Samy Azendag

 Technological watch, solution proposal, and proactive approach to new security products. Participation in showrooms and events (FIC, Les Assises, EmPower, etc.) to follow technical security evolution.

 Project Management - AGILE methods, establishing costs, deadlines, tasks, communication, and validation with managers and involved teams. Creation and rewriting of procedures, implementation of best practices - documentation - validation with operational teams - skills transfer and management of AirFrance-KLM policies.

 Proof of concept for McAfee Endpoint Protection and Response with machine learning-based technologies such as TIE (Threat Intelligence Exchange), ATD (Advanced Threat Defense) for sandboxing, ATP (Adaptive Threat Protection).

 Contributor to the Microsoft Defender Advanced Threat Protection project in a restricted environment (HCAP IT users), using tools in Azure. Deployment and management of Windows Defender activity and updates with SCCM and SCEP. Reporting management with Splunk.

 Securing all types of Windows servers (2003 to 2016), VMs, physical, and storage servers. Linux servers also with Bowbridge.

 Management of the McAfee ePO 5.9 console, including the SQL database, for approximately 50,000 machines, including desktops, servers, laptops, virtual machines, and Macs. Constant verification of the engine and DAT updates to ensure effective security. Use of Splunk for reports.

 Implementation and management of the Zscaler web proxy for all company mobile devices for external internet access without VPN and content filtering, McAfee Web Gateway.

 Management and creation of McAfee and Windows Firewall security rules to filter incoming and outgoing traffic from VPN-connected devices.

 N2/N3 Support, best effort in case of major crisis at night or on weekends.

 Creation and management of replication servers (500) distributed worldwide to ensure updates for McAfee security products (Endpoint Security, DLP).

 Project Manager for the Alsid solution used for Active Directory vulnerability, security flaw detection, and real-time security status monitoring. Implemented for the various Air France KLM domains. Management of reports with Splunk, configuration of the VPN connection between Air France and ALSID.

 Project Manager for the company's hard drive encryption. Various tools implemented based on user needs, such as Bitlocker for new Windows 10 laptops managed by McAfee Native Encryption. Other solutions studied and tested with ESET and Trend Micro on OPAL standard hard drives.

 Project Manager for 10 Orange Cyber Defense USB decontamination terminals configured and implemented at 5 Air France-KLM sites. 6 antivirus programs run simultaneously using Docker technology and are used to scan and clean USB devices.

 Project Manager for whitelisting with Application Control for new Boeing aircraft computers. Used by pilots and needing to be frozen, only pilot applications should be usable, otherwise everything is locked by the security tool.

 Project Manager for Data Loss Prevention to secure data on mobile devices (used for external client training) of the company.

 Creation and management of SharePoint sites. Files, documentation, project information, events, schedules shared on the SharePoint site for the security and tooling engineering team (approximately 25 people in the team).

 Project Manager for the client's LAN migration (SME) to the RAS datacenter. Migration of Cisco firewall policies and connection between the LAN and the datacenter, NAT configuration for public IP to private IP mapping. AD server, Exchange server, print server, Veam Backup server, and storage server migrated to virtual machines managed by VMware ESX 5.5 and located in the datacenter. New Windows Server 2012 operating system provided and Exchange migration from 2010 to 2016.

 Management of Cisco ASA and Check Point Firewalls.

 Troubleshooting client hardware and software issues, Level 2/3 support. Datacenter supervision with Centreon, alert and issue management. In case of critical alerts, I could remotely control client equipment and provide rapid support.

 Contributor to the project for migrating 5 VMWare ESXi 4.5 servers to ESXi 5.5 servers with thousands of managed VMs and in-use storage servers. Unix and Windows virtual machines are configured and provided to the R&D team.

 Lead Project Manager for the relocation of the Washington LAN to the Phoenix datacenter. Some servers were decommissioned, and some physical servers were migrated to the virtual ESXi infrastructure.

 Administration tasks such as security and vulnerability management with Netscan and Zenoss. Remote control in case of critical alerts (using DELL iDRAC), Level 2 and 3 support. Backup management with Backup Exec 2012, tapes were stored by Iron Mountain. DAT updates and antivirus security management with Kaspersky.

 Experience with LVM (Logical Volume Manager), used on Linux storage servers.

 Project Manager for IP cameras implemented at various datacenter locations to monitor entrances and exits. Tapes were backed up to an encrypted file network used by managers.

 Proficiency in all types of Windows operating systems, installation, migration (XP to Windows 7 or 2003 to Windows Server 2008). Installation of Dell physical laptops, desktops, and servers with RAID configuration, Infoblox DNS.