
Loïc Morello
Senior Solution Architect | Cybersecurity & AWS
Salary / Daily rate
Paris, France
Freelance
Skills
Languages
About me
Intro
Enterprise/AWS Solution Architect with 15+ years designing scalable architectures for major enterprises like BNP, SNCF, and Renault. Proven expertise in cloud migration, cybersecurity compliance, and digital transformation initiatives across financial services and telecom sectors. Specialized in TOGAF frameworks and AWS solutions.
Work experience
Functional architect
BNP (BP2I)
Nov 2023 - Present
3 years
Functional Architecture Design & IS Governance Designed target functional architectures aligned with business needs, project priorities, and strategic objectives. Identified business and technical stakeholders, and facilitated scoping workshops to ensure a shared understanding of expressed needs and expectations. Led functional modeling workshops using standard modeling frameworks (notably ArchiMate) to ensure clarity, consistency, and alignment across teams. Presented functional architectures to the Architecture Committee, obtained necessary approvals, and published associated deliverables in the architecture repository. Contributed to the drafting of the High-Level Design (HLD) and the ongoing updates of architecture deliverables (process maps, business views, data flow diagrams, etc.). Participated in the enhancement and formalization of functional modeling standards, promoting the use of languages like ArchiMate to improve coherence and readability. Supported the automation of the architecture repository, by proposing and implementing best practices to industrialize documentation and reinforce overall enterprise architecture governance.
Cross-functional Architect – In Charge of Cybersecurity Requirements
Société du Grand Paris
Feb 2024 - May 2025
1 year 4 months
Paris, France
🔹 Cybersecurity: Analysis, Design, and Integration Analyzed and incorporated cybersecurity requirements of the client's Information System, aligned with business objectives and regulatory constraints. Assessed, evaluated, and selected the most relevant technical solutions, ensuring compliance with ANSSI recommendations. Defined a secure, robust, and scalable target architecture addressing data protection, resilience, and traceability needs. Facilitated technical and functional workshops with vendors and solution providers to refine the design and anticipate integration impacts. Evaluated and modeled the cost of selected solutions, and contributed to the formalization of a clear and structured commercial offer. Updated architecture deliverables (such as DAG, DAD, etc.) and integrated them into the client validation process, ensuring alignment with initial requirements. Participated in technical interfacing workshops to validate and secure data exchange flows in accordance with recognized cybersecurity standards.
Solutions Architect
AFD
Aug 2022 - Dec 2024
2 years 5 months
Paris · Hybrid
1. Analysis of the Existing System Conducted a functional, application, and technical mapping of the current SIOP. Assessed the obsolescence level of the existing system components. Defined an obsolescence policy in alignment with AFD's technological standards. Analyzed the existing data model and proposed a structured target data model. 2. Target Architecture Definition Facilitated workshops with business and technical stakeholders to collect requirements and define the target functional and application architectures. Designed a modular target information system, aligned with business requirements and AFD guidelines. Defined the new functional modules to be implemented. 3. Solution Selection Process Participated in the launch of RFPs and created evaluation grids aligned with the defined module breakdown. Conducted comparative studies of market solutions, including analysis of legal commitments. Defined solution selection criteria to ensure alignment with business needs. 4. Strategic Alignment and Integration Identified projects within AFD that are interconnected with the SIOP redesign (interoperability, dependencies, shared components). Contributed to writing the functional, technical, and security requirements for each module. Identified key use cases and defined publisher demonstration scenarios. 5. Governance and Project Oversight Participated in all kick-off meetings and project committees throughout the study phase. Contributed to the development of a migration roadmap toward the target system, in line with business constraints. Drafted presentation materials for Architecture Committees (CA) in accordance with AFD's project methodology. Presented the selected solution to the Architecture Committee, justifying the strategic and technical decisions.
Solution architect
OCSIN
Jan 2023 - Jul 2023
7 months
Genève, Suisse · Hybrid
Urbanist / Functionnal Architect
Enedis
Apr 2021 - Jul 2022
1 year 4 months
92400 Courbevoie, France
Carry out compliance studies and vulnerability management of SIE applications in domains, Comply with the NIS directive and ensure the level of compliance expected by ANSSI in terms of cybersecurity, Prepare, organize and animate the component End of life committees and define the best way to resolve the obsolescence, Monitor and manage product and material obsolescence and define the obsolescence policy, Define the system end of life assessment criteria and write the technical and functional requirements to automate of the obsolescence reporting, Define the technical and functional scope of the study, and realize the Benchmark for Edge Computing solutions, Select Edge computing solution which should meet mainly with security requirements (hardware and software) and cover the Enedis needs, Identify use cases and security requirements to performthe Enedis Edge Computing PoC, Organize and facilitate the information gathering workshops needed to realize the Edge Computing PoC, Define the PoC roadmap and define the WBS to perform the Edge Computing PoC, Define the PoC technical and functional architecture regarding the business needs and Enedis requirements, Conduct scoping workshops and validate project governance and launch during the project committee, Define the different desired profiles and write the job descriptions to build project team, Create an architecture document and ensure that the functional requirements are validated by the business teams, Compile a cost estimate for both the solution and project and pinpoint the total cost of implementing the PoC Edge, Manage the supplier relation and interaction with the editor of the chosen solution based in Austria, Lead Data Governance projects and present a strategy for data governance.
Functional Tranversal Architect
Bouygues Telecom
Aug 2020 - Mar 2021
8 months
Meudon, France
Accompagner les métiers dans la formalisation, la clarification du besoin et définition du périmètre projet, Identification des processus métier, les cas d’usage et les briques fonctionnelles impactées, Réaliser une étude d’architecture transverse afin de définir une solution répondant au besoin métier, Animer les ateliers avec les différentes usines MOEs pour évaluer la faisabilité du besoin, Identifier les impacts et contraintes fonctionnels et techniques le besoin métier, Identifier et formaliser les exigences fonctionnelles et techniques de chaque usine MOE, Présenter en comité d’architecture les solutions définies et expliquer les choix effectués, Participer à l’élaboration de la stratégie de tests transverses de la solution d’architecture, Rédiger un document d’architecture et faire valider les exigences fonctionnelles par les MOEs, Faire un macro chiffrage de l’étude et un chiffrage de la réalisation de l’architecture définie, Participer au comité de planification pour réserver les ressources usine et d’engagement projet, Être en support sur les projets en cours de réalisation et participer au comité pilotage projet.
Enterprise Architect
SNCF Reseau
May 2019 - Jul 2020
1 year 3 months
Seine-Saint-Denis, Île-de-France, France
Identify, share business and IT constraints and requirements, both present and future, that relate to the IS, Define and manage the IT evolution trajectories in phase with the business and digital strategy To define the rules and principles of urbanization and to ensure their application, Implementing an urbanization approach applicable to all business projects Assess the relevance and coherence of the projects in relation to the target architecture and existing systems, Supporting the business in the formalization of business processes, in the identification and mapping of business objects, Participate in the improvement or creation of new applications or services and ensure the alignment between the needs and the proposed solutions, Participate in the governance of the IS and ensure the alignment of evolutions with the target architecture scheme and propose roadmaps, identify the impacts of business strategies on the given architecture during workshops with the Data Gov and Data Officers (DPOs), define the glossary and the life cycle of objects and list the cases of business use during workshops, Supporting projects in the definition of business needs on the description and use of data (business concepts, business requirements, data usage), taking into account security constraints, ensure the adequacy of the solution to the use case of the data and guarantee the coherence of the given architecture
Transversal Solution Architect
Renault Group
Sep 2018 - May 2019
9 months
Paris Area, France
Framing of the of the business needs: organizing the workshops to collect and understand the needs, describing and studying the as is information systems, Defining the functional building blocks, functional architectures and applications architecture in order to define a best solution suitable business requirement, Defining the as is matrix flows and identifying the data flows of each interface. Defining the MVP and the target architecture that considers business requirements and include Renault recommendations. Defining the architecture roadmap, write architecture documents, lead architectural workshops Submitting the architecture defined (MVP and Target) to the architecture committee and justifying and validating the solutions chosen in our architecture
Solution Architect
Yves Rocher
Jun 2018 - Jul 2018
2 months
Paris Area, France
Support the project team during the preliminary phase: defining and collecting the requirements, defining the as is architecture and the project scope Defining the target functional architecture of the new system based on enterprise urbanization rules Defining the target application and technical architectures according to the business requirements Defining the architecture roadmap, write architecture documents, lead architectural workshops Define matrix flow between the new platform with corporate applications Define Order to Cash process and identify the payment corporate solution and select payment method for the new platform Defining the AWS cloud infrastructure architecture and evaluating the cost of the AWS cloud platform
Enterprise Architect
DEXIA
Feb 2018 - May 2018
4 months
Paris Area, France
Studies and analysis of Enterprise Architecture: defining an approach to urbanize the Dexia Information System according to business requirement and the company strategy, Building of implementation phases and delivery of recommendations Description of each module in functional, application, technical and volumetric terms Identification and description of application objects (services, data processed) Identification and linkage of functionalities to various application services Definition of existing flow diagrams and development of target diagram Grouping of clustering axes into coherent functional domains and graphically illustrating them Definition of targets and transition architecture necessary to achieve objectives Building the Enterprise Architecture Framework for Dexia according to TOGAF and Zachman Frameworks.
AWS Solution Architect
SwissLife
Nov 2017 - Mar 2018
5 months
92300 Levallois-Perret, France
Supported project teams during preliminary study: collected (via stakeholder interviews) and defined functional needs, organized workshops to frame requirements, and implemented action plan. Analyzed and identified risks and impacts of migrating enterprise IT to Cloud solution (Analyzed and audited existing enterprise-hosted architecture, then proposed evolution to Cloud according to company standards.) Defined and created a new architecture according to project requirements: respected access security and chose technologies according to company standards and principles. Drafted Technical Architecture Document (DAT) and monitored compliance of architecture implemented according to DAT Participate in the choice of backup and storage solutions for a group redesign project.
Enterprise Architect
Devoteam
Aug 2017 - Oct 2017
3 months
Paris Area, France
Studies of entrusted Enterprise Architecture and evaluation of scenarios proposed for the Architecture, Urbanism, Security and Exploitation components. Building of implementation phases and delivery of recommendations Description of each module in functional, application, technical and volumetric terms Identification and description of application objects (services, data processed) Identification and linkage of functionalities to various application services Definition of existing flow diagrams and development of target diagram Grouping of clustering axes into coherent functional domains and graphically illustrating them Definition of targets and transition architecture necessary to achieve objectives
IS Architect
SNCF RESEAU
Sep 2015 - Jul 2017
1 year 11 months
Paris Area, France
Supported project teams during preliminary study: collected (via stakeholder interviews) and defined functional needs, organized workshops to frame requirements, and implemented action plan. Analyzed and identified risks and impacts of migrating enterprise IT to Cloud solution (Analyzed and audited existing enterprise-hosted architecture, then proposed evolution to Cloud according to company standards.) Defined architecture in AWS Cloud and application migration requirements. Implemented solution POC in AWS and Azure clouds. Defined and created a new architecture according to project requirements: respected access security and chose technologies according to company standards and principles. Drafted Technical Architecture Document (DAT) and monitored compliance of architecture implemented according to DAT Participated in the evaluation and the final selection of products: study and choice of technologies to be recorded in company’s specifications Participated in the writing of call for tender/bids, and responses to them in large international projects Scheduled project activities, respecting the implementation deadlines Defined infrastructure project outsourcing strategy and analyzed migration risk
Project Manager
ENGIE
Jul 2014 - Aug 2015
1 year 2 months
Paris Area, France
Steering and managing application integration projects, coordinating and managing the technical teams, Improvement of the work processes: Project management, middleware infrastructure, participated in the steering committee, defined the project load, management of constraints and risk, change management, Defining and implementing a strategy to improve the performance of production teams in compliance with ITIL processes, Writing the functional and technical specifications, defining application architectures and technical architectures according to the business needs and enterprise requirements Steering of Project: project management, organization of meetings, monitoring of progress reports, taking account of integration tests, risk management, planning, time and cost control, organization of workshops.
Project Manager
BNP Paribas Corporate and Institutional Banking
May 2013 - Jul 2014
1 year 3 months
Région de Paris, France
Steering and managing application integration projects, coordinating and managing technical teams Improvement of the work processes: Managed the middleware project, organized and participated in the steering committee, defined the project load, managed the constraints and risks and the change management, Defining the application servers (WebLogic) architectures , configuring and optimizing of JVM according to the users needs in order to respect the performance expected, Supporting the developer team during the implementation phases and providing the best practice in order to use efficiently the application server component according to the publisher recommendations Technical support: investigate and resolve all problems meet in production environments, writing the post mortem report and saving of the incident feedback Elaborating and implementing a strategy in order to improve the performance of production teams according to ITIL best practice.
Project Manager
Crédit Agricole CIB
Mar 2010 - May 2013
3 years 3 months
Paris Area, France
Steering and managing application integration projects, coordinating and managing technical teams, Defining the middleware architectures: cluster mode or stand-alone mode for the application servers and the web servers, Choosing application frameworks and supporting the developer team during integration phases, choosing the loading java class methods in WAS, configuring and optimizing the JVM, defining the security level of the platform according to the security team recommendations and enterprise application compliance, Administration of WebSphere and IIS platform, monitoring and managing the middleware projects, following all project steps in order to be on time, on budget and on scope, Technical support: investigation, analysis and resolution of problems encountered in production environments. Elaborating and implementing a strategy in order to improve the performance of production teams according to ITIL best practice.
Project Manager
METACORP
Feb 2009 - Mar 2010
1 year 2 months
Paris Area, France
Management the project and analysis the business needs: assisting business team during project cycle, collect the requirements and writing the functional specifications, drafting the realization of unit and recipe tests. Steering and managing the application integration projects, coordinating technical teams, elaborating the communication plan in order to keep all project people informed Establishment of a collaborative network for the content management in the company and leading the implementation of the projects end to end, Defining and implementing the data backup policies, implementing and configuring the mail servers, drafting of technical procedures.
Incident Manager
SFR
Feb 2007 - Jan 2009
2 years
Nantes Area, France
Steering and coordination of technical teams in the incident resolution phase. Prioritization of interventions regarding the site impacts. Management of all activities on the network of 20 departments and the way to secure network and reduce the impact, Implementation of tools to monitor incidents and to control activities: automatized the reporting, industrialized the processes of management incident and the processing tools in order to manage the network availability and identifying the root causes of the problems encountered, Implementation of ad hoc action plans and developing the new strategy in order to improve of regional KPIs and the way to manage the incident.
Education
Mines Paris - PSL
Piloting information Technology certificat
2018 - 2018
1 month
HEC Paris
Piloting information Technology certificate
2018 - 2018
1 month
Université Paris Dauphine - PSL
Master's degree
2014 - 2015
1 year 1 month
SUPINFO
2009
2007 - 2009
2 years 1 month