a Randstad company

ISO 2700x, KRITIS + Audits Informattionssicherheit/IT+OT-Security, KRITIS/Auditierung Penetration Tests IT-Systemprüfung, Governance + Compliance

IT-Sicherheitsarchitektur Penetrationstest ISO 27001 Auditor KRITIS VPN Firewall IEC 62443 OT-Security Internet of Things ISMS IT-Security Penetrationstest Informationssicherheit Infrastruktur Anforderungsanalyse Vulnerability Microsoft Linux Cloud Mac
Verfügbar ab
Aktuell verfügbar - Der Experte steht für neue Projektangebote zur Verfügung.
Verfügbar zu
davon vor Ort

Hamburg (+50km) Kiel (+50km) Lübeck (+50km) Heide (+50km)
Ganz Deutschland

Remote - weltweit möglich.
Regional aktuell auf Hamburg, Schleswig-Holstein, Niedersachen und Mecklenburg Vorpommern beschränkt, basierend auf Relevanz, Dauer und Aufgabenhorizont.

Art des Profiles
Freiberufler / Selbstständiger
Der Experte ist als Einzelperson freiberuflich oder selbstständig tätig.

1 Monat



Military project

  • Establishment of an analysis of the technical and professional BSI (Federal Office of Information Security) requirements and specification of the military security catalog for ITSecurity 
  • Establishment of an analysis of the network and their network requirements 
  • Establishment of an vulnerability remediation concept for the network with focus to harden the network security 
  • Setting up the virtualized cluster server systems (virtualization platform Microsoft Hyper-V) of new networks on Linux Debian 
  • Configuration of Cisco firewalls using Ansible scripts 
  • Execution of system tests and documentation 
  • Elimination of errors according to previously created concepts 
  • Creation of detailed technical documentation  
4 Monate



Found of a new business

Founder / CEO
Founder / CEO
  • Found of a new business unit with the scope of all IT and -Security services 
1 Jahr 2 Monate



Professional management

Senior OT Cyber Security Specialist Service
Senior OT Cyber Security Specialist Service
  • Professional management and responsibility for global Cyber Security of the team Cyber Security (currently 4 FTE) in Service, Germany

  • Planning, implementation and further development of OT Cyber Security strategies for Security Incident and Event Management and Monitoring

  • Architecture and conception of network zones for implementation acc. IEC 62443 certification

  • Implementation of ISO 27001 policies, guidelines and processes

  • Coordination, identification and analyses of Cyber Security incidents and development of countermeasures

  • Project management with the scope of different Information Security related Cloud- and Onpremise applications and systems

  • Development of processes, methods and tools to detect anomalies

  • Performing Penetration Tests against IT / OT Infrastructure with the scope of Web apps, databases, hardware and mobile devices

Nordex Energy SE & Co. KG, Hamburg
2 Jahre 10 Monate



Planning, implementation and further development of IT security systems

IT-Security Specialist & Information Security Officer
IT-Security Specialist & Information Security Officer
  • Planning, implementation and further development of IT security systems and operational mentoring systems (SIEM, SOC monitoring) and improvement of automatic reports

  • Standardization of network schemes/designs in the IT and OT wind energy sector

  • Design, modeling, implementation and documentation of information security management systems (ISMS management, guidelines, processes) according to ISO 27001, KRITIS and BSI Grundschutz

  • Coordination and analysis of incoming security incident reports

  • Establishment of a Computer Emergency Response Team and be first contact to IT related security incidents and Penetration tests

  • Project management with the scope of different Information Security related Cloud- and Onpremise applications and systems

  • Implementation and coordination of security recommendations based on non-conformities in the area of LAN/WAN, SCADA, IT & OT Wind turbine systems and encryption

  • Design/modeling of IT security networks zones & systems including automated vulnerability analysis/scans

  • Management and administration of IT security systems to detect malware/ransomware and anomalies in network and web/mail traffic

  • Establishment and execution of regular audits in the context of ISO 27001

  • Establishment of regular Microsoft Active Directory audits


  • Successful company certification according to ISO 27001 in 2019

  • Establishment of an extended security concept within the scope of IT security training courses

  • Project planning and implementation of penetration tests in the energy sector

  • Certification as TÜV Rheinland Information Security Officer (ISO)

  • Additional examination KRITIS topic of "Additional test procedure competence for § 8a BSIG" incl. IT-SIG and BSI-KritisV

Nordex SE, Hamburg
1 Jahr 2 Monate



Creation of process documentation

IT System Administrator
IT System Administrator
  • Creation of process documentation and documentation standards in IBM DOORS

  • Coordination of IT systems and their security requirements with internal and external customer projects

  • Administration and management of the VMware ESX server farm

  • Configuration of Juniper switches (EX4300/EX4550) and firewalls (SRX1500)

  • Installation and optimization of the Windows Active Directory DS infrastructure in customer projects

  • Administration and maintenance of existing Linux servers (Ubuntu/CentOS)

  • Administration of virtualization and deployment environment with CI/CD tool chains under the scope of Linux and Windows deployment servers in Enterprise environments

  • Hardening of Windows and Linux servers and application services

  • Implementation, documentation and testing of operating systems, networks, applications on technical equipment in the field of shipping (defense technology)

  • Planning and execution of penetration tests in customer projects

  • Implementation of vulnerability management, IT/live forensics, security information and event management (SIEM) and firewalling in customer projects

  • Creation of developmental product documents, requirements specifications and software documentation


  • Project support with adherence to deadline targets

  • Establish and improve virtualization & deployment processes including hardening parts and solutions in Military Marine projects

  • Execution of automated penetration tests to increase security in projects

Ratheon Anschütz GmbH, Kiel - Engineering
8 Monate



Global IT Infrastructure

System Engineer
System Engineer
  • 2nd/3rd Level Support

  • Infrastructure project management (project planning, design, implementation)

  • Administration and management of Cisco FirePower (IPS SIEM) and IronPort for e-mail security infrastructure (International wide)

  • Planning, preparation and implementation for VDA/TÜV and ISO 27001 certification

  • Administration and maintenance of Linux servers (RedHat, Ubuntu, Debian, Gentoo)

  • Administration and maintenance of the Shopfloor Management System (SFMS)

  • IT Security monitoring with Nagios/OMD - Check_MK

  • Configuration of Cisco routers, firewalls (ASA & IOS) and switches

  • Installation and optimization of the Active Directory environment

  • Administration of the VMware ESX server farm (based on HP Blade Center)

  • Design/administration and maintenance of the Symantec Backup EXE, Commvault and Veeam backup infrastructure (World Wide)

  • Ticket handling through OTRS / RT ticket system

  • Installation and administration of the MobileIron Mobile Device Management (MDM) global wide

  • Installation/administrate of the patch management environment for Operating systems and applications

  • Establish and developments for automated installation based on Windows Deployment System

  • Migration of Windows NT to next generation Windows Server 2008 R2 and 2012 R2

  • Process documentation and establishing documentation standards


  • Implementation of the security concepts, mobile device management system, patch management environment and automation of software and operating systems deployment

  • Accelerate further Cisco-based network structures in the LAN/WAN area

Motivation to change

Company should be sold to PSA group France. Decision was clear to enter a new path. My skill set and experience in IT security is needed in the market.

BRUSS Sealing Systems GmbH, Hoisdorf - Automotive supplier
11 Jahre 3 Monate



Technical and professional personnel management

Department Sergeant and System - & Network Engineer
Department Sergeant and System - & Network Engineer
  • Technical and professional personnel management leading employees up to 10-15 FTEs

  • Optimization of IT processes

  • Cost optimization, negotiation of contracts and vendor relationships

  • Reporting of budgeting in a quarterly review

  • Training of civilian, military and military service employees

  • Planning and contributing to hospital internal IT strategies and external sites

  • Main responsible for IT related material, hardware & software

  • Administration and maintenance of Microsoft Windows (NT 4.0 up to 2012 R2) and Linux based operating systems (RedHat, Debian, SuSE)

  • Administration and optimization of Microsoft Windows AD domains

  • Hardening of Windows and Linux server systems and applications according to BSI, CERTBundeswehr, Best Practices and NIST, as well as other internal guidelines to best practices

  • Configuration and maintenance of appliances like Cisco Firewalls (ASA, PIX), routers & switches, Enterasys Networks core switches and Checkpoint firewalls

  • Administration and optimization of Lotus Domino Server from version 4 to 8.5.3

  • Installation and administration of VMware ESX server farms

  • Responsibility to BCM acc. Backup and Recovery ArcServ Backup and IBM TSM

  • Configuration/administration and maintenance of the Symantec security environment, Sophos SafeGuard environment (UTM, Endpoint Protection, SafeGuard Easy)

  • Wi-Fi design and planning, installation and administration of the Cisco WLC environment to secure hospital networks

  • Creation of process documentation and documentation standards

  • Customer site visits (planning, troubleshooting and remediation)


  • Implementation of security concepts to state-of-the-art security configurations and systems

  • Implementation of IT-Security training

  • Extensive experience on the Internet provider side (routing, switching) with support from external companies

  • Planning and implementation of the in-house telephone system to VOIP in cooperation with external service providers

  • Implementation of external properties and companies to the VPN network of the Federal Armed Forces Hospital Hamburg

  • Establishment of automation solutions for operating systems and applications

  • Establishment of an internal patch management system

  • Migration of all client systems from Microsoft Windows NT/2000/XP to latest Microsoft Windows 7/10

  • Establishment of a time recording system in cooperation with external service providers

Motivation to change

Time based contract of 12 years ended on March 1, 2017. IT and Security skills are in high demand in the private market economy; gaining new experience and overcoming challenges

Federal Armed Forces ? Military Hospital, own Datacenter, Hamburg
3 Monate



Design and programming of websites

Training IT system merchant and Information electronics technician
Training IT system merchant and Information electronics technician
  • Sales team member 

  • Design and programming of websites 

  • Installation, configuration of IT supported computer systems 

  • Installation and setup of TV based satellite connections 

  • Support of the in-house IT

Lorenzen Team, Regional specialized dealer for electronics
5 Monate



data order input department

IT-System Administrator
IT-System Administrator
  • Team member in the data order input department 

  • Entry of customer orders/cancellations into the inventory control system 

  • Checking of customer orders based on automated scripts 

  • Supporting in-house IT 

Motivation of change

Direct offer from a recruiting firm to prove yourself in a different role and start an apprenticeship in IT.

Markisen Spettmann GmbH, Neumünster
10 Monate



Military defense service

  • Military defense service for 10-month located in Roth/Bavaria and Kropp/Jagel, SchleswigHolstein, German

Federal Armed Forces, Germany
8 Monate



Sale of hardware and software

IT System Technician & Administrator
IT System Technician & Administrator
  • Up to 09/1999 Company named Comf@ctory, later renamed to Comsystem GmbH, Neumünster, Schleswig-Holstein, Germany 

  • Sale of hardware and software 

  • Setup, configuration and administration of heterogeneous networks 

  • Modifying/Conversion of consumer goods 

  • Installation and modification of electronic components in various devices   

Motivation to change

Federal Republic of Germany drafts me into 10-month military service.

Comf@ctory GmbH

2 Jahre 10 Monate



Ausbildung zum Fachinformatiker

Grade: 3, Hard- & Softwarelösungen B. Pommerening, Neumünster und Stadtwerke Kiel AG, Kie
Grade: 3
Institution, Ort
Hard- & Softwarelösungen B. Pommerening, Neumünster und Stadtwerke Kiel AG, Kie
  • IT Specialist System integration 
  • Focus areas: System analytics / planning / cost optimization 
  • Network Administration for the Energy Control Systems 
  • Planning, Installation and administration of Network-Attached-Storage environments 
  • First- und Second-Level Support Helpdesk 
2 Jahre 10 Monate



Specialized High School ? Economy

Termination due to support my freelancer career, Theodor-Litt-Schule Neumünster
Termination due to support my freelancer career
Institution, Ort
Theodor-Litt-Schule Neumünster
1 Jahr 11 Monate



Berufliche Schulen Rendsburg ? Wirtschaft und Sozialwirtschaft

Secondary school diploma in Economy / Grade: 2, Theodor-Litt-Schule Neumünster, Two-year business school (Economy)
Secondary school diploma in Economy / Grade: 2
Institution, Ort
Theodor-Litt-Schule Neumünster, Two-year business school (Economy)
1 Monat




Grade: 2, Klaus-Groth-Schule, Büdelsdorf
Grade: 2
Institution, Ort
Klaus-Groth-Schule, Büdelsdorf


  • CEHv11 re-certification (on-going)
  • TÜV Rheinland IT-Security Auditor
  • TÜV Rheinland IT-Security Manager
  • TCM Security Linux Privilege Escalation for Beginners
  • TCM Security Windows Privilege Escalation for Beginners
  • TCM Security External Pentest Playbook
  • TCM Security Practical Malware Analysis & Triage (on-going)


INE / eLearnSecurity Cyber Security and Cloud courses without certification


  • TÜV Rheinland Information Security Officer (IT-Sicherheitsbeauftragter) with certificate
  • Additional test procedure competence for § 8a BSIG incl. IT-SIG and BSI-KritisV exam passed


Offensive Security OSCP (Offensive Security Certified Professional) without certification


  • CISSP (Certified Information System Security Professional) without certification
  • ECSA (EC-Council Certified Security Analyst) without certification
  • MCSE (Microsoft Certified Solution Expert) 2012 certified


MCSE 2012 (Microsoft Certified Solution Expert): Cloud Platform and Infrastructure certified


  • ITIL v3 Foundation (ITIL 2011) certified
  • CEH v8 (EC-Council Certified Ethical Hacker) certified
  • MCP (Microsoft Certified Professional) certified
  • MCSA 2012 (Microsoft Certified Solutions Associate) certified


Linux Professional Institute Certification Level 2 (LPIC) certified


  • Linux Professional Institute Certification Level 1 (LPIC) certified
  • Novell CLA 11 (Certified Linux Administrator) certified
  • Novell DC Tech Spec certified
  • SUSE 11 Tech Spec certified



  • Implementation and Maintenance of Microsoft Exchange Server 2013
  • Microsoft System Center Operation Manager 2012
  • Microsoft System Center Configuration Manager 2012
  • Microsoft Server Deployment infrastructure with Microsoft Server 2008 and higher
  • Microsoft Server 2012 ? Design and Implementation a Server Infrastructure
  • VMware vSphere und vSAN


  • Windows Server 2012 ? Basic Administration
  • Installation and Configuration of Windows Server 2012
  • Administering Windows Server 2012
  • Advanced Configuration Windows Server 2012 Services


Linux Professional Institute Certification-2 Part 1+2


  • Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure
  • ITIL v3 Foundation (2011)
  • Linux Professional Institute Certification-1 Part 1+2
  • Linux Administration ? Advanced System Administration for Professionals


  • Konfigurieren, Verwalten und Warten von Windows Server 2008 Servern
  • Konfigurieren einer Netzwerkinfrastruktur und Problembehandlung unter Windows Server 2008
  • Cisco Router Teil 2 ? Erweiterte Grundlagen der Administration
  • Cisco Router Teil 3 ? Konfiguration für Fortgeschrittene
  • Linux Administration Grundlagen
  • Linux Administration ? Netzwerk Systemadministration
  • Linux Administration ? Security and Firewalls


Cisco Router 1 Grundlagen der Administration


  • Implementieren und Unterstützen von Windows XP Professional
  • Administrieren einer Windows Server 2003 ? Netzwerkinfrastruktur
  • Verwalten und Warten einer Windows Server 2003 Umgebung


  • Aktualisierung der Administrationskenntnisse von Windows 2000 auf Windows Server 2003
  • Windows Server 2003 ? Grundlagen der Administration


Elektrofachkraft zur Prüfung elektrischer Datenverarbeitungseinrichtungen nach DIN VDE 701-702 gemäß BGVA2 (bisher VGB4) nach Erweiterung, Instandhaltung und Wartung

German Muttersprache
English Fortgeschritten

Top Skills
IT-Sicherheitsarchitektur Penetrationstest ISO 27001 Auditor KRITIS VPN Firewall IEC 62443 OT-Security Internet of Things ISMS IT-Security Penetrationstest Informationssicherheit Infrastruktur Anforderungsanalyse Vulnerability Microsoft Linux Cloud Mac
Interim CISO / CIO Information Security Management Systems Penetration Tests including Vulnerability Management Strategy and standardization IT infrastructure IT-Infrastructure architecture Network architecture Datacenter architecture Identity and Access Management Backup- and Disaster Recovery Personal- and organizational planning datacenter operations
Produkte / Standards / Erfahrungen / Methoden


Microsoft Hyper-V and Microsoft Terminal Server solutions, VirtualBox, VMware ESXi, VMware Horizen, VMware Workstation, Parallels Desktop, VDI, Citrix Hypervisor, QEMU and Proxmox

LAMP System

Linux, Apache, MySQL/MariaDB, PHP


Bash Scripting, Basic, Delphi, Pascal, C++, HTML with PHP and CSS, JavaScript, Hudson/ Jenkins/ Puppet/ Chef/ Ansible/ Vagrant/ Chocolate Git/ Tortoise SVN


Amazon AWS/MWS, Google Workspace/GCP, Microsoft Azure, Hetzner


Bash, Batch, Python, Ruby, AutoIT, VBS, Powershell


sendmail, postfix, AmaViS, SpamAssasin, clamAV, policy-weight, sqlgrey Exchange 5.5 / 2000 / 2003 / 2007 / 2010 / 2013 / 2016

Web Servers

Apache, Nginx, Microsoft IIS, Varnish, Lighttpd Plesk, ISPConfig, Webmin  


Microsoft PKI, easyCA, GnuPG, PGP and S/MIME


Cisco VPN Anyconnect, OpenVPN, WireGuard, FortiNet VPN


Active Directory, DNS, FileServices, WSUS, WDS, SCCM, SCOM, Radius, RRAS, OpenLDAP, , IPtables, BIND9, ProFTPd, Nagios (OMD+Check_MK), Squid2+3, TFTP/PXE, DHCPd, dnsmasq, Asterisk, Plesk, Shopfloor Management Systems (SFMS), Hospital Information Systems (KIS), Laboratory Information Systems (LIS/LIMS), Radiology Information System (RIS), Mikrotik RouterBoard, nmap, tcpdump, Whireshark, SELinux, Graylog, Sysprep, i-doit, cmdb, Docusnap, Secunia CSI, MobileIron MDM, JDisc, Netflow, OwnCloud, and a lot more.

Penetration Tester / Ethical Hacker

  • Penetration Test (Art): Networks, Applications, Operating Systems, Mobile, Web & Wireless

  • Vulnerability scanning: automatic or manual triggered

  • Bugs hunting: Reverse engineering & code review

  • Applications: Knowledge about Linux distributions, Open source & commercial applications, Frameworks


Technical expert with experience over 20 years in IT/OT/Cyber Security, a comprehensive knowledge of Computer Information System Security, System Administration and Network Operations, and Datacenter Operations. Extensive knowledge in the areas of system security, vulnerability scanning, penetration testing, risk assessment and cyber security analysis. Experienced in leadership management over 10 years with a team up to 25 members, project coordination and system implementation of Government systems, telecommunication and larger computer networks. Security clearance (German Ü2/Ü3) is possible, if needed. Highly organized team player with the ability to effectively manage project milestones and project delivery. International work and leadership experience. 


  • > 10.000 User 
  • > 2.000 Applications
  • high complexity
  • very high security standards / requirements
  • worldwide connected locations


  • Network LAN and WAN
  • Datacenter
  • Identity and Access Management
  • Cloud Infrastructures (Microsoft Azure, Google Cloud Platform and Amazon AWS/MWS)
  • Infrastructure setups with other Cloud providers like Strato, Hetzner, Telekom, etc? 
  • ISMS implementation for ISO 27001 needs  


  • Network Security based on firewall designs and -implementing for high security needs
  • SIEM: Splunk Enterprise, LogRythm and IBM QRadar
  • Web Application Firewalls (Palo Alto, FortiWeb, Azure WAF, ?)
  • FireEye EX (E-Mail), NX (Network) and HX (Host) security
  • Squid Proxy (2, 3), FortiGate Proxy, HAproxy
  • Wireshark, tshark



Cisco ASA, FortiGate, CheckPoint, WatchGuard, SonicWall, Ubiquiti, IPtables and other   


Paessler PRTG, OMD, Nagios, Check_MK, NetFlow, Icinga, Zabbix, Prometheus, Microsoft SCOM  

Penetration Testing:

Network, Applications, Operating System, Mobile, Web- & Wireless testing plus vulnerability research  

Vulnerability scanning:

Greenbone GSA / OpenVAS, Tenable Nessus Pro/Expert, Burp Suite Pro, Metasploit, Nmap, Acunetix, HCL AppScan, Qualys VMDR, GFI Languard and a lot more 


Hudson, Jenkins, Puppet, Chef, Ansible, Vagrant, Chocolate, Git/Tortoise SVN, Microsoft SCCM, Microsoft Intune/Autopilot, Microsoft Windows Deployment Services, Secunia CSI, Sysprep, WSUS, Microsoft SCOM 


external DNS servers, BIND9, dnsmasq


Cisco Anyconnect, Forticlient, OpenVPN/WireGuard, IPsec, Microsoft RRAS 


Asterisk, VOIP, MobileIron MDM, BlackBerry Server


Omnitracker, i-Doit, CMDB, Docusnap, JDisc 


  • Shopfloor Management Systems (SFMS)
  • Laboratory Information Systems (LIS/LIMS)
  • Radiology Information System (RIS)
  • Hospital Information Systems (KIS)
  • OpenLDAP
  • Radius Servers
  • Mikrotik Routerboards 


1994 - 1994

Role: Schülerpraktikum

Customer: Ing. Büro M. Karp, Königs Wusterhausen


  • Learning area Office technology

  • Installation of SAT-Communications facilities

  • Installation and configuration of Office computers with Microsoft Windows 3.x

  • Installation and configuration of Computer networks with Microsoft Windows 3.x

Apple Mac OS X Linux
Red Hat, CentOS, Debian, SuSE Linux, Ubuntu, Mint, Gentoo
Microsoft Server
starts with NT / 2000 up to current Server 2022
Microsoft Windows
3.x / 9.x up to Windows 11
HP UX / Solaris
SELinux variants
MySQL MariaDB Microsoft MSSQL PostgreSQL IBM Rational DOORS Graylog

  • Automotive
  • Militär
  • Behörden
  • Energiewirtschaft
  • Gesundheit
  • Musik / Record
  • Finanzen
Ihr Kontakt zu Gulp

Fragen? Rufen Sie uns an +49 89 500316-300 oder schreiben Sie uns:

Jetzt bei GULP Direkt registrieren und Freelancer kontaktieren