Freelancer profile translated to English.

Description

Consultant Microsoft | Audit & sécurisation Active Directory / Entra ID | Réduction des risques & conformité

Les attaques ciblent aujourd’hui en priorité les identités et les accès.

Active Directory et Microsoft 365 sont souvent exposés sans que cela soit visible.

J’interviens pour identifier rapidement les risques critiques et vous fournir un plan d’action clair, priorisé et applicable.

⸻

Audit Active Directory & Entra ID

Audit Active Directory (comptes à privilèges, Tier 0, Tiering model)
Audit sécurité Active Directory (GPO, délégations, droits sensibles)
Analyse de la surface d’attaque Active Directory
Audit Entra ID & Microsoft 365 (MFA, Conditional Access, rôles)
Analyse des risques liés à l’hybridation (Azure AD Connect)

⸻

Objectif

Identifier les vulnérabilités réellement exploitables
Réduire les risques de compromission Active Directory et Microsoft 365
Sécuriser les comptes à privilèges et les accès critiques
Prioriser les actions avec un impact immédiat

⸻

Livrables

Rapport d’audit Active Directory clair et exploitable
Plan de remédiation priorisé (quick wins / moyen terme)
Recommandations adaptées (PME / grands comptes)
⸻

Domaines d’intervention

Audit Active Directory (sécurité, durcissement, Tiering)
Audit sécurité Microsoft 365 & Entra ID
Sécurisation des identités (IAM, MFA, Conditional Access)
Environnements hybrides (Azure AD Connect)
Migration et sécurisation Exchange

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Toulon (up to 50km), Marseille (up to 50km), Lyon (up to 50km), Paris (up to 50km)

Indépendant
Microsoft Consultant – Identity Security (AD / Entra ID)
January 2026 - Today (5 months)
Specializing in Active Directory and Entra ID audits, I intervene in critical environments to identify exploitable vulnerabilities, secure sensitive access, and provide a concrete, prioritized remediation plan.

A compromise of Active Directory or Microsoft 365 can grant complete access to the IS (ransomware, privilege escalation).
👉 My goal: reduce this risk quickly with concrete actions.

⸻

🔍 Main Interventions

Active Directory Audit (privileged accounts, Tier 0, GPO, delegations)
Active Directory Security Audit (sensitive rights, account exposure, attack surface)
Entra ID & Microsoft 365 Audit (MFA, Conditional Access, roles)
Analysis of privileged accounts and critical access
Securing hybrid (Azure AD Connect) and on-premise environments
Information Security Microsoft Entra ID Active Directory Audit Microsoft 365 Azure Active Directory
EXAKIS-NELITE
Senior Microsoft Consultant
October 2025 - December 2025 (2 months)
Microsoft consultant specializing in the security of identities and hybrid environments (Active Directory / Entra ID / Microsoft 365).

Interventions in critical environments covering the entire identity lifecycle: audit, remediation, migration, and security.

⸻

🔍 Key Achievements

Active Directory & Entra ID Audit (privileged accounts, Tiering, GPO, delegations, attack surface)
Active Directory and Microsoft 365 Security Remediation (privilege reduction, hardening, access security)
Microsoft 365 Tenant Migration (tenant-to-tenant) with identity and access security
Implementation and optimization of security policies (MFA, Conditional Access)
Securing hybrid environments (Azure AD Connect)
IT Architecture Microsoft Cloud Integration Information Security Cloud Administration
Reel-IT
Microsoft Consultant
DIGITAL AND IT
September 2024 - September 2025 (1 year)
Expertise mission dedicated to the audit, remediation, and security of hybrid Microsoft environments (Active Directory / Azure / Exchange).

Intervention on a critical infrastructure with implementation of Active Directory hardening measures aligned with Microsoft best practices (ORADAD, SSI) and deployment of a concrete and prioritized remediation plan.

⸻

🔍 Key Achievements

Active Directory Audit and Remediation (privileged accounts, GPO, delegations, Tiering)
Active Directory Security Hardening (rights reduction, sensitive access security)
Active Directory Cleanup and Rationalization (inheritance removal, obsolete accounts, over-historical data)
Windows Server Migration and Modernization
Exchange Management and Security (full administration, optimization, and security)
Securing Hybrid Environments (Azure / AD Connect)
Microsoft Information Security Security Awareness Training