Amadou Tidiane Aw

Matignon • March 2025 – May 2026

· Involvement in a Cloud context to meet new security needs and use cases.

· Contribution to the study, qualification, and implementation of new features to ensure the compatibility of the HashiCorp Vault solution.

· Application of the "As Code" development method to reinforce the reliability of the existing HashiCorp Vault infrastructure.

· Priority management and adaptation to constraints.

· Participation in projects to enable the consumption of the HashiCorp Vault service by other solutions and infrastructures.

· Management of application secrets, Cloud secrets, cryptographic services, encryption services, security monitoring services.

· Maintenance and evolution of the "as code" HashiCorp Vault infrastructure.

· Installation and security of the Vault instance, encryption configuration, internal PKI setup, and secret engine activation.

· Automation and Infrastructure as Code.

· Support for teams (training, documentation, and ongoing support for application integration).

· User account management via Vault Bastion: creation, modification, deactivation, and deletion of privileged access accounts in a multi-tenant environment.

· Creation and maintenance of Vault Bastion connectors to targets (Linux SSH, Windows RDP, databases, network equipment) enabling access centralization.

· Management of account movements (transfers, scope changes, automatic credential rotation) ensuring complete traceability of operations.

· Operational maintenance and service management (MCO and MCS) of the Vault Bastion solution in its entirety: incident management, change management, availability monitoring, patch application, and component updates.

Technical environment: HashiCorp Vault, Vault Bastion, SSO, LDAP, Active Directory, Encryption, OIDC, RBAC, ABAC

Company: International insurance group | Senior Consultant

AD and PKI Infrastructure

Strengthening AD/PKI infrastructures in a critical migration and security compliance context.

Volume = 250 sensitive users at the global headquarters, difficulty = getting stakeholders on board with firewalling cutover, how to manage internal and visitor badge management, role management, sensitive user migration, separation of duties.

Hardening and integration of sensitive user workstations. Monitoring and vulnerability management (Qualys).

Integration of EDR solutions (Symantec, Cybereason). Solution documentation (DAT etc.). Operational maintenance of integrated security solutions. Isolate access between tiers.

Apply the principle of least privilege and separation of privileges. Log analysis.

Update and adaptation of AD security policies. PKI deployment (AD CS).

Definition of the security roadmap and tracking of technical milestones. PKI operational maintenance.

Supervision of the certificate lifecycle and contribution to proactive incident management.

Security assistance to network and video surveillance production teams.

Technical environment: Windows Server 2022, Credential Management System, Qualys, Symantec (EDR), Cybereason (EDR), Telnet, PowerShell.

Administration of the infrastructure of the new AXA GIE headquarters - Matignon site (Segmentation)

August 2024 AXA Matignon

Management of Active Directory Domain Services (AD-DS) and Public Key Infrastructure (PKI) directory services.

Design, deployment, and administration of forests, domains, and organizational units (OU) in Active Directory.

Administration of Domain Controllers, including replication and FSMO Role management.

Monitoring of infrastructure changes in accordance with applicable security and compliance standards for the site.

Application of patches, security updates, and documentation of modifications made.

Development, formalization, and updating of operating procedures for infrastructure administration.

Windows Server (AD CS) installation, Certificate Authority configuration, and implementation of a certification policy for stakeholders (CCTV, BMS, Secure Systems).

Implementation of a PKI (Public Key Infrastructure) for the issuance and management of digital certificates.

Implementation of certificates for user, server, and device authentication.

Implementation of security restrictions via GPO (account lockout, software restrictions, etc.).

Management of Administrative Templates for advanced configuration.

Support for network and video surveillance teams in deploying assets from an AD perspective (object addition, telnet tests, etc.)

Technical support for network and video surveillance teams for integrating new equipment (adding objects to the directory, configuring access rights, etc.).

Performing connectivity tests (Telnet tests, firewall validations, etc.) and diagnosing communication problems.

Verification of new asset compliance with AD policies