10/16/2023 updated
100 % available
Active Directory sr. Specialist, Sr. Technical Specialist, Project leader/ Technical Consultant
Zoetermeer, Netherlands
Netherlands
Bsc TelematicsActive DirectoryAmazon Web ServicesAuditingMicrosoft AzureCertified Ethical HackerComputer SecurityIdentity ManagementInfrastructure ManagementKali LinuxVulnerability ScanningOpenIDRadio-Frequency IdentificationRole-Based Access ControlSecurity Assertion Markup Language (SAML)Security Managing
As an IAM/Security specialist, I have worked over 20 years on several projects at different customers. I have designed and implemented new Active DIrectories and RBAC sollutions. And as an IT auditor/securty specialist, I have audited applications and complete infrastructure environments. Delivering audit reports with detailed findings regarding vulnerability management, statecompliancy management, security event monitoring but also if required consultancy to improve their security posture and processes.
My main expertises are :
- Active Directory: design, implement , secure
- IAM including RBAC , least privileges, SAML, OIDC, etc
- IT security : pentests, red-teaming, purple-teaming, SIEM, SOC.
Experience
Professional experience10+ years
Freelancer since2022
Languages
EnglishNative speakerDutchNative speakerSpanishBasic knowledge
Project history
As an IAM consultant in the global portal project I consult the migration of the on-premises Active Directory to the IAM solution EmpowerID and start using SAML and OIDC.
I have migrated the AD identities and roles to a new cloud based IAM system (EmpowerID). This included the unraveling of the existing authorsiations with custom AD objects, attributes an AZ-man delegations.
I have also prepared the existing objects for the cloud migration by removing diacritics and special characters in their usernames.
I have migrated the AD identities and roles to a new cloud based IAM system (EmpowerID). This included the unraveling of the existing authorsiations with custom AD objects, attributes an AZ-man delegations.
I have also prepared the existing objects for the cloud migration by removing diacritics and special characters in their usernames.
As part of the internal audit department performed audit engagements at local departments and vendors.
As a technical IT auditor, I tested the various infra components such as operating systems, database and applications of the engagement. By performing security scans and exploiting vulnerabilities.
Also performed red teaming exercises to determine weak spots and testing the effectiveness of the implemented security controls.
In addition, consulted departments on improving their security controls such as technical state compliancy, vulnerability management and security event monitoring.
As a technical IT auditor, I tested the various infra components such as operating systems, database and applications of the engagement. By performing security scans and exploiting vulnerabilities.
Also performed red teaming exercises to determine weak spots and testing the effectiveness of the implemented security controls.
In addition, consulted departments on improving their security controls such as technical state compliancy, vulnerability management and security event monitoring.
Day to day responsible for the availability of the ITH foundation components (LAN/WAN/AD services). As a technical lead of the NN- Group infrastructure team (25 fte) determine priorities for lifecycle management, operational as well as security improvements of our components. Guiding the team during incidents and escalations. The main achievements which I have accomplished: implemented various security improvements on the Active Directory components, improved the controls of our AD and LAN components, migration of firewalls and adopted the new office LAN services.