Matthias Barth
DEEN

Case studies

Selected projects

Problem, approach, result – only what can be evidenced.

On-premise AI in a segregated network Opens the full case study in a window over this page. Escape closes it again.

Deutsche Telekom AG – Telekom Security – Berlin. Classified information network under VS-NfD.

Problem: AI tools and models are required but must not leave the segregated environment.

Approach: Planned the AI workload hardware (HP ProLiant Gen10), built and integrated on-premise LLM servers under VS-NfD operating rules, assessed and rolled out an adoption strategy for AI tools against BSI and data protection requirements, prompt engineering and Python-based tool integration.

Result: Model operations inside the own network without cloud dependency, documented adoption strategy, Python-based tool integration in production. Additionally an ELK stack SIEM with AI-assisted anomaly detection and automatic ticket creation in Jira.

View details Opens the full case study in a window over this page. Escape closes it again.

Closes the window. Escape does the same; focus returns to the link that opened it.

Case studies

On-premise AI in a segregated network

Deutsche Telekom AG – Telekom Security – Berlin. Classified information network under VS-NfD.

Problem

AI tools and models are required but must not leave the segregated environment.

Approach

Planned the AI workload hardware (HP ProLiant Gen10), built and integrated on-premise LLM servers under VS-NfD operating rules, assessed and rolled out an adoption strategy for AI tools against BSI and data protection requirements, prompt engineering and Python-based tool integration.

Result

Model operations inside the own network without cloud dependency, documented adoption strategy, Python-based tool integration in production. Additionally an ELK stack SIEM with AI-assisted anomaly detection and automatic ticket creation in Jira.

Project data

  • Client: Deutsche Telekom AG – Telekom Security
  • Role: Lead Systemarchitekt & Engineer · Fachleiter Plattformbetrieb
  • Period: 05/2025 – 08/2026
  • Location: Berlin
  • Working model: Vor Ort
  • Classification: VS-NfD

Request an initial call Open this case study as its own page

Active Directory consolidation Opens the full case study in a window over this page. Escape closes it again.

Goldfish IT – Project management and technical lead.

Problem: Several grown Active Directory domains with inconsistent permissions and unclear responsibilities.

Approach: Consolidation into a single forest using Quest On Demand Migration, migration of user accounts, group policies, resources and permissions under compliance rules – without interruption –, hardening measures, alignment with IT security and network teams, documentation and administrator training.

Result: consolidated directory, hardened configuration, trained administrators, documented migration path.

View details Opens the full case study in a window over this page. Escape closes it again.

Closes the window. Escape does the same; focus returns to the link that opened it.

Case studies

Active Directory consolidation

Goldfish IT – Project management and technical lead.

Problem

Several grown Active Directory domains with inconsistent permissions and unclear responsibilities.

Approach

Consolidation into a single forest using Quest On Demand Migration, migration of user accounts, group policies, resources and permissions under compliance rules – without interruption –, hardening measures, alignment with IT security and network teams, documentation and administrator training.

Result

consolidated directory, hardened configuration, trained administrators, documented migration path.

Project data

  • Client: Goldfish IT
  • Role: Projektleiter & technischer Lead · AD-Konsolidierung
  • Period: 09/2024 – 08/2026
  • Working model: Remote

Request an initial call Open this case study as its own page

Multi-cloud Kubernetes under BaFin, BSI and C5 rules Opens the full case study in a window over this page. Escape closes it again.

Atruvia AG and Siemens Financial Services – Two clients with the same architecture task.

Problem: A cloud architecture that gives business units their own room while keeping central compliance intact.

Approach: Hub-and-spoke concept with defined interfaces, Kubernetes clusters in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, ITSM build with CMDB, security and load testing, steering of external service providers.

Result: delivered cluster and automation platform, defined landing zone interfaces, compliance with BaFin, BSI and C5, documented handover.

View details Opens the full case study in a window over this page. Escape closes it again.

Closes the window. Escape does the same; focus returns to the link that opened it.

Case studies

Multi-cloud Kubernetes under BaFin, BSI and C5 rules

Atruvia AG and Siemens Financial Services – Two clients with the same architecture task.

Problem

A cloud architecture that gives business units their own room while keeping central compliance intact.

Approach

Hub-and-spoke concept with defined interfaces, Kubernetes clusters in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, ITSM build with CMDB, security and load testing, steering of external service providers.

Result

delivered cluster and automation platform, defined landing zone interfaces, compliance with BaFin, BSI and C5, documented handover.

Project data

  • Client: Atruvia AG
  • Role: Cloud Solutions Architect · Scrum Master · DevOps
  • Period: 02/2023 – 08/2023
  • Working model: Remote

Request an initial call Open this case study as its own page

Further projects

  • Bitmarck Service GmbH – AD concepts for tenant separation at statutory health insurers, PRINCE2 project management
  • Dataport – M365 rollout and identity management for municipal administration
  • SIT Südwestfalen IT – infrastructure modernisation, virtualisation, ITSM and service catalogue
  • 50Hertz Transmission GmbH – AI-assisted big data automation with Databricks and Azure ML
  • NGDA Apotheker Verband – e-prescription rollout, CI/CD and billing API
  • NXP Semiconductors – migration of 25 billion records into a multi-cloud environment

Client names are used only with approval. 17 projects are fully documented, 27 more in short form.

Contact

Request an initial call

Describe your situation in three sentences. I usually reply within one business day with an assessment and two time slots.

Required

Required. Used only to answer you.

Required. 20 to 4000 characters.

Required fields are marked with *.