Identity & AI Infrastructure Security
Hardening Identity.
Securing AI.
Defending Infrastructure.
Active Directory Domain Services (ADDS) and Active Directory Certificate Services (ADCS) hardening, administrative Tier Model and Clean Source architecture, Azure PKI, compromise recovery, and air-gapped sovereign AI platforms — securing the identity plane attackers target first, and the AI plane they target next.
Identity & AI Infrastructure
Security Architect
Principal Cybersecurity Architect • Active Directory / Tier 0 Hardening SME • Sovereign AI Infrastructure Advisor
28+ Years enterprise infrastructure security • Direct collaboration with Microsoft CRSP • Banking, KRITIS/Gov & Automotive
Independent B2B Consultant / Freelance Architect • Architecture Reviews, Forest Recovery & Strategic Advisory
DACH & Europe (Remote / Hybrid On-Site) • German (Native), English (Fluent), French (Basic)
Over 28 years securing enterprise infrastructure — from on-premises Active Directory Domain Services (ADDS) forests to hybrid Azure environments. I architect, harden, and recover the IT and identity infrastructure systems that underpin every organization's security posture.
My work centers on eliminating identity attack paths: misconfigured PKI infrastructure, missing administrative tier boundaries that enable lateral movement from Tier 2 to Tier 0, and credential exposure — strictly anchored in Clean Source principles.
The same discipline applies to sovereign AI: deploying isolated LLM platforms with zero internet egress, and architecting AI agents that inherit ADDS and Entra ID permissions instead of bypassing them.
Engagements span federal agencies under BSI IT-Grundschutz elevated protection, global banks under PCI DSS and BAIT, international law firms, and manufacturing groups — including direct collaboration with Microsoft's Compromise Recovery Security Practice (CRSP) Team for ADDS breach containment.
Background
- Computer Science — FernUniversität Hagen
- Civil Engineering — TU Darmstadt
- Independent Consultant since 2001
Languages
- German — Native
- English — Fluent
- French — Basic
Based in
Hofheim am Taunus, Germany
Available across DACH & Europe
Infrastructure Security Services
Infrastructure Security Stack
Structured into 3 strategic pillars — from executive outcomes to deep threat taxonomy.
Selected Engagements
Harden Your
Infrastructure
Whether you need ADDS compromise recovery, Tier Model implementation, ADCS remediation, PAW deployment, an air-gapped LLM platform or an AI threat model — let's discuss your environment.