Guillaume Durand

For an end client in a Microsoft Hybrid environment:

Security & Hardening: Audit and remediation of Active Directory: Securing critical infrastructures, including hardening of the AD CS (PKI) role and compliance with system and network vulnerabilities (CVE). Cyber Hygiene & Protocols: Implementation of Channel Binding, securing/restricting NTLM protocol, and managing secret lifecycles through the krbtgt password double reset procedure (on-premise and Azure/Entra ID). Watch & Patch Management: Steering global infrastructure patching in close alignment with the CISO's policy.

Identity & Access Management (IAM): Strong Authentication (MFA): Deployment of Yubikey security keys integrated with Windows Hello for Business for a "Phishing-resistant" experience. User Autonomy: Configuration of SSPR (Self-Service Password Reset) via Entra ID to reduce support load.

Modernization & Cloud Transition: Migration to Modern Management: Transition of GPOs (users and workstations) to Microsoft Intune for cloud-native management. Network & WiFi Infrastructure: Steering and deployment of secure WiFi projects. Automation: Design of advanced PowerShell scripts for automating recurring tasks and system administration. & Governance: Observability: Deployment of a Zabbix monitoring server on AlmaLinux (virtualized on vCenter) for increased visibility into the fleet's health status. Technical consulting and technology watch to guide architectural choices.

Steering client infrastructure migration to new cloud tenants (365 migration, DNS). Implementation and management of Entra ID (Entra ID Connect) for centralized and secure identity management. Administration of the on-premise Active Directory environment (Hardening, group policies, directory). Management of on-premise servers (roles, updates, antivirus) and VM migration projects (VMware to Hyper-V | SCVMM). Integration of software solutions in collaboration with third-party publishers.

Audit & Security of domain controllers (Hardening) in a multi-domain context (from Windows 2003 to 2022). Development of an internal automation tool (Powershell, SQL DB, PHP, Azure) for centralizing audit data. Steering migration projects and implementation of group policies and the directory. Leading technical workshops ("War Room") on domain controller restoration for client upskilling. Expertise in L2/L3 support for a diverse clientele.