Yann Brihier

HiPay is a European omnichannel payment service provider, supporting over 5,000 merchants with a unified payment platform.

In 2024, the group generated approximately €74.3 million in revenue and processed approximately €9.15 billion in payment volume, with over 200 employees.

HiPay's stated need was for expert services as part of the infrastructure evolution, a complete redesign project for the access management system.

I joined an infrastructure team of 7 people.

- Analyze the existing system and specific needs for access management and server administration.

- Propose one or more modern solutions that meet the identified needs, with a focus on security, traceability, and high availability.

- Audit existing market solutions.

- Implement the chosen solution (configuration, integration).

- Document the architecture and the administration/usage procedures for the new solution.

- Ensure knowledge transfer for adoption by the client's internal teams.

- Enhanced security of access rights management.

- Massive reduction in the risk of compromise.

- Complete traceability of administrator actions.

- Better control over third-party access.

- Improved ISO 27001 compliance.

Wallix, GCP, Google Workspace, Microsoft EntraID, Cloudflare, pfSense, Ansible, Load Balancers, PostgreSQL, Secrets Management.

Savencia Fromage & Dairy is one of the world leaders in dairy agri-food (13th largest dairy group and 5th largest cheese producer). The company operates in over 120 countries with ~€7.14 billion in revenue in 2024 (+5.1%) and 25,000 employees worldwide. I worked within the SITDS group. My team consisted of 8 collaborators.

In the agri-food sector, my objective was to strengthen OT security by deploying the BeyondTrust PRA solution in 120 countries worldwide.

- Project management for the deployment of OT PAM across 120 sites (France + International) and privileged access management on OT environments: over 2500 devices.

- Coordination of the PRA BeyondTrust project for the protection of critical systems.

- Incident management with the vendor, reporting issues, and solution development.

- Quarterly review with the vendor on various incidents encountered.

- Level 3 Support, solution audits, deliverables, documentation.

Increased security of the environment and reduced risks on OT.

PRA BeyondTrust, SaaS, OT servers, OT PCs.

Savencia Fromage & Dairy is one of the world leaders in dairy agri-food (13th largest dairy group and 5th largest cheese producer). The company operates in over 120 countries with ~€7.14 billion in revenue in 2024 (+5.1%) and 25,000 employees worldwide. I worked within the SITDS group. My team consisted of 8 collaborators.

1. My IAM & EDR missions:

- IAM management for security tools.

- Review and configuration of conditional access and Enterprise Apps on EntraID.

- Implementation of SAML SSO for EDR solutions.

- Definition of RACI and management of roles, policies, and MFA (Yubikey, Mobile Authenticator, OTP) on SentinelOne by site/country, including configuration of the Breaking Glass account and the administrator rights matrix.

Result obtained: Improved IAM fluidity, access management/simpler processes.

2. My hardening & Cloud Security missions:

- Implementation of Windows 11 and Linux hardening (audit, CIS Benchmarks, baselines, security directives).

- Incident management and endpoint/server security.

- Evaluation and PoC of Netskope to replace Zscaler (CASB, SWG, DLP), SOC and RUN support, multi-region tests, recommendations on governance, role separation, and SecOps best practices.

- SOAR automation (Mindflow) for secure retrieval of SentinelOne passphrases via REST API, with SOC controls, traceability, and SIEM integration.

Optimization of access governance (IAM/EDR), process simplification, and strengthening of the security level (MFA, SSO, RBAC, Break Glass).

Linux, RedHat, Rocky Linux, SUSE, Windows 11, SentinelOne, Mindflow, Netskope, Zscaler, CASB, DLP, SWG, Access Management, MFA, Role Management, SIEM.