Key Management for Cyber-Physical Systems
How to build a key management system that is tailored to your needs. Typical use cases, requirements, and solutions.
Independent Cybersecurity Consulting
The antidote to cyber threats.
Hi, I am Tobias.
I help secure cyber-physical systems. Cybersecurity isn't just my profession. It's my passion, and it has been for over 15 years. Delivered with efficiency, reliability, and excellence.
Services
What I offer
Consistent, high-quality delivery that earns your trust. That's the standard I hold myself to.
OT & Embedded
OT and embedded environments demand reliability, data authenticity, and service availability. Limited resources and the presence of legacy systems set them apart from typical IT landscapes. I can help you build a strong cybersecurity architecture for OT and embedded systems that is compliant with relevant regulation (IEC 62443, CRA) and tailored to your actual protection needs.
IEC 62443 · Risk Analyses · Supply Chain SecurityCryptography
Cryptography is the backbone of cybersecurity. For your transition to post-quantum cryptography, I bring eight years of cutting-edge research in the field. I can help you build secure public-key infrastructures and HSM-backed key management systems, and support you to achieve crypto-agility as standards evolve.
PQC · PKI · HSM · KMSAutomotive
As the pace of transformation in the automotive industry continues to accelerate, security has never mattered more. A single incident can halt a manufacturer's production for weeks and cause billions in damages. I bring seven years of experience in the automotive industry and have helped customers achieve ISO/SAE 21434 certification. I can help you secure your in-vehicle systems as well as the surrounding infrastructure.
ISO/SAE 21434 · UN ECE R 155 · SDV · Autonomous DrivingCyber Resilience Act
The EU Cyber Resilience Act turns product security from good practice into a legal obligation, with real penalties for getting it wrong. Manufacturers of products with digital elements must now prove security across the entire lifecycle, from design to end of support. I help you meet those obligations efficiently, building security into your products and preparing technical documentation that holds up under scrutiny.
Security by Design · Vulnerability Management · SBOMTrainings
Strong security starts with people who understand it. I deliver trainings across every area of cybersecurity for cyber-physical systems, from foundational principles to advanced, domain-specific topics. With more than a decade of teaching experience spanning university students and industry professionals, I can build your team's capabilities at any level.
Approach
What distinguishes me
A rare mix of deep technical expertise and a way of working built around your needs.
Dr.-Ing. — true expertise
Cybersecurity is a discipline I studied deeply and formally, not a field I drifted into. I know its ins and outs, in all their breadth and depth. As incidents like the 2025 Jaguar Land Rover attack showed, cybersecurity is too consequential to leave to improvisation.
Fixed price model
Wherever possible, I work for a fixed price against a clearly defined deliverable, rather than an open-ended stream of billable hours. You can plan your budget with confidence and know exactly what you're paying for, with no risk of costs quietly running away.
Pilot phase
Committing to a large security project is a leap of faith. That's why I offer a defined pilot: a scoped work package of one to three months, before any long-term engagement. You see the quality of my work first-hand and decide from there, with no obligation to continue.
Independence
No large consultancy behind me means no rigid playbooks and no overhead loaded onto your invoice. My focus is purely on getting the job done. I'm also technologically independent: my practice runs on a fully European tech stack, free of US big-tech dependencies.
Qualifications
Why teams bring me in
Selected highlights from my professional experience. A full project list and list of references is available upon request.
Enquire- 15 years of experience in industry and academia.
- Dr.-Ing. in post-quantum cryptography on embedded platforms.
- Practitioner of ISO/SAE 21434 and IEC 62443 compliance work.
- Leader of technical teams; mentor to junior engineers.
- Consistent delivery under real schedule and certification pressure.
2025 — 2026
OT Security Manager
Energy / Power Generation
Led a team of five engineers to achieve IEC 62443-4-2 compliance for the client. I directed the design of the OT security architecture for their power plants and supervised the implementation of the specified security controls.
2024 — 2025
Cybersecurity Architect
Tier-1 Automotive Supplier
Brought the client's product to cybersecurity series-production readiness. I supported the client in achieving ISO/SAE 21434 certification, specified and implemented the IT/OT cybersecurity architecture, and acted as the central point of coordination across the client's internal teams, suppliers, and customers, keeping everyone aligned.
2020 — now
Freelance Teaching
Wilhelm Büchner Hochschule /
VDI Wissensforum
VDI Wissensforum
Teaching university students and industry professionals. Selected courses and seminars:
- Embedded and Cyber-Physical Systems
- Industry 4.0
- Applied Cryptography for Beginners
2015 — 2019
Doctoral Researcher
Ruhr-University Bochum
Analyzed the practicality of novel post-quantum cryptographic algorithms on embedded platforms such as microcontrollers and FPGAs. I optimized the algorithms' resource use and developed side-channel protection measures.
Whitepapers
What I would like to share with you
Sharing knowledge is something I've always valued. Below are a few whitepapers drawn from my work in industry. Request one and I'll send it to your inbox. For my academic publications, see my DBLP page.
Enquire
Let's talk about your security posture.
Facing a deadline, or starting a platform from a blank page?
I'll help you find the right path forward.
Emailcontact@cyberdote.de
Phone+49 201 1234 5678
BasedRuhr region · DE
LinkedIn Connect with me
Send an e-mail