Identity and access management expert (11 years of experience)

Managed the roll-out of CyberArk PAM solution:
 - Deployment on large perimeter (5000 Unix and Windows servers)
 - Managed consultants' team (5 persons)
 - Managed project planning, budget, risks and KPIs

Managed the Privileged Access Management service and business as usual
operations:
 - Designed BAU processes by following ITIL standards.
 - Set up requests offering in the ITSM solution for PAM operational tasks.
 - Led several committees to manage the project.
 - Negotiated with sales representatives (software publisher and IT
services providers).

Implemented data mining with Pentaho Data Integration to prepare the creation
in bulk mode of all the objects to be onboarded within CyberArk (safes,
accounts, permission on safes, ...).

Designed an access management process to allow users get access rights to
CyberArk:
 - Designed an external web portal allowing to implement and manage
access rights workflows.

Designed the life cycle management process of each type of object onboarded
within CyberArk:
 - Onboarding/Offboarding process for servers and accounts.

Designed the Disaster Recovery process and incident management process.

Hired PAM consultants to run the project:
 - Managed the team (5 persons) and followed up the team's work.

Managed the project's change management:
 - Provided trainings on how to use CyberArk solution for the admin users.
 - Designed an online PAM portal within the intranet website containing all
the change materials (userguides, process description, guidelines, ...).

Assisted in securing the PAM platform:
 - Participated to security audits for the PAM platform
 - Integrated CyberArk logs to the SIEM group solution with monitoring
patterns

- Rolled out Brainwave GRC product in clients' identity governance projects.
 - Used Brainwave solution to map identities, organizations, access rights,
applications existing within clients IT systems.
 - Used Brainwave solution to set up audits, controls and analysis on identities
data and access rights (SOD controls, data quality controls, detection of critical
entitlements assignment, etc ...) .
 - Set up controls based on theoretical access rights model.
 - Set up Role Mining analysis in order to build RBAC model.
 - Set up access reviews workflows with Brainwave GRC (accounts review,
identities review, entitlements review).
 - Set up access request workflow with the solution.
 - Reporting with BI Birt tool included within Brainwave's solution.
 - Designed customized web portal to share and display all the data produced
(dashboards, reports, ...).
 - Provided trainings to clients and partners to learn how to use Brainwave
features and how to set up the product.
 - Analysis of several access rights models from different type of
applications/systems (SAP ECC/SRM, Active Directory, SharePoint, File share,
Mainframe, client custom applications, ...)

- Provided controls and validations on access rights request raised by admin
users in order to access Windows and Unix servers.
 - Managed Centrify solution and its administration to cover accesses over +500
Unix servers.
 - Managed accounts (+1500) and access rights to Windows servers with Active
Directory.
 - Monitored and resolved security incidents related to servers' accesses.
 - Produced security audits on servers' accesses (+1000 servers)
 - Used ITSM BMC Remedy User to process the requests.
 - Participated to Sarbanes & Oxley (SoX) internal audits:
 - Designed controls and compliance matrix.
 - Provided the deliverables to the internal auditors.
 - Wrote security guidelines related to privileged access rights topics.
 - Designed a SharePoint portal for the team including all the documents and
guidelines.
 - Provided trainings to multiple groups of users in order to ensure that PAM
procedures and policies are known and applied.

- Studied and set up IAM security products (Oracle Internet Directory, WSO2
Identity Server).

Pre-sales project:
 - Assisted in the installation of a proof of concept based on Oracle Internet
Directory product.
 - Assisted in the presentation of the proof of concept toward CGI's client.
 - Tests and configurations of studied solutions.