Freelancer profile translated to English.
Back to original languageAbout Denis
Freelance Security Architect specializing in cybersecurity and Cloud Security, I design and deploy Zero Trust and SASE architectures for CIOs and CISOs operating in environments where service continuity and risk reduction are non-negotiable.
14 years of experience. Critical environments: public sector, finance, industry, large corporations.
My differentiator: certified and field expertise on the Zscaler ecosystem — ZIA, ZPA, Data Protection, Cyberthreat Protection — combined with an end-to-end capability, from design to operation, in large-scale, multi-site, and multi-country environments with high user volume. No hand-offs mid-project.
Active certifications: Zscaler ZIA & ZPA (Administrator / Professional), Zscaler Data Protection (EDU-220), Zscaler Cyberthreat Protection (EDU-230). Also Netskope certified (NCCSA, NCSS) for a multi-vendor SASE vision.
⚙️ What I focus on:
→ Zero Trust / SASE / SSE Architecture & Scoping
→ Zscaler Deployment and Integration (ZIA, ZPA, ZDX, ZTB)
→ Legacy to Zero Trust Transformation: segmentation, ZTNA, SWG
→ Data Protection & Cyberthreat Protection
→ Cloud & Hybrid Security
→ L3 Support, Advanced Troubleshooting, Recovery of Degraded Environments
→ CIO / CISO Support: POC, Technology Selection, Incident Management
📍 Based in Île-de-France (93) — available for assignments in France and internationally.
📩 A Zscaler project, a Zero Trust migration, an infrastructure to secure? Contact me.
French
Native or bilingual
Turkish
Native or bilingual
English
Conversational
Can work on-site
Paris (up to 50km)
Experience
- SuezSecurity ArchitectSeptember 2025 - Today (9 months)Paris, FranceEnvironment:A major French group in water and waste management, present in over 40 countries+40,000 employeesCo-technical referent for the Zscaler platform (ZIA/ZPA) within the network team, working directly with the group's tech lead• Migration of remote access from a legacy VPN solution to a Zero Trust architecture (ZTNA): existing audit, target design, integration, automation, and production rollout• Design, configuration, and optimization of secure access policies, including migrations, stabilization, and large-scale maintenance management• L3 expertise in secure access, advanced stabilization, and support for Run teams until transfer to routine operations• Security referent for the user endpoint perimeter (Chromebook): definition of integration standards and industrialization via Zscaler Client Connector (ZCC)• Deployment and security of corporate access (France & international) and progressive integration of subsidiaries into the group's target architecture• Transverse coordination with Network, Endpoint, and Cybersecurity teams to ensure architectural consistency, performance, and traffic security• Scoping and handling of complex use cases (VoIP, real-time traffic, legacy environments) requiring specific connectivity methods, with the definition and implementation of adapted architectures via Zscaler Network Connector to reconcile business constraints and Zero Trust principles• Contribution to cross-functional security projects (standards evolution, continuous improvement, access hardening)• Preparation for handover to support teams and drafting of associated technical documentation
- GSFCybersecurity Architect (Fixed-price project)July 2025 - September 2025 (2 months)Biot, FranceEnvironment:A major French group in the cleaning and business services sectorMulti-site environment, national and international scale+40,000 employeesSecurity Architect responsible for the scoping, design, and deployment of a Zscaler-based DLP strategy, within the Cyber team and in direct interaction with the Group CISO and his deputy.• Functional and technical scoping of the DLP strategy (use cases, sensitive data types, user scopes)• Definition of a progressive and non-intrusive approach, focused on visibility and without impact on production• Deployment of Endpoint DLP on a pilot scope of users with the Zscaler Client Connector (ZCC) agent• Deployment of Inline DLP at the group level in monitoring mode (logging without blocking) to measure exposure and refine policies without impacting production• Configuration of Zscaler DLP policies (Inline & Endpoint) in line with identified risks and business constraints• Validation of technical prerequisites (SSL/TLS inspection, agent profiles, managed workstations, VDI)• Implementation of indicators and reporting for the Group CISO and SecOps teams• Organization of skills transfer to internal Cyber and IT teams
- TarkettFreelance Cybersecurity ArchitectSeptember 2024 - May 2025 (8 months)Puteaux, France➢ Environment:❖ French company leader in flooring and sports surfaces internationally❖ +30 sites worldwide❖ +12,000 employees➢ Technologies:❖ Security: Zscaler, Cisco, F5, Proofpoint, Microsoft Defender,Tehtris EDR/SIEM, Palo Alto Networks❖ Network: CiscoWithin the group's cybersecurity team:• SSE Technical Architect, in close collaboration with the Group CISO• Consulting and technology watch on Zscaler• Audit and optimization of Zscaler policies (SSL bypass, URL filtering...) to enhance the security and effectiveness of existing rules• Log analysis (ZIA, Data Discovery) to provide better visibility to the Group CISO/CIO:o Shadow IT and SaaS application usageo User activity on cloud serviceso Potential leaks of sensitive data• Collaboration with Zscaler in dedicated Data Protection workshops• Definition and implementation of a POC (Email, Endpoint & Inline DLP with Workflow Automation for handling violation incidents)• Participation in Zscaler events (User Group France, Webinars)
Recommendations
Be the first to recommend Denis
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master Network and Security SystemsESGI - Paris (75)2013
- Computer Science BachelorECTEI groupe ECE - Paris (75)2011Option : Sécurité et Réseaux - Mention : Bien
Certifications
- Zscaler Internet Access (ZIA) Certified ProfessionalZscaler2023
- Zscaler Internet Access (ZIA) Certified AdministratorZscaler2023