Freelancer profile translated to English.

Description

Versatile and solutions-oriented, I have been working for several years on Windows Server, Active Directory, virtualization, networking, security, and automation. I enjoy deploying, industrializing, and creating reliable environments that make users' daily lives easier. A "jack-of-all-trades" by nature, I adapt quickly and enjoy understanding a system as a whole rather than being stuck in a single specialty.

What drives me: learning, progressing, taking on technical challenges, and finding elegant solutions to complex problems. Conversely, I do not thrive in missions as a mere technical executor without objectives, evolution, or learning.

I am looking for dynamic environments where curiosity and continuous improvement are valued. Today, I want to evolve and leverage this versatility to support the transition to cloud and hybrid architectures, while drawing on my on-premise experience to guide organizations towards more modern and automated infrastructures.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

ATOS – RIDF
Microsoft 365 / Office 365 Administrator
July 2024 - December 2025 (1 year and 5 months)
Microsoft 365 Administration – Cloud / Entra ID / Intune
• ▪ Entra-ID
◦ o User creation, security group management to restrict application or resource access.
◦ o Dynamic group creation to automate specific policies for new users.
◦ o Multi-Factor Authentication (MFA) configuration for all users or a risk group; on-premises deactivation via public IP.
◦ o Conditional Access implementation: blocking access to Microsoft 365 applications for non-compliant workstations (e.g., antivirus disabled).
◦ o Restriction of guest access in Entra ID to limit leakage risks (SharePoint, Teams, etc.).
◦ o Audit of suspicious connections via Entra ID logs and configuration of alerts for unusual activity.
◦ o Delegation of specific roles according to profiles/users.
◦ o Diagnosis of connection problems via Entra ID logs (Conditional Access, disabled account, MFA error, etc.).
◦ o Remediation according to the identified cause and production of associated documentation.
ATOS - RIDF
Microsoft Systems and Network Engineer
October 2020 - December 2025 (5 years and 2 months)
Technical referent for the Ile De France Region and the ATOS/SPIE technician team. Administration and operational maintenance of a multi-site Windows infrastructure: Windows Server 2012 R2–2022, Active Directory / GPO, Hyper-V, DNS/DHCP/WSUS/printing services, Windows 10/11 deployment (MDT), PowerShell automation expert, workstation/server security, network (Aruba switch, VLAN, firewall), L1 to L4 support, and incident management via GLPI (escalations, communication, documentation).
Lycées Région Ile-de France
Systems & Network Administrator
January 2016 - June 2020 (4 years and 5 months)
Administration and operational maintenance of a multi-site environment (~10 sites, 60 servers, 10,000 workstations): Active Directory / GPO management, MDT / WSUS deployments, PowerShell / VBScript automation, application packaging, access management, L2/L3 support, monitoring, and incident/request handling.

• Active Directory Administration: user, group, OU, rights, shares, consistency, incident, and request management.
• PowerShell / VBScript Automation: industrialization of recurring actions (accounts, workstations, inventories, fixes).
• GPO Deployment and Hardening: workstation/server security policies, restrictions, firewall, system settings.
• Application Packaging and Deployment: preparation, qualification, distribution according to business profiles.
• Development of an internal service (Node.js + PowerShell): password reset and automated application deployment with traceability.
• Automated Printer Management: deployment via GPO and scripts, standardization, reduction of incidents.
• Application Adaptation Scripts: patches/tools for specific, poorly documented, or incompatible applications.
• MDT Server Implementation: image standardization, task sequences, reduced service restoration time.
• Windows 10 Update Management via WSUS: targeting, approval, compliance, failure tracking.
• Automated Backups: scheduled PowerShell scripts, rolling retention, execution control.
• Authorization and Access Management: assignment, rights review, AD groups, least privilege, delegation.
• Account Lifecycle Management: creation, modification, deletion, deactivation, passwords.
• Monitoring and Operations: events, AD/DNS/DHCP/WSUS services, recurring alerts and incidents.
• Fleet Management / Inventory: hardware, software, configurations, renewals, standardization.
• Testing and Production Deployment: validation of GPOs, patches, and packages before general deployment.