About
Who works here
My name is Matthias Barth. I am an IT architect and have worked in infrastructure, operations and project management for over 25 years. I started in 1999 as a systems engineer; since then I have seen the disciplines from the inside: engineering, project management, service management, development.
What keeps me here: I want to understand how something works down to machine level – that started at 14 on a C64 and never stopped.
You work with me directly, not with a team. The contracting party is Bits and Friends GmbH, of which I am managing director – the consulting itself is done by me personally.
Ich bin ein IT Engineer aus Leidenschaft. Bereits mit 14 Jahren habe ich am C64 begonnen, meinen Computer zu Dingen zu überreden, für die er ursprünglich nicht gedacht war — und dafür Elektronik und Software bis auf Maschinenebene verstanden.
Nach einer kaufmännischen Ausbildung erkannte ich früh, dass IT das perfekte Werkzeug ist, um Prozesse zu automatisieren und das Leben effizienter zu gestalten. Mit dem IT-Boom 1999 begann meine Karriere als Systems Engineer — und seitdem habe ich alle wesentlichen Disziplinen der IT durchdrungen: vom Techniker zum Projektmanager, Service Manager, Business Developer und Full-Stack-Entwickler.
Ich verstehe den Zusammenhang von Business und IT und bringe Eloquenz, technisches Abstraktionsvermögen, strukturiertes Denken und einen ausgeprägten Business Sense in jedes Projekt ein — von der Strategie bis zur Hands-on-Implementierung.
What sets me apart
I do not just deliver the target architecture, I stand behind its operation as well. That is why I regularly take responsibility for both at once – as lead architect and as project manager.
Skills profile
Technology overview
Project history
17 documented projects · 27 further projects (short form) · over 25 years in the field
Project experience
- Deutsche Telekom AG – Telekom Security – Lead Systemarchitekt & Engineer · Fachleiter Plattformbetrieb · 05/2025 – 08/2026 · Berlin
- Bitmarck Service GmbH – Technische & organisatorische Projektleitung (Doppelrolle) · PRINCE2 · 06/2025 – 08/2026 · Essen
- Goldfish IT – Projektleiter & technischer Lead · AD-Konsolidierung · 09/2024 – 08/2026
- SIT Südwestfalen IT – Projektleiter & Systemintegration · Infrastrukturmodernisierung · 09/2024 – 08/2026 · Kommunaler IT-Dienstleister
- Busch Pfeiffer – Projektleiter & Berater · ITSM & AD Hybrid Domain · 07/2024 – 08/2026
- Dataport (Kiel) – M365 Consultant · Digitale Transformation öffentliche Verwaltung · 01/2024 – 08/2026 · Kiel
- Kommunaler IT-Dienstleister Schleswig-Holstein – M365 Consultant · Digitaler Wandel öffentliche Verwaltung · 04/2024 – 08/2026 · Flensburg
- 50Hertz Transmission GmbH – IT-Projektleiter & Berater · KI-gestützte Big Data Automatisierung · 01/2023 – 10/2024
- WURM GmbH (KRITIS) – Systemarchitekt & Berater · KI / ITSM · KRITIS-reguliert · 01/2023 – 06/2025
- EVENTIM AG – Solutions Architect & Engineering · KI-Fokus · 07/2023 – 08/2024
- Atruvia AG – Cloud Solutions Architect · Scrum Master · DevOps · 02/2023 – 08/2023
- Siemens Financial Services – Cloud Solutions Architect · Engineering · Projektmanagement · 05/2022 – 02/2023
- Siemens Energy – DevOps Engineering & Administration · Agile Process Optimization · 01/2022 – 05/2022
- DMI – DevOps Engineering · Administration · Scrum Master · AVD · 11/2021 – 02/2023
- DEBEKA IT Services – Product Owner Cloud Security · System & Software Architekt · KRITIS · 03/2021 – 11/2021
- NGDA Apotheker Verband – Projektmanagement · SCRUM Coaching · System & Infrastruktur Architektur · 01/2021 – 08/2026
- NXP Semiconductors – Agiles Projektmanagement · System & Software Architekt · Data Warehouse · 01/2020 – 09/2021 · International
Further project experience (selection)
- ITZ Bund – Konzeption Kommunikationspipelines Bundesbehörden · Digital Reform 2021 · Azure, O365, Exchange, Teams, ADFS, SINA · 12/2019–08/2021
- Aktion Mensch – Projektmanagement · Agile Dev Lead · Azure Cloud Migration · Jenkins · Terraform · Ansible · Elastic SQL · 07/2019–12/2020
- SITS – O365 / Modern Workplace / Azure IaaS & PaaS Consultant · Kubernetes · Terraform · Python · IOT Tracking · 03/2020–09/2020
- Bundesamt für Strahlenschutz – Skype for Business Integration · Exchange Online · Teams · IZB Bund · Sicherheitskonzepte · 12/2020–02/2021
- Mr. Spex Berlin – Azure Migration · Container Deployment · CI/CD Automatisierung · Azure Security · Monitoring · 09/2019–12/2019
- Flyeralarm Würzburg – Infrastructure Architect · M365 Migration · Windows 7→10 · SCCM Rollout · Exchange Online · Teams · 01/2019–10/2019
- E.ON Norwegen/Schweden – O365 / Azure Beratung · Exchange Online Migration · Teams · Security · Projektmanagement · 11/2018–05/2019
- Vattenfall Schweden – Azure Infrastructure Planung · Hub-Spoke · ExpressRoute · ARM Templates · DevOps (VSTS) · 11/2018–05/2019
- NORD/LB Hannover – Softwarearchitekt · Exchange→O365 Migration 500 Postfächer · Teams · Skype · Compliance · 11/2018–03/2019
- Akelius AB Berlin – Software Architekt · Azure Kubernetes Microservices · API Management · C# · CI/CD Octopus · 01/2018–04/2019
- Deltatre / Sportbuzzer – Software Architekt · Scrum Master · ASP.net · Azure · Google AMP · Analytics · API Integration · 09/2017–12/2017
- HiScout GmbH – IT-Security · BSI Grundschutz · C# · SQL Reports · SCRUM Master · API Interfaces · 04/2017–09/2017
- KPMG Berlin – Senior Software Developer · ASP.net · C# · SQL Reports · ETL · SCRUM · 01/2017–05/2017
- FITS (Finanz Informatik) – Solution Architect · Hochverfügbare Datenbanken · ETL · Data Warehouse · IBM WebSphere · Avaloq · 06/2016–12/2016
- Medexo Healthcare – Head of IT · ITIL · PRINCE2 · AWS · Patientenakte · WebRTC · SIP · VoIP · 02/2016–06/2016
- MidSweden University – Solution Architect · eLearning 27.000 Studenten · HA SQL Geo-Cluster · O365 Migration · ADFS · 03/2014–02/2016
- Continental AG – Software Architekt · Konzernweite Webapplikation 300.000 User · Multi-Site SQL · HTML5 · 06/2014–08/2015
- Bank J.F. Safra Sarasin – Service Manager · IT-Infrastruktur Fusion zweier Banken · FINMA/BaFin · Exchange Migration · 02/2013–05/2013
- Microsoft (München) – 3rd Line Support EMEA · Azure/O365 Kernteam · Lync Enterprise · VoIP/SIP · Konzeption · 06/2011–04/2012
- Brose Fahrzeugteile – SCCM · Exchange Migration · Lync · MOM Monitoring · Automatisierung · Exchange 2010 · 09/2010–05/2011
- Basler Kantonalbank / Swisscom – Technischer Koordinator · IT-Migration Zahlungsdienstleister · ITIL · PRINCE2 · Avaloq · 01/2010–09/2010
- O2 / Telefonica – Citrix Rollout · Thinclients · Provisioningserver · QoS · Xen · CTX Accessgateway · 06/2009–01/2010
- Siemens München – MS AppV · MSCAV · Softwareverteilung · IIS · C# · Deployment Tracking · Virtualisierung · 02/2008–02/2009
- IZBSoft (Sparkasseninformatik) – 55 DomainController · 42.000 User · Citrix 2.400 Server · SharePoint · VMWare · Exchange · 03/2005–12/2006
- Daimler Chrysler – MOM 2005 · Überwachung 9.000 Server · Gruppenrichtlinien · VBS/WSH Automatisierung · 10/2004–02/2005
- Justizministerium Bayern – AD/Exchange Administration 175 Server · ISA Server 2005 · SharePoint · VMWare · Provisioning · 01/2004–10/2004
- BKK Airbus Hamburg – IT Management · Citrix Metaframe · BSI Grundschutz · Aufbau IT-Struktur 400 MA · 15 Standorte · 02/2002–12/2004
Languages
- Deutsch: Muttersprache
- Englisch: Verhandlungssicher
- Schwedisch: Fließend
- Dänisch / Norwegisch: Gutes Verständnis
Education and certifications
- MSc Computer Science
- BSc Psychology
- PRINCE2 – Practitioner & Trainer
- ITIL V2/V3 – ServiceManager & Trainer
- SCRUM Master – Zertifiziert
AI expertise
AI architectures that hold up in operations
I have been building infrastructure for over 25 years. For several years I have been building it for AI – running in your own network and standing up to your rules.
Running AI in your own network
Operating language models on your own hardware, without cloud dependency and without data leaving the building. That includes hardware sizing, model selection, connection to existing identities and the handover to operations.
Model operations and tooling
Setting up and running LLM servers, serving and updating models, tool integration via Python, embedding into existing processes. From practice: vLLM, LangChain, Databricks, Azure ML.
AI-assisted automation
Supporting recurring work with AI: evaluating logs and events, classifying and prioritising tickets, detecting anomalies, connecting data pipelines with machine learning. The result is shorter response times and less manual work.
Rules and evidence
Running AI under BSI IT baseline protection, VS-NfD, KRITIS, NIS2 and GDPR – with tool assessment before adoption, logging and documentation that stands up to an audit.
Where I have built this
- Deutsche Telekom AG – Telekom Security: planned the hardware for AI workloads, built on-premise LLM servers in a VS-NfD classified information network, assessed AI tools against BSI and data protection requirements. AI-based security analysis and real-time anomaly detection, plus LLM-assisted evaluation of server logs, Active Directory events and authentication failures.
- 50Hertz Transmission: led and implemented LLM and agent frameworks with Databricks and Azure ML, plus data automation and machine learning integration as end-to-end processes.
- WURM GmbH (KRITIS): AI-assisted ticket dispatcher connected to the KIX CMDB, automatically analysing, classifying and prioritising incoming tickets.
- EVENTIM AG: AI-assisted ITIL CMDB with machine learning for automatic asset discovery; software development of an AI-assisted ordering system; optimised CI/CD pipelines with machine learning and AI-based code quality assurance.
All statements come from the stored CV. Details are in the case studies.
What I can do for you
From feasibility to running operations: assessing whether a project can be built in-house, selecting hardware and model, building, integration, tool assessment under your rules and handover to operations. On request I then audit as an IT auditor what actually works – or train your team to run it themselves.
How I work
How I work
Four qualities you can rely on – each with a reason, not as self-praise.
Reliable
Commitments hold. What I promise gets delivered, and if something changes you hear it from me rather than by asking. In 25 years I have kept dates and handovers, including when that took weekend work.
Structured
I work with clear briefs, named results and traceable decisions. Every project gets a structure a third party could take over – documentation and handover are part of it, not an afterthought.
To the point
You get no 80-slide deck in which the decision has to be searched for. Result, reasoning, risk, recommendation – that comes first. The derivation is there for anyone who wants to go deeper.
Solution-oriented
I grasp problems quickly and completely, but I do not stop at the analysis. Every problem is translated into a decision you can act on: options, effort, risk and a recommendation you can defend.
Teaching
I also teach
For many years I have delivered seminars, workshops and training – at institutes and in-house. Mainly on topics I work with every day.
Subjects
- IT and computer science
- ITSM according to ITIL
- Project management according to PRINCE2
- Cloud and automation
- IT security
- DORA and ICT risk management
- IT audit and audit preparation
Formats
- Multi-day seminars with exercises and exam preparation
- In-house workshops on your systems and cases
- Support for certifications (ITIL, PRINCE2, ISACA)
- Short training on individual tools such as Terraform or Ansible
Evidenced by
PRINCE2 practitioner and trainer, ITIL V2/V3 ServiceManager and trainer, certified Scrum Master. Plus project training at Siemens Energy, DEBEKA IT Services, Atruvia, Dataport and other clients.
Contact
Request an initial call
Describe your situation in three sentences. I usually reply within one business day with an assessment and two time slots.