Josué Kinding

– Design and implement Zero Trust and network segmentation architectures aligned with defence-in-depth principles – Design and deploy secure remote access solutions for internal users and third parties – Lead vulnerability and patch management strategy, including solution design, rollout, and level-3 support – Design and implemented an EDR solution, including operational processes and advanced troubleshooting – Harden systems and networks through secure configuration baselines – Review and redesign Azure IaaS security architecture (disk encryption, IAM roles, CSPM/CWPP) – Define the architecture for the SIEM solution – Compliance to bank regulation (NIS): strategy definition, remediation actions

– Design and implement network segmentation and Zero Trust architectures across IT and OT environments – Lead OT network segmentation initiatives to reduce attack surface and operational risks – Review and redesign WAN and LAN architectures – Perform security audits of infrastructure and systems, identifying and remediating major weaknesses – Design and implement monitoring, detection, alerting, and response capabilities – Defined IAM policies and procedures, including integration of Azure Entra ID for corporate users, third parties, and SaaS applications in hybrid mode – Deliver recommendations on secure configuration and hardening of IAM platforms – Contribute to NIS compliance programs and OT infrastructure upgrades – OT infrastructure upgrade

– Design and implement end-to-end PKI solutions – Perform risk-based security audits and redesigned infrastructures to improve overall security posture – Audit and redesign monitoring and logging infrastructures Proposed secure and innovative data-sharing solutions adapted to legal constraints – Act as technical lead, coordinating multiple teams and contributing to decisive architectural discussions – Deliver reporting to technical and non-technical stakeholders—Reporting to different stakeholders: technical and non-technical people.

– Design and implement end-to-end security solutions to significantly improve security posture – Deliver architectures and implementations including PKI, SD-WAN, NAC, and 802.1X authentication – Act as technical lead on complex, cross-team security projects – Conduct security posture assessments and delivered tailored remediation plans – Support network and infrastructure projects (VPNs, SD-WAN deployments) – Take full ownership of project and technology lifecycles, from design to operations