Ali A.

Context of the mission:

Within the team managing the information system of the Department of Seine-Saint-Denis, it is necessary to manage the network security and administration engineering team daily and, as a transverse architect, to design operational solutions and the network and security architecture through participation in cybersecurity architecture committees to maintain and recommend the information system with the required standards to achieve a level of efficiency and security. This includes the various central sites dedicated to departmental agents, as well as colleges, high schools, and various decentralized sites within the territory. It is necessary to be able to support the CIO and CISO in structuring and securing the Information System.

Objectives:

- Management of 10 network and security engineers

- Review and design of the network architecture for various projects and participation in architecture committees

- Review and validation of various security solutions in collaboration with the CISO (Risk Analysis, vendor solution compliance, vulnerability review)

- Review and participation in the development of the architecture file

- Daily management of the team with level 3 technical support if necessary

- Management of key network and security projects

As part of a program based on the Zero Trust methodology, analyze the network of a non-European site and be able to propose and support local IT in integrating various security devices according to a pre-established standard model, while considering the context of each country.

- Audit of all subsidiary sites (non-European)

- Creation of a document based on a complete analysis of network security

- Realization or creation of an architecture file (with HLD/LLD ...)

- Analysis of risk reduction based on NIST and MITRE for each functionality.

- Support for local IT in terms of design, configuration, and processes.

- Creation of a hardening guide based on CIS.

Security project:

- DNS (Domain Name System) Security Improvement.

- Deployment of NDR (Network Detection and Response).

- Network filtering and segmentation

- Deployment of advanced NAC (Network Access Control) functions (profiling and posture).

- Improvement of VDI infrastructure.

- Activation of Next-Gen features on Firewalls.

- Deployment of a Web sandboxing solution.

- Ensure the compliance of network security devices

Following an audit at a client's site (name under NDA), a cyber-attack was detected, and an eviction plan had to be created to propose short-term solutions to resolve the incident, and long-term solutions to improve the IS security.

- Analysis of the configuration of all security devices

- Design of an eviction solution to eliminate the attacker in a single operation

- Proposal for short-term improvement (without significant impact on budget)

- Proposal for long-term improvement (new solution to deploy, new process ...)