Régis Domingo

100% Remote ,Contexte anglophone | Périmètre : 3 000 serveurs Linux & Windows | Remédiation de 4 000+ vulnérabilités critiques • Identifier et détecter les vulnérabilités actives (scans Tenable Nessus, analyse CVE/NVD, corrélation MITRE ATT&CK) et réduire de 70 % l'exposition critique sur les serveurs en 18 mois • Piloter les plans de remédiation (patch management, virtual patching) et assurer le reporting lors des comités de suivi ; déployer Trend Micro Deep Security sur 250+ serveurs obsolètes via scripts Bash •Déployer from scratch une solution de gestion centralisée de 1 400 certificats TLS/SSL (CyberArk Certificate Manager), intégrant Zero Touch PKI, synchronisation API et gestion des accès IAM Azure •Déployer Admin By Request sur 2 000 serveurs Windows avec politiques RBAC (Role-Based Access Control) et audit PowerShell des dérives d'accès •Automatiser le déploiement et la configuration d'infrastructure cloud via Terraform (Infrastructure as Code : IaC) •Assurer le transfert de compétences auprès des équipes Ops internes et du prestataire managé (Inde) sur l'ensemble des outils SecOps déployés : (Trend Micro Deep Security, CyberArk Certificate Manager) : utilisation, procédures opérationnelles, bonnes pratiques et troubleshooting Tools Tenable (Nessus) Microsoft Defender (EDR) Microsoft Sentinel (SIEM) & Syslog Microsoft Azure (IAM, VM, VNET) Trend Micro Deep Security (Vision One) Windows Server 2003–2022 (RDP, DHCP, WSUS) VMware (ESXI) ServiceNow Linux RedHat v5–v9 Bash AWS (EC2, IAM, VPC) CyberArk (Zero Touch PKI & Certificate manager) CVSS Score, CVE Monitoring, NVD, MITRE ATT&CK, OWASP, NIST, ISO 27001, GDPR

Objective IT infrastructure deployment with a focus on system hardening and business continuity Execution 1) Windows 10 Server hardening — iLO configuration, RDP, Backup and Restore 2) Full VMware infrastructure deployment (vCenter/ESXi 6.5) : VM provisioning, templates, snapshots, operational maintenance 3) HP physical server deployment (Windows 10) for enterprise clients — system configuration, hardening, RDP access control, application deployment 4) NAS administration (Synology ds220j) — ACL management, SMB shares, MFA-secured admin interface, RAID 1 5) Business continuity & disaster recovery — Acronis True Image, system/application backups across 20+ servers Tools VMware vCenter · Windows Server 2019 · Acronis · Synology NAS

Objective  Secure migration of a virtualized infrastructure (VMware to Nutanix) including network redesign and Active Directory hardening  Execution  1) Network segmentation : VLAN design, IP addressing plan, Cisco Meraki firewall rules (inbound/outbound) 2) Bastion deployment : Cisco Wallix for privileged access control  3) Active Directory (Windows server 2019) hardening : new domain controller, DNS replication, GPO configuration  4) Secure VM migration : ~100 Linux RedHat + Ubuntu/Windows Server (2003-2019) VMs (~40TB) across 4-node cluster with high availability constraints  5) VM orchestration : migration planning by criticality (prod, preprod, dev, test) with risk management  6) Microsoft Azure administration : hybrid cloud integration  Tools Nutanix AHV + move VMware ESXi Cisco Meraki (SDWAN) Bastion Cisco Wallix (PAM)  Windows Server 2003–2019 (DNS, DHCP, WSUS, SMB, Fileshare) Linux RedHat v5–v8 Microsoft Azure (IAM, VNET, VM) Centreon Active Directory (GPO)

Objective Administration and security maintenance of a hybrid infrastructure (Windows/Linux) in production environment Execution 1) Identity & Access Management (IAM) — Active Directory administration, user accounts, groups, permissions, access rights management 2) Infrastructure audit & obsolescence analysis : identification of end-of-life servers and components, risk reduction and security improvement 3) Information system mapping : SI cartography creation and updates (Carto SI) 4) Critical infrastructure administration : DHCP, DNS, GPO, Google Workspace messaging environment 5) Linux/Windows production server maintenance (MCO) : hybrid environment operational continuity 6) Virtualization management : VMware vSphere, Microsoft Hyper-V, Nutanix AHV Tools VMware ESXi Nutanix AHX Windows Server 2003–2019 Linux RedHat v5–v8 Google Workspace Centreon Active Directory

Administered and maintained hybrid Linux/Windows infrastructures — IAM, DNS/DHCP/GPO, security patching (WSUS), virtualization (VMware, Hyper-V, Nutanix) and L2/L3 support

SOC Analyst at an Internet Service Provider (ISP) : responsible for detecting, analyzing and qualifying security incidents to preserve network integrity

Systems & Network Engineer role taken to strengthen technical skills ahead of a Master's degree in Networks & Telecommunications