OpenBSD est un système d'exploitation open source de type unix, il fait parti de la famille BSD. OpenBSD présente un niveau rigoureux en matière de sécurité et en matière du code source. OpenBSD fonctionne sur plusieurs plates-formes matérielles différentes, notamment alpha, amd64, armish...
For various customers:
• AWS Landing Zone Security Assessment
• Troubleshooting L3 infrastructure issues
• Provide guidance / best practices on AWS deployment
• Architecture and POC
Projects
Architecture and POC on AppStream 2.0 (RFP 2500 users).
Studying and propose AWS features and solutions for :
● Implement a highly available applications streaming solution
● Enable to scale quickly in case of full remote
● Keep the user experience at the higher level
● Respect security and compliance
Mobiyo (Toulouse) as AWS Security and Architect consultant
March 2020 – September 2020
Projects : Design and migrate onpremise SIP infrastructure to AWS
Studying and propose AWS features and solutions for :
● High available and Resilient SIP architecture on AWS
● Call monitoring and reporting
● Voice quality monitoring / Voice recording and analyse
● Environments deployed with Terraform (Beta / Prex / Prod )
Projects : Design and migrate onpremise SIP infrastructure to AWS
Studying and propose AWS features and solutions for :
● High available and Resilient SIP architecture on AWS
● Call monitoring and reporting
● Voice quality monitoring / Voice recording and analyse
● Environments deployed with Terraform (Beta / Prex / Prod )
Projects : Support Security and Network Architects on design and improve the
AWS cloud platform:
● Maintain and improve the TVPC design
● Several POC to study AWS features and use cases (Nomad
connections offload in AWS, Publishing, Transit gateway)
● M2C Azure project : Security consultant and support on Azure
design. Support the migration team with daily security issues.
● All projects are deployed and maintain with Terraform
Projects : Security Lab refurbish:
● Rebuild from scratch a full lab for the security team (ASA, Palo, BlueCoat..)
Securing Industrial Network:
● In cooperation with network team, deploying secure architecture and security
features for industrial networks.
IDP / IPS management:
● Deploy and maintain IDP / IPS worldwide
Digital-Workplace:
● L3 Troubleshooting / Investigation (Bluecoat / Palo Alto / Netskope / F5)
● Security and infrastructure support worldwide
Projects :
Maintain and improve the worldwide infrastructure (France / Mexicali / China /
Slovakia /
Germany)
Focal point for IT security and networking. Manage industrial network and SAP
servers.
Maintain / Upgrade Virtualization and stockage socle
Specific development :
● Python program to create SAP interfaces with mechanic toolbox, TEMIS system
and
others.
● Python program to monitor productions lines
● Python prototype for visual control (OpenCV)
● Python scripts to generate production dashboards
● Create Firewall boxes (OpenBSD / Flask on Alix Board) to protect industrial
devices
● Create firewall boxes to connect small sites (OpenBSD on Alix Board)
Projects : ● Maintain a healthcare software portfolio.
● Manage CheckPoint firewall and hospitals interconnexions
● Network management and improvement: Segmentation, VLANs,
STP, NAC..
● Implement Proxy servers based on Squid and OpenBSD.
● Implement HAProxy (OpenBSD)in front of MS Terminal Servers.
● Implement Ticketing and Inventory system based on GLPI and
OCSNg (OpenBSD).
● Create a Thin Client linux distribution based on Slackware.
● Create network probe system base on pmacct (OpenBSD).
● Implement Zabbix (OpenBSD).