IDENTITY_MODULE :: AUTHENTICATED
¬

Michael
Skutan.

IT Manager & Infrastructure Architect 15+ YRS // ENTERPRISE // TECH ENTHUSIAST

I manage complex enterprise environments and the engineering teams that keep them running. My focus is straightforward: delivering rock-solid infrastructure architecture and identifying where emerging technologies, provide real operational value.

LOC // Hybrid-First · VIENNA
STATUS //
AVAILABLE FOR PROJECTS
// SYSTEM PROFILE
ROLES Team / Tech Lead
YEARS 15+ in IT & Systems Management
DOMAINS Enterprise Infrastructure · Cloud
· On-Prem · Hybrid · AI
LOCATION Hybrid-first · Vienna
STATUS
Ready for assignment
01 // About

Keeping systems alive.
And building what's next.

I run enterprise IT infrastructure — handling servers, networks, security, teams, and processes. Over 15 years, I’ve led complex migrations, built frameworks from scratch, and held the line at 3am when things went haywire. I know how corporate systems work, and more importantly, how to keep them stable.

Outside the office, I run a dedicated home lab to test local LLM architectures, containerized setups, and automation workflows. I don't follow tech-bro marketing hype. I build these pipelines to separate actual technology value from noise, firmly believing that IT has exactly one mission: enabling corporate growth through solid, secure-by-design systems that just work.

02 // Expertise

Technical Competency

Infrastructure Management & Architecture 95%
Leadership & Team Management 92%
Enterprise Design & Security 90%
Compliance & Risk Management 88%
Automated Workflows, Processes and Concepts 85%

Tools & Domains

Tech Management Technology Strategy Organizational Development Team & People Leadership Outsourcing Audit Management
Infrastructure Management Enterprise Architecture Service Management ITIL Framework Problem Management Information Security
// CERTIFICATIONS
  • ITIL Foundation
02.1 // EXEC_PROFILE
// ENTERPRISE_EVOLUTION_RECORD (2010 - 2025)
'10
'11
'12
'13
'14
'15
'16
'17
'18
'19
'20
'21
'22
'23
'24
'25
Cancom Austria AG (formerly Kapsch BusinessCom) 11/2015 - 06/2025 VIENNA

CTOM - Customer Technical Operations Manager

Full technical accountability and primary point of contact for mid-to-enterprise and global accounts across diverse verticals. Served in multi-faceted capacities including Consultant, IT Director, and CIO, providing strategic advisory up to Board-level (C-suite).


  • Strategic liaison bridging clients, partners, and internal business units
  • Lateral leadership of account-specific engineering teams (~15-30 Tier 1/2/3 engineers)
  • Ensuring operational excellence and business continuity for daily IT operations
  • Continuous optimization and enhancement of Service Level Agreements (SLAs) and QoS
  • Driving strategic account growth and technological evolution
  • Active member of internal and external steering committees
  • Scoping, estimation, and finalization of complex technical customer requirements
  • Process design, architecture engineering, and continuous improvement (KPI-driven)
  • End-to-end accountability for comprehensive technical client documentation
  • Incident & Change Management (permanent member of SAB, ISIRT, and CAB)
  • Enterprise-tier escalation management and conflict resolution
  • Holistic patch management strategies (both scheduled compliance and emergency responses)
  • Lifecycle management and technological decommissioning strategies
  • Audit compliance, governance responsibility, and regulatory framework guidance
  • Oversight, execution, and documentation of disaster recovery (DR) testing and playbooks
03 // CORE PROJECTS

// 15+ YRS CORE OPERATIONS // ENTERPRISE GRADE // ARCHITECTURAL RESILIENCE

The following records represent a curated selection of high-impact milestones from over 15 years in enterprise IT infrastructure. They highlight critical turnarounds, complex architectural migrations, and strategic transformations that define my framework for operational excellence.

FILE_001

Enforcing Nationwide Compliance & Enterprise Audit Readiness

Audited capability gaps within the nationwide CTOM team responsible for enterprise outsourcing accounts. Partnered with the CISO office to enforce a mandatory, high-impact workshop campaign, instantly scaling countrywide units to absolute audit-readiness (NIS2, DORA, TISAX, GDPR, ...). Institutionalized the recorded sessions as a permanent onboarding module to secure long-term, repeatable compliance for all future talent acquisitions.

People Development Audit Hardening Risk Mitigation CISO Collaboration Leadership Execution Governance Onboarding
FILE_002

Identity & Access Automation

Spearheaded the end-to-end governance and technical delivery of an automated enterprise delegation framework across Intranet, Camunda, Ansible, and Active Directory. Aligned cross-functional corporate stakeholders, mitigated compliance risks through rigorous internal security audits, and guaranteed high-availability infrastructure upgrades — executed under strict budget responsibility and proven ROI metrics.

Stakeholder Matrix Active Directory Ansible Camunda Governance Audit Hardened Budget Ownership Legacy Disruption Enterprise Architecture
FILE_003

Enterprise Delegation Concept

Conceptualized and architected a comprehensive enterprise access model across all Managed Service and Outsourcing business units, strictly aligned with the Microsoft Tier-Model, AGDLP, and Least Privilege principles. Orchestrated strategic, executive-level stakeholder alignment and client workshops to translate complex governance requirements into scalable on-prem and cloud release architectures.

Tier-Model AGDLP Least Privilege Executive Advisory Change Management Zero Trust Strategy Outsourcing Governance Hybrid Architecture Release Management
FILE_004

Enterprise Network Redesign

Directed the high-stakes "Go-Live! 2.0" structural network overhaul and data highway reconstruction for a prominent R&D enterprise as acting CTOM and Technical Project Manager. Successfully restructured the entire corporate IT/OT infrastructure to comply with parent-company IP [LAN+WAN] frameworks, achieving optimal resource and crisis management under intense delivery pressure during holiday season.

High-Stakes Deployment Network Segmentation VLAN Firewall VPN Critical Turnaround IT/OT Convergence Crisis Management SLA Compliance Parent-Company Alignment
FILE_005

Carve-Out Public Sector Infrastructure

Led the 1.5-year infrastructure carve-out of a public institution, driving a +50% increase in project contribution margin. As CTOM and Release Engineer, I maintained absolute operational sovereignty until the final cutover, successfully safeguarding systemic integrity by strictly restricting core domain access and administrative privileges from the incoming outsourcing provider.

Carve-Out Strategy Public Sector CTOM Contribution Margin Risk Mitigation Outsourcing Governance Operational Sovereignty Privileged Access Mgmt
FILE_006

CTOM Core Team Founding & Lead

Founded and orchestrated a strategic virtual core team of Senior CTOMs to address organizational inertia. Proactively modernized obsolete role frameworks to reflect years of technical and organizational evolution, successfully aligning cross-functional senior leadership. Championed the new operational standards in high-stakes alignment matrices directly against corporate Directors, effectively securing board-level buy-in for future departmental structures.

Virtual Leadership Intrapreneurship Governance Transformation Organizational Design Change Management Role Redefinition Executive Negotiations Peer Leadership Operational Standardization Process Modernization
FILE_007

Cross-Platform Infrastructure Integration

Orchestrated the high-complexity deployment and infrastructure alignment of Mac-Clients within a modern Windows-based environment for a public institution as CTOM and TOM. Acted as both the technical decision-maker and lead engineer, conducting deep-level packet analysis via Wireshark and cross-protocol troubleshooting alongside third-party vendors to guarantee seamless global cluster communication.

Interoperability Design Enterprise Architecture Technical Leadership Protocol-Level Troubleshooting Packet Analysis Wireshark Windows File-Server Cluster Vendor Governance Public Sector
FILE_008

Phase-Out Enterprise Infrastructure

Strategically orchestrated and micro-planned the high-stakes, rapid phase-out of a complete holding company's infrastructure from a deeply integrated shared network. Acted as CTOM, TOM, and Release Engineer, reverse-engineering undocumented legacy onboarding workflows and complex operational processes on the fly. Completely decoupled the ITSM provider's digital footprint to establish a clean "As-Is" infrastructure baseline, enabling a flawless, zero-downtime cutover into the customer's dedicated live environment over a single weekend.

Compliance Legacy Decommissioning Reverse Engineering Systemic Decoupling Weekend Cutover Zero-Downtime Strategy Footprint Purging Risk Mitigation Holding AG Business Continuity
FILE_009

Corporate M&A Infrastructure Merger

Executed a high-stakes, multi-site infrastructure consolidation for a major construction merger across 20 decentralized locations. As a key Release Member, I managed consecutive weekend cross-forest migrations and file server OS upgrades under intense timelines. Successfully rescued the project from critical delays by untangling deeply corrupted legacy logon scripts on the fly, modernizing them into robust, centralized drive-mapping Group Policies (GPOs).

M&A Tech Strategy Cross-Forest Migration Distributed Systems Multi-Site Orchestration Group Policy Objects (GPOs) Legacy Remediation Crisis Turnaround M&A Integration Active Directory
FILE_010

Carve-Out Banking Sector

Orchestrated the technical execution of a highly critical, 1-year corporate IT divestiture for a prominent Austrian banking institution. Operating as TOM and Key Release Specialist, I co-piloted the massive, high-stakes "Big-Bang" weekend migration across multiple Active Directory domains. Successfully isolated and re-categorized all file access rights across separate corporate entities under intense executive management scrutiny and strict financial regulatory compliance.

FMA Compliance Big-Bang Migration Corporate Divestiture Multi-Domain Isolation High-Stakes Deployment Executive Scrutiny Technical Operations Data Classification Regulatory Compliance
04 // AI Projects

// PROOF OF CONCEPT LAB // BARE-METAL SANDBOX // WILLPOWER-DRIVEN

COMING SOON
FILE_001

Local AI Edge Integration (Skyrim Mod)

„Do you get to the Cloud District very often? Oh, what am I saying, of course you don't.“ Architecting an autonomous AI edge pipeline utilizing a Linux Docker stack encapsulated within Windows 10 Enterprise IoT LTSC. Orchestrated a custom, local LLM framework to enable dynamic, real-time context generation and low-latency NPC cognitive routing for highly modded environments, proving the viability of offline generative AI integration under intense system loads.

Docker Dungeon LTSC Lockdown WSL2 Local LLMs Cloud District "It Just Works"
COMING SOON
FILE_002

Hybrid GPU Power Lab

Orchestrating a bare-metal dual-vendor hardware consolidation, pooling an Intel ARC 770 LE and an AMD Radeon RX 9070 XT into a unified local inference host. Engineered to maximize localized VRAM availability for large language models via LM Studio, backed by a structural chassis migration for optimized thermal dynamics, high-volume airflow management, and zero driver cross-talk.

Ollama LM Studio Local LLMs VRAM Goblin Mode Driver Bingo Dual-GPU Chaos NEED MORE (V)RAM
In-Progress
FILE_003

This Very Website (AI-Driven Portfolio)

Engineered this portfolio via localized AI orchestration, successfully migrating from volatile cloud tools like Framer and Inception to a secure, local LLM pipeline. After cloud editors repeatedly corrupted layouts, I reverse-engineered the core design into a high-velocity development loop between Pinegrow, local LLMs, and Vercel — shifting 100% of the inference workload onto my AMD RX 9070 XT to eliminate recurring cloud costs under a strict sub-€20 budget framework. And against all odds of visual editor chaos and unclosed tags, the pixels actually behave in public now.

DISCLAIMER:
AI was utilized strictly for boilerplate code generation, layout restructuring, and syntax optimization, while all architectural decisions, security hardening, and final code reviews were executed manually (Human-in-the-loop).

Local LLMs Human-in-the-loop VS Code Gemini Qwen Coder No Cloud Tax Pinegrow Build-in-public TAG, you're it!
FILE_004

Local LLM Roleplay Engine

Successful deployment and performance-tuning of specialized open-source models (including fine-tunes from the open-source AI community) for highly immersive roleplay engines. Focused on advanced quantization strategies (GGUF/IQ quants) to maximize tokens-per-second and context windows on dedicated VRAM. Extensively tested context window depth, custom system prompts, and memory retention to maintain logical consistency across growing token horizons.

First Ollama Then LM Studio Uncensored Models Huggingface Quantization Voodoo Gigabyte Gluttony VRAM Black Hole
FILE_005

RAG Architectures & Context Stress-Testing

Systematic stress-testing of Retrieval-Augmented Generation (RAG) frameworks to evaluate information retrieval limits and context degradation. Flooded various open-source models with massive technical documentation, slide decks, and enterprise data schemas to analyze vector search accuracy. Focused heavily on identifying the "lost in the middle" phenomenon, benchmarking exactly when and why models drop critical context within deep prompt horizons.

Lost In The Middle ABC..XYZ? Context Amnesia Vector DB RAG
05 // Outside the Terminal
🎮

Gaming

RPGs, deep strategy, and immersive sims. Yes, including Deus Ex. Dissecting complex game mechanics and optimization loops is where the fun begins. Let's be honest: Min-maxing simulated worlds is not so different from actual architecture work.

🔧

Homelab Tinkering

Pushing a single consumer chassis to its thermal limits. Maximizing VRAM by running mismatched GPUs for local open-source AI models, virtualization, and dedicated docker experiments. Abuse of gaming hardware at its finest.

🎧

Audio Money Sink

Chasing the perfect, uncompromised sound signature. Collecting and modding planar and dynamic headphones while tuning high-end desktop DAC/AMP stacks. For me, it's a relentless pursuit of a rich, engaging audio presentation and pure resolving power — tailoring every component to deliver the ultimate listening experience.

06 // Open Channel

Let's talk.
Seriously.

Whether it's a job opportunity, enterprise consulting requests, a collaboration on an AI experiment, or just comparing homelab setups — I'm open to interesting conversations.

SYS // SECURE_PORT_06_ACTIVE
COM_CHANNEL_01 // EMAIL
COM_CHANNEL_02 // LINKEDIN
ANTI-SCRAPE: ENGAGED