Freelancer profile translated to English.
Back to original languageAbout Denis
I support organizations in defining, designing, deploying, and evolving security architectures to secure access, applications, and data within complex, critical, and high-stakes environments.
With 14 years of experience acquired in public and private organizations, both in France and internationally, I provide consulting, architecture, Build, and Run services with a pragmatic, results-oriented approach tailored to the technical, business, and organizational challenges of each client.
My interventions cover the entire project lifecycle: audit, scoping, design, deployment, migration, optimization, advanced troubleshooting, and L3 support.
My expertise covers Zero Trust, SASE/SSE, and Cloud Security architectures, with in-depth knowledge of native cloud SASE/SSE solutions, particularly Zscaler and Netskope, as well as an approach focused on business needs, architectural principles, and security best practices.
📍 Île-de-France • Interventions in France and internationally
📩 Feel free to contact me via private message.
French
Native or bilingual
Turkish
Native or bilingual
English
Conversational
Can work on-site
Paris (up to 50km)
Experience
- SuezSecurity ArchitectSeptember 2025 - Today (11 months)Paris, FranceEnvironment:A major French group in water and waste management, present in over 40 countries+40,000 employeesCo-technical referent for the Zscaler platform (ZIA/ZPA) within the network team, reporting directly to the group tech lead• Migration of remote access from a legacy VPN solution to a Zero Trust architecture (ZTNA): existing audit, target design, integration, automation, and production deployment• Design, configuration, and optimization of secure access policies, including migrations, stabilization, and mass managed services oversight• L3 expertise in secure access scope, advanced stabilization, and support for Run teams until handover to routine operations• Security referent for the user workstations scope (Chromebooks): definition of integration standards and industrialization via Zscaler Client Connector (ZCC)• Deployment and security of corporate access (France & international) and progressive integration of subsidiaries into the group's target architecture• Transversal coordination with Network, Endpoint, and Cybersecurity teams to ensure architectural consistency, performance, and flow security• Scoping and handling of complex use cases (VoIP, real-time flows, legacy environments) requiring specific connectivity modes, with definition and implementation of adapted architectures via Zscaler Network Connector to reconcile business constraints and Zero Trust principles• Contribution to transversal security projects (evolution of standards, continuous improvement, access hardening)• Preparation for handover to support teams and drafting of associated technical documentation
- GSFCybersecurity Architect (Fixed-price mission)July 2025 - September 2025 (2 months)Biot, FranceEnvironment:A major French group in the cleaning and business services sectorMulti-site environment, national and international scale+40,000 employeesSecurity architect responsible for scoping, designing, and deploying a DLP strategy based on Zscaler, within the Cyber team and in direct interaction with the Group CISO and his deputy.• Functional and technical scoping of the DLP strategy (use cases, sensitive data typology, user scopes)• Definition of a progressive and non-intrusive approach, focused on visibility and without impact on production• Deployment of Endpoint DLP on a pilot scope of users equipped with the Zscaler Client Connector (ZCC) agent• Deployment of Inline DLP at the group level in monitoring mode (logging without blocking) to measure exposure and refine policies without impacting production• Configuration of Zscaler DLP policies (Inline & Endpoint) consistent with identified risks and business constraints• Validation of technical prerequisites (SSL/TLS inspection, agent profiles, managed workstations, VDI)• Implementation of indicators and reporting for the Group CISO and SecOps teams• Organization of skills transfer to internal Cyber and IT teams
- TarkettFreelance Cybersecurity ArchitectSeptember 2024 - May 2025 (8 months)Puteaux, France➢ Environment:❖ French company leader in the field of flooring and sports surfaces internationally❖ +30 sites worldwide❖ +12,000 employees➢ Technologies:❖ Security: Zscaler, Cisco, F5, Proofpoint, Microsoft Defender, EDR/SIEM Tehtris, Palo Alto Networks❖ Network: CiscoWithin the group's cybersecurity team:• SSE technical architect, in close collaboration with the group CISO• Consulting and technological watch on the Zscaler part• Audit and optimization of Zscaler policies (SSL bypass, URL filtering...) to enhance the security and effectiveness of existing rules• Log analysis (ZIA, Data Discovery) to provide better visibility to the group's CISO/CIO:o Shadow IT and the use of SaaS applicationso User activity on cloud serviceso Potential leaks of sensitive data• Collaboration with Zscaler during dedicated workshops on Data Protection• Definition and implementation of a POC (Email, Endpoint & Inline DLP with Workflow Automation for handling violation incidents)• Participation in Zscaler events (User Group France, Webinar)
Recommendations
Be the first to recommend Denis
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master Systems Networks and SecurityESGI - Paris (75)2013
- Computer Science BachelorECTEI group ECE - Paris (75)2011Option : Sécurité et Réseaux - Mention : Bien
Certifications
- Zscaler Internet Access (ZIA) Certified ProfessionalZscaler2023
- Zscaler Internet Access (ZIA) Certified AdministratorZscaler2023