Deutsche Telekom 
Bitmarck 
Dataport 
Atruvia 
Siemens 
EVENTIM 
DEBEKA 
NXP Semiconductors 
Bundesamt für Strahlenschutz 
ITZ Bund 
NORD/LB 
Continental 
SIT Südwestfalen IT 
NGDA Apotheker Verband 
WURM GmbH 
50Hertz 
Vattenfall 
Brose Fahrzeugteile 
E.ON 
Aktion Mensch 
SITS 
Mr. Spex Berlin 
Flyeralarm Würzburg 
Akelius AB Berlin 
Deltatre / Sportbuzzer 
KPMG Berlin 
FITS (Finanz Informatik) 
Medexo Healthcare 
MidSweden University 
Microsoft (München) 
Basler Kantonalbank / Swisscom 
O2 / Telefonica 
IZBSoft (Sparkasseninformatik) 
Daimler Chrysler Focus areas AI architecturesautomationinfrastructure planningproject managementIT audit and DORA
For public authorities, health insurers, banks, energy and industry. Accountability from the architecture decision through to running production: on-premise AI, multi-cloud platforms, Active Directory and ITSM.
Services
Six packages, each with a defined outcome and a named handover. Every package is described in detail: starting point, deliverables, duration and what is not included. For regulated organisations, IT audit and DORA is the usual entry point.
Package 1
A defensible assessment of your architecture with a prioritised action list.
Package 2
One accountable person for plan, technology and communication.
Package 3
The role is filled while you recruit – evidenced by leading a platform team.
Package 4
Run AI in your own network and automate processes – compliant with your rules.
Package 5
Become audit-ready: ICT risk management under Article 6 DORA, evidenced and traceable.
Package 6
Your team can do it themselves afterwards – in IT, ITSM, project management, cloud, security and DORA.
Services in detail Opens all four packages in a window over this page. Escape closes it again.
Case studies
Problem, approach, result – only what can be evidenced.
Deutsche Telekom AG – Telekom Security – Berlin. Classified information network under VS-NfD.
Problem: AI tools and models are required but must not leave the segregated environment.
Approach: Planned the AI workload hardware (HP ProLiant Gen10), built and integrated on-premise LLM servers under VS-NfD operating rules, assessed and rolled out an adoption strategy for AI tools against BSI and data protection requirements, prompt engineering and Python-based tool integration.
Result: Model operations inside the own network without cloud dependency, documented adoption strategy, Python-based tool integration in production. Additionally an ELK stack SIEM with AI-assisted anomaly detection and automatic ticket creation in Jira.
View details Opens the full case study in a window over this page. Escape closes it again.
Goldfish IT – Project management and technical lead.
Problem: Several grown Active Directory domains with inconsistent permissions and unclear responsibilities.
Approach: Consolidation into a single forest using Quest On Demand Migration, migration of user accounts, group policies, resources and permissions under compliance rules – without interruption –, hardening measures, alignment with IT security and network teams, documentation and administrator training.
Result: consolidated directory, hardened configuration, trained administrators, documented migration path.
View details Opens the full case study in a window over this page. Escape closes it again.
Atruvia AG and Siemens Financial Services – Two clients with the same architecture task.
Problem: A cloud architecture that gives business units their own room while keeping central compliance intact.
Approach: Hub-and-spoke concept with defined interfaces, Kubernetes clusters in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, ITSM build with CMDB, security and load testing, steering of external service providers.
Result: delivered cluster and automation platform, defined landing zone interfaces, compliance with BaFin, BSI and C5, documented handover.
View details Opens the full case study in a window over this page. Escape closes it again.
Client names are used only with approval. 17 projects are fully documented, 27 more in short form.
Starting point
Six situations I have been brought into over the past years.
How I work
Five steps, regardless of assignment size.
We assess the situation. You get an honest view on whether I am the right fit – including a no.
I look at documents, systems and operational reality. No remote judgement.
Target architecture, options and effort in writing. You decide, not me.
I build, steer or support – depending on the assignment. I stay reachable when it matters.
Documentation, training and a contact for what comes next.
About
My name is Matthias Barth. I am an IT architect and have worked in infrastructure, operations and project management for over 25 years. I started in 1999 as a systems engineer; since then I have seen the disciplines from the inside: engineering, project management, service management, development.
What keeps me here: I want to understand how something works down to machine level – that started at 14 on a C64 and never stopped.
You work with me directly, not with a team. The contracting party is Bits and Friends GmbH, of which I am managing director – the consulting itself is done by me personally.
I do not just deliver the target architecture, I stand behind its operation as well. That is why I regularly take responsibility for both at once – as lead architect and as project manager.
Reliable, structured, to the point, solution-oriented – how I work is described on the About page.
I also teach IT, ITSM, project management, cloud, IT security, and DORA and ICT risk management – at institutes and in-house.
Evidence
Service
For financial entities and regulated organisations that must be audit-ready.
Review of the ICT risk management framework under Article 6 DORA, register of information, contractual requirements and incident management – with an audit report to IIA and DIIR standards.
Certifications and partnerships
Contact
Describe your situation in three sentences. I usually reply within one business day with an assessment and two time slots.
Ask your question – or pick one of the suggestions.
