Faissal S.

As part of the initiative led by the cloud department, I participated in the development and deployment of an internal cloud offering based on Microsoft Azure. This approach aims to improve operational efficiency, leverage cutting-edge technologies, and meet the growing demand for cloud solutions tailored to the needs of internal and external clients.

• Participation in the development of a cloud architecture integrating security and governance best practices.

• Implementation of Azure services and support for teams to ensure a smooth transition to the cloud.

• Automation of several services in Azure.

• Deployment of new landing zones.

• Deployment of an external zone dedicated to projects not connected to the internal network.

• Execution of Proofs of Concept (POCs).

• Updating technical documentation.

• Participation in the team's agile ceremonies (e.g., Daily, Retro, Demo…).

• Configuration and production deployment of Azure Policies to meet foundational needs.

• IaC deployment of architecture and production deployment of security measures in Azure via Terraform.

• Resolution of incidents related to Azure platforms, security, and N2/N3 Support.

• Azure IaaS/PaaS

• Azure Policy

• Defender for Cloud

• Terraform

• Jenkins

• GitLab

• SAFe Agile

Within the IT Operations department, specifically the Cloud Center of Excellence (CCoE) at EDF, my mission consisted of:

Deploying landing zones for project teams to ensure a cloud environment compliant with internal standards.

Validating Azure services from a security perspective in collaboration with dedicated teams, adhering to good governance and compliance practices.

• Updating security standards and CSRs for Landing Zone services.

• Ensuring the compliance of the Azure environment to meet Benchmark and CIS standards.

• Evolving and adapting Terraform code to address security and scalability challenges (migration of the Governance project to Enterprise Scale Archetypes).

• Reviewing detection scenarios for Azure Sentinel and applying new rules.

• Implementing a policy for automating the renewal of SPN secrets.

• IAM review and customization of Azure RBAC roles to meet business needs.

• Configuration and production deployment of Azure Policies to meet foundational needs.

• IaC deployment of architecture and production deployment of security measures in Azure via Terraform.

• Resolution of incidents related to Azure platforms, security, and N2/N3 Support.

• Azure IaaS/PaaS

• Azure Defender for Cloud

• PowerShell

• ARM Template

• Azure DevOps

•

Within the Azure team, I am responsible for security, ensuring the protection and reliability of systems in a constantly evolving environment. My mission is to guarantee the security of services by implementing strategies and solutions to prevent threats and secure sensitive data.

• Auditing deployed environments in Azure.

• Security recommendations.

• Monitoring and managing security alerts.

• Automation of services in Azure.

• Implementation of Microsoft Sentinel SIEM.

• Deployment of Defender for Cloud.

• Configuration of security tools for virtual machines (EPP, EDR, and vulnerability analysis).

• Automation of vulnerability alerts from various sources (CVE, Orange Sécurité, The Hacker…).

• End-to-end security of Azure Virtual Desktop (identity, data, applications, networking, infrastructure).

• Security analysis of PaaS services.

• Execution of Proofs of Concept (POCs).

• Updating technical documentation.

• Participation in SAFe ceremonies.

• Azure IaaS / PaaS

• Azure Policy

• Microsoft Sentinel

• Defender for Cloud

• GitLab

• Azure Firewall

• SAFe Agile

• Terraform