Baptiste Baronnet

Freelance cybersecurity engineer with over 8 years of experience in securing critical infrastructures, notably within the Thales group (defense, embedded systems, sensitive environments). I work on information security architecture (SSI), homologation, automation, system security, Cloud, networks, and compliance for complete platforms.

Expertise in platform architecture and security

I have led and carried out the deployment and security of complex environments:

Virtualization & infrastructure: VMware ESXi, Proxmox, KVM

Hardened OS: Linux (Rocky, RHEL, Ubuntu), Windows Server

Boot & provisioning: PXE

Orchestration & containers: Docker, Kubernetes, LXC

Private Cloud: Deployment of a secure OpenStack infrastructure

CI/CD & automation: Jenkins (hardening, pipelines), Ansible (hardening scenarios, SSI industrialization)

My missions have led me to design end-to-end architectures, deliver secure clusters, automate the deployment of critical environments, and ensure network integration in contexts with high safety constraints.

Operational cybersecurity & SOC

I have implemented, integrated, and supervised a wide range of security tools:

Detection & monitoring: ELK / Wazuh / Snort3 / OSSEC / Zabbix

Vulnerabilities & compliance: Nessus, Cyberwatch, OpenSCAP, AIDE

Antivirus & antimalware: Trend Micro, ClamAV

External SIEM: Splunk integration (forwarding, filtering, centralization)

These environments often integrated internal PKIs, sensitive flow encryption, secure reverse proxies, and advanced TLS configurations for critical services (rsyslog, graylog, tomcat, LDAP directories).

Network security & interconnection

Accustomed to isolated and approved environments, I have:

Deployed encrypted and filtered communications

Carried out interconnections between sensitive networks and IT departments

Configured network equipment (Cisco, Stormshield)

Implemented,