Le Zhang

Private banking overall security solution.

• - Network Topology and segregation design

• - Santander Private Cloud design: Greenfield & brownfield macro segmentation and micro segmentation

• - Container As a Service Solution Design and deployment in private cloud(Openshift)

• - Data Classification and Security design.

• - DevSecOps deployment : secret management, github, vault...

• - B2E and B2C Auth solution, RBAC(role based access control) design and review

• - Hybrid Cloud technical architecture design & review for GenAI projects: AWS Bedrock LLM, AI Agent, IAM Role design and build, Data flow review for GenAI and Onprem Customer Information Data(CID)

• ● Architecture review, Technical support, work with Cybersecurity authorities

• ● Use commun architecture pattern commun for PGE AWS managed Services (Building block, public / private access, Batch, Container, API management, ...)

• ● Implementation of SysOps with Terraform (Infrastructure as Code)

• ● Migration of Data tools on AWS & On-Prem (Snowflake, Databricks)

• ● On-Prem application analysis in order to prepare Technical Architecture for Move2Cloud process

Devops for Total EV Charging Service , implementation of Building Block(Prebuilt Terraform module) based on Technical Application Architecture (ToBe)

• - Review of technical requirements

• - Development of pipeline Terraform on GithubActions for deployment application on ECS.

• - Terraform application infrastructure in AWS: Secret manager, mTLS IoT Certificate management, EFS, S3.

• - EV Charging service IoT Cloud migration plan (Azure to AWS)

RFP Stellantis for moveToCloud on-premise DC including mainframe, HPC with lift-and shift approach. RFP for moveToCloud lift-shift and replatforming using Azure, ServiceNow, Terraform and Ansible Automation RFP for Cloud Security Integration with Prima Cloud/Checkpoint/CrowdStrike