Samuel Bonsirven

Responsible for Active Directory Security and Hardenning, Wallix and Semperis implementation for the all group Kering of Luxury

Active Directory security and identity consultant for the group's financial holding company • Reinforced security of Active Directory, Windows server, Windows 10, Linux Suse • Implementation of governance, audit, operational maintenance, security updating and remediation, creation of security dashboards with Splunk • Upgrading the functional level, NTLMv1 migration to V2 or Kerberos or SAML, LDAP to LDAPS, SMBv1 to SMBv3, strengthening of the security of privileged access, strengthening of encryption for authentication: DES, RC4 to AES 256 • Work with the group security department then on the infra side of the finance holding company, in order to propose the best solution to migrate to a more robust/secure information system with the least possible impact on production • Active participation in projects concerning Okta Workforce identity, Okta SSO, Bastion, Wallix

identity and hardening for banking and insurance • Active Directory hardening with the ANSSI standard of the Military Programming Law audit and remediation • Vmware hardening with the same standardization as active directory, audit and remediation, Powershell scripting and power CLI for automation of 80 esxi) • Office 365 consultant • Consultant on Azure cloud technologies

• Responsible for Active Directory, Azure Directory, ADFS, Azure Application, IAM, Office 365 • Establishment of a new work organization, more open, productive and active on security issues and current projects • Planning, implementation and team implementation of AD security projects, • Office 365 migration on promise to tenant and from tenant to tenant, ADFS to Azure application, conditional access • O365, Azure and AD governance • Ensure the effectiveness of incident handling with the n1/n2/n3 support teams • Writing Active Directory, Office 365 and Azure architecture documents • Advanced scripting for automating certain tasks • MCO of the Workday HR software relationship script to Active Directory and migration study of the script to an Azure solution (3000 lines of powershell code) and creation of documentation relating to the script

Development and deployment in PowerShell of Office 365 monitoring tools for Total. Work in collaboration with architects, analysts, experts, project managers, managers, support teams, Microsoft France and around the world. Analyzes and remediations on all Total sites (very large account). Advanced scripting, network and telecommunications, workstation, infrastructure, monitoring, data processing, project management..

Deployment, Orchestration and Security for the New York metro, Singapore, Beijing and the line 4 of the Paris Metro/RATP • Setting up a steering meeting for the creation and monitoring of specifications with all the project managers concerned • Advanced scripting for automated deployment of complete information systems at once with 100% reliability • Bios automatic configuration script (UEFI), Raid, Nic Teaming • Development of a software overlay on the Microsoft deployment tools tool • Advanced hardening Windows server 2016 and Windows 10 scripted and automated/industrialized • Project management, implementation, documentation on 2000 pages

Vmware Infrastructure Consultant - HyperV - Microsoft - RedHat Linux Administrator - Cent OS - Monitoring • Vmware ESXI ANSSI standard security • Analysis and remediation in PRA with Neuflize and IBM • Production of Dell Edge R630 physical server • Linux application updates - Microsoft - Tomcat - NGNIX - Apache • Writing operating documents • Study and implementation of a monitoring solution: study on NAGIOS - ZABBIX - PRTG, implementation of specifications and security of supervision flows

System engineer in charge of international Active Directory audit-migration project • Active Directory migration 2003 to 2012r2 20 sites France and international • Master and documentation Windows Server 2012r2 on Dell Edge r630 • Inventory of the existing fleet: Discovery of FTP, SFTP, SSH, $Universe (to Unix) flows, analysis of logs with PowerShell, output to Excel files. Inventory of printing equipment, connectivity test and writing by script, DHCP, DNS, AD, etc. • Support for service coordination and project management • Logistics – inventory of work to be done to bring computer rooms up to standard • Data backup strategy with Acronis, preparation of infrastructure for disaster recovery, security of data backed up with the help of the Operations department. • Update of general documents – Checklist – Migration procedure • Transition to migration – technical actions on Windows Server side and coordination of the operation with the network, operations, workstation teams, and Econom technicians on site.

• Technical referent, management of documentation on messaging IS 70,000 mailboxes • Updating architectural and technical documents and producing operating sheets, • Sizing, consolidation of external access, implementation of new servers, certificates and Outlook Anywhere. Access management via PowerShell • Implementation of log analysis tools, reporting scripts, • Creation of advanced scripts in PowerShell • Help with level 3 support for staff training • Impact and sizing study for migration to hyperconvergence • Configuring SCOM 2007 for Exchange • Setting up meetings and synchronization of network, virtualization and workstation teams during infrastructure development operations • Solving complex problems, working with consultants from the publisher Microsoft Paris.

• Migration of the information system to the Microsoft 2012r2 ecosystem • Implementation and migration of the IS to VMWARE 5.5 (around 20 servers) • Documentation, PowerShell script for importing users • Setting up the RDS role with Active Directory, print server • GPO configuration and administration, Access rights • Sizing of VMs, implementation and configuration of vmware for service continuity via Vmotion • Physical to virtual PtoV • Implementation of Veeam backup version 9 • Cisco-Hp Pro Curve Network Consolidation, line redundancy, Vlan, remote site linking via MPLS