IT infrastructure architect — AI architectures · automation · project management · IT audit & DORA
Berlin, Germany · on-site, hybrid or remote
25+ years of experience · 17 documented projects · regulated and critical environments only: VS-NfD · KRITIS · BSI · ISO 27001 · BaFin · C5 · NIS2
I build and run IT infrastructure architecture for public authorities, health insurers, banks, energy and industry — with accountability from the architecture decision through to running production.
| If you need… | You get |
|---|---|
| A defensible view of a grown architecture | Architecture review — prioritised action list, target architecture sketch, decision paper for management |
| One accountable person for plan, technology and communication | Project & sub-project management — solid plan, status reports, accepted work packages, documented handover |
| The role filled while you recruit | Interim lead architect / platform operations lead — running operations, decided architecture, orderly handover |
| AI inside your own network, without cloud access | AI architectures & automation — running model operations, documented operating processes, approved tools |
| To be audit-ready | IT audit, DORA & ICT risk management — audit report to IIA/DIIR standards, remediation plan with owners |
| A team that can do it themselves afterwards | Training & seminars — trained team, reusable materials, exam preparation on request |
→ All six packages in detail: barth.uno/en/services
| Case study | Result |
|---|---|
| On-premise AI in a segregated network Deutsche Telekom AG · Telekom Security — VS-NfD | Model operations inside the own network without cloud dependency, documented adoption strategy, Python tool integration in production, plus an ELK stack SIEM with AI-assisted anomaly detection |
| AI-assisted ticket dispatcher in KRITIS WURM GmbH — refrigeration infrastructure | ITIL-aligned processes, CMDB design with CI classes, automatic classification and routing over the KIX CMDB, aligned with KRITIS, NIS2 and BSI |
| Active Directory consolidation Goldfish IT | Several grown AD domains consolidated into one forest with Quest On Demand Migration — without interruption, hardened, administrators trained |
| Multi-cloud Kubernetes under BaFin, BSI and C5 Atruvia AG and Siemens Financial Services | Hub-and-spoke landing zones, Kubernetes in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, documented handover |
→ All case studies: barth.uno/en/case-studies
| Project | What it is |
|---|---|
| BnF-PDFEditor | Complete PDF editor for Linux — Electron + React front end, Python/FastAPI back end with PyMuPDF, pikepdf and pyHanko. Page operations, forms, digital signatures with PKCS#12 and PKCS#11 smart cards, encryption, optional AI assistance |
| EtikettenDrucker-MUNYN | Etikett Studio — self-contained Electron application for Munbyn RW403B labels: no web server, no open HTTP port, SQLite, Jinja2, PDF export and CUPS printing through an internal pipe |
Cloud & platform — Azure · AWS · Multi-Cloud · Landing Zones · Hub & Spoke · Terraform · Ansible · IaC · Kubernetes · OpenShift
AI — On-premise LLMs · LLM integration · LangChain · prompt engineering · ELK SIEM · Databricks · Azure ML
Security & compliance — BSI · KRITIS · VS-NfD · NIS2 · ISO 27001 · Zero Trust · RBAC
Development — Python · PowerShell · C# · REST APIs · MS SQL · PostgreSQL · MongoDB · Redis
ITSM & methods — ITIL · CMDB · ServiceNow · Jira · Confluence · PRINCE2 · Scrum
I have been building and running IT since 1999 — from systems engineer to project manager, service manager and full-stack developer. I connect technical depth with business thinking, and I stay accountable for the result: strategy, architecture decision, hands-on implementation and running production.
I work in German and English, on-site, hybrid or remote, and I document what I hand over.
🌐 barth.uno/en · ✉️ mats@bitsandfriends.com · 💼 LinkedIn · 📇 vCard