  • Acting as account/project manager for worldwide flight booking system service management
  • Ensuring 95% of maintenance calls met SLA response times
  • Producing Excel-based reports and presentations
  • Leading Swiss-wide team of 15 PC service technicians across travel agencies
  • Supporting Win9x, NT, OS/2, X.25 connectivity and booking software
Jan 2000 - Dec 2002
3 years
Muttenz, Switzerland

Systems Engineer and Support

TPS AG

  • Supporting customer and setting up NetWare clustering for central Gupta SQLBase application, including clustering DNS, DHCP and NDPS
  • Supporting 11 locations in Switzerland (~50 users) with Cisco networking and system support
  • Managing Compaq SAN infrastructure
Jan 2000 - May 2000
5 months
Bonn, Germany

Global Design Leader

Deutsche Post WorldNet

  • Leading global design for worldwide network including AD integration with LAN/WAN, Exchange 2000, security, helpdesk, systems management and operations manual
  • Managing 15 senior system engineers including Microsoft SSEs for 60,000 workstations and 120,000 users
  • Producing operations manuals in coordination with systems management center in Amsterdam
  • Delivering designs within 3 months as subcontractor to Unisys Deutschland
  • Designing ADS with Microsoft approval, testing multi-forest/domain configurations and DNS namespace
May 1999 - Jul 1999
3 months
Basel, Switzerland

3rd Level Support Engineer

UBS

  • Providing Swiss-wide NT4 3rd-level support in team with leading bank engineers
  • Supporting NT4 servers/workstations and about 500 banking applications in SMS environment across all divisions
Apr 1999 - Dec 2004
5 years 9 months

CEO and Consultant

HighSkirl GmbH

  • Acting as CEO of HighSkirl GmbH while delivering consulting and technical projects
  • Installing web services including Cisco routers, DSL and leased lines, DNS and mail/web hosting
  • Filling gaps between projects with management tasks, small engagements and philosophical writing
Apr 1999 - Dec 1999
9 months
Zürich, Switzerland

Account Manager and Support Engineer

ING Barings Bank

  • Managing and supporting a mixed NetWare/NT environment
  • Migrating NetWare 4.11 to 5.0
  • Providing user support and asset management
Apr 1999 - Oct 1999
7 months
Offenbach, Germany

Mail Migration Lead Engineer

Deutsche Flugsicherung

  • Leading GroupWise mail migration from version 4.x to 5.x
Oct 1998 - Jan 1999
4 months
Switzerland

Project Manager LAN/WAN Separation

Schweizerische Treuhand

  • Managing project to separate LAN/WAN from parent company (PricewaterhouseCoopers) due to regulatory requirements
  • Designing and implementing new infrastructure (servers, LAN, WAN, services) within 2.5 months
  • Achieving successful cutover on "D-day" in secure NT4 environment with Cisco PIX for 250 users across 7 locations
Jun 1998 - Sep 1998
4 months
Basel, Switzerland

Systems and Test Engineer

Bank for International Settlements

  • Conducting Y2K testing on NetWare systems to assess dependencies with Windows and UNIX
  • Producing accurate documentation per bank policies
  • Supporting NetWare 5.x and 15 Vinca cold-standby server pairs
Jan 1997 - Dec 1998
2 years

Managing Consultant, Network Support Analyst

Unisys

  • Acting as managing consultant and network support analyst for customer environments
Jan 1993 - Dec 1996
4 years

Technical Instructor

Sysag / Dettwiler

  • Instructing technical courses on NetWare and Office products
Jan 1991 - Dec 1993
3 years

Deputy Head Technical Department

ComputerLand

  • Acting as deputy head of technical department and overseeing technical support operations
Jan 1988 - Dec 1998
11 years

Freelancer / Instructor / Consultant

Various Employers

  • Teaching courses on Windows, NetWare, Office and WordPerfect at Sysag AG and Dettwiler AG
  • Heading RMA department at HighTech Computer Systems AG
  • Acting as deputy head of technical department at ComputerLand AG
  • Working as managing consultant and network support analyst at Unisys AG
  • Providing informatics instruction for humanities on AIX systems
Jan 1988 - Dec 1990
3 years

Head of RMA Department

HighTech Computer Systems

  • Leading the RMA department and managing repair and return processes
Basel, Switzerland

Systems Engineer and Architect

University Hospital Basel

  • Designing Active Directory environment for migration from Novell NetWare for 4000 users and 300 servers
  • Performing application asset reporting
  • Engineering and packaging ZENWorks 7 apps (including IE8, SAP 7.20, DICOM)
  • Evaluating PCCLM tools (ZENWorks, Matrix42 Empirum, SCCM)
  • Designing and implementing SCCM 2012 with Microsoft Europe via workshops and proof of concept
  • Evaluating and implementing AD administration tools (Quest Change Auditor, Recovery Manager, ActiveRoles Server, Blackbird Auditor, Recovery, Privilege Manager)
  • Performing NDS to AD and profile migrations using Quest NDSMigrator and VBScript for domain joins
  • Designing, supporting and implementing a VMware VDI environment (500 users, 15 pools) with 2-factor IAM
  • Installing a Citrix XenApp/XenDesktop POC with EdgeSight monitoring
  • Supporting GroupWise 6.5 to Exchange 2010 migration including client settings and GPOs

Languages

German
Native
English
Advanced
Spanish
Advanced
French
Intermediate
Italian
Elementary

Education

Oct 1996 - Jun 2005

Uni Basel

Doctor of Philosophy · Basel, Switzerland · 5.7 out of 6

Oct 1994 - Jun 1996

Uni Basel

Philosophy Licentiate · Basel, Switzerland

Oct 1992 - Jun 1994

Uni Freiburg im Breisgau

Linguistics; Medieval Hist · Freiburg im Breisgau, Germany

...and 4 more

Certifications & licenses

AZ-104 Azure Administrator Associate

MD-102 Endpoint Administrator Associate

MD-140 Azure Virtual Desktop Specialty

CSA Certified System Administrator

Swiss Personensicherheitsprüfung

ScrumAlliance: Certified ScrumMaster

Togav 9.2 Foundation

MCP 70-346: Managing O365 Identities & Requirements

MS Virtual Academy: Deploying Win10 Using SCCM

MS Virtual Academy: Migrating To Exchange Online Office365

MS Virtual Academy: What’s New In Windows Server 2016

MS Virtual Academy: Implementing Exchange 2013

MS Virtual Academy: Preparing Your Enterprise For Windows 10

MS Virtual Academy: Querying MS SQL 2012

MS Virtual Academy: SCCM2012

Update To ITIL v3

MS SQL Knowhow

Wendia ITSM Admin Training

ITIL Service Manager

On The Road To MCSE 2005

Metadirectory Education

CompTIA Project+

Master CNE

Update To CNE 6

Update To MCSE 2000

CNA (Certified NetWare Administrator)

CCDA - Cisco Certified Design Associate

Update CNE 4 To CNE 5

CCNA - Cisco Certified Network Associate

Microsoft Certified System Engineer

Cisco ACRC Adv. Router Config

Update CNE 3 To CNE 4

Microsoft Certified Professional On Win 3.1

CNE - Certified Novell Engineer

Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Similar Freelancers

Discover other experts with similar qualifications and experience

Alagi M.

Project Manager & IT Security Architect Logging & Monitoring for QRadar & Splunk, ISO 27001

View Profile
Christian F.

Architecture Management

View Profile
Markus I.

Senior System Engineer Microsoft

View Profile
Michael M.

Freelance Senior Consultant & Cloud Architect

View Profile
Philipp S.

MS365 Consultant/Solution Architect

View Profile
Markus D.

Senior System Engineer (Server)

View Profile
Dirk M.

Project Lead

View Profile
Andreas E.

IT Consulting / Entrepreneur

View Profile
Andreas F.

IT Project Manager, Business Analyst, Senior Consultant

View Profile
Thomas R.

Tender for Workplace Services and M365

View Profile
Stephan P.

IT Generalist + SCCM + Intune

View Profile
Christoph H.

Managing Director, Senior IT Infrastructure & Cybersecurity Consultant

View Profile
Mark O.

Consultant Intune, Dynamics, Ivanti MobileIron

View Profile
Alexander W.

Senior IT Consultant

View Profile
Samir S.

Project Manager in the Cybersecurity Department for 2 operational companies of the RWE Group

View Profile
fratch Part of Bitkom logo
linkedIncrunchbaseyoutube
  • English
  • Deutsch

2025 © FRATCH.IO GmbH. All rights reserved.