Matthias Barth

IT infrastructure architect Matthias Barth, based in Berlin, offers AI architecture and automation services for regulated and critical environments, including on-premise LLM operations without cloud dependency. His documented case studies include deploying on-premise AI in a segregated VS-NfD network for Deutsche Telekom AG's Telekom Security and an AI-assisted ticket dispatcher for WURM GmbH aligned with KRITIS, NIS2 and BSI requirements. His work spans more than 25 years of experience and 17 documented projects across public authorities, health insurers, banks, energy and industry.

IT infrastructure architect — AI architectures · automation · project management · IT audit & DORA Berlin, Germany · on-site, hybrid or remote 25+ years of experience · 17 documented projects · regulated and critical environments only: VS-NfD · KRITIS · BSI · ISO 27001 · BaFin · C5 · NIS2 I build and run IT infrastructure architecture for public authorities, health insurers, banks, energy and industry — with accountability from the architecture decision through to running production. | If you need… | You get | |---|---| | A defensible view of a grown architecture | Architecture review — prioritised action list, target architecture sketch, decision paper for management | | One accountable person for plan, technology and communication | Project & sub-project management — solid plan, status reports, accepted work packages, documented handover | | The role filled while you recruit | Interim lead architect / platform operations lead — running operations, decided architecture, orderly handover | | AI inside your own network, without cloud access | AI architectures & automation — running model operations, documented operating processes, approved tools | | To be audit-ready | IT audit, DORA & ICT risk management — audit report to IIA/DIIR standards, remediation plan with owners | | A team that can do it themselves afterwards | Training & seminars — trained team, reusable materials, exam preparation on request | → All six packages in detail: barth.uno/en/services https://barth.uno/en/services/ | Case study | Result | |---|---| | On-premise AI in a segregated network https://barth.uno/en/case-studies/on-premise-ai/ Deutsche Telekom AG · Telekom Security — VS-NfD | Model operations inside the own network without cloud dependency, documented adoption strategy, Python tool integration in production, plus an ELK stack SIEM with AI-assisted anomaly detection | | AI-assisted ticket dispatcher in KRITIS https://barth.uno/en/case-studies/ai-ticket-dispatcher/ WURM GmbH — refrigeration infrastructure | ITIL-aligned processes, CMDB design with CI classes, automatic classification and routing over the KIX CMDB, aligned with KRITIS, NIS2 and BSI | | Active Directory consolidation https://barth.uno/en/case-studies/active-directory-consolidation/ Goldfish IT | Several grown AD domains consolidated into one forest with Quest On Demand Migration — without interruption, hardened, administrators trained | | Multi-cloud Kubernetes under BaFin, BSI and C5 https://barth.uno/en/case-studies/multi-cloud-kubernetes/ Atruvia AG and Siemens Financial Services | Hub-and-spoke landing zones, Kubernetes in a multi-cloud setup, Terraform and Ansible, CI/CD pipelines, documented handover | → All case studies: barth.uno/en/case-studies https://barth.uno/en/case-studies/ | Project | What it is | |---|---| | BnF-PDFEditor https://github.com/bitsandfriends-germany/BnF-PDFEditor | Complete PDF editor for Linux — Electron + React front end, Python/FastAPI back end with PyMuPDF, pikepdf and pyHanko. Page operations, forms, digital signatures with PKCS 12 and PKCS 11 smart cards, encryption, optional AI assistance | | EtikettenDrucker-MUNYN https://github.com/bitsandfriends-germany/EtikettenDrucker-MUNYN | Etikett Studio — self-contained Electron application for Munbyn RW403B labels: no web server, no open HTTP port, SQLite, Jinja2, PDF export and CUPS printing through an internal pipe | Cloud & platform — Azure · AWS · Multi-Cloud · Landing Zones · Hub & Spoke · Terraform · Ansible · IaC · Kubernetes · OpenShift AI — On-premise LLMs · LLM integration · LangChain · prompt engineering · ELK SIEM · Databricks · Azure ML Security & compliance — BSI · KRITIS · VS-NfD · NIS2 · ISO 27001 · Zero Trust · RBAC Development — Python · PowerShell · C · REST APIs · MS SQL · PostgreSQL · MongoDB · Redis ITSM & methods — ITIL · CMDB · ServiceNow · Jira · Confluence · PRINCE2 · Scrum I have been building and running IT since 1999 — from systems engineer to project manager, service manager and full-stack developer. I connect technical depth with business thinking, and I stay accountable for the result: strategy, architecture decision, hands-on implementation and running production. I work in German and English, on-site, hybrid or remote, and I document what I hand over. 🌐 barth.uno/en https://barth.uno/en/ · ✉️ mats@bitsandfriends.com mailto:mats@bitsandfriends.com · 💼 LinkedIn https://www.linkedin.com/in/matthias-barth-03893b19/ · 📇 vCard https://barth.uno/matthias-barth.vcf