Sofiane El Idrissi

Systems:

Windows 7, Windows10. · Linux

F5 (ASM/LTM/GSLB):

Implementation of LTM configuration (VS/Pool/Node, Monitoring and LoadBalancing) ·

Implementation of security policies for resources to be secured behind the WAF (ASM)

Implementation of GSLB high availability configuration (Inter DataCenter LoadBalancing)

Support for business needs for F5 configuration

Installation of new F5 equipment (Clustering, license provisioning ..)

Equipment Upgrade

Creation/update of documentation (DEX, PTI, …)

Firewall:

Palo Alto

Fortinet

Read access to FW (Analysis of traffic rules ..)

Method:

International context

Management of Standard requests

N3 Incidents

ITIL

Providing projects with an ADC application infrastructure operating in full-proxy mode based on

F5 BIG-IP virtual and physical appliances to secure communications between BNPP business applications

hosted in various internal zones and the Internet.

Level 3 F5 Big-IP support for ASM, LTM, GSLB (DNS) modules

Operational Maintenance

Participation in the implementation of best practices

Technical Environment:

F5 Big-IP

Viprion

F5 AS3: Deployment of automated configuration

Infoblox

Providing projects with an ADC application infrastructure operating in full-proxy mode based on F5 BIG-IP virtual and physical appliances and Nginx to secure communications between Enedis business applications hosted in various internal zones and the Internet.

Level 3 F5 Big-IP support for AWAF, LTM, GSLB (DNS) modules

Kick-offs for new application needs (Load Balancing, WAF, DNS, SSL, caching, compression, authentication, SSO…)

Onboarding and implementation of new needs/new applications.

Build for new architectures

Operational Maintenance

Participation in the implementation of best practices

Creation/update of documentation (DEX, PTI, …)

Technical Environment: F5 Big-IP, BIG-IQ, Nginx App-Protect/Plus, Git/GitLab, Jenkins, Artifactory, Ansible, Scade (antivirus)

Management of network and F5 incidents at CNES on the Enterprise Network and the Operational Network

On-call: Intervention outside working hours for incident resolution

Management of requests (Standard and Major)

Implementation of traffic matrices (Enterprise and Operational Network)

FireWall: Fortinet (FortiManager), Palo Alto (Panorama), Cisco ASA, NetASQ

VLAN propagation and routing (Enterprise and Operational Network)

Routers: Cisco

Switches: Cisco / Alcatel

Tufin Secure Change and Secure Track, Cisco IronPort, Infoblox, Cisco Aruba Wifi

F5 ASM/LTM:

Implementation of a WAF architecture (VS/Pool/Node, Monitoring and Load Balancing)

Implementation of security policies for resources to be secured behind the WAF

Management of WAF unblocking requests

Certificate changes

Technology: BIG-IP VE 15.1.2 o F5 APM

Implementation of SAML coupling for CNES SSO portal

Management of IdPs and SPs

Management of SAML resources

Modification of APM policy for access to SAML resources

Nomadism