Focus areas: AI architectures, automation, infrastructure planning and project management · Berlin
For public authorities, health insurers, banks, energy and industry. Accountability from the architecture decision through to running production: on-premise AI, multi-cloud platforms, Active Directory and ITSM.
Deutsche Telekom 
Dataport 
Atruvia 
Siemens 
EVENTIM 
DEBEKA 
NXP Semiconductors 
Bundesamt für Strahlenschutz 
ITZ Bund 
NORD/LB 
Continental 
50Hertz 
Vattenfall A selection from 17 documented projects and 27 further project assignments. All company names and marks mentioned are the property of their respective owners and are used here solely to describe my own project history. This does not imply any connection, endorsement or collaboration beyond the documented projects.
Services
Every package has a defined outcome and a named handover.
Package 1
A defensible assessment of your architecture with a prioritised action list.
Package 2
One accountable person for plan, technology and communication.
Package 3
The role is filled while you recruit – evidenced by leading a platform team.
Package 4
Run AI in your own network and automate processes – compliant with your rules.
Case studies
Problem, approach, result – only what can be evidenced.
Deutsche Telekom AG – Telekom Security – Berlin. Classified information network under VS-NfD.
Problem: AI tools and models are required but must not leave the segregated environment.
Approach: Planned the AI workload hardware (HP ProLiant Gen10), built and integrated on-premise LLM servers under VS-NfD operating rules, assessed and rolled out an adoption strategy for AI tools against BSI and data protection requirements, prompt engineering and Python-based tool integration.
Result: Model operations inside the own network without cloud dependency, documented adoption strategy, Python-based tool integration in production. Additionally an ELK stack SIEM with AI-assisted anomaly detection and automatic ticket creation in Jira.
WURM GmbH – Controls refrigeration infrastructure for European food retail. Advising the department head directly.
Problem: Incoming IT tickets were classified, prioritised and routed by hand – slow, inconsistent and without a reliable data basis.
Approach: Introduced ITIL-aligned processes, designed the CMDB with CI classes and inheritance rules, built an AI-assisted dispatcher with REST integration into the KIX CMDB and automatic routing, alongside a hub-and-spoke infrastructure concept.
Result: Processes, metrics and transparency in operations; automatic classification and routing based on CMDB data and historical patterns; operations aligned with KRITIS, NIS2 and BSI requirements.
Goldfish IT – Project management and technical lead.
Problem: Several grown Active Directory domains with inconsistent permissions and unclear responsibilities.
Approach: Consolidation into a single forest using Quest On Demand Migration, migration of user accounts, group policies, resources and permissions under compliance rules – without interruption –, hardening measures, alignment with IT security and network teams, documentation and administrator training.
Result: consolidated directory, hardened configuration, trained administrators, documented migration path.
Atruvia AG and Siemens Financial Services – Two clients with the same architecture task.
Problem: A cloud architecture that gives business units their own room while keeping central compliance intact.
Approach: Hub-and-spoke concept with defined interfaces, Kubernetes clusters in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, ITSM build with CMDB, security and load testing, steering of external service providers.
Result: delivered cluster and automation platform, defined landing zone interfaces, compliance with BaFin, BSI and C5, documented handover.
Client names are used only with approval. 17 projects are fully documented, 27 more in short form.
Starting point
Six situations I have been brought into over the past years.
How I work
Five steps, regardless of assignment size.
We assess the situation. You get an honest view on whether I am the right fit – including a no.
I look at documents, systems and operational reality. No remote judgement.
Target architecture, options and effort in writing. You decide, not me.
I build, steer or support – depending on the assignment. I stay reachable when it matters.
Documentation, training and a contact for what comes next.
About
My name is Matthias Barth. I am an IT architect and have worked in infrastructure, operations and project management for over 25 years. I started in 1999 as a systems engineer; since then I have seen the disciplines from the inside: engineering, project management, service management, development.
What keeps me here: I want to understand how something works down to machine level – that started at 14 on a C64 and never stopped.
You work with me directly, not with a team. The contracting party is Bits and Friends GmbH, of which I am managing director – the consulting itself is done by me personally.
I do not just deliver the target architecture, I stand behind its operation as well. That is why I regularly take responsibility for both at once – as lead architect and as project manager.
Evidence
Contact
Describe your situation in three sentences. I usually reply within one business day with an assessment and two time slots.
