
Ismail Z.
Senior PKI & IAM Engineer | Vault, HSM, Terraform
4 recommandations
Salaire / Taux journalier
4 personnes recommandent
Bruxelles, Belgique
Freelance
À distance uniquement
Expertises
Langues
À propos
Introduction
Senior PKI & IAM engineer with 8 years of experience, including Euroclear, BNP Paribas and GlobalSign. I secure and automate certificate and cryptographic key lifecycles in regulated environments: enterprise PKI, HSM operations, HashiCorp Vault and Terraform/GitOps. My work spans high-availability Vault deployments, PKI architecture and certificate renewal automation. Based in Brussels, I support freelance projects remotely in French and English.
Expérience de travail
MYKEYPAIR
mai 2022 - Présent
4 ans 6 mois
Thale, Allemagne
IAM Engineer
oct. 2025 - Présent
1 an 1 mois
Thale, Allemagne
• Designed and deployed production HashiCorp Vault clusters with high availability and automated disaster recovery. • Developed Terraform/Terragrunt modules for automated Vault deployment and implemented GitOps workflows. • Architected PKI secrets engine for automated certificate lifecycle management, enhancing security and compliance.
Security Advisor Consultant
août 2025 - Présent
1 an 3 mois
Bruxelles, Belgique
helped me get this job
Cybersecurity and PKI Adminstrator
mai 2022 - Présent
4 ans 6 mois
Bruxelles, Belgique
At MYKEYPAIR, I spearheaded initiatives in cybersecurity consultancy, focusing on PKI automation and AI-driven security frameworks. My work included developing automation frameworks that significantly reduced management overhead and creating AI-based agents. I also designed open-source standards ensuring robust security compliance across various sectors.
Career break
avr. 2025 - août 2025
5 mois
Ballymacrown, Spain, Co. Cork, Irlande
• CISSP Certification - Obtained industry-leading CISSP demonstrating mastery of 8 security domains for senior leadership positioning • Enterprise Vault Expertise • AI Security Specialization - Developed cutting-edge AI/ML security frameworks, LLM governance, and prompt engineering security expertise • Multi-Cloud Security- Achieved AWS Security Specialty and Azure Security Engineer certifications for hybrid cloud architecture • PKI Leadership - 7+ years managing enterprise PKI, HSM operations, certificate automation support. • DevSecOps Automation - Advanced GitOps security, Kubernetes hardening, Terraform automation, and IaC security modules • Regulatory Compliance - Deep DORA, NIS2, eIDAS experience in regulated environments with SECRET-level clearance • Zero Trust Architecture- Comprehensive zero trust, post-quantum cryptography, and advanced IAM pattern knowledge • Strategic Leadership - Enhanced ability leading complex cybersecurity initiatives combining traditional and cutting-edge capabilities Tech Stack:Vault, AWS/Azure, K8s, Terraform, AI/ML Security, PKI, HSM, Zero Trust Certs: CISSP, AWS Security, Azure Security, Vault Associate Value: Strategic investment resulting in market-leading expertise and technical capabilities
PKI Entreprise Operations - CISO Division Member | Euroclear
EuroclearFreelance
oct. 2022 - mai 2025
2 ans 8 mois
Région de Bruxelles-Capitale, Belgique
Responsibilities & Achievements: • Key Custodian & Registration Authority: Ensuring cryptographic security for mission-critical financial infrastructure processing trillions in daily settlements • HSM Ceremonies: Leading hardware security module ceremonies for key generation, installation, and lifecycle management • Enterprise Cryptography: Managing code signing, secret holding, and certificate management for high-availability financial systems • Smart Card Management: Providing technical support for smart card PKI solutions serving internal and external users • Regulatory Compliance: Ensuring cryptographic controls meet DORA, NIS2, and financial sector regulations Impact & Scale: • Protecting €37 trillion in annual securities settlements • Supporting 2,000+ financial institutions across 40+ countries • Maintaining 99.99%+ uptime for mission-critical cryptographic services • Ensuring regulatory compliance for Europe's most critical financial infrastructure Technologies & Standards: Enterprise HSM (Thales, Safenet), PKI infrastructure, Smart card management, Financial sector cryptography standards, DORA/NIS2 compliance frameworks "Experience at this level of financial infrastructure security - where downtime or security failures could impact global markets - provides unmatched expertise in enterprise PKI design and implementation."
Key Manager | BNP Paribas Fortis
BNP Paribas Securities ServicesFreelance
déc. 2021 - oct. 2022
11 mois
Bruxelles, Belgique
Managed PKI operations and certificate lifecycle for one of Europe's largest financial institutions. Key Responsibilities: • Managed enterprise PKI infrastructure serving 50,000+ employees and customers • Implemented certificate issuance and renewal automation reducing manual processes by 70% • Integrated HSM (Hardware Security Module) solutions for cryptographic key management • Ensured compliance with financial sector regulations and security standards • Collaborated with security teams on incident response and threat mitigation Impact: Improved certificate management efficiency while maintaining 99.9% uptime for critical financial services. Technologies: Microsoft ADCS, Adyton, Thales HSM (Safenet, nCipher), PKI infrastructure, Certificate management
EMEA Technical Pre-Sales Engineer
GlobalSign
juil. 2019 - déc. 2021
2 ans 6 mois
Louvain, Belgique
Provided technical expertise for PKI solutions and certificate authority services to enterprise clients. Key Achievements: • Supported €5M+ in annual sales through technical solution design and client consultation • Designed PKI architectures for 20+ enterprise clients across various industries • Conducted technical presentations and proof-of-concept demonstrations • Collaborated with sales teams to develop customized PKI solutions • Provided post-sales technical support and implementation guidance Impact: Helped clients implement robust PKI solutions while driving significant revenue growth. Technologies: PKI solutions, Certificate authorities, SSL/TLS certificates, Enterprise security
Étudiant
Siemens
juil. 2017 - oct. 2017
4 mois
Formation
Technofutur TIC
Certification google : fundamentals et Search, SEA Expertise : Bootcamp
2018 - 2018
1 mois
Résultat : Google adwords : Marketing digital
Activités et associations : Bootcamp
Bootcamp de Trois semaine en Marketing digital
EPHEC
Information Technology
2016 - 2018
2 ans 1 mois
ISC2
CISSP
Licences et certifications
Certificate of Completion: Al Fluency Framework & Foundations
Délivré le : août 2025
Introduction to Model Context Protocol
Délivré le : août 2025
Associate of ISC2
Délivré le : août 2025
AWS Cloud Quest: Cloud Practitioner
Délivré le : juin 2025
Python Essentials 1
Délivré le : juin 2025
Ethical Hacker
Délivré le : juin 2025
Introduction to Generative AI & Prompt Engineering
Délivré le : juin 2025
Certificate of Cloud Security Knowledge v.5
Délivré le : juin 2025
Google ads Fundamentals
Délivré le : nov. 2018
Google Ads Search
Délivré le : nov. 2018
CCNA Security certified
Délivré le : janv. 2018
Portfolio

MYKEYPAIR — PKI, IAM, pentests et pilotage RFP/PoC

GlobalSign — Conception de solutions PKI pour les entreprises

Euroclear — Sécurité PKI/HSM et conformité cryptographique
