Mohamed Amine Boumaiza

- Study of needs and feasibility for new AXA group projects.

- Setup and configuration dedicated to new projects.

- Implementation of new WAF architectures.

- Creation of F5 ASM security policies and templates.

- Configuration of policies/troubleshooting of anomalies on Trend proxy antivirus.

- Keep up-to-date and enrich the various knowledge bases (diagrams, assets, documentation, etc.).

- As a technical referent, advise the various project teams.

- Incident management.

Projects completed:

WAF F5 Migration:

- Creation and configuration of WAF F5 instances.

- Migration of applications (pre-prod and prod) from WAF versions 11 and 12 to WAF version 15 following three strategies.

- Modification of VIPs on the load balancers upstream of the WAFs.

- Ensure monitoring and support of migrated applications.

Load balancer configuration standardization project:

- Standardization and unification of configurations on F5 LTM load balancers.

- Ensure the proper functioning of applications behind the VIPs.

Reverse proxy migration:

- Migration of Apache reverse proxies to the Cloud.

- Migration of applications (pre-prod and prod) from reverse proxies version Red Hat V6 and V7 to V9.

- Ensure monitoring and support of migrated applications.

Project Management:

- Attend CAB committees to defend technically validated changes.

- Manage new projects.

- Be the entry point for all new projects (needs definition, planning and task dispatching, deadline and step definition).

RUN:

- Be Level 3 and 4 support for AXA group during business hours and off-hours.

- Be the technical referent for international WAF teams.

- Create tickets with the F5 manufacturer and apply patches.

- Installation and renewal of licenses/certificates.

- Maintenance of F5 equipment (Upgrade, Update, reboot, etc.).

WAF:

• Support application projects in integrating behind Web Application Firewalls (WAF) during project phases.

• Support application managers in installing their applications behind the group's WAFs.

• Assist in designing security rules to be implemented for their applications.

• Test/debug sessions with the business in case of major need.

• Manage WAF blockages in run mode (understand blockages and assess risk level).

• Find solutions to restore traffic (application side or WAF side) without lowering the security level of the BNP IS.

• Act as the interface between the business, Group WAF experts, and vendor security.

• Management and configuration of ASM security policies (customization of WEB security policies, security policy compliance, and version upgrades).

• Handling of Reverse Proxy incidents during business hours and off-hours (on-call).

• Monitoring and analysis of WAF blockages on Splunk.

• Update WAF security policies and signature databases.

Proxy:

• Filtering by categories, URLs, and reputation (GTI).

• Proxy coding of URLs and source IPs.

• Creation of explicit authorization rules (Whitelist and blacklist) for business units, subsidiaries, and partners for intranet and internet access.

Web Analysis:

• ICAP filtering (file type, size, timeout, etc.).

• Management of certificate issues related to decryption.

• Creation of forward proxies to servers.

• Proxy upgrades.

• Monitoring and analysis of proxy blockages on Splunk.

• Handling of Proxy incidents during business hours and off-hours (on-call).

• Perform changes that ensure the evolution of the security infrastructure within Airbus.

• Provide Level 2/3 technical support for projects from various Airbus departments and its partners.

• Configure and implement sub-tasks of ongoing projects within our scope.

• Implement firewall rules on LAN firewalls (FR, GE, SP, UK, NA, CA...) and international firewalls.

• Installation and configuration of new security equipment. - Detect new vulnerabilities and potential threats related to the different types of equipment used in the infrastructure.

• Perform necessary upgrades of firewall and load balancer software.

• Creation of a syslog infrastructure (configuration of security equipment, configuration of syslog servers...) to centralize logs on Splunk.

• Handle incidents related to the access infrastructure (F5, Nomad, ISE, firewalls (Palo Alto, Fortinet, Juniper, Checkpoint, Cisco ASA...), etc.) at Level 2 and 3.

• Act as the technical referent during a project's Entry Into Service (EIS).

• Propose solutions to improve the quality of service provided by the team.