Salim Derdar

• Redesign of Service Control Policies (SCP) to strengthen governance and compliance

• Redesign of IAM roles (users and IaC)

• Design and implementation in Terraform of a Fortinet inline firewall cluster for north/south and east/west filtering within the Landing Zone

• Implementation of a centralized WAFv2 via Firewall Manager within the Organization

• Design and implementation in Terraform of Direct Connect links between EDF's IS and the AWS Landing Zone

• Design and implementation in Terraform of the network infrastructure for production and qualification Landing Zones in the 3 regions: Ireland, Paris, and London

• Feasibility study for the integration of EDF group subsidiaries into the Landing Zone

• Redesign of firewall rules and filtering groups for inline firewalls Creation and integration of Terraform modules into the new baseline Study of the deployment of an AWS region and disaster recovery scenarios

• Definition of the architecture and implementation of the new HORUS business Datacenter (reinforced IS hosting) consisting of 2 sites, intended for hosting the control systems of the national electricity grid. Based on Cisco vPC technology (Nexus 9508, Nexus 9332, Nexus C2348TQ). Validation of the architecture in platform, writing of HLD/LLD documents, deployment, and acceptance testing in a production environment. Environment: vPC, vPC Layer3 routing, BGP, MSTP, BFD, Redistribution, Tagging, Filtering, Fortigate 3700D, Fortigate 1500D

• Definition of the architecture and implementation of the HORUS Datacenter Out of Band administration network. Environment: C3850, C2960X, StormShield SN3000 Firewall, OSPF

• Definition of the architecture and implementation of the new office automation Datacenter consisting of 2 sites and based on Cisco vPC technology (Nexus 7010, Nexus 5596UP, Nexus 5548UP, Nexus 2232TM, Catalyst 3750X). Validation of the architecture in platform, writing of HLD/LLD documents, deployment, and acceptance testing in a production environment. Environment: vPC, VDC, OSPF, MSTP, Redistribution, Tagging, Filtering

• Definition of the architecture and implementation of the interconnection network between the office automation Datacenter and the new INUIT multi-VRF private WAN. Environment: BGP, OSPF, Redistribution, Tagging, Filtering

• Responsible for the Cisco SDN ACI PoC. Environment: N9K-C9336PQ, N9K-C9396PX, VMware vCenter Server 5.5 U2, F5 BIGIP 2200

• Responsible for the implementation of the group's network and security infrastructure

• Design of the national MPLS/VPN WAN (multi-operator environment)

• Responsible for site migration operations to the WAN (130 sites)

• Definition of the architecture and implementation:

◦ Of the interconnection between different regional VPNs (Completel, Colt, Coriolis & Mobius) and the national VPN (OBS)

◦ Of national and regional internet access (Cisco ASA5510)

◦ Of national and regional SSL VPN remote access (Juniper SA2500 Appliances) with implementation of RSA SecurID two-factor authentication

◦ Of WiFi access at the group's headquarters (Cisco Aironet 1142)

• L3 technical support for the entire LAN/WAN/Security perimeter

• Writing of HLD/LLD documents