26.10.2026 aktualisiert

**** ******** ****
Premiumkunde
100 % verfügbar

IT Enterprise Architekt Schwerpunkt CIAM, IGA, Cloud, Security und Compliance, Managementberatung

Forchheim, Deutschland
Weltweit
Dipl. Inf. Univ.
Forchheim, Deutschland
Weltweit
Dipl. Inf. Univ.

Profilanlagen

CV_Rainer_Lotter_2026_v2.1.pdf
Profil_Rainer_Lotter_2026_v2.pdf

Über mich

Meine persönlichen Stärken sind ausgezeichnete analytische Fähigkeiten, Kommunikations- und Motivationsfähigkeit. Ich kann sowohl mit Managern bis zur Vorstandsebene, mit Experten sowie Interessenvertretern diskutieren und präsentieren, da ich ihre Sprache spreche und ihre Erwartungen kenne.

Skills

OAuth 2.0OIDCProduct OwnerIAMActive DirectoryMicrosoft AzureAusschreibungenInformationssicherheitBeratungMulti-Faktor-AuthentifizierungEnterprise Architecture FrameworkIdentity-Management-SystemeInterim ManagementKerberosLDAPOrganisationsentwicklungPublic-Key-InfrastrukturScrumProgramm-ManagementAzure Active DirectoryRequirements EngineeringSalesforce.ComSamlSAP GRCSingle Sign-OnStakeholder ManagementEnterprise Application IntegrationTechnologie-ArchitekturUnternehmensinfrastrukturCyberarkOffice365IT-ArchitekturCustomer Identity Access ManagementPingfederateBerechtigungsmanagementDSGVOCloud IntegrationApi-ManagementIT-Projektmanagement
Enterprise Architekt / Unternehmensarchitekt, IT-Architekt, IAM-/IGA Lead Architect, Interim Manager, Programmmanager und Product Owner. Über 30 Jahre IT-Erfahrung, davon über 20 Jahre IAM und Verzeichnisdienste; Aufbau und Leitung der IT-Architektur (Head of IT Architecture) und komplexer IT-Transformationen.

Enterprise Architecture & Management
IT-Strategie, EAM, Solution Architecture, Ziel- und Referenzarchitekturen, IT-Bebauungsplanung, Roadmaps, GAP/FIT-Analysen, Betriebsmodelle (FMO), Organisations- und Teamaufbau. Programm- und Projektleitung, Budget- und Ressourcenplanung, Beratung bis Geschäftsführung, Stakeholder-Management, Providersteuerung. Scrum, SAFe, Wasserfall.

Identity and Access Management (IAM)
Identity Management (IDM), Identity and Access Governance (IAG), Identity Governance and Administration (IGA), Customer Identity and Access Management (CIAM), Workforce IAM. Berechtigungsmanagement, Rollenmodelle/RBAC, Identity Lifecycle Management, Joiner/Mover/Leaver, Provisionierung, HR-Integration (SAP HCM, SuccessFactors), technische Identitäten. Single Sign-on (SSO), Federation, Identity Provider, SAML 2.0, OpenID Connect/OIDC, OAuth 2.0, SCIM, LDAP, Kerberos, API-Management.

Active Directory, Cloud & IT-Security
Microsoft Active Directory (AD): Architektur, Konsolidierung, Migration, Carve-out und Sicherheitskonzepte. Architektur für Hybrid Identity und Cloud IAM: Microsoft Entra ID (Azure AD), Azure, AWS, Microsoft 365; Integration von Windows/Linux und Citrix. Sicherheitsarchitektur: Privileged Access Management (PAM), Tiering (Tier 0/1), getrennte Managementumgebungen, PAW, MFA, FIDO2, PKI, JIT, Break-Glass, Kerberos FAST. Berücksichtigung von BSI IT-Grundschutz, KRITIS und DSGVO. Testdatenmanagement, Anonymisierung, Pseudonymisierung.

Produkte & Projekterfahrung
PingFederate/PingID: Architektur, Produktverantwortung, Einführung und Integration. SAP Identity Management (SAP IDM) 8.0: Architektur, Betriebsstabilisierung, Interim-Betrieb und Vorbereitung der Ablösung. SAP GRC Access Control: Programmleitung, Einführung, Migration und systemübergreifende Risikomatrizen. Salesforce Identity/CRM: CIAM-Architektur, Product Ownership und Einführung. Weitere Projekterfahrung: NetIQ/Micro Focus Identity Manager, Atos DirX, eDirectory, OpenLDAP.

Weitere Produktkenntnisse
Ausschreibung/PoC: SailPoint, ForgeRock, Okta. Zielarchitektur/PoC: One Identity, CyberArk, Ping Directory/Ping Data Sync. Evaluierung/PoC: BeyondTrust, Keycloak, midPoint, FreeIPA.

Ausschreibungen & Transformation
RFP, öffentliche EU-Ausschreibungen, Anforderungsmanagement, Kriterienkataloge, Angebotsbewertung, fachliche Vertragsverhandlungen, SLA/KPI, Vendor Management. Transition, Migration, internationale IT-Integration, Betriebsübernahme, Übergabe an die Linie, Business Continuity und Disaster Recovery. Branchen: Energie, Versorger, öffentliche Infrastruktur. Englisch verhandlungssicher.

Erfahrung

Berufserfahrungmehr als 10 Jahre
Freelancer seit1995

Sprachen

DeutschMutterspracheEnglischverhandlungssicher

Projekthistorie

Lead Architekt IT Transformationsprogramm, IAG Lead Architekt, IT Security Programm Architekt für Die Autobahn

Head of IT Architecture für "Die Autobahn"

Program Manager IAM & Enterprise Architect

SWM

5000-10.000 Mitarbeiter

  • Analysis of the overall IAM and GRC situation of the Customer. (GAP/FIT Analysis). Creation of recommended course of action. Alignment with the head of IT and the responsible board member.
  •  Identify the necessary projects including rough budget estimation and establish an overall IAM program covering the topics of IDM / IAG tool and approach renewal, access management, API management, cloud IAM integration, HR processes, changes in organizational and functional setup and overall architecture
  • Creation of an IAM masterplan including the alignment within the program as a foundation for the overall IAM Strategy.
  • Advising the approach how to create the RFP for IDM, access management and API management including the selection of the RPF partner.
  • Architectural and conceptional responsibly for the creation / adoption of the criteria catalogue for IDM/IAG and access management.
  • Creation and internal alignment of the RFP documents for a public European call for tender for a new IDM/IAG system. Besides the criteria catalogue with functional and non-functional requirements this also covered the overall service catalogue, the service catalogues for implementation and migration, including SLA and KPIs.
  • Creation and internal alignment of the RFP documents for a call for tender for a new access management system or customers (including CIAM Features) and workforce. Supervising and steering the creation of the criteria catalogue to fit the overall IAM Strategy.
  • Consulting including creating an evaluation matrix during the selection process, including interviews with the bidders, evaluation of the bidders and their performance as well as the monetary and technical evaluation of the bids.
  • Advising the program and the responsible line organisation on the need to adapt the existing guidelines resulting from the implementation of the overall IAM concept.

IAM lead architect for Digital Attacker

E.ON

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

  • Steered a team of three architects (Authentication, especially OIDC in complex cloud environments; EIAM integration via Ping Fed, SCIM, encryption for salesforce), discussed and designed solutions with them, evaluated options, prepared decisions and reported to the according leadership team member
  • Created and reviewed (Customer and Enterprise) IAM concepts
  • Reviewed EPICs in term of (Customer and Enterprise) IAM as well as user management and compliance to E.ON policies and legal security requirements
  • Created EPICs and user stories for identified defects.

Program manager for a new cloud based customer IAM (CIAM) platform

E.ON

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

  • lead the RFP including team ramp up, technical content, selection criteria, paper work
  • drove the product selection (Salesforce ID with Salesforce CRM parts)
  • negotiated the contract with the chosen vendor together with procurement and legal departments
  • led the implementation project as overall project lead and PO of a scrum team
  • onboarded Digital Attacker as first application
  • presented the topic in according boards up to N-1 level
  • acquired additional customers to migrate to the platform
  • started nearshoring of the product support.
  • performed vendor management
  • performed stakeholder management within E.ON, EBS and with the implementation partner

IT Architect /SME for IAM for additional topics

E.ON IT

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

Responsible IT architect, solution designer and SME in the Digital Down Stream (digitization initiative of E.ON, MS Azure based): In particular creation of a target architecture; gap fit analysis and derivation of the necessary measures, derivation of the various security policies into concrete measures.
• Responsible architect, solution designer and SME for the implementation of Ping Federate for the Intranets of E.ON and Uniper (SAML, STS, OAuth2.0, Ping Provisioning Connector)
• Responsible architecture and SME for the design and bidding phase of the AD consolidation projects of E.ON and Uniper
• Responsible SME for the AD concept (target structure and migration planning) including the implementation of the new target environment for Uniper.
• Responsible architect and SME for the AD Cleanup project of E.ON.
• SME for the development of a Customer IAM project plan.
• Training and handover to an internal employee of all Ping Federate topics.
• SME for IAM and AD in the IT modernization project of E.ON (program for RZ migration or upgrading and moving applications to the cloud). In particular, development of a Cloud Security Matrix at protocol level and consideration of legal / data protection requirements.
• Responsible architect, solution designer or SME for 30+ cloud integration projects with Ping
• Responsible IT architect and solution designer for IAM for the group-wide introduction of the cloud application SAP Successfactor for E.ON. In particular, the connection to the implementation of SSO using SAML 2.0, design and implementation support of the provisioning solution.
• Responsible IT architect for IAM /IAG for the introduction of a new corporate standard for e-learning. In particular, the conception of an SSO solution using anonymous SAML 2.0 to ensure compliance with the BDSG despite hosting at AWS.
• Responsible IT architect for IAM / IAG for the RfP process incl. evaluation of tender documents and tender documents as well as representation of the topic in the tender workshops
• Development and adoption of IAM / IAG standards for the E.ON wide HR consolidation project.

Creation and handover to an internal colleague of a Cloud IAM Concept for Azure and AWS together with MS and AWS

E.ON IT

Internet und Informationstechnologie

1000-5000 Mitarbeiter

  • Consulting covering the following
    • Security model for SaaS, PaaS and IaaS content including the AD Integration Model for Windows and Linux IaaS.
    • Technical integration for authorization, authentication and provisioning
    • Logical Model (Account / Tennant structure, VPCs, …)
    • Discussion and alignment with steering bodies and stakeholders

Responsible product manager for the introduction of Ping Federate and Ping ID Access as Management solution

E.ON IT

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

• Definition and negotiation of the contract including SLA and Price with the outsourcing partner
• Project lead for the implementation of the platform
• Project lead for the fist implementation of the platform
• Created and aligned a migration strategy and plan for the migration from the old platform
• Industrialization of new integrations for new applications.

IAM SME and architect for the E.ON / Uniper split.

E.ON IT

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

• SME for IAM and Microsoft Active Directory in Uniper's Carve Out project for Conceptual Architecture (CA)
• Develop an AD Spit and Migration Strategy for a complex environment
• Consult the IDM Split Migration Strategy.
• Identify the necessary projects including rough budget estimation, support the provider in creating the architecture and supervise the projects

Program management of a TDA project to cost-effectively ensure legal compliance with European data protection laws

E.ON IT

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

  • Development of a program for the introduction of a service for test data anonymization
• Analysis of the initial situation (evaluation and evaluation of the results of the TDMS 3.0 pilot and further activities in the field of test data anonymization and management in the group.
• Development, coordination and adoption of the procedure model for cost-efficient compliance with international data protection laws.
• Overall project management for the implementation of the procedure model for the most important group applications in concrete projects for anonymizing or pseudonymizing the non-productive instances.
• GAP / FIT analyses of existing concepts and implementations as well as implementation of necessary measures
• Allocate the necessary budget for pre-project to develop an implementation strategy.
• Definition of work packages
• Overall project management for the analysis and implementation phase
• Control of the sub-projects including escalation management for the implementation for the relevant group applications and consulting for projects.
• Ongoing coordination with the data protection officer and Head of Legal.
• Direct report to the responsible members of management.
• Regular report in the overall management.
• Development, coordination, adoption of a line organization for the topic and transfer of responsibility to it.

Business area development SAP Compliance Management:

E.ON IT

Internet und Informationstechnologie

5000-10.000 Mitarbeiter

  • Development of a program for the Group-wide introduction of SAP GRC Access Control 10.0
  • - Technical evaluation and coordination with the specialist departments
  • - License negotiations with SAP
  • - committee work for the formal establishment of the product as a group standard
  • - Development of a cost-optimized implementation plan
  • • Responsibility of the operation of the predecessor product (GRC 5.3) and GRC AC 10.0 towards Group customers (approx. 30,000 users in five countries)
  • • Definition, acquisition and implementation of the project to implement the new platform and PL during the implementation of the migration project GRC 5.3 -> 10.0 for the installation of the service provider.
  • • Definition, acquisition and implementation of the project for the implementation of GRC 10.0 AC for the SAP ISU/CRM/BW systems of the shared service companies of E.ON AG. Overall project management of the project.
  • • Overall project management for the implementation project for the ISU / CRM / BW group platform. Besides the operative implementation, this included the development, acceptance by internal audit and PwC as well as the implementation of a cross-system risk matrix for ISU-CRM.
  • • Definition, acquisition and implementation of the project to migrate the existing 5.3 group client installation to GRC 10.
  • • Definition and acquisition of projects to connect the most important corporate platforms to GRC 10.0.
  • • The program management included
  • - the personnel responsibility for the project and the operating team,
  • - budget responsibility for the projects and the SLA,
  • - Application Management,
  • - the representation of the topic in the Group committees,
  • - the structure of the control operation,
  • - the overall project management of the implementation projects (partly 1 Mio+).
  • - the final handover of the regular operation to an internal employee.
  • - To date, consulting and support of the team leader in individual questions.
• The largest implementation project included
  • - the introduction of GRC AC 10.0
  • - the development of a cross-system risk matrix for SAP ISU and CRM in collaboration with internal audit and PwC

Responsible program manager, IT architect and project manager (reference available)

E.ON Energie AG

Energie, Wasser und Umwelt

>10.000 Mitarbeiter

Responsible for the IT integration of the international subsidiaries of E.ON Energie AG ( Market Unit Central Europe, MUCE) and the Base Network Services (BNS: Active Directory, DNS, DCHP), File and Client Services. Consultant for Identity Management, Exchange, Disaster Recovery and Datacenter.
• Responsibility as program manager for the integration of all international subsidiaries of E.ON Energie AG was for the Czech Republic, Slovakia, Hungary, Benelux and France. Support of the person responsible for the countries Romania and Bulgaria as consultant.
• o Implementation of the IT concepts of the E.ON Group in the MUCE in these countries. Further development of these in cooperation with the IT service provider in order to adapt them to the local conditions.
In detail:
In charge as program manager: Creation and implementation of IT infrastructure roadmaps in cooperation with the local CIO areas of the national companies, which served to control and implement the country-specific IT integration and connection to the central services. This included technical concepts and project plans as well as the preparation of budgets, taking into account cost saving potentials and synergy effects, and their implementation.
• Organization of working group meetings of the international and German infrastructure managers of the business units. Representation of MUCE for the topics Base Network Services (BNS: Active Directory, DNS, DCHP), File Services, Exchange, Client Services, Data Center and Disaster Recovery at these meetings.
• Program manager and architect for the topics BNS, File Services, Terminal and Client Services. He is responsible for the development of these services in the Market Unit as well as the enforcement and protection of the interests of the MU vis-à-vis the IT service provider and the corporate headquarters of E.ON AG.
• Short- and medium-term central budget planning for these topics as well as the initiation of corresponding projects for the implementation of the strategy developed in the team.
• Representation of MUCE in the corporate committees of E.ON AG (Data Center and Client Services) and the CIO division of MUCE at working level in the areas of File, Active Directory, Exchange, Client Services and Disaster Recovery.
• Preparation and processing of templates for the decision-making bodies of E.ON AG and E.ON Energie AG, comments and advice on implementation strategies.
• Initiation and management of project groups on the topics of disaster recovery (especially SAP and databases), File, Vista and Windows7.
• Representation of E.ON Energie AG in the preparation of quotations for all responsible subject areas.
• Project management for topics in the file and identity management environment as well as for various projects to prepare the MUCE for Windows7.
• Development of E.ON AG's concept for connecting regions with different security levels to central infrastructures in cooperation with the Security Information Officer and the IT service provider of E.ON AG, including the definition of the security levels including requirements and the available services per level.
• Implementation of the analysis phases in the MUCE countries together with the IT service provider. Preparation and definition of the packages of measures and preparation of the budgets required for implementation.
• Support of the local CIO areas during implementation.

Consultant, Project Manager for E.ON IS (formerly is:energy)

E.ON IT

Internet und Informationstechnologie

1000-5000 Mitarbeiter

Consultant / sub-project manager for migration projects within the scope of insourcing/transfer of services from ITS.ON to E.ON IS
• Committee work in the E.ON Group Identity Management Working Group
• Establishment, operation and harmonization of directory services and identity management at E.ON and E.ON Energie AG, respectively
• Connection of applications to the Identity Management of E.ON AG (e.g. SAP SEM)
• Participation in the E.ON project "OneIT" Phase II (definition phase)

Kontaktanfrage

Einloggen & anfragen.

Das Kontaktformular ist nur für eingeloggte Nutzer verfügbar.

RegistrierenAnmelden