16.09.2026 aktualisiert
verifiziert
Premiumkunde
100 % verfügbarSenior IT Consultant | Microsoft 365, Azure, Entra ID & Cybersecurity | Berlin
berlin, Deutschland
Nur Remote
Bachelor of Computer Science (Temple University)Über mich
Senior systems engineer and IT security consultant, 20 years in enterprise IT (Merrill Lynch, World Bank, global aerospace). Founder, Klaravex LLC. Microsoft 365, Azure, Entra ID, Intune, firewalls (PCNSE, CCNP Security), PowerShell, Zero Trust, ISO 27001. Remote or on-site Berlin. English projects.
Skills
Zero TrustISO 27001Active DirectoryActive Directory Federation ServicesPenetration TestingMicrosoft AzureCisco AsaCloud ComputingComplianceMobile Device ManagementMicrosoft Exchange ServerMicrosoft Forefront Identity ManagerVPNNetwork SecurityMicrosoft Solutions
Senior IT consultant and systems engineer based in Berlin with 20 years of enterprise experience at Merrill Lynch / Bank of America, World Bank Group, Pfizer and a global aerospace distributor with 10+ international sites. Founder of Klaravex LLC (klaravex.com), a managed IT and security provider for US SMBs. Working language: English (project language English preferred; German conversational).
Microsoft 365 & Azure Cloud: migration and administration of M365 tenants (Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Defender, Purview DLP). Azure: VNet design, Azure Files with Kerberos, VPN Gateway, Azure Firewall, Hybrid Identity, Entra Connect / Azure AD Connect, Azure Automation, Azure Resource Manager, Azure Security Center, Microsoft Sentinel. Entra ID / Azure Active Directory: Conditional Access, SSPR, MFA, Privileged Identity Management (PIM), B2B/B2C, Single Sign-On (SAML, OIDC), Zero Trust architecture.
Endpoint Management: Microsoft Intune (MDM/MAM) for Windows, macOS, iOS and Android enrolment, compliance policies, configuration profiles, app deployment, Windows Autopilot, BYOD. Active Directory, Group Policy (GPO), Windows Server 2012-2022, Active Directory Federation Services (ADFS).
Network & Firewall: Cisco Meraki (MX, MR, MS, vMX) with VLAN design, SD-WAN, HA firewall clusters, site-to-site VPN, client VPN. Enterprise PKI / CA, SCEP, NDES, EAP-TLS, RADIUS / RadSec, 802.1X network access control. Palo Alto Networks (PCNSE), Check Point, Cisco ASA / FTD, FortiGate, Sophos XG/XGS, pfSense. Network security, segmentation, IDS/IPS.
Virtualisation & Automation: VMware vSphere / vCenter, ESXi, NSX, P2V migrations, backup and disaster recovery. PowerShell automation for M365 and Entra ID (provisioning, lifecycle scripts, reporting pipelines, licence audits). Power Automate, Azure CLI, n8n, Azure AI Document Intelligence.
IT Security & Compliance: MFA rollouts, Zero Trust implementation, penetration testing, security audits, vulnerability assessment, ISO 27001, NIS2, GDPR / DSGVO, SOC 2, HIPAA readiness, cyber insurance requirements. Certifications: AZ-500, PCNSE, VCP-NX, NCP, CCNP Security, CEH, MCSA.
Engagement models: project-based, retainer, interim / virtual CIO (vCIO), remote across EU and US time zones; on-site in Berlin. Deliverables always include written scope, change documentation, rollback plan, validation and handover documentation.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2026
Sprachen
DeutschGrundkenntnisseEnglischMuttersprache
Projekthistorie
Built and operate an AI-first managed IT and security platform for US professional-services SMBs (klaravex.com; consumer track personal.klaravex.com). Designed the service catalog (Foundation / Assurance / Directive plans), the 24/7 AI helpdesk with senior-engineer escalation (2-hour human SLA) and the readiness advisory practice (HIPAA, SOC 2, NIST CSF, PCI-DSS, cyber-insurance evidence packages). Hands-on delivery for client tenants: Microsoft 365 hardening (Conditional Access, MFA, Defender, Purview), Intune / Autopilot device management, Entra ID identity, Google Workspace administration, firewall and network security (Palo Alto, FortiGate, Cisco Meraki, UniFi), Windows Server / Active Directory, backup and disaster recovery, PowerShell automation. Platform stack: Azure, Python / FastAPI, PostgreSQL, LLM-based ticket triage, RMM and monitoring integration.
Architected and deployed enterprise PKI for a $1B+ aerospace distributor with 10+ international sites: two-tier Microsoft Certificate Authority, SCEP / NDES with Intune certificate profiles, RADIUS / RadSec (NPS), EAP-TLS 802.1X for wired and wireless network access control; certificate lifecycle automation with PowerShell; integration with Cisco Meraki MS switches / MR access points and Entra ID-joined endpoints. Per-site change management, rollback plan and validation documentation.
Designed and deployed global Cisco Meraki SD-WAN for 10+ international sites: MX250 HA firewall clusters at hub sites, MX branch appliances, vMX in Azure, VLAN segmentation and firewall policy standards, site-to-site AutoVPN and client VPN, MR wireless and MS switching design standards; monitoring and alerting via Meraki dashboard and API; per-site cut-over runbooks with rollback and validation; documentation and handover to operations.