Freelancer profile translated to English.

Description

With 9 years of experience in cybersecurity and infrastructure, I have dedicated the last 4 years to implementing PAM (Wallix and CyberArk) solutions for various clients. My role has covered the entire project lifecycle: architecture, platform setup and configuration, project management, and technical team leadership. I have also conducted scoping studies to assist clients in choosing and integrating a PAM solution strategy, and I have been responsible for the operational administration of a PAM platform in production for over a year.

During the first 5 years of my career, I primarily worked on the design, deployment, and security of network infrastructures using solutions such as Cisco, Fortinet, and Palo Alto, while also managing projects and coordinating teams.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

Secteur bancaire
Architect/PAM Expert WALLIX
BANKING AND INSURANCE
May 2024 - Today (2 years and 3 months)
Paris, France
Technology: Wallix - Pulse Secure - F5 BIG IP - Firewall - InWebo MFA - Redhat IDM - External Vault

Mission:

Participate in the validation of the architecture and components of the Wallix PAM solution
Conduct technical workshops with various team leads to ensure proper deployment
Build the pre-production infrastructure (Installation, initialization, HA, Configuration, and testing)
Create the acceptance test plan for the pre-production environment
Build the production environment (Installation, initialization, HA, Configuration, and testing)
Create the acceptance test plan for the production environment
Project documentation - DAT, MEX, GI, Icebreaker
RUN, MCO, and MCS of the Wallix PAM solution
Wallix redhat idm Active Directory IT Architecture Firewall
ORANGE CYBERDEFENSE
PAM EXPERT
TECH
February 2023 - April 2024 (1 year and 2 months)
Paris, France
• Design, Sizing, and validation of the WALLIX PAM and Cyberark solution architectures for Orange Cyberdefense clients
• Conduct Architecture Workshops, rights and authorization, and Use Case workshops with Orange Cyberdefense clients
• Installation, Configuration, and Integration of Wallix PAM solution components into client's On-site or Cloud (Azure) infrastructure (Bastions, Access Manager, Trustelem)
• Implementation of MFA on Access Managers and Bastions via Azure AD or Trustelem
• Implementation of replication between Bastions and between Access Managers (Active/Active)
• Implementation of password rotation policies for privileged accounts
• Integration of a Bastion cluster in Transparent Proxy mode for certain clients
• Integration of Bastions and Access Manager with F5 BIG IP reverse proxy for load balancing
• Integration of Bastions and Access Managers into OT environments with Universal Tunneling
• Implementation of Bastion Architectures with a Bastion cluster as an External Vault
• Configuration of Fortigate and Palo Alto firewalls to allow Access Manager(s) to be accessible from the Internet, either directly or via an SSL VPN.
• AD integration between Bastions and AMs
• Installation and Configuration of RDS for application management via Bastions
• Configuration of NFS external storage for externalizing Bastion audit sessions
• Updating client's obsolete Bastion and Access Manager environments
• Validation and drafting of project documentation (DAT, DEX, Installation Guide)

Technical Environment:
• Wallix, Trustelem, Azure AD, Universal Tunneling, MFA, Password Rotation, External Vault, F5 BIG IP LTM, Fortigate Firewall, Palo Alto Firewall, Network Routing, Active Directory, AD Tiering, Internal and External Vault, Microsoft PKI, Linux
Cyberark Wallix IT Architecture Active Directory Linux
NEXT'IN SOLUTION
Technical Referent
December 2022 - January 2023 (1 month)
Team: 05 Client: BANKING SECTOR

• Design, Sizing, and validation of the architecture for the renewal of the bank's Network and Security infrastructure
• Design and Sizing of the Fortigate firewall architecture to replace the current Cisco ASA at the headquarters, the disaster recovery site, and remote sites (Firewalls for LAN segmentation, Firewalls for server farms, WAN firewalls, Remote site firewalls)
• Design and Sizing of Cisco network equipment (network core, aggregation switch, access switch, Cisco ISR router for VoIP at remote sites)
• Implementation of features: IPSEC VPN, SSL VPN, Secure SD-WAN over IPSEC, VXLAN, Policy (IPS, AV, Web filtering), VDOM, VLAN Interface, Static Routing, OSPF, LACP, Etherchannel, VRRP
• Installation and Configuration of a Web Application Firewall (FortiWeb-VM) to protect the bank's application servers.
• Implementation of FortiManager for centralized administration
• Implementation of FortiAnalyzer for log centralization
• Drafting of technical documentation: HLD, LLD, GI, DAT, MEX
• Training and knowledge transfer on the project scope

Technical Environment:
• FortiGate, FortiManager, Fortiweb, FortiAnalyzer, Cisco 9300, Cisco 9200, Cisco ISR 4300