Bilal Bouaoune

• Contribution to the design and migration of the network architecture in a sensitive international context, ensuring the security, performance, and resilience of systems.

• Advanced management of Check Point, Palo Alto & Fortigate firewalls: rule review and migration, configuration hardening, network segmentation, and critical flow analysis.

• Implementation and administration of naming services, with expertise in Efficient IP and CSC (Corporate Secure Cloud DNS) solutions, ensuring both availability and security of DNS resolutions.

• Supervision and configuration of Proxy (Zscaler), VPN, TNS, DNS, IP routing infrastructures, in a hybrid environment (on-prem / cloud).

• Coordination with global IT teams and service providers to ensure a secure transition, without interruption of business activities.

• Active participation in security compliance and alignment with the new entity's standards (IT policies, segmentation, access, monitoring).

• Writing technical documentation and N3 support for operational teams.

Active participation in the cybersecurity framework of the Global Banking business line, in coordination with central CISO teams, global IT functions, business units, and regions (EMEA, APAC, Americas).

Operational management of the security equipment park (Firewall, Proxy, VPN, etc.)

• Ensuring production quality of service, availability, and integrity of infrastructure security resources, in compliance with the service contract.

• Organizing the resolution of major and/or cross-functional incidents, and managing high-impact crises.

• Ensuring stakeholder mobilization, escalations, and communications.

• Proposing workarounds / remediation plans to be implemented.

• Conducting lessons learned / post-mortems after crises to initiate remediation plans.

• Writing PIRs (Post Incident Reports).

• Monitoring problem management (especially after major and recurring incidents), from root cause analysis to the implementation of fixes.

• Contributing to the improvement of the delivered service.

• Contributing to the improvement (and management) of planned operations (project and run).

• Reducing incident volumes on the asset portfolio.

• Managing IT risks, obsolescence management, capacity planning (organic volume growth).

• Coordinating IT continuity exercises.

• Expertise within the used equipment solutions: Palo Alto (Firewall), F5 (load balancing automation), Pulse Secure (VPN implementation), Zscaler ZIA ZPA (proxy), ISE, Infoblox..

• Network and security configuration support for cloud environments (Azure).

• Creation, modification, and troubleshooting support for all incident-related aspects / new requests concerning security equipment.

• Strengthening Cloud Security: Implemented advanced security solutions on Azure, reducing security incidents by 30%.

• Migration to a Secure SD-WAN: improving the security and performance of inter-site communications.