Mouhamadou coulibaly

Cloud Security Architect - Azure Security SME Act as an Azure Security Subject Matter Expert, providing technical guidance and strategic advice on secure architecture, design, and configuration of scalable and resilient cloud solutions. Perform in-depth security assessments of Azure environments, services, and architectures to ensure compliance with security policies, regulatory requirements, and industry best practices. Contribute to the definition of cloud security best practices, governance frameworks, and operational processes to strengthen the organization’s cloud security posture. Lead security architecture and design reviews for complex, cross-functional cloud projects, ensuring alignment with enterprise security standards and risk management objectives. IT Risk Management - Threat Modeling & Risk Lifecycle Oversight Perform threat modeling to proactively identify potential security threats and vulnerabilities across systems, projects, and architectures. Oversee and monitor risk remediation activities, including regular reassessments of accepted risks, to ensure evolving threats and business contexts were appropriately addressed. Third Party Risk Management - Cross-Functional Security Oversight Collaborate with key stakeholders across procurement, legal, data protection, and business units to gather and assess information about third-party engagements. Provided expert guidance on third-party onboarding and lifecycle management, ensuring compliance with Sodexo’s security, privacy, and risk management standards. Conduct contract and agreement reviews with suppliers, service providers, and partners to assess and mitigate third-party risk. Support the legal team by reviewing and drafting security clauses for inclusion in contracts, strengthening the organization’s legal and cybersecurity posture.

Lead Security Architect Lead a high-performing security architecture team of 5 specialists, promoting a culture of accountability, technical excellence, and continuous improvement. Ensure consistent implementation of global security architecture standards, bridging the gap between central governance and local operational teams. Contribute to increasing the Group’s security posture and architectural consistency, supporting risk mitigation efforts and enabling secure regional operations. Security Architect - Production Security Lead the design and implementation of security solutions and controls across all technology layers, including network, production environments, IBM and internal cloud platforms. Collaborate with Global Production Security, BNP Paribas entities, and business units to embed security best practices into architectural designs and project lifecycles. Serve as Subject Matter Expert (SME) for network segmentation, application zoning, and production security, providing strategic guidance across multiple BNPP entities. Represente Production Security in enterprise architecture design reviews, ensuring cybersecurity perspectives were integrated into the IT strategy roadmap. Conduct in-depth security architecture reviews and risk assessments for both new and existing systems, applications, and technologies. Lead key initiatives like UCMv2 and Campus Blueprint, enhancing security maturity and standardizing network architecture. Advise business units and project leaders on appropriate security strategies, offering expert support tailored to project-specific needs. IT Risk Management - Cybersecurity Integration & Governance Promote a risk-based approach to effectively integrate cybersecurity considerations into project governance and decision-making processes. Monitor and report continuously risk remediation progress, ensuring visibility and accountability, and escalating critical risks to the Global Production Security Manager as needed.

Security Architect - Azure Cloud Migration Conduct threat modeling and security design reviews for the strategic migration of the organization’s private on-premise data lake to Microsoft Azure. Collaborate closely with project teams and business units to integrate cloud-native security controls and ensure secure architecture for five pilot projects leveraging the Azure data lake. Ensure alignment with enterprise security standards, risk management policies, and cloud governance frameworks throughout the design and implementation phases. IT Risk Management - Digital Transformation & Cloud Migration Perform comprehensive risk and vulnerability assessments for 13 digital transformation projects, including migration initiatives to Microsoft Azure. Identify key risks and propose actionable mitigation measures, ensuring alignment with enterprise risk tolerance and cloud security best practices. Collaborate with technical architects and application owners to integrate mitigation strategies into project designs and implementation plans. Ensure successful execution by monitoring and following up on the implementation of mitigation measures, reporting progress and risk status to stakeholders.

Security Consultant Take ownership of the Deliveri perimeter, providing on-site technical support and maintaining close communication with business project managers to align technical implementation with business goals. Lead takeover follow-up meetings, identifying critical issues and formulating action plans to ensure smooth transitions and risk mitigation. Act as the single point of contact for translating and implementing business requirements into secure, operational technical solutions. Author and maintained operational procedures, process documentation, and architectural blueprints to standardize and streamline IT operations. Ensure operational continuity and security compliance (MCO & MCS) for the network and security perimeter, proactively addressing vulnerabilities and maintaining infrastructure resilience.

Ensure operational continuity and security compliance (MCO & MCS) for critical infrastructure components including Firewall, VPN, Proxy, F5 GTM & ASM, and rWeb. Serve as the Subject Matter Expert (SME) for internet-based services (browsing and hosting), providing technical leadership and knowledge sharing, including onboarding and mentoring of new team members. Author and maintain comprehensive operational procedures, troubleshooting guides, process documentation, and architecture blueprints, enhancing knowledge retention and incident response efficiency. Successfully lead and deliver key initiatives, such as: Migration of hosting perimeter certificates, ensuring minimal disruption and maintaining security integrity. Transition of L1 operational tasks to offshore teams in India, facilitating seamless knowledge transfer and operational scalability.

Administer patch and virus management tools (LANDesk Rollup), including self-training, tool documentation, and skills transfer to IT users to ensure autonomous and secure usage. Provide technical support and troubleshooting assistance to IT users leveraging the LANDesk Rollup tool, improving issue resolution time and user satisfaction. Define, implement, and track KPIs and performance metrics to evaluate the effectiveness of patching, virus protection, and VPN SSL deployment across the organization. Conduct comprehensive application inventories and interviews with application owners to support Identity and Access Management (IAM) project planning and execution. Develop and formalize IT security best practices and golden rules to guide secure behavior for both IT personnel and end users, fostering a culture of cybersecurity awareness.

Lead the migration and deployment of Windows 7 workstations, ensuring smooth configuration and domain integration. Conduct user acceptance testing (UAT) and ensured proper functionality of workstations post-deployment.

Administer Windows Server 2003 environments (user rights, GPO, IIS optimization, backups). Coordinate WAN installation and deployed LAN infrastructure for the Courtry site, including FTP server setup. Implement open-source network monitoring (NTOP) and configured firewall using Ubuntu and iptables. Deliver training and documentation for NTOP and firewall management to the internal IT department.