16.06.2026 aktualisiert


100 % verfügbar
Senior system engineer / Azure / Security
Neuss, Deutschland
Nur Remote
German "Goethe" College BucharestÜber mich
Over 12 years of experience in infrastructure management. Well rounded IT professional with skills that include windows servers, domain services, virtualization, Azure cloud, M365, configuration management and security.
Skills
Microsoft AzureConfiguration ManagementDomain Name ServerHyper-VVPNManaged Print ServicesSystem Center Configuration ManagerWindows-ServerSCVMMSiemVirtualizationVmware VsphereWorkspace ONEWsus
- Windows Server all versions
- Domain Services (AD DS, AD CS/PKI, DNS, DHCP, AD FS, Print Services, Proxy/RRAS/VPN, Remote Desktop Services)
- Configuration Management (MECM/SCVMM, Intune, Workspace One, OM Endpoint Central)
- Azure Cloud (Compute, Network, Storage, IAM, Backup)
- M365 (Intune, Entra, Exchange Online)
- Virtualization (VMWare Vsphere, Microsoft Hyper-V, Proxmox)
- VDI (Horizon, Citrix, FSLogix)
- High Availability (Failover Cluster, Storage Spaces Direct S2D, Cluster Shared Volumes)
- Patching and Hardening (WSUS, MECM, BigFix, AD Tiering)
- IAM & PAM (CyberArk)
- Security (Microsoft Defender XDR, Purview, ME Log360, Nessus Tenable, Crowdstrike Falcon, NXLog, Graylog)
- Monitoring (SCOM, OpManager, PRTG, CheckMK)
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2016
Sprachen
DeutschverhandlungssicherEnglischverhandlungssicherRumänischMuttersprache
Projekthistorie
Toolchain / Systems / Methoden:
• Konfig Management und Windows 11 Rollout mit Intune (BYOD, Autopilot, Windows Updates, Automation, Geräte, Apps)
• Esxi, Vsphere, Vcenter Server
• AD Domäne Dienste, Entra ID, Conditional Access, AD Connect, NDES
• Macmon Appliance, Access Switches, Radius Server
• Dell OpenManage, HP OneView
Zielsetzung des Projektes
Verwaltung der Hybridinfrastruktur über Azure Cloud, Intune, vSphere-Virtualisierung, lokale Server und Out-of-Band-Management mit HP OneView und Dell OpenManage. Umstellung älterer Geräte auf Windows 11-Geräte, die über Intune Autopilot installiert wurden. Wartung der virtuellen und physischen Infrastruktur. Wartung und Konfiguration von Macmon und zugehörigen Netzwerkgeräten.
Hauptaufgaben
- Implementierung von Autopilot durch Intune für den Tenant
- Härtung für die Endgeräte und Virtuelle Server mittels GPO/GPP
- Operationelle Tätigkeiten für die Domäne Dienste im Hybriden Domain
- Verwaltung und Härtung der Virtualisierungsebene ESXi mittels Vcenter (VBS etc.)
- Rollout Windows 11 durch Intune und Migration von Baramundi
- Konfiguration von NDES und AD Connect Server für Hybriddomäne
- Verwaltung physische Infrastruktur durch FNT Command, IPNetMan, HP OneView, Dell OpenManage
Managing infrastructure and security operations as a contractor.
Improved security and performed hardening. Done remediations for accreditation purposes.
Implemented BYOD and MDM through Intune.
Configured Autopilot for Hybrid-Join and large scale endpoint rollout.
Set up certificates for Azure through Connectors and PKI.
• Cloud services: M365 (Intune, Entra, ExchangeO)
• Infrastructure: Windows Server, VMWare Vsphere, Horizon VDI, Domain services (AD, DNS, DHCP, AD CS)
• Cyber Threat detection, Investigation and Response with Microsoft Defender XDR
• Data Governance, Compliance and Risk Management through Microsoft Purview
• SIEM ManageEngine Log360
• Performance Monitoring through ManageEngine OpManager
• Configuration Management: ManageEngine EndpointCentral and Intune
Led a team of system engineers through customer transition to operational
activities. Managed around 1200 virtual machines and 90 physical servers
following ITIL principles, managed SLAs, prioritized work and projects,
managed major incident situations, organized disaster recovery tests,
created documentation and kept it up to date.
Skills:
• Physical infrastructure Dell PowerEdge and HP ProLiant
• Virtualization ESXi, vCenter Server, vSphere 7 and 8
• Virtual machine OS Windows Server 2016, 2019, 2022, 2025
• Domain services AD DS, DNS, DHCP, AD FS/Proxy, RDP, NAP, RRAS, Print Services
• Encryption Certification Services and PKI
• Hardening BigFix and GPOs
• Logging with NXLOG
• Vulnerability Management with Tenable Nessus
• PAM via CyberArk
• Monitoring with SCOM
• Endpoint management, patching and security MECM, Trellix
• Automation: Powershell and Aria