Raymond RAZAFIMAMONJY

As a Cybersecurity and Automation Expert specilised on DevSecOps and NoOps methodologies. I bring up my contributions with my fellows to define the new global Cybersecurity best practices. I do it by publishing my recommendations, or as a speaker with global cybersecurity conferences, Webinars and/or global B2B meeting.

BROADCOM has recommended me as an independant Expert to accompagny AIRBUS Cybersecurity staff on the migration of AIRBUS IAM and Symantec EDR/XDR Solutions. - Audit on Symantec Endpoint Protection EDR/XDR Solutions, called SEPM/SEP, deployed on their virtual infrastructures. - Audit on EDR/XDR Security policies and Firewall and VLAN Security and Networks policies - Analyse legacy, compliances and the SLA required for the target Architecture in a confidential environment, which required the French highest security clearance - Analyse migration risk, and provide POC and pricing about the new target architecture - Define migrations strategies, migrations plans, tests and validations plans sheet - Define ROLL BACK plan, Disaster Recovery Plan and Business Continuity Planning required by the SLA - Define backup strategies before/post migration - Define target server Architecture, by deploying POC server with EDR SEPM model to evaluate on VMWARE Cloud with the upgrade of the IAM Active Directory server, the upgrade of SQL server and Windows server 2008/2012/2016/2019 to Windows server 2025 - Define target client desktop Architecture, by deploying POC for EDR SEP Client with upgrade desktop OS from Windows 10 to Windows11 - Automate deployments with Infrastructure As Code by POWERSHELL, YAML and JSON - Manage the migration with AIRBUS CISO and his staff - Deploy target infrastructure on VMWARE Cloud and Desktop on Windows 11 with the new SEPM/SEP - Deploy Network VLAN infrastructures with VMWARE NSX - Setup Firewalls securities policies, VPN and authentication ACL and Securities Policies - Deploy PKI and SSL/TLS certificates to ensure Data Flow encryption - Perform validation with the new EDR/XDR migrated and with the new securities policies - Fix Level 3 issues and provide HLD/LLD and accompany End Users before the handover - Monitor and suggest infrastructures & securities optimizations with the continuous improvement

I drive the migration of the Global IAM,PKI,Encryptions,Interconnects and Firewalls of CONCENTRIX'S DATACENTERS located in France,Spain and Italy - Audit on the existing infrastructure & security, such as the SAN/NAS solutions,Networks,Virtual IT infrastructures,and Firewall - Risk Analysis,evaluate migrations businesses Impacts,and provide POC and PRICING - Define migration strategy & plan, tests & Validations plans - Define ROLLBACK plan,RPO/RTO and the SLA required - Define the backup strategy (snapshot,file-based,full backup) - Driving the global teams of the migration and each action required for the DC migration - Plan & Perform the migration of Active Directory on premise,ENTRA ID on AZURE Cloud and The LDAP authentications - Plan & Perform the migration of Key and Encryptions of the VxRail and/or Vcenter clusters - Plan & perform the migration of physical IT network infrastructure to the virtual IT network infrastructure(SDN,SDWAN) - Plan & perform the migration of the physical Firewall to the virtual Firewall appliance - Build & deploy Vsphere,Vsan,VMWARE Tanzu,VMWARE NSX hypervisors with a continuous improvement - Provide Recommendations & Improvements plan of the existing Infrastructure & security Architecture - Write LLD,HLD and train Level 2/3 Ops Engineers before the handover TECHNICALS ENVIRONMENT: OS: RHEL 9,Debian,Rocky9 Linux,Windows Server 2022 METHODOLOGIES: ITIL V4,DevSecOps PROGRAMMING LANGAGES: SHELL,CPL,VPM,POWERSHELL,YAML ET JSON IAM: ACTIVE DIRECTORY,OPEN LDAP,AZURE ENTRA ID VIRTUALIZATION: VMWARE ESXI,LKVM,AZURE VM AUTOMATION IaC: TERRAFORM,ANSIBLE AZURE CLOUD: AZURE ENTRA ID,AKS,AZURE Blob,AZURE VM,AZURE DNS,AZURE Monitor,AZURE CLI SERVERS: IIS/LAMP/WAMP,AD,OPENLDAP,DHCP,DNS,APACHE,FTP,NFS,SAMBA,SSH,NTP,NRPE,MARIADB,MYSQLD,ORACLE,TFTPD,PXE PROTOCOLS: TCP/IP,TLS,HTTP,VLAN,TELNET,UDP,VPN,SNMP,ETHERNET,ARP,RDP,ICMP FIREWALL: FORTINET,PALO ALTO,CHECKPOINT,CISCO MONITORING: ZABBIX VMWARE CLOUD: VSPHERE,NSX,ARIA,VSAN BACKUP: VEEAM,AZURE BLOB

Migrate SFR's FIREWALLS & IAM from their On premise converged Infrastructure with 6000 users, to the New SFR hyperconverged Infrastructure with New Broadcom Clusters of Firewalls and IAM based on VMWARE & NUTANIX Cloud for a better scalability and agility: - Audit on the existing IT infrastructure, IT applications and IT security policies - Analyse business risks, legacy, compliance & define SLA of target Architectures required - Improve existing architecture & QoS, reinforce security policies, & Cost Killing - Provide POC+PRICING with migration strategy - Migrate the BCAAA & Active Directory to their latest version - Build & Deploy the servers with Infrastructure As code based on SHELL, YAML & JSON - Lead the Firewalls & IAM migration with SFR CISO & IT Infrastructure Director - Deploy the target architecture on the VMWARE & NUTANIX Cloud with the virtual Firewalls - Define the New network, security, & backup policies on the VMWARE & NUTANIX Cloud - Deploy the clustering Firewall with Load balancer & Fail Over service - Define IAM roles, RBAC, GPO, ACL - Secure data flow with SSL/TLS encryption - Fix & report the Level 3 Incident - Provide HLD & LLD Documentations & Accompany Client before the Handover OS: Broadcom Edge SWG OS, Debian,Rocky 9, Windows Server 2008/2019 METHODOLOGIES: ITIL V4, DevSecOps LANGUAGES: SHELL, CPL, VPM, YAML ET JSON Java Framework: JEE, JSP API: JRE, JDK, JDBC IAM: WINDOWS ACTIVE DIRECTORY, OPEN LDAP CIAM/CMEI: BCAAA, IWA VIRTUALIZATION: VMWARE ESXI, LKVM, NUTANIX IaC: TERRAFORM, ANSIBLE, DOCKER, KUBERNETES SERVERS: WINDOWS SERVER 2008/2019, IIS,LAMP, TOMCAT, AD, OPENLDAP, DHCP, DNS,FTP, NFS, SAMBA, SSH, NTP, NRPE, MARIADB, MYSQLD PROTOCOLS: WCCP, ICAP, PCAP, TCP/IP, SSL, TLS, HTTPS, NFS, VLAN, TELNET,VPN, SNMP FIREWALL: FORTINET, PALO ALTO, MS DEFENDER, BROADCOM EDGE SWG, BROADCOM ASG200-30 MONITORING: ZABBIX, BROADCOM MC/RP VMWARE CLOUD: VSPHERE, NSX, ARIA, VSAN NUTANIX CLOUD: AHV VIRTUALIZATION, AOS STORAGE, NUTANIX DISASTER RECOVERY

Move the old DATA CENTER to the New IBM DATA CENTER. I moved SAN/NAS servers based on VMWARE ESXI to Hybrid Cloud infrastructure Solution based on IBM Pure Flex system. - Audit on the existing DATA CENTER - Analyse GAP with the old DATA CENTER and the New DATA CENTER targeted - Analyse Legacy, risk management, business impact, SLA required - Define Migration plan and strategy with Integration and Validation test plan - Provide POC and PRICING - Build and deploy servers with IaC as SHELL, POWERSHELL, PYTHON, YAML ET JSON - Build and deploy the Backup with IBM TIVOLI and build the snapshots before the migration - Build and deploy infrastructure and applications in the New DATA CENTER - Set up the new infrastructure Network and security required in the new DATA CENTER - Define the Firewall policies & deploy the VPN service and the IAM RBAC policies - Deploy the Load balancer & Fail Over clusters to ensure the High Availability - Upgrade/Upscale the NAS/SAN server capacity planning - Deploy the Kubernetes clusters, Docker containers and hypervisor based on VMware ESX - Deploy the SSH BASTION remote server and secure data flow with SSL/TLS encryption - Perform stress test and validation test for the New DATA CENTER - Provide High Level Design and Low Level Design - Train and Accompany End User before the handover OS: RHEL7, Debian, Windows Server 2016 METHODOLOGIE: ITIL V4,DevSecOps LANGAGES: SHELL, POWERSHELL, PERL,SQL MySQL, JAVA, PYTHON, YAML ET JSON API: JDK, JRE, JDK, JDBC, ODBC SGBDR: Mysql-Server, Oracle, PostegreSQL-server DCIM : BMC REMEDY, SERVICE NOW CI/CD: JENKINS, MAVEN, LOADIMPACT CONTAINERS: DOCKER, KUBERNETES, VMWARE ESXI IaC: VAGRANT, TERRAFORM, ANSIBLE, DOCKERFILE, KUBERNETES SERVEURS: WINDOWS SERVER 2016, IIS, LAMP, WAS, Active Directory, OPENLDAP, DHCP, DNS, NFS, SAMBA, NTP FIREWALL: CISCO MERAKI, JUNIPER, FORTIGATE CLOUD IBM: IBM cloud bare metal, IBM FlashSystem 900 Model,IBM Flex System Entreprise

I train exclusively in English, international IT managers for the accelerated preparation of the following CLOUD AWS and SPLUNK certifications : - AWS certified SysOps Administrator Associate - AWS certified Solution Architect Associate - AWS certified Developer Associate - AWS certfifed Solutions Architect Professional - AWS DevOps Engineer Professional - Splunk Entreprise Certified Architect - Splunk Enterprise Security Certified Admin - Splunk IT Service Intelligence Certified Admin CLOUD AWS: AWS EC2, AWS EBS, AWS VPC, AWS ROUTE 53, AWS ECS, A WS EKS, AWS ECR, ELASTIC BEANSTALK, AWSLAMBDA, AWS BATCH, AWS S3, AWS EFS, AWS S3 GLACIER, AWS STORAGE GATEWAY, CONFIG, AWS OPSWORKS, AWS AUTO SCALLING, AWS SERVICE CATALOG, AWS TRUSTED ADVISOR, MANAGED SERVICE RDS, CLOUDFRONT, DIRECT CONNECT, AWS IAM, AWS INSPECTOR, AWS WAF, AWS SHIED, AWS SSO AWS DynamoDB, AWS RDS, AWS NoSQL, AWS API GATEWAY, AWS ELASTICACHE, AWS Secrets Manager, AWS Developer Tools AWS CLI, AWS CLOUD FORMATION, AWS CLOUDTRAIL, CRON, ANSIBLE, PUPPET(Idempotent vs Master/Agent) AWS CERTIFICATE MANAGER, AWS DIRECTORY SERVICE, AWS BATCH,AWS SQS, AWS SNS, AWS SES. Programming Languages: SHELL, SQL, JSON, YAML, PERL, JAVA, RUBY, PHP, PYTHON, SPL, C++ SPLUNK: Splunk Apps, Splunk Add-on Builder,Splunk Configuration Files, Splunk Indexer, Splunk Search Head, Splunk User Management, Splunk administration, Splunk MFA, Splunk Universal Forwarder, Splunk Heavy Forwarder, Splunk Cluster Manager, Splunk Deployment Server, Splunk Monitoring Console, Splunk Licence Master, Splunk Search Head Deployer, Splunk GUI & CLI, Splunk REST API, SplunkJS Views, Splunk log files, Splunk KV Store.

I train Moody's Analytics Solutions Architects, Lead Developers and Business Analyst to define their Best Cloud strategy for their business needs. That means : - Understand the pricing of the differents Cloud architecture suggested by the Cloud providers players. - Analyze businesses impact with the hyperconverged infrastructures. - Make a Proof of Concept of a Cloud Project respectfull of the BALE I,II, III, Solvency, IFRS and SoX compliances and regulations - Apply DevOps and DevSecOps methodology for Secured Cloud Automation. - Define the best Cloud Security Strategy with the GDPR and Cloud Act legal regulation challenge. - Define a Multicloud Achitecture.

In keeping with the improvement of one of my creations. And thanks to its success stories by 100% of candidats successfull rates since 2018. My own training program, called: "DevOps & DevSecOps Engineer" enables companies located in France to get young and talented DevOps & DevSecOps made by Razafimamonjy. - Master the IT RFP process - Deliver IT infrastructure POC & Pricing - Manage IT project by Agile SCRUM methodology - Define & deploy an entire IT infrastructure system and newtork Architecture - Administrate until the highest level UNIX/LINUX/WINDOWS systems and Network - Develop any program on SHELL, PERL, HTML, PHP, SQL, JAVA, PYTHON, RUBY, YAML ET JSON - Manage repository servers, administrate and deploy Versioning servers - Test validate & Integrate Code, build automated code - Profile and customize codes with continuous improvement - Manage project life cycle for successful project delivery in today’s competitive economy - Deploy automatically the IT infrastructure by the Infrastructure As A Code - Build and deploy an infrastructure development environment with containers - Monitor, schedule, automate scaling and orchestrate containers applications - Manage IT infrastructure on premise and on cloud service delivery - Define and build an IT infrastructure with HVM virtualization and Baremetal virtualization - Lead the run of Converged and hyper-converged infrastructure - Define AWS Cloud architectures and deploy the AWS Cloud solutions - Define & implement predictive smart security with AWS Cloud solutions - Define & build an Openstack on premise Cloud - Run, Monitor, Manage & secure IT applications - Define and deploy authentifications servers - Secure, manage network & applications traffic and SOC Management. - Build an IT infrastructure with ISO/IEC 2700X security standard. - Writing and provide High Level Technical design document - Continuous improvements and technology intelligence - Customer support and training

During 3 months I tranform scientist engineers and PhD into skilled DevOps/DevSecOPs & AWS Cloud Engineers for CAPGEMINI-SOGETI. I design the gifted IT engineers for the best you need. After my training, they will be able to: - Master the IT RFP process - Deliver IT infrastructure POC & Pricing - Manage IT project by Agile SCRUM methodology - Define & deploy an entire IT infrastructure system and newtork Architecture - Administrate until the highest level UNIX/LINUX/WINDOWS systems and Network - Develop any program on SHELL, PERL, HTML, PHP, SQL, JAVA, PYTHON, RUBY, YAML ET JSON - Manage repository servers, administrate and deploy Versioning servers - Test validate & Integrate Code, build automated code - Profile and customize codes with continuous improvement - Manage project life cycle for successful project delivery in today’s competitive economy - Deploy automatically the IT infrastructure by the Infrastructure As A Code - Build and deploy an infrastructure development environment with containers - Monitor, schedule, automate scaling and orchestrate containers applications - Define and deploy an on premise Cloud solution & a private or public AWS Cloud solutions. - Manage IT infrastructure on premise and on cloud service delivery - Define and build an IT infrastructure with HVM virtualization and Baremetal virtualization - Physical and virtual infrastructure automation by Infrastructure As A Code - Lead the run of Converged and hyper-converged infrastructure - Define AWS Cloud architectures and deploy the AWS Cloud solutions - Monitor, Manage & secure on promise IT Infrastructure and the AWS Cloud - Run, Monitor, Manage & secure IT applications - Define and deploy authentifications servers - Monitor, secure UNIX/LINUX/WINDOWS network and system infrastructure - Secure, manage network & applications traffic - Writing and provide High Level Technical design document - Continuous improvements and technology intelligence - Customer support and training

I train the IT infrastructure and the IT developer Msc degree Student in IT security to : - Master the ethical hacking methodology for the legal IT audit. - Hack IT systems and Network - Hack web applications. - Hack mobile applications, embedded systems and RFID chip. - Social Engineering hack ( profiling and id usurpation, phishing ) - Secure IT network and systems - Secure, manage network & applications traffic - Run, Monitor, Manage & secure IT infrastructure and applications - Evangelization and Customer support. TECHNICAL ENVIRONMENT: OPERATING SYSTEM: CentOS7, RED HAT EL 7, FEDORA 25, Debian LINUX PROGRAMMING LANGAGE: HTML, SHELL, BASH, SQL, PHP, JAVA, PERL PENTEST TOOLS: Cobalt Strike, Metasploit, NMAP, AIRMON-NG, AIRCRACK, THC Hydra, John the Ripper, hping, Nmap, Ncat, Nessus, snort, wireshark, Kismet Wireless, Yersinia, hashcat. STRESS TOOLS: JMETER, HVT TOOLS, IB TOOLS, QPERF TOOLS, NET TOOLS, LINKPACK. SERVERS: WINDOWS SERVER 2016, IIS / LAMP / TOMCAT, Active Directory, OPENLDAP, DHCP, DNS, APACHE, SAMBA, SSH, MARIADB, MYSQLD, FTP, NMBD FIREWALL: CISCO ASA, IPTABLE, FORTINET WEB APPLICATION FIREWALL: PROXY SQUID, RESERVE PROXY, WEBSENSE, AWS WAF SECURE COMMUNICATION: SSL, TLS, HTTPS, FTPS, SFTP, SECURITY INFORMATION AND EVENT MANAGEMENT: SPLUNK, ELK STACK + KINESIS ARCHITECTURE: x86-64, x86-32, 35, TOGAF, SABSA REGULATION AND BEST PRACTICE : ISO 27001, GDPR PRATICAL ENVIRONMENT: ENGINEERING SCHOOL STAFF MANAGED: 30 IT infrastructures & IT developer engineer student.