Description

IT Network and Security Architect

Architecte réseau & sécurité avec une vision architecturale globale. Maitrise environnements complexes et des infrastructures critiques. Autonome, rigoureux et force de proposition. J’ aime travailler en transverse avec les équipes Build, Run, Sécurité, Sait formaliser, documenter et vulgariser des solutions techniques avancées. Bonne Expérience des Technologie Zscaler, Fortinet, Palo Alto, Cloud GCP Cisco Switch LAN, DC, WAN, Routage BGP, OSPF , Wifi, ISE. Connaissance des technos : F5, Efficient IP, Infoblox, Juniper MIST.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

Renault SAS
Global Architect Network and Security
AUTOMOBILE
January 2018 - Today (8 years and 5 months)
Guyancourt, France
Lead Architect of Datacenter Exit program: with 1.5 MEuro Budget
✓ Implement Hub Telecom Infrastructure in Equinix Collocation with new WAN and Internet Access
✓ Design and implementation of DC VXLAN Fabric supporting new server infrastructure
✓ Lead Migration with very challenging delays and operational constraints: migration in 10 month, 700 vlans, 3000 assets (vmware,…)
Zero Trust Network Access Architecture to support carve in/ out of several entities (1300 application)
✓ Design server to server communication without direct communication with Branch connector, Cloud connector in GCP and ZTNA cloud
Lead architect and deployment of new location in Shanghai in 2025
✓ Fortinet SDWAN using several Chinese ISP to provide access connectivity Europe DC and Internet
✓ Deployment Zscaler ZTNA to access corporate applications, Zscaler ZIA to access Cloud and Internet Lead Renault and Nissan RFP proxy transformation
✓ Management RFP with Zscaler, Netskope, Palo Alto and Cisco for user access
✓ Migration to Zscaler Cloud Proxy using ZCC and Okta IDP, 88 000 users in 8 months, on DC and 80 locations
✓ Deployment Fortinet Fortiproxies in GCP and on prem for Server access to Internet Web Application
✓ Design Network / Security infrastructure in GCP Cloud (Host Project, VPC, Terraform, Cloud DNS, HA VPN, Cloud NAT, PSC)
✓ Manage Deployment in Multiregional GCP, with Virtual Firewall using Palo Alto with NCC and BGP to provide resiliency
✓ Setup Link to AWS, GCP, Azure Cloud using Equinix ECX
✓ Support Lift and Shift VMware Private cloud to GCP GCVE using NSX
SD-WAN and Internet transformation program.
✓ Study migration from Hybrid WAN (Cisco and Fortinet MPLS, Internet) to Full Internet with Fortinet SD-WAN
✓ Architecture Lead of Hybrid Wan transformation to permit Deployment of O365 using Fortinet FW
Support Transformation of Network Campus 10 000 users to Cisco DNA Fabric * Study and deployment LAN and WIFI new architecture using Cloud Juniper MIST
SASE Zero Trust Firewall Fortinet Zscaler Datacenter
RENAULT sas
Manager Network and Security
AUTOMOBILE
January 2007 - January 2018 (11 years)
Guyancourt, France
Direct Management of Team Network and Security specialist (15 people WAN, Wifi, FW, DNS, Security, Proxies ….)
• • Designing and Deployment of a new service for Bring Your Own Device
✓ Using Fortinet FW and Cisco ISE for Authentication, Scope : 100 locations, 10 000 devices
• • Technical Leader Global NAC Deployment for Office Network in RENAULT (LAN and WIfi)
✓ Using Cisco Regional ISE cluster for authentication, Exception Portal ✓ Deployment in 18 month over 100 Location, 120 000 PC
• • Participating project to outsource N&T operation and L2 support to Indian partner Team ✓ budget, SLA definition, Organizing Knowledge transfer, follow-up of transition
• • Design and drive deployment of an offload architecture
✓ Send non-business sensitive traffic over VPN over Link in order to reduce SP WAN link usage ✓ Cost Reduction (up 40% saving on international BW) including better sharing over several Internet Link) ✓ Qos implementation to manage traffic limitation
• • Driving a project to build deploy Security Operation Center tools
✓ To enhance operational security monitoring and produce security reporting: ✓ 90 Keuro Budget
Setup RFP for Next Generation Firewall FW
✓ Provide efficient solution to enhanced security in most sensitive location, 1 M Euro Budget ✓ 15 sites including production area in plants, and huge research center
Leading several Network infrastructure refreshes in international context
✓ Build Archi Design WAN, LAN, Wi-Fi, Proxy, ✓ Korea, Brazil, India, Columbia, Russia, Morocco with onsite business trip for migration
• • Deployment of inline IPS solutions in Datacenter at a large scale
✓ in front 80 Locations (with 170 000 End users' devices) to block Threat (Scanning 700 Mbit/s of traffic) . ✓ Setup of process to outsource day-to-day operation and build escalation procedure
Refresh DNS internet solution using Infoblox appliances to enhance reliability
RENAULT sas
Telecom and Network Architect
January 2003 - January 2006 (3 years)
Leader in design and setup of new Telecom and Network Architecture:
• • New Internet Access Architecture Design with Several Link with ISP for Hosting, VPN, and Web browsing
• • Design of WAN site to site connection over Internet based over DMVPN and IPSEC+GRE
• • TOIP Project over 10 000 IP Phone connected in several area
• • Definition of Investment Budget (Capex) in Telecom and Network Area, partnership with Cisco System and negotiation with supplier
• • Leader in new technologies evaluation, beta Testing Program, participation to several customer conferences: Cisco
Networkers, Represent RENAULT in RENAULT / NISSAN Workshop