Freelancer profile translated to English.
Back to original languageAbout Islam
I intervene when a Microsoft cloud environment starts to become shaky, opaque, or difficult to maintain.
I work on Microsoft Entra ID, Azure, and Intune with a simple approach: diagnose, secure, re-establish structure, and produce truly actionable remediation.
My recurring topics: IAM, Conditional Access, MFA, RBAC/PIM, Intune/MDM hardening, Azure security, configuration control, observability, remediation, and reduction of attack surface.
I am particularly comfortable with issues that mix multiple layers at the same time: identity, endpoints, access, network, compliance, or cloud exposure.
My goal is not to sell jargon, but to help bring clarity back where things have piled up too quickly.
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- Compta+Personal project – Secure SaaS POC on AzureSeptember 2025 - December 2025 (3 months)Paris, FranceAuthentication via Microsoft Entra ID and MSAL.js (PKCE)Secure exposure viaFront Door + WAF and Azure API ManagementBackendAzure Web App / APIand data layerAzure SQL + Blob StorageJWT validation at the gateway,Managed Identityon the application side, andRow-Level Securityfor data isolationIndustrialization with modularTerraform**, **GitHub Actionsusing **OIDC, DbUp**, architecture documentation, and runbook
- MetsysAzure ConsultantNovember 2023 - July 2025 (1 year and 8 months)92100 Boulogne-Billancourt, FranceAudit and hardeningof Windows endpoints viaIntune MDM**: reading **MDM/ActiveStore PolicyStorein PowerShell, applying **CSP/OMA-URI**, and validating effective firewall profiles (reduction of audit false negatives).Design of a private API onAzure Functionspublished behindAzure API Management (APIM)then **Application Gateway WAF v2**; securing traffic and **TLS/certificate management**.Securing the data layer: Azure SQL accessible only privately via **Private Endpoints + Private DNS**, with traffic encryption and attack surface reduction.Standardization of observability: deployment of **Diagnostic Settings**, **Azure Monitor Agent**, **DCR to Log Analytics**, creation of KQL alerts and monitoring dashboards.Implementation of a tagging plan /Azure Cost Managementand optimization viarightsizing + PAYG → Reserved Instances / Savings Plans(approx. 40% reduction in annual cost).
Recommendations
Be the first to recommend Islam
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Certifications
- AZ-500: Microsoft Azure Security TechnologiesMicrosoft2025
- AZ-104: Microsoft Azure AdministratorMicrosoft2025