Sofiane G.

IT infrastructure expert with over 5 years of experience in complex hybrid environments (on-premise, Azure, multi-site), I am involved in the design, administration, and security of high-availability information systems.

Identity & Access Governance

IAM policy architect in hybrid AD/Entra ID environments: structuring GPOs, deploying MFA/SSO, Conditional Access, PIM/PAM for privileged accounts. Full automation of user lifecycles (onboarding/offboarding) via PowerShell and Bash. Access audits, drift detection, hardening of administration tiers.

Operational Security & Zero Trust

Deployment and operation of Palo Alto next-gen firewalls (PAN-OS), ZTNA architecture, site-to-site and client IPsec IKEv2 VPNs. Structured patch management, CVE management, secure LDAP, application load balancer. ISO 27001, ANSSI, CIS Benchmarks references.

Hybrid & Cloud Infrastructure

Azure: resource governance, IaC deployment (Terraform/Ansible), hybrid M365 Exchange Online/On-Prem, Conditional Access, Graph API, SharePoint, Teams. Virtualization: VMware vSphere/ESXi, Hyper-V, KVM. Containerization Docker, Nginx/Apache reverse proxy, Postfix, Linux CentOS/Debian/Ubuntu.

MAINTENANCE, MONITORING & RESILIENCE

Multi-stack monitoring: PRTG, Zabbix, Centreon, Grafana. L2/L3 incident management, on-call duty, Jira Service Management. Operational BCP/DRP, Veeam GFS, RTO/RPO testing. Operations documentation, runbooks, skills transfer.

Physical Infrastructure

Server room operations: racks, Cisco L2/L3 switches, copper/fiber structured cabling, patching. Inter-VLAN routing, SD-WAN, Wireshark frame analysis. Large account AV administration: 100+ room park (Logitech Rally Bar, Cisco Codec, Lightware Qubo).