Simon Dubus

Architecture and implementation of a virtualization infrastructure compliant with the Military Planning Law (LPM)

○Definition of organizational and technical requirements

○Installation, system and network configuration of new servers (ESXi) and switches

(Cisco/Dell)

○Centralized and redundant storage for virtual machines with 25Gb network

○Zero-downtime migration to the new infrastructure

○Directory server for centralized management of administrator accounts

○Network security (Private VLAN, administration isolation, strict firewall rules)

○Implementation of an Elastic SIEM for IS security monitoring

○Configuration of infrastructure backup respecting the 3-2-1 rule: On-site backup,

remote on-site backup, and offline LTO tape backup

○Kernel hardening for all Linux machines

○Automation of new virtual machine deployment

○Implementation of application deployment automation via a Gitlab CI/CD with tests,

code security checks, used package verification, automated deployment to staging

with rollback capability, then production deployment

Assisting developers in resolving issues across various environments and on their machines

Handling internal N3+ tickets

Mentoring and supporting a systems & networks apprentice

Production management: Deployment, incident response, log analysis

Deployment of a Webex softphone solution and configuration according to internal needs with the help of a partner

Deployment of a Cisco Meraki MDM solution for a mobile fleet of approximately 30 phones

Implementation of an on-premise Elastic Security SIEM/XDR:

– Solution testing

– Server deployment and configuration

– AD connection

– Deployment of antivirus, anti-malware, and anti-ransomware with automatic uninstallation of the previous solution on over 70 workstations and field tablets

– Aggregation of logs from user workstations, AD servers, O365, Cisco Meraki, and the various environments of the internal application (Prod, staging, dev)

– Retrieval of APM data from the application + making it available to relevant personnel

– Dashboard containing platform health information

– SI monitoring with Kibana

– Security alert management

Daily support for users in resolving issues on Windows workstations and Ubuntu VMs for developers

Management of deployments for the internally developed application hosted by a service provider. Comprising about ten VMs, a PHP Symfony project, a Galera MySQL cluster, Elasticsearch, and a Zimbra mail server

Implementation of a staging environment identical to the production environment for developers and testers

Assisting developers in resolving issues across various environments and on their machines

Construction and security of the company's IS:

– Implementation of Active Directory + park migration with the help of a partner

– Installation and configuration of a ticketing and inventory system GLPI with AD integration

– Installation and configuration of WAPT, a Windows, Mac OS, and Linux asset management tool that reduced new machine deployment time by 60%, standardized software versions and Windows park updates. WAPT also drastically reduced software installation requests through its self-service package system.

– Wi-Fi security in EAP-TLS: implementation of an OpenXPKI PKI with HSM and a redundant FreeRADIUS server configured to only accept certificates from the PKI. The RADIUS server is then associated with Cisco Meraki Wi-Fi to manage authentications. Result: Wi-Fi is only accessible to machines with the internal certificate identifying the machine, a certificate that cannot be generated without using the physical HSM key.

– Deployment of Ubuntu bare metal environments for developers with AD integration