About Amine
- Securing Active Directory & Microsoft Entra ID infrastructures
- On-Premise, Cloud, and Hybrid Identity Solutions
- Authentication and Federation: SAML, OAuth2, OpenID Connect
- PKI / AD CS, certificates, and identity management
- Implementing Zero Trust and least privilege principles
- Audit, hardening, and securing AD / Entra ID (BloodHound, PingCastle, ORADAD)
- Analyzing compromise paths and remediating vulnerabilities
- Risk management and compliance audits (ISO 27001, EBIOS, GDPR)
- Implementing SOC / SIEM / IDS-IPS (Elasticsearch, Kibana)
- Security incident monitoring and detection
- Administration and securing Azure services: Entra ID, VMs, Storage, Virtual Network
- Cloud access management via RBAC, PIM/PAM, MFA
- Cloud security: Microsoft Defender, Azure Monitor, Key Vault
- Hybrid On-Prem / Azure environments
- Automation and standardization of operations via (PowerShell, bash, shell, Python)
- Improvement of administration and security processes
- L3 Support, complex incident management, and technical expertise
- Windows Server Administration: Active Directory, DNS, DHCP, WSUS, IIS, file servers
- Creation and management of local and multi-site networks
- Network & Security Administration: switches, routers, firewalls, VPN
- (VLAN, LAN, WAN, OSPF, BGP)
- Subsidiary migration, integration, and divestment projects
- Ability to take technical lead, share best practices, and support teams
French
Native or bilingual
English
Conversational
Experience
- SOLYTI
On Malt
Active Directory TrainingEDUCATION AND E-LEARNINGFebruary 2026 - February 2026Paris, FrancePractical and theoretical Active Directory TrainingDiscovery of Windows services. (DNS, GPO, DHCP, WDS) - Bouygues Construction IT 78Identity Engineer (IAM)July 2023 - July 2025 (2 years)Microsoft Entra ID Cloud (Azure):Identity and access management (MFA, Passwordless, SSO (SAML, OIDC, OAuth2), RBAC, PIM/PAM), hybrid AD synchronization, Intune and SharePoint integration, security and protection (Microsoft Defender, Key Vault), automation and monitoring (Power Automate, Azure Monitor, Azure Automation), cloud resource management (VMs, App Services, Storage, Virtual Network), Infrastructure deployment with Terraform.Advanced Active Directory Security:Audits with PingCastle, ORADAD, and BloodHound to identify vulnerabilities and compromise paths, implementation of the least privilege principle, risk remediation, AD policy hardening, and continuous access control, Hardening.Windows Server Administration:AD DS, GPO, DHCP, DNS, AD CS, WSUS, file server, IIS, Hyper-V, RDS, NPAS, Failover Clustering, PSO. Data backup & protection: Azure Backup, Microsoft 365 Backup, and Veeam.Monitoring:Server and application monitoring with SCOM, Log Analysis.Virtualization:Server and cluster management via VMwareScripting:PowerShell scripts for cleaning active and unused accounts, Microsoft license optimization, Active Directory security, promoting a DC, reminders for password change best practices.Other:Documentation writing and L3 support.
- EGC INTERIM 92System, Network, and Security AdministratorOctober 2021 - July 2023 (1 year and 9 months)
- Internal Audit
- Active Directory Management
- Cloud/On-premise Infrastructure Study
- Windows Server Administration
- Router and Switch Installation Configuration IPBX telephony Management / User Support
Reviews
Recommendations
Be the first to recommend Amine
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master 2 Cybersecurity & Cloud EngineeringEFREI2025Master 2 Ingénieur Cybersécurité & Cloud
- Bachelor's Degree in Systems, Networks, and Database AdministrationIPI Paris2023Licence Administrateur systèmes, réseaux et base données