Freelancer profile translated to English.

Description

Network and Security Engineer passionate about protecting critical infrastructures, I combine technical rigor and operational efficiency to ensure system reliability. My career naturally led me to specialize in cybersecurity, where I now apply my expertise to the resilience and defense of complex IT environments.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

MALAKOFF HUMANIS
Network and Security Engineer / Team Manager
May 2023 - February 2026 (2 years and 9 months)
RUN & BUILD – INFRASTRUCTURE & SECURITY

Technologies:
Networks and Security
- Firewall: Palo Alto, Fortigate, CheckPoint, VMware NSX-T
- Load Balancing: Netscaler
- ZTNA: Netskope
- DNS: EfficientIP
- Switch: Aruba, CISCO

Responsibilities:

Network Security
• Management of N2/N3 network and security incidents
• Network segmentation and implementation of advanced security policies
• Micro-segmentation and distributed Zero Trust security - VMware NSX-T
• Diagnosis and resolution of ZTNA access incidents to ensure continuity of secure flows.
• Deployment of Load Balancing solutions to ensure high availability.
• Writing technical procedures and operational documentation
• CSR generation and SSL/TLS certificate installation for securing published services.
• Implementation of secure VPN architectures (IPsec / SSL)
• Management of DNS record lifecycle (A, CNAME, PTR, MX)
• Upgrade of network and security equipment

Team Leader
• Technical referent for the ATG
• Supervision of 3 Network and Security Engineers on incidents and changes
• Key client contact for activity reporting and commitment adherence.
• Technical support in steering committees for monitoring critical incidents and changes.
ORANGE FRANCE
Network and Security Engineer
June 2021 - April 2023 (1 year and 10 months)
• Management of N2/N3 network and security incidents
• Guarantee of service high availability through the deployment and configuration of Load Balancing solutions --- F5 BIG-IP i7600, i7800 – Radware Alteon 5208XL
• Maintenance in operational condition (MCO)
• Definition of filtering policies, network segmentation, equipment hardening, and high availability configuration. --- Fortigate 1500D, 1200D, 3400E
• Configuration of SSL VPN tunnels, split-tunneling, and remote access management --- Cisco ASA
• Technical validation and acceptance: Guarantee of network and security architecture compliance before operation.
• Upgrade of network and security equipment
◦ - Fortigate upgrade from version 6.0.13 to version 6.2.9
◦ - F5 BIG-IP upgrade from version 12.0.6 to version 15.1.15 via version 13.1.13
◦ - CISCO Firepower upgrade from version 2.6(1.187) to version 2.10(1.150)
◦ - CISCO ASA upgrade from version 9.12(4)37 to version 9.16(2)
◦ - CISCO ASDM upgrade from version 7.12(2)14 to version 7.16(1)150
• Management of PKI certificates and securing application flows
• Writing technical procedures and operational documentation
AKAMA Groupe
Network and Systems Engineer
January 2019 - September 2020 (1 year and 8 months)
• Design and implementation of resilient network infrastructures, integrating security from the design phase (Security by Design).
• Logical network segmentation (VLAN) and isolation of critical flows to limit the attack surface.
◦ - Cisco Switch Catalyst 2960, Switch Catalyst 3560, Router Cisco ISR 1921
• Translation of business needs into coherent filtering rules, ensuring strict flow isolation and reduction of the attack surface.
◦ - Fortigate 100E
• Optimization of availability through the deployment of high availability clusters (HA) and the implementation of critical redundancy mechanisms (LACP, STP)
• Securing IT system equipment and resources through integration with Active Directory / LDAP directories and implementation of access control protocols (RADIUS). --> Windows server 2008 R2
• Management of level 2 and 3 network and security incidents
• Contribution to the IT system's defense-in-depth strategy, integrating technical remediation and compliance of network and security equipment.