Pascal Tränker

Review and Extend the Current Security Architecture, expanding the Microsoft Sentinel deployment with Company Specific Rules, Adopted an automatic Software Patch Mechanism, Hardened the Hybrid Infrastructure, Built an Internal Security Newsletter with a Daily Briefing with Azure Function and AI Foundry.

Operational and security intelligence on Microsoft E5, full cloud migration of users, clients, and apps to Azure, and a modern workplace built on Intune, Conditional Access, SSO, and DLP. Implemented Microsoft Sentinel with UEBA and automated playbooks, and contributed to a successful ISO 27001 audit.

Ongoing advisory work reviewing operations intelligence/management (Intune, SCCM, AD) and threat intelligence/management/protection maturity, architecture guidance for hybrid and containerized environments, and a Wazuh/ELK-based SIEM for FIM and NIST compliance.

Mapped the enterprise estate for IT operations and threat management, designed a hybrid cloud-mesh strategy between on-prem and Azure/O365, and rolled out a company-wide operations intelligence platform alongside CrowdStrike-based threat protection. Built the Microsoft ESAE tiering structure and redesigned the Azure architecture to Microsoft best practice.

Implemented data protection (labeling, DLP, encryption), identity risk scoring and Privileged Identity Management, modern device management via Intune/SCCM, and secure remote access using Azure AD Premium, Conditional Access, and Microsoft Tunnel.

Owned cloud strategy and hybrid migrations for the group, managing over 800 Windows and 900 iOS devices. Planned security policies (DLP, Conditional Access, encryption), modernized legacy platforms (Citrix, ADFS, TMG), and expanded the Cisco Meraki network infrastructure.

Maintained IT infrastructure and provided tiered user support, alongside MDM and physical access system administration.

Managed HP-based infrastructure, firewall and incident handling, Windows/Linux systems, and the VoIP platform, plus rollout of SCCM, SharePoint, MDM, endpoint protection, and Jira.

Rebuilt the complete infrastructure — servers, storage, firewall — during an environment migration, maintained the VoIP system, and planned a CATI project.