Freelancer profile translated to English.

Description

Vanice Ermion TAKAM FOTSO is a high-level Network and Security Engineer, graduated as an Engineer in 2016 and with 10 years of continuous experience in the design, deployment, migration, and operation of critical network and security infrastructures. I have worked on complex projects for global leaders (SAFRAN Aircraft Engine, STMicroelectronics, Disneyland Paris) and integration firms (Devoteam, Intelligentsia, Orange Business Service, ITGStore). My profile combines rare technical expertise on the most in-demand technologies on the market (Palo Alto, Cisco, Fortinet, F5, ACI) with solid skills in project management, change management, and knowledge transfer. Certified CCNP, PCNSE, NSE4, DCACI and CCA CATO SASE, he is actively pursuing his development (NSE7, CCNP Data Center).

Industry field of expertise

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

DEVOTEAM
Network & Security Engineer at SAFRAN AIRCRAFT ENGINE
May 2025 - March 2026 (10 months)
Corbeil-Essonnes, France

• Design & Architecture: Design of network and security architectures, writing HLD/LLD documents and setting up POCs.
• LAN Infrastructure — Layer 2: VLAN, VTP, VLAN interfaces, EtherChannel LACP aggregation, Cisco stacking (Master/Slave), MAC addresses, subnets configuration.
• Routing: Static routing, OSPF, and BGP protocol configuration. VPN creation (DMVPN, IPSec, GRE). ACL, NAT/PAT implementation. Equipment IOS refresh.
• Cisco ISE / NAC: Deployment of Cisco ISE for Network Access Control (NAC). ISE upgrade v2.7 → v3.0 → v3.1.
• WiFi: Installation of Cisco APs, addition and management in the WLC controller.
• Data Center Nexus: Administration and management of Cisco Nexus switches via DCNM and Nexus Dashboard Orchestrator. DCI interconnection (dark fiber). VDC, VPC, FEX, DCB configuration. CNA installation. NX-OS refresh.
• Firewalls (Palo Alto, Check Point, Fortinet): Deployment, definition of traffic matrices, global traffic opening, VPN configuration. Palo Alto: Security Profiles, Security Zones, Templates, PBF, V Wire, TAP, TSID, Panorama. Check Point: templates, ruleset, IPSec/SSL VPN, NAT, OS upgrade, migration to Palo Alto. Fortinet: VDOMs, ADOMs, RAID, SD-WAN, IPS, WAF.
• Firewall Migration: Project management for replacing Check Point firewalls with Palo Alto: study of the existing system, migration scenarios with Expedition tool, testing, validation, acceptance.
• N2/N3 Support: Troubleshooting, debugging, and incident management on Palo Alto, Check Point, and Fortinet.
• Monitoring & Documentation: Infrastructure monitoring with Opsview and Centreon. Writing network and security operating procedures.
• Project Management: Technical management of infrastructure projects: study, planning, coordination, follow-up, reporting, testing, validation.
STMicroelectronics (Rousset)
Network and Security Engineer
MECHANICAL ENGINEERING
January 2023 - Today (3 years and 7 months)
Aix-en-Provence, France
Mission:
Network and security architecture design:
• Study and design of the architecture
• POC implementation
• Writing HLD/LLD documents
Maintaining network infrastructure in operational condition:
• Layer 2 configuration (hostname, MAC addresses, VLANs, VTP, VLAN interfaces, Subnets, etc.)
• Implementation of EtherChannel LACP link aggregations
• Configuration of Cisco switch stacks (Master-Slave priority definition)
• Configuration of routing protocols such as static, OSPF, and BGP
• VPN creation (DMVPN, IPSEC VPN, GRE)
• IOS refresh for Cisco switches and routers
Management and administration of firewalls (Palo Alto, Check Point, Fortinet):
Certifications
Professional Experience
Training
• Firewall deployment
• Definition of inbound and outbound traffic matrices
• Handling requests from various global sites for traffic opening
• VPN configuration (IPSEC and SSL)
• Palo Alto configuration (Implementation of security profiles and security zones, Template configuration, template stack, device group, Policy Based Forwarding (PBF) implementation, V-wire and TAP configuration on Palo Alto firewalls,
• Check Point configuration (chassis installation, template configuration, adding and modifying firewall rulesets, security rule push, setting up IPSEC/SSL VPNs, NAT implementation)
• Fortigate configuration (VDOM installation, ADOM and RAID configuration, logging, SD-WAN implementation on Fortimanager, Registering and managing devices with Fortianalyzer, IPS and WAF configuration)
• Firewall migration (Project to replace Check Point firewalls with Palo Alto): study of the existing system (Check Point), implementation and execution of migration scenarios, testing, and validation
• N2 and N3 support for Palo Alto, Check Point, and Fortinet firewalls (troubleshooting, debugging, and incident management)
ORANGE BUSINESS SERVICE (OBS)
Network & Security Engineer
June 2022 - December 2022 (6 months)
• Network design, writing Technical Architecture Dossiers (DAT) and Exploitation Dossiers (DEX).
• Administration and configuration of network equipment: Cisco Catalyst switches, Cisco ASR 9000/4000 routers. Troubleshooting Fiber Optic issues.
• Configuration of stacks on Cisco Catalyst. Patching Advantage/Essential licenses on Catalyst 9000. Management of Cisco Smart Account licenses.
• IP address reservation on the DDI INFOBLOX tool.
• Administration and configuration of security equipment: Cisco ASA (ASDM), Fortinet FortiGate, Palo Alto (via Panorama).
• Static route configuration. Updating ACLs for traffic opening.
• SSL VPN configuration: Cisco AnyConnect (ASA), GlobalProtect (Palo Alto) with LDAP auth, FortiClient (Fortinet).
• Site-to-site VPN configuration on Fortinet and Cisco ASA.
• Administration of Zscaler Proxy servers (ZIA).
• On-site N2/N3 network and security support.
• Knowledge transfer and support to local teams.
• Monitoring of network and security equipment with Oxidized (configuration backup) and change management.
Technical environment: Routing: Cisco ASR 9000, 4000 | Switching: Cisco Catalyst 3850, 9200, 9300 | Security: Palo Alto PA-820/PA-3200, Fortinet 60-G, Cisco ASA 5500 | Monitoring: Cisco Prime, NEDI | ITSM: ServiceNow | DDI: INFOBLOX