Chaker ZAAFOURI

- Secure-by-Design architectures for Cloud, GenAI, local/public LLMs, RAG and Agentic AI - Lead Cloud Security audits, CSPM & AI-SPM assessments, threat modeling and risk-based remediation - Define AI security architecture patterns and Threat Models addressing for GenAI & AgenticAI - Design IAM architectures for users, workloads and AI agents, integrating RBAC, Managed Identities, PAM/PIM and least-privilege controls - Secure AI and data lifecycles, including datasets, prompts, RAG pipelines, vector databases, model integrity and sensitive Data - Secure Agentic AI, MCP, A2A and APIs through access controls, execution isolation, AI guardrails and Human in Loop mechanisms - Define Zero Trust roadmaps covering network segmentation, Private Endpoints, egress filtering and API security, WAF, DMZ & Firewalling - Strengthen AI supply chain security through model provenance, dependency validation, integrity verification and secure deployment - Integrate AI-driven security analytics, continuous monitoring and SOC capabilities to enhance threat detection and response - Embed security into Cloud and AI lifecycles through DevSecOps, CI/CD controls, vulnerability management and secure deployment - Define Cloud and AI Security Frameworks, governance, risk management and compliance aligned with the EU AI Act, NIST and ISO 27001 - Lead Vulnerability Management and Cyber Risk Assessment across Cloud, On-Premises, Apps & Container environments - Define risk-based remediation strategies (CVSS, EPSS, KEV), Patch Management, SLAs, and KRI & KPIs for continuous risk monitoring - Lead enterprise cybersecurity initiatives covering IAM, SaaS security, EASM, security posture and architecture validation - Advise security leaders, engineering teams and business stakeholders on Cloud and AI security strategies, architecture standards and transformation roadmaps - Lead the validation of Infrastructure and Cybersecurity architectures for SAP S/4HANA and SAP RISE deployments on Microsoft Azure

- Design and develop an AI-powered, cloud-native External Attack Surface Management SaaS platform, defining product architecture and technical strategy - Architect full-stack Cloud infrastructure, APIs, Databases, AI services and security analytics - Develop continuous attack surface discovery and exposure monitoring using OSINT, security telemetry and automated data enrichment - Integrate local & public LLMs, GenAI, RAG and CAG through hybrid AI architectures for intelligent vulnerability analysis, risk prioritization and actionable security intelligence - Explore Agentic AI to automate security investigations and support remediation - Secure AI integrations through access controls, API security, data protection and AI guardrails - Develop data pipelines, APIs and interactive dashboards for security analytics and reporting - Automate cloud infrastructure and DevSecOps/CI/CD pipelines, integrating monitoring, security testing and Secure-by-Design principles - Lead MVP dev, AI integration strategy, rapid prototyping and iterative product delivery

- Define technical and functional security pre-requisites in projects onPre, private & public Cloud Azure/GCP/Aliyun; in line with IT and information security strategies and policy framework - Azure cloud Audit, gap assessments & Gap analysis - Led CSPM initiatives for public cloud using MS Defender for Cloud to improve security posture - Define strategy and action roadmap for gap remediation & prioritize high priority + low complexity approach to reach quick wins - Design Vulnerability Management and Cyber Risk Assessments process - Define the strategy and the roadmap for actions for gap remediation - Create & maintain Naming & Tagging convention for cloud - Define Role Based Access Control strategy & process documentation - Create Technical Architecture Document Template, Secret inventory, Network stream - Define Cloud Security Policies & Cloud Backup Policies - Produce Network Hub&Spoke, DMZ, T0, Disaster recovery patterns - Define Infra as Code strategy - Form, Train & manage DevSecOps team to Automate the cloud environment with CI/CD pipelines and infrastructure as a code - Design multi-cloud Terraform modules - Adopt “Cloud First” strategy - Define move to cloud strategy & risk management - Study existing technology landscape and understand current application workloads - Understand and document technical requirements from business units & clients - Define Migration strategy to move applications to the cloud - Develop architecture blueprints and detailed documentation - Create bill of materials, including required Cloud Services and tools - Design the HA / DR strategies - Set up process, services and tools around cloud - Oversee building of the environment and project solution designs - Validate the environment to meet all security and compliance controls - Help share knowledge across the team on the various Azure, GCP & Aliyun services - Ensure Cloud Technical Referent

- Applications Security Risk Assessment, Risk Mapping & Risk Mitigation - HLD LLD Development & Azure Cloud Technical Architecture Document - Development of Application Technical Architecture Document (DAT) Templates - Drafting of architectural repositories: TAD Template, Build Sheets, Backup / restore Sheets, - Functional Architecture Document for Project Managers, Service Catalog - Design of Technical Solutions & Development of TAD - Build Networks, ExpressRoute, Hub/Spoke Topology, UDR, NSG, Firewall HA, WAF, VPN Site-Site/nomad - Backup Automation, Patchs management, Job Scheduling - Migration of all applications from onPremise Data Centers to Azure Cloud - Technical study for the demutualization of physical servers towards virtualization / Cloud - Infrastructure-as-Code (Terraform/Ansible) for all SAP Environments on Azure - Continuous Delivery Ansible for installation & configuration of all prerequisites for SAP environments (Patterns & Packages). - SAP/Azure performance tuning - Cloud Technical Referent in the Information System Department - Ensure compliance with standards and compliance with the security policy - Development of processes in the Cloud & Apps Integration Department - Support for clients to define their needs - Costing of new Cloud needs and cost optimization - Azure cost optimization & Finops - Ensures compliance with standards and the governance of Eramet Group's processes

- Applications Security Risk Assessment, Risk Mapping & Risk Mitigation - Design of Technical Solutions & TAD elaboration - Identification of End-Points (API) and design of integration schemes (Activity Diagram) - Development of Application Operation Guide procedure manuals - Technical study for the crossroads bank migration from PowerPC to x86 / virtualization - Technical study for the demutualization of physical servers towards virtualization / Cloud - Life cycle management and obsolescence of Carrefour solutions (Business Unit & Country) - Technical Referent to the CloudOps Department, Project Services Department, Operations Department & International Support - Ensures compliance with standards and compliance with the global CMDB and the security policy - Drafting of architectural repositories: TAD Template, Build Sheets, Backup / restore Sheets, checklist for Project Managers, Calculator, Service Catalog - Development of processes in the CloudOps Department - Costing of new needs and optimization of TCO, CAPEX & OPEX - Ensures compliance with standards and Governance

• Lead the security audit mission of audits of 20 government data centers; and 6 private data centers of the country's main cloud hosts • Participate in the study as an architect specialized in Cloud Computing • Benchmark of G-Cloud experiences in France, UK, South Korea and Sultanate of Oman • Diagnosis of the existing (Snapshot as-is) • Animation of Customer and Supplier Workshops • Needs study • Development of scenarios and choice of a target scenario • Detailed technical architecture file of the target scenario • Development of Uses Cases and REST / API Integration Scéhmas • Development of the implementation roadmap • Development of architectural, economic and organizational models • Definition of the vision, objectives, key KPI performance indicators • Target solution implementation plan • Security Risks Assessment, Mapping & Analysis; effects and impacts of G-Cloud

- IT Operation Center Management - Team Management of 12 including 3 shifts (24/7) - Incident and Escalation management - Business process implementation - Monitoring and Troubleshooting process implementation - Support process implementation - KPI and KQI implementation - Improvement SLA

- Deploy & maintain software factory - Automate deployment of new software releases - Capacity planning and horizontal auto-scaling based on Load Balancing - Hardening and tuning of web-hosting/mailing HA Multi-Tenant Platforms - Manage DNSBL/RBL reputation & automate blacklist claims remediation - Security and performance monitoring - Establishment of a backup policy and follow-up - L2 & 3 system support - Reporting of activities to the technical department Customers: Air France, Ikea, 3 Suisses Group, Nextedia, Publicis, Rapp Collins, ...

Freever becomes Buongiorno Vitaminic SpA (2005) - Platform administration: IVR, i-mode, SMS Chat, SMS Teasing - VAS monitoring - Preventive, curative & troubleshooting maintenance - Noc Management - Maintain the CMDB - Ensure SLA Customers: SFR, Bouygues, Proximus, Vodafone, Telefonica, 3, E+, O2, ...