Julien Bousquet

Complex environment with multiple multi-domain forests and an administration forest.

• Design and implementation of a fine-grained delegation administration model (AD RBAC with Administrative Tier Model)

• Migration of entities to the target delegation model: Moving AD objects to target trees, reviewing administrator and service account privileges, duplicating GPO links

• Writing PowerShell scripts for tooling and reporting

• Implementation of project tooling (Presentations to entities, Dashboards, Mapping Files)

• L3 AD support for internal teams

Security, architecture, and L3 administration of a multi-domain forest and its associated Azure AD.

• Review and evolution of Active Directory architecture (multi-domain forest + trust relationships with other forests and domains, 10,000 users worldwide)

• Azure Active Directory Administration: Azure AD Roles, Conditional Access for MFA, Azure SSO, App Registrations, Azure Administrative Units, …

• Security and configuration audit and remediation according to Microsoft recommendations and ANSSI checkpoints (Use of PingCastle, Microsoft Security Audit), MCS implementation

• Design and implementation of granular administration delegation model by script: roles on AD objects, GPOs, server local groups, Azure RBAC, vSphere Delegation

• L3 support for the Maintenance in Operational Condition (MCO) team

• Architecture validation (for AD, Identities, and Privileges) for applications and projects

• Automation and Reporting by PowerShell scripts:

o Deployment of specific rights (Delegation)

o Deployment of GPOs

o AD CleanUp (Active Directory & Azure Active Directory): disabling user and computer accounts with grace period management

o Daily import of Azure Last Sign-In into OnPremise Active Directory

o Password management: expiration notification, weak password control, mandatory reset for Azure Only users

o DHCP configuration management and reporting

o DNS server and zone management and reporting

o Dynamic update of OnPrem AD groups based on configurable criteria

o Reporting Users, workstations, servers, and DC Information

o PKI Reporting (deployed certificates and those expiring soon)

o Azure App Registrations Reporting (certificates or passwords expiring soon)

o …

• Azure AD Connect update and L3 support

• Deployment of a new ADCS PKI platform, and L3 support

Migration of 7000 workstations worldwide from Windows 7 to Windows 10. Creation of Migration Plan, Deployment Steering.