Jordan Cabero

Improvement of the IS, particularly in security through the deployment of Pentera, the redesign of the certificate system, OS/APP version upgrades, SMTPS and SMTP OAuth2.0 upgrades.

Migration of an external domain merged into the main domain with data and SSO access.

• Pentera: Complete installation and configuration of the Pentera platform: deployment of RANs, cracking nodes, main node, SSO, mail integration, and definition of analysis policies.

Ensuring ongoing maintenance, producing reports, managing remediation, and continuous optimization of test campaigns. 90% reduction in major incidents across the entire park.

• 2-tier PKI: Deployment of a new two-tier PKI (Root + Sub CA): configuration of roles, certificate templates, smart card management, and migration of web and machine certificates. Decommissioning of the old PKI, securing the infrastructure, ensuring compliance, and service continuity.

• SMTPS: Implementation of hMailServer to manage authentication of exchanges between internal mail servers and the mail proxy connected to Outlook, with security mechanism configuration.

Deployment of the new configuration on all client servers and validation of service continuity.

• SMTPS OAuth: Implementation of authenticated SMTP via OAuth 2.0 by integrating several applications into an Azure AD enterprise application, with permission and token management.

Deployment and configuration of the new secure SMTP flow for all concerned applications, testing, and validation of deliverability.

• Domain Migration: Management of the complete migration of users, machines, and data (with associated ACLs and rights) from a domain of an acquired company to the main GCC domain, without service interruption.

SSO integration and configuration of authentication/domain mechanisms, access validation, and post-switch permission recovery.

Summary of the mission at Givenchy:

Three areas of work were assigned to me during my mission: security, projects, and run/N3 support. In direct collaboration with the CISO, various security tasks were assigned to me. In parallel, various projects were assigned to me to lighten the infrastructure team.

• Tanium: agent deployment, tag setup, unblocking non-functional agents, critical patch reporting, and run.

• SentinelOne: agent deployment, troubleshooting, malware analysis, reporting, and run.

• Ranger AD: reduction of critical and major incidents, TGT ticket renewal, LDAP signature management, rights management, various actions.

• SecOps Jira Tickets: resolution of various security incidents (phishing, data leaks, network incidents), various actions.

• Wiz: fixing security vulnerabilities on Windows and Linux, collaboration with application teams.

• Centreon: adding probes, resolving unavailable probes, fixing critical issues, implementing MAPS.

Parallel projects completed:

Lansweeper, NxLog, LAPS, ADFS, AzurePasswordPolicy, Ansible, Asset Checker (in progress), adding Linux servers to the domain with specific rights, GMSA accounts, Azure blob creation.

Routine tasks:

Powershell scripting, debugging, N3 infra and application support, documentation (DEX, DAT, installation procedures), certificate creation, adding Linux spaces, network opening, AD tasks. Non-exhaustive list.

Summary of the mission at CSF:

Maintenance of the IT service and temporary replacement of an engineer. Participation in IS improvement, Level 3 support for technicians and administrators, as well as management of daily tasks.

• Centreon: adding SNMP agents, configuring associated services, resolving critical probes.

• Deployment of OCS Inventory via script.

• Jenkins: agent/master configuration, key exchange, troubleshooting, adding agents to AD.

• Creation of technical documentation, inventory, and proposing improvements for the IS.

• Various Level 3 support: web management, VPN, certificates, scripts, systems, etc.

• Fixing security vulnerabilities on the server park.

• GPO, WinRM scripting, PowerShell, Ansible, and other technologies.