Abderrahmane Bouchiba

Advanced security for AD infrastructure (GPO, PingCastle audits) Security recommendations to technical and decision-making teams, adoption of Zero Trust policies Implementation of MFA, Conditional Access, SSPR, strengthened access security Participation in Passwordless projects (Windows Hello for Business, PKI) Management of highly available Windows Server 2016–2022 environments Integration and management of directory solutions (ADLDS, OpenLDAP) in hybrid mode Deployment and security of applications via Azure Hosting and Web App (application hosting, high availability) Setup of NSG and Azure Firewall to isolate and protect cloud applications Contribution to application migration projects Lift & Shift to Azure (network, IAM, security) Automation via Terraform for Azure resource deployment (NSG, Web Firewall) Technologies: Azure Azure Web Azure Terraform, PowerShell, AD, 2016–2022, PKI

Setup of NSG and Azure Firewall according to security best practices Configuration and management of Azure AD authentication (MFA, Conditional Access, Identity Protection) Contribution to passwordless project preparation (Windows Hello for Business, Intune, PKI) Deployment of applications via Azure Hosting and Web App, secured by NSG Automation of deployments and optimizations via Terraform and PowerShell Technologies: Azure, Azure AD, Web App, NSG, Azure Firewall, Terraform, PowerShell, Intune, PKI, M365

Setup of FortiGate clustering and network segmentation for a financial environment Hybrid integration Azure AD / on-prem Active Directory PowerShell automation reducing recurring tasks by 30% Contribution to modern authentication projects (MFA, Conditional Access, SSPR, passwordless) Support to teams in designing secure solutions (hardened AD, Azure Firewall, PKI) Technologies: FortiGate (clustering, segmentation), Azure AD, AD, PowerShell, MFA, SSPR, Conditional Access, PKI, Azure Firewall