Freelancer profile translated to English.

Description

Network and security architect, several experiences in different sectors (Banking, telecoms, Health, etc.) on different technologies (Cisco, F5, Fortinet, Vmware, Juniper, etc.) for several projects of renewal, deployment and migration in various environments DataCenter Onpremise/Cloud, Backbone, LAN Sites & VPN.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

AUTODISTRIBUTION
Data Center Architect
AUTOMOBILE
October 2024 - Today (1 year and 8 months)
Chilly-Mazarin, France
Design & writing of technical documents (HLD/LLD/patching matrix/flows)

Ordering and challenging operators for full mesh Backbone Interco DC links (Wave) & WAN Internet links for resilience.

Ordering cloud connect links for on-premises connectivity to all cloud providers (GCT, Azure, and AWS).

Provisioning of virtual circuits with clouds and creation of peerings with on-premises DCs.

Writing of move/action plans for the different move phases of the Cisco ACI multipod architecture and the operational modes necessary for the move of the Cisco ACI DC POD in build mode.

Leading workshops to present possible solutions necessary for migration.

Design and remediation of the firewalling Front/back architecture at the DC level (Forcepoint and Fortinet).

Design a new OOB infra for DCs based on Cisco Nexus 9K and Fortigate.

Netbox, IPAM ,

Ansible automation for the implementation of APIC ACI configurations.

Cisco Fabric ACI Fortinet Firewall Forcepoint Cisco Nexus Ansible
ASSURONE
Network and Security Architect Consultant
March 2022 - September 2024 (2 years and 6 months)
Paris, France
Design of IT Architectures & Validation (Data Center LAN, Virtual Platforms, MPLS VPN, Site LAN/WAN, Partner VPN (IPSEC/SSL Tunnel), Telephony/SIP Trunk)

Data Center Redesign Project:
o
Design of the target solution and validation of architectures.
o
Leading meetings with internal teams and suppliers.
o
Writing of specifications (sizing & technical specifications) & Costing of the complete solution.
o
Writing of the project plan for weekly progress monitoring (COPROJ/COPIL)
o
Writing of engineering documents (Patching matrix, test plan, installation data sheet, HLD/LLD, Operational procedure, Exploitation document)
o
Installation & configuration of new DC LANs (3-tier security architecture).
o
Writing of migration and rollback plans and prerequisites.
o
Migration of flows (ASA & Sophos), LB/WAF appliances, and virtual platforms to the new DCs.
o
Deployment of new SOC/POC Servers (syslog, Monitoring, FTP, RADIUS, etc.).
o
Leading meetings & Presenting workshops.

Site WAN / MPLS VPN Redesign Project:
o
Design of the target solution and validation of architectures.
o
Leading meetings with internal teams and operators.
o
Writing of specifications & Costing of the complete solution.
o
Writing of the project plan for weekly progress monitoring (COPROJ/COPIL)
o
Writing of engineering documents (Patching matrix, test plan, data sheet, Operational procedure, Exploitation document).
o
Installation and configuration of Fortigate Active/Active clusters on each site with redundant FTTO Fiber optic links.
o
Migration of Fiber MPLS links.
o
Migration of MPLS VPN on the Sites/DC side (via MPLS VPN leaking).

PAM/MFA Project (Bastion/BestSafe Wallix, Trustelem):
o
Design of the Target solution and validation of target architectures
Bouygues Telecom
IP/LAN DATACENTER/BACKBONE Architect Consultant
November 2018 - February 2022 (3 years and 3 months)
Paris Metropolitan Area, France
B2B Service: APN Architecture for Mobile Data access and DataCenter for hosting Service Platforms
Actions:
- Writing technical architecture documents for the commissioning of enterprise APNs (mobile access to the Data network): routing, flow opening, and F5 load balancing for APN IPSec, Internet Access, Client MPLS VPN, and MMS services.
- Writing HLD and LLD technical architecture documents for opening flows to PFS (Service Platforms) dedicated to the enterprise, hosted in Bouygues DataCenters: VOIP services (Manhattan/Cordouan offer, virtualized security service UTM (VMware Fortigate solution).
- Writing HLD and LLD architecture documents for migrating PFS to the new Bouygues ARCTURUS B2B Backbone.
- Writing technical documents for the redesign of the ESM (Enterprise Services Mutualized) platform: DataCenter platform with 2 Nexus 7010 federators and 2 HA clusters of Front End and Back End Fortigate Firewalls, routing, and migration of over 500 flows.
- Writing technical documents for the integration of a new F5 i5800 Cluster on the ESM platform.
- Monitoring the implementation of architectural specifications.
- Troubleshooting with the Support team. Technical environment Cisco, FortiGate-3950B and 1500D, F5, Nexus N7K, Nokia 7x50