Freelancer profile translated to English.

Description

Network security consultant with over 5 years of experience in designing, implementing, and managing security solutions. Specialist in protecting networks against internal and external threats, monitoring critical infrastructures, and ensuring compliance with security regulations. Expertise in firewalls (Palo Alto, Checkpoint, Fortinet, Cisco FTD), DNS, proxy, and process automation with Tufin.

Languages

Kabyle
Native or bilingual
English
Fluent
Arabic
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

Groupe TF1
Network Security Engineer
May 2021 - Today (5 years and 1 month)
• Proactive monitoring of network infrastructures: Continuous monitoring and maintenance of environments via Centreon, Zabbix, and HP Network Node Manager (NNM), ensuring maximum availability of critical services.
• Management of infrastructure evolutions: Participation in the modernization of network infrastructures, including the update of strategic equipment (PaloAlto, Checkpoint) and the management of technical transformation projects.
• Advanced firewall configuration: Implementation and optimization of security rules on firewalls such as PaloAlto, Fortinet, Checkpoint, Firepower, and Cisco FTD, ensuring robust protection against threats.
• Access and security management: Administration of access rights, proxies (Cisco Proxyweb), and DNS (Infoblox, Nameshield), in compliance with security policies.
• Cloud & Cisco Support: Expertise in Microsoft Azure and management of Cisco equipment, providing advanced technical support and efficient management of network infrastructures.
• Configuration backup and restore: Regular backup of configurations via Backbox, enabling rapid restoration in case of critical incidents.
• Collaboration and change management: Coordination with business teams to validate and implement changes, ensuring continuous and accurate CMDB updates.
• Critical incident management: Proactive resolution of major incidents, with effective communication to minimize impact on operations.
• Documentation and compliance: Writing detailed technical documentation and maintaining compliance with TF1 Group security standards.
Groupe Carrefour
Network Security Engineer
September 2019 - May 2021 (1 year and 8 months)
• International network security management: Member of a SOC team of 10 consultants, securing critical infrastructures (datacenters, stores, warehouses) and collaborating with global multidisciplinary teams.
• Advanced technical support (L2/L3): Resolution of complex incidents via phone and ticketing, ensuring 24/7 optimal operation of critical services.
• Change request management: Analysis and implementation of network and security changes, ensuring operational continuity and infrastructure stability.
• Firewall configuration: Strict management of network flows via Palo Alto, Fortinet, and Checkpoint, with validation of flow opening requests.
• Infrastructure updates: Keeping various equipment up-to-date (Checkpoint Upgrade) and ensuring compliance with security standards.
• Security equipment monitoring: Real-time monitoring and proactive threat management to minimize risks.
• Procedure writing: Creation of technical documentation and training of new joiners, facilitating operational continuity.
BNP Paribas LeaseGroup
Network Security Engineer
March 2019 - September 2019 (6 months)
Improvement of BEST PRACTICE ASSESSMENTS (BPA) on Palo Alto Firewalls
• Log export and analysis: Extraction and in-depth analysis of traffic logs with Expedition PaloAlto, identifying obsolete or ineffective security rules.
• Security policy audit: Review of security policies and optimization of rules to improve firewall performance and security.
• Rule implementation and cleanup: Creation and configuration of new security rules, deletion of redundant rules, ensuring a more secure and performant environment.
• Cross-team collaboration: Participation in change validation meetings in collaboration with network and security teams.
• Flow opening and rule management: Management of flows and coding of new rules on PaloAlto and Checkpoint in response to business needs.
• F5 Load Balancer: Creation of VIPs to improve network load balancing.
• Infoblox management: IP address reservation and DNS record management for new equipment.
• Site-to-site VPN creation: Configuration of secure VPN tunnels between different sites on Checkpoint.
• Incident resolution: Active participation in network and security incident management, with follow-up until full resolution.