# Matthias Barth

> Source: <https://gist.github.com/bitsandfriends/1fb8dc23e38097d03480491c44de906f>
> Published: 2026-09-19 23:23:19+00:00

**IT infrastructure architect — AI architectures · automation · project management · IT audit & DORA**

Berlin, Germany · on-site, hybrid or remote

**25+ years of experience** · **17 documented projects** · regulated and critical environments only: VS-NfD · KRITIS · BSI · ISO 27001 · BaFin · C5 · NIS2

I build and run IT infrastructure architecture for public authorities, health insurers, banks, energy and industry — with accountability from the architecture decision through to running production.

| If you need… | You get | 
|---|---|
| A defensible view of a grown architecture | **Architecture review** — prioritised action list, target architecture sketch, decision paper for management | 
| One accountable person for plan, technology and communication | **Project & sub-project management** — solid plan, status reports, accepted work packages, documented handover | 
| The role filled while you recruit | **Interim lead architect / platform operations lead** — running operations, decided architecture, orderly handover | 
| AI inside your own network, without cloud access | **AI architectures & automation** — running model operations, documented operating processes, approved tools | 
| To be audit-ready | **IT audit, DORA & ICT risk management** — audit report to IIA/DIIR standards, remediation plan with owners | 
| A team that can do it themselves afterwards | **Training & seminars** — trained team, reusable materials, exam preparation on request | 

→ All six packages in detail: [barth.uno/en/services](https://barth.uno/en/services/)

| Case study | Result | 
|---|---|
| **[On-premise AI in a segregated network](https://barth.uno/en/case-studies/on-premise-ai/)** Deutsche Telekom AG · Telekom Security — VS-NfD | Model operations inside the own network without cloud dependency, documented adoption strategy, Python tool integration in production, plus an ELK stack SIEM with AI-assisted anomaly detection | 
| **[AI-assisted ticket dispatcher in KRITIS](https://barth.uno/en/case-studies/ai-ticket-dispatcher/)** WURM GmbH — refrigeration infrastructure | ITIL-aligned processes, CMDB design with CI classes, automatic classification and routing over the KIX CMDB, aligned with KRITIS, NIS2 and BSI | 
| **[Active Directory consolidation](https://barth.uno/en/case-studies/active-directory-consolidation/)** Goldfish IT | Several grown AD domains consolidated into one forest with Quest On Demand Migration — without interruption, hardened, administrators trained | 
| **[Multi-cloud Kubernetes under BaFin, BSI and C5](https://barth.uno/en/case-studies/multi-cloud-kubernetes/)** Atruvia AG and Siemens Financial Services | Hub-and-spoke landing zones, Kubernetes in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, documented handover | 

→ All case studies: [barth.uno/en/case-studies](https://barth.uno/en/case-studies/)

| Project | What it is | 
|---|---|
| **[BnF-PDFEditor](https://github.com/bitsandfriends-germany/BnF-PDFEditor)** | Complete PDF editor for Linux — Electron + React front end, Python/FastAPI back end with PyMuPDF, pikepdf and pyHanko. Page operations, forms, digital signatures with PKCS#12 **and** PKCS#11 smart cards, encryption, optional AI assistance | 
| **[EtikettenDrucker-MUNYN](https://github.com/bitsandfriends-germany/EtikettenDrucker-MUNYN)** | **Etikett Studio** — self-contained Electron application for Munbyn RW403B labels: no web server, no open HTTP port, SQLite, Jinja2, PDF export and CUPS printing through an internal pipe | 

**Cloud & platform** — Azure · AWS · Multi-Cloud · Landing Zones · Hub & Spoke · Terraform · Ansible · IaC · Kubernetes · OpenShift

**AI** — On-premise LLMs · LLM integration · LangChain · prompt engineering · ELK SIEM · Databricks · Azure ML

**Security & compliance** — BSI · KRITIS · VS-NfD · NIS2 · ISO 27001 · Zero Trust · RBAC

**Development** — Python · PowerShell · C# · REST APIs · MS SQL · PostgreSQL · MongoDB · Redis

**ITSM & methods** — ITIL · CMDB · ServiceNow · Jira · Confluence · PRINCE2 · Scrum

I have been building and running IT since 1999 — from systems engineer to project manager, service manager and full-stack developer. I connect technical depth with business thinking, and I stay accountable for the result: strategy, architecture decision, hands-on implementation and running production.

I work in German and English, on-site, hybrid or remote, and I document what I hand over.

🌐 [barth.uno/en](https://barth.uno/en/) · ✉️ [mats@bitsandfriends.com](mailto:mats@bitsandfriends.com) · 💼 [LinkedIn](https://www.linkedin.com/in/matthias-barth-03893b19/) · 📇 [vCard](https://barth.uno/matthias-barth.vcf)