Urdorf, Zurich, Switzerland
IT Engineer and Founder focused on building secure, scalable software platforms and identity-driven architectures. Specialized in Identity & Access Management (IAM), Privileged Access Management (PAM), and Microsoft-based enterprise environments (Active Directory, Entra ID, Intune). Combining software engineering with enterprise security: - Design of secure identity architectures (RBAC, least privilege, zero trust) - Automation of identity lifecycle processes using PowerShell and APIs - Development of modern, multi-tenant platforms with a strong focus on security and scalability Bridging the gap between software development and identity security. Based in Switzerland.
Founded and building a software and IT services practice focused on delivering secure, scalable platforms and identity-driven architectures. - Design and implementation of end-to-end web applications and platform architectures to digitize business-critical workflows - Development of modular, multi-tenant systems with a strong focus on scalability, maintainability, and clean architecture (DDD, layered architecture) - Full-stack development using ASP.NET Core, REST APIs, and modern web technologies - Specialization in Identity & Access Management (IAM) and Privileged Access Management (PAM) - Design and implementation of secure access control models (RBAC, least privilege, segregation of duties) - Integration with Active Directory and Microsoft Entra ID in hybrid identity environments - Automation of identity lifecycle processes (provisioning, deprovisioning, role assignments) - Implementation of secure privileged access workflows (approval processes, credential handling, session control) - Design of cloud and hybrid architectures (Microsoft Azure, Entra ID) - Automation of processes using PowerShell and API-driven workflows - Integration of enterprise systems and services to improve operational efficiency Focused on delivering production-ready solutions with a strong emphasis on security, identity, and automation.
- Standardized and professionalized the MSSQL-based automation framework, improving maintainability and scalability - Designed and implemented infrastructure automation solutions using Desired State Configuration (DSC) and Ansible - Developed and maintained automation workflows using PowerShell and .NET, focusing on reliability and reusability - Contributed to the evolution of enterprise automation and deployment processes across the infrastructure landscape - Led the initialization of a Wallix PAM solution during a carve-out scenario, replacing an existing Delinea setup and ensuring a seamless transition of privileged access processes - Continued development and integration of automation components within a Microsoft-based environment
- Implemented a Privileged Access Management (PAM) solution (Delinea) as part of a 4-person project team - Extended and maintained Scriptrunner-based automation workflows using PowerShell 5 - Built automation processes based on MSSQL data sources, enabling centralized and data-driven operations - Started developing in C# in the context of Ouvvi Data Synchronization Studio (DSS) for integration and automation scenarios - Contributed to system automation and identity-related processes within a Microsoft enterprise environment
- Provided First-Level Support for end users in a Microsoft-based enterprise environment - Delivered Second-Level Support on Active Directory and Exchange, resolving identity and messaging-related issues - Supported user onboarding, account management, and incident resolution processes - Ensured stable IT operations with a primary focus on support services and user enablement
- Delivered technical support in a Microsoft-based enterprise environment (M365, Intune) - Supported large-scale device rollout and user onboarding within a structured onboarding phase - Assisted with Microsoft 365 migrations, including user and device transitions - Leveraged PowerShell to automate recurring tasks and improve operational efficiency - Ensured reliable setup and configuration of endpoints in a managed environment
- Cleaning Master Data in Business Applications - Implementation of regular exit and change management in our applications - One of the main tasks was to evaluate and implement an inventory tool for the IT warehouse and to conduct an inventory of the warehouse stock using the tool - General support and assistance related to onsite support, including support, delivery, returns, repairs, and relocation processes - Preparing hardware for shipment and setting up work-from-home workstations - Assistance and support in IT service management across various areas
- Supported the pilot implementation of Microsoft Power BI in combination with Oracle databases - Assisted in designing and building initial data models and reports for business insights - Collaborated with internal teams to analyze data requirements and reporting needs - Contributed to the integration of data sources and validation of reporting outputs - Gained hands-on experience in BI tooling, data visualization, and enterprise data environments