Alexandre Briot

INTERVENTION:

• Implementation of an Infoblox solution (DNS part only)

• Implementation of the F5 architecture (LTM/ASM/APM)

• Config of F5 ASM to replace McAfee (Skyhigh) Proxies for Openshift Cluster (automation with Ansible).

• Backbone and Datacenter Hardware replacement

• Checkpoint Firewalls Hardware/Software replacement

• Network Access Control (NAC) implementation with 802.1x (MAB as fallback) on Cisco ISE

• Implementation of Cisco DNA for monitoring and administrating Cisco switches/routers/APs

• Replacement of old Cisco 3750 (-x) Access Switches with Cisco 9300 Switches

• Continuously upgrading our devices after new CVE's

• Doing support and create HLD and LLD schema

• Cabling Copper or Fiber Optic Cables and supporting/managing external technician

• Participating in the BCL Architectural committee and the Change Advisory Board (CAB)

• Cybersecurity Exercises in Basel with other central banks security experts (CTF like competition) + Attending Cisco Live for the last 3 years

INTERVENTION:

• Provide ongoing administration and support of the network and security systems

• Participate in local and global projects within the company

• 2nd and 3rd level support

• Write documentations and follow the technology evolution

• Maintenance and different upgrades of our equipment

• Periodically internal pentest (network/os/application)

• Malware analysis

• Event Logs/Incidents Review

• Security courses to non technical employees about Phishing,Malware,etc

TECHNICAL ENVIRONMENT:

• Firewalling: Stonegate, Checkpoint, Fortigate, F5 Big IP ASM

• Networking: CISCO (IOS, ISE, WLC), F5 Big IP LTM

• Operating Systems: RHEL6/7, Oracle Linux, Windows Server 2012R2, Windows 7-10

• Services: FTP (vsftpd), Webservers (Apache, JBoss, OHS, IIS), Application servers (Oracle Application Stack; SOA, OSB, ODI, BI)

• Applications: External and internal Applications (InHouse Developed based on Ruby, java and .net)

• Monitoring: Opsview Monitoring Enterprise / Nagios

• Virtualization layer: VMware

• Scripting: Shell, perl, Powershell

• Pentest: Nmap, Nessus, Metasploit, Burpsuite, etc

• Malware Analysis: VirusTotal, IDA, Cuckoo, SysAnalizer

• SIEM tool : Splunk

INTERVENTION:

• Plan, implement and deploy effective solutions

• Security and network infrastructure core components administration

• 2nd and 3rd level support of ICT customers related to incident management and request fulfilment

• Work with publishers and manufacturers

• Optimize the infrastructure by developping scripts and software

• Write documentations and follow the technologie evolution

• Maintenance and different upgrades of our equipment.

TECHNICAL ENVIRONMENT:

• Firewall, DNS, DHCP, Load Balancing, VPN

• Checkpoint, Fortinet, Radware, Pulse Secure, Juniper, Infoblox, Cisco switches, Ironport, ACS, HP switches.