Mouhamed Moukaila

Onduline - Suresnes, Hauts-de-Seine

• Management of L2 and L3 incidents,

• Management of all infrastructure construction and evolution projects for sites

• Creation of documentation and HLD and LLD diagrams

• Design of new architectures for all sites in France and abroad, and replacement of old firewalls and switches with Palo Alto and Meraki

• Implementation of several tools for asset management, supervision, and security scanning

• SonicWall, Palo Alto, Aruba, and Meraki environment

As a Network, Security, and Infrastructure Expert, I had operational responsibility for all sites (approximately forty throughout France).

L2 and L3 incident management, maintenance in operational condition, construction and evolution of site infrastructures. Lead new site-related projects, contact requesters for scoping to clearly define needs and deadlines based on urgency and workload, and also schedule follow-up progress meetings and reports.

Creation of documentation and HLD and LLD diagrams.

Technical environment: Cisco Nexus, Catalyst, ASA, and Cisco Wi-Fi, Juniper SRX, QFX, and EX, FortiGate and FortiManager, VMware ESXi, vCenter, and NSX-T, Windows Server and Active Directory. As well as the upgrade of network and security equipment (software and hardware).

To enhance security within the Docaposte organization. I implemented an Always-On VPN solution with Cisco ASA and MFA authentication, for the validation of the security audit conducted by ANSSI. This project lasted approximately 3 months.

Still within the framework of securing network access at Docaposte, it was necessary to migrate the 802.1x authentication from MS-CHAP v2 to PEAP-TLS, and this also concerns the security audit.

To achieve this, I set up a complete 2-tier PKI infrastructure on Windows Server 2022 servers.

For the deployment of IP telephony, configuration and propagation of the new ToIP network across all sites.

Creation of the new network then adding it to the correct OSPF VRF and BGP.

Then, make the necessary traffic openings for each site.

Some sites were experiencing LAN and Wi-Fi network connectivity issues. I performed upgrades on these sites.

I performed step-by-step LAN and Wi-Fi verification of the concerned sites, as well as Wi-Fi coverage studies.

Implementation of a PKI for certificate-based authentication using NPS. And replacement of the entire Meraki Wi-Fi environment with Ubiquiti, at headquarters and in all stores.

Securing Wi-Fi network access worldwide (North and South America, Asia, and Europe), for over 30,000 employees.

As part of the Wi-Fi access security project at Bolloré, conduct an audit of the existing system and propose a new connection method to the Wi-Fi network.

Create the new design, as well as the production of the following documents: HLD and LLD, DAT, DIN, and DEX

The chosen solution for Wi-Fi connection is Microsoft's Network Policy Server (NPS). This allows managing user authentications via a certificate.

Creation of the traffic matrix to enable future servers to communicate with future radius clients.

Deployment of the NPS role on the 16 project servers

Connect radius clients to NPS servers and vice versa

Configuration of the NPS role and creation of connection rules.

Training of the team responsible for continuing the project.