Wakil Aouaci

Designed and deployed an access automation pipeline (Ansible + Python) on 4,500 multi-vendor equipment (Huawei, Nokia, Cisco, Alcatel) with a reduction in provisioning time of ~150 hours per cycle and elimination of manual configuration errors. Managed the migration of McAfee antivirus to Microsoft Defender on 400 Windows servers in national production, without service interruption and without regression in security coverage. Administered CyberArk PAM and the bastion on a flow of 2,500 privileged connections/day: RBAC, identity management, session auditing, and strict application of the least privilege. Deployed and administered Citrix StoreFront and NetScaler for the publication of critical multi-site applications, with access policy management and high availability. Managed backups via Veeam Backup and Kasten (Kubernetes): retention policies, restore tests, and integration into disaster recovery plans. Conducted vulnerability analyses with Nessus and contributed to the exploitation of the QRadar SIEM: correlation rules, alert analysis, and escalation to SOC teams. Drove the DevOps culture within the department via GitLab (configuration versioning, CI for automation scripts) and IaC workflow standardization. Coordinated the migration to a centralized directory for NMS platforms in interface with network, security, and operations teams, reducing authentication failure points on the infrastructure. Participated in drafting internal security policies and their operational implementation for the infrastructure scope, in alignment with ANSSI requirements and ISO 27001 audits. Monitored the infrastructure via Grafana, Prometheus, ELK Stack, Centreon, and Nagios for proactive anomaly detection on national telecom infrastructure.

Administered IAM/RBAC on a multi-system scope (Linux, Windows, network equipment) covering 9,000 accounts in a critical telecom environment, with role hardening and access segmentation. Administered Active Directory and LDAP at scale: GPO, complex OUs, CIS Benchmark hardening, privileged account audits, and inter-site replication monitoring. Conducted internal compliance audits against ANSSI and ISO 27001 frameworks, with the development of remediation plans and follow-up of corrective actions until closure. Managed vulnerabilities on national telecom infrastructure: patch management, OS hardening, review of exposed services, and network traffic control. Resolved critical L2 incidents in Linux (RHEL/CentOS) and Windows Server production as part of operational maintenance and disaster recovery plans.