Freelancer profile translated to English.
Back to original languageAbout Markus
I am aSenior Architect for complex Microsoft environmentswith a clear focus on Identity-First Security and Zero Trust. With over 30 years of experience in IT infrastructure, I support international companies in securely modernizing their landscapes – from strategic tenant consolidation to hardening hybrid cloud architectures.
In doing so, I act as a bridge builder between CISO requirements, compliance regulations, and IT operations. I create the secure foundation on which modern technologies such as AI can be introduced in a controlled, planned manner and according to best practices.
German
Native or bilingual
English
Fluent
Can work on-site
München (up to 50km), Augsburg (up to 50km), Kempten (up to 50km)
Experience
- BITMARCK GmbHSenior M365 ConsultantHEALTH AND WELLNESSJune 2025 - March 2026 (9 months)München, GermanyCreation of concepts for M365 implementation, especially EntraID, Defender, Purview, and ExchangeOnline, considering BAS standards (binding baseline security requirements) in the project "Concept M365" with the goal of transferring the concepts to Bitmarck's M365 environments and subsequent handover to the customer.
- Creation of a status analysis of the existing M365 environments as well as the OnPremise environments and the BAS standards.
- Creation of concepts for the topics tenants, Entra ID, Purview, and ExchangeOnline, considering the BAS security standards.
- Conception and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration).
- Transfer of the concepts into the M365 environments.
- Creation of detailed technical documentation.
- Dachser SESenior Cloud & Security ConsultantLOGISTICS AND SUPPLY CHAINFebruary 2024 - Today (2 years and 5 months)Kempten, Germany
- Evaluation and implementation of cloud solutions based on Microsoft Azure / Entra ID.
- Evaluation and implementation of cloud security solutions in the area of identity.
- Zero Trust architecture with Conditional Access, MFA, Identity Protection.
- Privileged Identity Management (PIM) and role-based access control (RBAC).
- Evaluation and implementation of on-premise security solutions in the area of Microsoft Active Directory (Identity).
- AD Tiering model according to Microsoft best practices, including Kerberos hardening.
- PAW concept (Privileged Access Workstations).
- Active Directory security analyses.
- Landesbank Hessen-Thüringen GirozentraleSenior Messaging ConsultantBANKING AND INSURANCESeptember 2023 - January 2024 (4 months)Frankfurt am Main, Germany
- Support with the implementation and adjustment of configuration changes in the local Exchange infrastructure (on-premises mail servers) as well as in the hybrid environment.
- Planning and execution of pilot and mass migrations of mailboxes to Exchange Online.
- Technical support for the migration of user mailboxes, room and equipment mailboxes, and public folders.
- Support of the project manager in technical discussions and decision-making processes.
Environment: International hybrid Exchange infrastructure with approx. 8000 mailboxes.
Recommendations
Be the first to recommend Markus
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Commercial specialist (IHK)IHK Munich1993Erarbeiten und Umsetzen kundenorientierter und wirtschaftlicher Konzepte der Sortimentsgestaltung Warenbeschaffung und Logistik Steuern von Umsatz und Ertrag mit warenwirtschaftlichen Kennzahlen Anwenden von Controllinginstrumenten Beurteilen von Finanzierungsalternativen und Vorbereiten von Entscheidungen Planen und Umsetzen arbeitsorganisatorischer Veränderungen Konzipieren, Umsetzen und Auswerten von Marketingkonzepten Übernehmen von Organisations- und Führungsaufgaben unter Berücksichtigung von Unternehmens- und Führungsgrundsätzen, unternehmerisches Denken und Handeln Wahrnehmen von Qualifizierungsaufgaben sowie Fördern der Personalentwicklung Durchführen und Organisieren der Berufsausbildung Wahrnehmen von Aufgaben des Personalmanagements Kooperieren mit Geschäftspartnern und internen Unternehmensbereichen, Kommunikation kunden- und dienstleistungsorientiert gestalten Umsetzen des Qualitätsmanagements und Fördern der Nachhaltigkeit
- Specialist for modern information systems1-year further training in Munich1995Vernetzung von Hardware und Software: Funktionen des Netzwerks erweitern oder an veränderte Softwarevoraussetzungen anpassen Anwendungs- und Systemprobleme lösen: Fehlerquellen herausfinden und beheben Beratung und Schulung: Benutzer schulen und zur Bedienung von Geräten und Programmen beraten Immer auf dem neuesten Stand bleiben: Wissen durch Fachliteratur und Schulungen erweitern
Certifications
- LLM Engineering: AI Engineer Core TrackUdemy2026
- AI Coder: Vibe Coder to Agentic EngineerUdemy2026