Nils Lappenbusch
Microsoft 365, Identity & Security Engineer · Microsoft Certified Trainer
- hello@lappenbusch.com
- lappenbusch.com
- Buchs ZH, Switzerland · relocating to Singapore
Profile
IT engineer from Germany, based in Switzerland, in IT since 2012, focused on Microsoft 365 since 2020. Exchange and mail flow, Entra ID and Conditional Access, Intune and Autopilot, email security up to DMARC p=reject, automated with PowerShell and Microsoft Graph. Builds and runs own software. Looking for a permanent role in Singapore.
Experience
Microsoft 365 & Security ConsultantSwiss consulting firms · since 2023
- Hybrid mail routing fixes, MX cutovers, Exchange Server decommissioning, SMTP relay to Microsoft Graph
- SPF, DKIM and DMARC to
p=reject; Defender for Office 365 policies - Conditional Access rollouts in five phases; CIS benchmark hardening
- Intune and Autopilot, profile migration to Entra ID, file server to SharePoint
- Evidence kits for regulated financial clients (FINMA, Swiss data protection law)
- Designed and built the M365 Control Plane: multi-tenant baselines, change evidence, PowerShell 7 jobs via Semaphore with short-lived Graph tokens; Docker and Kubernetes/Argo CD
Consultant & Microsoft Certified Trainer, Microsoft 3652020 – 2023
- Microsoft 365 projects and training for administrators and users
System Administrator / ICT Engineer2019 – 2020 · move to Switzerland
IT Consultant & Project Manager2016 – 2019 · Germany
Apprenticeship: IT Specialist for System Integration (IHK)2012 – 2016 · Germany
Own products
- DMARC Geeks (dmarc-geeks.ch): DMARC report analytics, DNS check, mail tester, Microsoft 365 threat test
- DokAudit (dokaudit.com): SaaS that makes PDFs accessible (PDF/UA, WCAG) with a local layout model, LLM only for uncertain pages, own GPU worker fleet
- VibeBoxes (vibeboxes.ch): hosting for AI-built web apps, vibe-code audits
- Kursbox: booking and administration software for university sports
Certifications
- Microsoft Certified Trainer (MCT)
- Microsoft 365 Certified: Enterprise Administrator Expert
- Microsoft 365 Certified: Messaging Administrator Associate
- Microsoft 365 Certified: Modern Desktop Administrator Associate
- Professional Scrum Master I (PSM I)
- Professional Scrum Product Owner I (PSPO I)
Skills
- Exchange Online
- Exchange hybrid
- SPF · DKIM · DMARC
- MTA-STS
- Defender for Office 365
- Entra ID
- Conditional Access
- App registrations
- Managed identities
- Intune
- Autopilot
- SharePoint
- PowerShell
- Microsoft Graph
- REST APIs
- Node.js
- Python
- Docker
- AI agents
Working method
Read-only first, backup, pilot, explicit apply, logs, runbook and restore path.
Languages
German (native) · English
Locations
Buchs ZH, Switzerland (current)
Danndorf & Lage, Germany
Singapore (mailing address, Paya Lebar)