Freelancer profile translated to English.

Description

Expert CyberArk PAM with 11 years of experience, including 3 years and 8 months at BNP Paribas in charge of managing and securing a park of +1 million privileged accounts. Complete mastery of the CyberArk suite (Vault, CPM, PSM/PSMP, AAM/AIM, REST API, PACLI) in a critical banking environment. Technical reference, compliance pilot, and harmonization of PAM policies across platforms. Certified CyberArk Defender (2024).

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Clamart (up to 50km)

BNP Paribas
Cybersecurity Consultant
BANKING AND INSURANCE
November 2022 - June 2026 (3 years and 7 months)
Paris, France
Administer and operate the entire CyberArk PAS suite (Vault, PVWA, CPM, PSM, PSMP, AAM/AIM CP, CCP) in a large-scale banking environment.
Operate ICP procedures: piloting failover, failback of the Vault, and managing emergency access (Break the Glass) in real conditions.
Lead the maintenance and compliance of a park of +1 million privileged accounts: continuous monitoring, remediation of deviations, reporting.
Ensure the MES process (commissioning): onboarding of on-premise, cloud, and legacy assets into the Password Vault.
Act as the team's CyberArk referent: leading changes, technical documentation, applying Group recommendations, harmonizing and optimizing inter-platform CyberArk Policies.
Contribute to evolution projects: deployment of Ignimission and definition of use cases within the framework of SailPoint integration on the CyberArk side.
Develop automation and advanced administration scripts via PowerShell, PACLI, and REST API.
Execute ServiceNow changes on the CyberArk platform to meet performance, compliance, and audit needs.
Streamline and harmonize CyberArk Policies across 5 Vaults: reducing the number of platforms from 600 to 300 (-50%), simplifying operations and compliance maintenance.
Provide L2/L3 support and manage critical incidents via ServiceNow; on-call duty (1 week/month) with off-hours interventions for P1/P2 incidents.
Cyberark ignimission AAM Powershell Ansible
PROFERT SPA
Systems, Networks, and Security Administrator
January 2020 - March 2022 (2 years and 2 months)
Béjaïa, Algeria
Reporting to IT: design, deployment, and maintenance of systems, networks, and security infrastructures.
• Administer Active Directory (accounts, rights, GPO) and control access to critical resources (NAS, AD, WAF).
• Implement hardening of GPOs according to Microsoft Security Baselines.
• Ensure the maintenance of the infrastructure (Windows Server, Sophos XG Firewall, McAfee Endpoint) and manage incidents via GLPI.
• Lead the management of system obsolescence: planned upgrades and migrations.
Environment: Active Directory
· Windows Server
· Sophos XG Firewall
· McAfee Endpoint
· Microsoft Dynamics NAV
· GLPI.
OXXO SPA
Information Systems Security Correspondent
January 2018 - December 2019 (1 year and 11 months)
DG CEVITAL, Algiers, AL, Algeria
Application of the CEVITAL Group's ISPS and remediation of deviations and non-conformities of the ISMS.
• Deploy and monitor the application of the CEVITAL Group's ISPS: correction of ISMS compliance deviations.
• Administer privileged access via ManageEngine Password Manager Pro (PMP) and secure the organization's critical accounts.
• Apply and monitor the 18 CIS Controls: maturity assessment, action plan, and reporting to the group CISO.
• Apply GPO hardening policies and ensure the monitoring of critical updates (WSUS).
• Develop the IT resource usage charter and raise user awareness on security best practices.
Environment: ManageEngine Password Manager Pro (PMP)
· Active Directory
· 18 CIS Controls
· WSUS
· GLPI
· CEVITAL Group ISPS / ISMS.