Chems Eddine Fergague

Within the Networks, Telecoms, and Security team of the IT Technical Directorate:

 Participation in the InterOps project: contribution as an engineer to the migration project of assets from the partner datacenter in Cagnes-sur-Mer to the internal datacenter — secure interconnections with GPS and inter-system partners, management of technical agreements, SAML v2 configuration, partner integrations.

 F5 Administration (WAF & Load Balancing): deployment and management of application VIPs in production, pre-production, and acceptance environments; creation of VIPs for Kubernetes clusters (exposure of containerized services); publication of web applications on the Internet (external exposure, NAT, security policies); WAF and Reverse Proxy configuration; decommissioning of obsolete VIPs (pools, nodes, monitors, iRules).

 PKI & Certificates Management: deployment of public certificates (DigiCert, Sectigo) for applications exposed on the Internet and internal certificates; creation and renewal via the internal PKI; monitoring of expirations and anticipation of renewals.

 DNS & Addressing: creation and management of DNS records (A, CNAME) associated with application VIPs; Microsoft DNS administration (Active Directory); management of the IP addressing plan and DHCP scopes.

 Security & Filtering: opening of flows on Fortinet and Palo Alto firewalls (ACL/firewall rules) for new applications; management of security alerts; performance monitoring.

 N2/N3 Troubleshooting: analysis of incidents related to application flows — exploitation of F5 logs, pool statistics, network diagnostics.

 Coordination & Go-Live: collaboration with application and security teams for go-lives; writing of operational procedures; support for production teams.

ETI Department (Technical Engineering IP Study)

 Provision of deployment deliverables for a new DC FABRIC based on Nexus N9K as part of the redesign of the old fabric based on Cisco 6500s with an evolution towards ACI.

 Technical study for the deployment of OAR (Aggregation Router) and CTR (Transport Router) NCS5500 Cisco Routers.

 Technical studies of various WAN architectures for better traffic optimization.

 Modeling of chassis, cards, and SFP modules for different connection types.

 Study for the commissioning of new chassis on the infrastructure.

 Monitoring of KPIs and increasing bandwidth as needed.

 Study of service migration on Huawei NE8K equipment and Cisco NCS to support mobile, fixed, and enterprise clients for various field architectures.

 Deployment of Security Gateways for traffic encryption.

 Study and Deliverables concerning fixed collection projects: SFR POP output/Loop split/LH segmentation/Fixed collection re-architecture, migration of collection ports, active loop swap, and loop capacity upgrade.

 Needs study and management of IP scopes as well as IP address reservation.

 Study and deliverables for the supervision backbone SWAP project based on Nokia 7250 IXR-R6 chassis for small sites and 7250 IXR-R6 for large sites.

 Study and deliverables for connecting external clients DRC, ACD.

 Provide support for the deployment team if needed on the delivered work.

 Update repositories and tools for deployed architectures.

 Assistance in various co-project and co-tech meetings.